monday, june 30, 2014 slat pertemua 11 jaringan komputer dengan mikrotikos oleh: kustanto...
TRANSCRIPT
![Page 1: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/1.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 1
JARINGAN KOMPUTER Dengan MikroTikOS
Oleh:Kustanto
E-mail:[email protected] site: kus2008.wordpress.com
![Page 2: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/2.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 2
Membangun jaringan dengan MikroTikOS
• Router & Proxy internet.• Server DHCP• BW Managemen.
Ref:• Kustanto & Daniel, Membangun Server internet
dengan MikroTikOS, Penerbit. Gava Media jogja.• WWW. Mikrotik.com
![Page 3: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/3.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 3
Tanpa Strategi Proxy
Internet
Web Server
`
Client
![Page 4: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/4.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 4
Dengan Strategi Proxy(Request dari client diteruskan ke real server dengan atasnama Proxy server)
Cache
Internet
Web Server
`
ClientProxy Server
![Page 5: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/5.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 5
Pengalamatan IP pada Strategi Proxy
Cache
Internet
Web Server
`
ClientProxy Server
IP Addr. 192.168.168.4
IP Add. Internal : 192.168.168.25IP Add. Eksternal : 202.158.158.25
![Page 6: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/6.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 6
Scaling Proxies
Web Server
`
ClientProxy Server
Proxy Server
Web ServerProxy Server
Internet
Web Server
Proxy Array
![Page 7: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/7.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 7
Router Internet
Interface bejoAddress :192.168.0.1/24
Interface Public
Address : 10.0.1.200 /8
Workstation
Address :192.168.0.2 /24
LaptopAddress :192.168.0.3/24
Local Network192.168.0.0/24
Public Network
10.0.1.0 /8
Server10.0.1.3
InternetGateway10.0.1.1
![Page 8: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/8.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 8
Konfigurasi RouterInternet
![Page 9: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/9.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 9
Konfigurasi MikroTikOS
Bisa dilakukan :• Via console
Mikrotik router board ataupun PC dapat diakses langsung via console/ shell maupun remote akses menggunakan putty (www.putty.nl)
• Via winboxMikrotik bisa juga diakses/remote menggunakan software tool winbox
• Via webMikroTik juga dapat diakses via web/port 80 dengan menggunakan browser. Dalam konfigurasi ini, mikrotik diakses via konsole dan tool WinBox.
![Page 10: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/10.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 10
Langkah 1• Mengaktifkan ethernet
[admin@proxy]>/interface[admin@proxy]interface>enable 0[admin@proxy]interface>enable 1
• Untuk Melihat kedua ethernet Card yang terpasang (apakah sudah komplit dua), ketikkan print atau pr :
[admin@proxy]interface>print
![Page 11: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/11.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 11
Langkah 2• Identitas ethernet.• Untuk merubah nama ethernet yang terpasang pada
mesin MikroTik,
ketikkan : [admin@proxy]>/interface [admin@proxy]interface>ethernet set ether1
name=Lan [admin@proxy]interface>ethernet set ether2
name=PublicAtau [admin@proxy]interface>Set 0 name Lan [admin@proxy]interface>Set 1 name Public
![Page 12: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/12.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 12
Langkah 3
• Set Ip Address:
[admin@proxy]ip address> add interface=lan address=192.168.0.1/24
[admin@proxy]ip address> add interface=Public address=10.0.1.200/8
![Page 13: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/13.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 13
Langkah 4
. Set gateway:
[admin@proxy]>/ip route[admin@proxy]ip route>add gateway=10.0.1.1
![Page 14: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/14.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 14
Langkah 5
• Seting DNS[admin@proxy]>/ip dns[admin@proxy]ip dns>set primary-dns=202.134.1.10[admin@proxy]ip dns>set secondary-dns=202.134.0.155
Agar komputer Client dapat akses internet:[admin@proxy]ip dns>allow-remote-requests: yes
![Page 15: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/15.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 15
Langkah 6• Set NAT:
[admin@proxy]>/ip firewall nat[admin@proxy]ip firewall nat>add chain=srcnat out-interface=publicsrc-address=192.168.0.0/24
action=masquerade
![Page 16: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/16.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 16
Proxy Internet
![Page 17: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/17.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 17
Konfigurasi ProxySet Proxy:
[admin@proxy]ip web-proxy>set• enabled: yes• src-address: 0.0.0.0• port: 8080• hostname: " proxy.lab.ac.id "• transparent-proxy: yes• parent-proxy: 0.0.0.0:0• cache-administrator: "webmaster"• max-object-size: 4096KiB• cache-drive: system• max-cache-size: unlimited• max-ram-cache-size: unlimited• status: running• reserved-for-cache: 4733952KiB• reserved-for-ram-cache: 2048KiB
![Page 18: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/18.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 18
Transparant proxy• Set transparant proxy:
[admin@proxy]ip firewall nat>Flags: X - disabled, I - invalid, D - dynamic 0 add chain=srcnat out-interface=public src-address=192.168.0.0/24 action=masquerade
1 add chain=dstnat in-interface=lan protocol=tcp dst-port=80 src-address-list=iplan dst-address-list=192.168.0.0/24 action=redirect to-ports=8080
2 add chain=dstnat in-interface=lan protocol=tcp dst-port=3128 src-address-list=iplan dst-address-list=192.168.0.0/24 action=redirect to-ports=8080
3 add chain=dstnat in-interface=lan protocol=tcp dst-port=8080 src-address-list=iplan dst-address-list=192.168.0.0/24 action=redirect to-ports=8080
4 add chain=dstnat protocol=tcp dst-port=80 action=accept 5 add chain=dstnat protocol=tcp dst- port=3128 action=accept 6 add chain=dstnat protocol=tcp dst-port=8080 action=accept
![Page 19: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/19.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 19
Firewall Filter8. Protect situs:
• Via URL:[admin@proxy]ip web-proxy access> add url=“http://www.sex.com” action denyadd url=“http://www.playboy.com” action deny
• Via IP network:[admin@proxy]>/ip firewall filter [admin@proxy]ip firewall filter>add chain=forward src-address=82.0.0.0/8 action=drop
![Page 20: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/20.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 20
DHCP
![Page 21: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/21.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 21
Langkah 1•Setting IP address
[admin@proxy]>/ip address[admin@proxy]ip address>add interface=public address=176.0.1.2/24
[admin@proxy]ip address>add interface=lan address=192.168.0.1/24[admin@proxy]ip address>pr
![Page 22: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/22.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 22
Langkah 2
• Konfigurasi IP Gateway.Untuk mengkonfigurasi gateway padarouter internet ini, ketikan :
[admin@proxy]>/ip route[admin@proxy]ip route>add
gateway=176.0.1.1
![Page 23: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/23.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 23
Langkah 3• Konfigurasi IP dns.Dalam mengisikan IP DNS, sesuaikan rekomendasi dari ISP Anda.misalkan : DNS1 : 202.134.1.10
DNS2 : 202.134.0.155Maka untuk konfigurasinya, ketikan :
[admin@proxy]>/ip dns[admin@proxy]ip dns>set primary-dns=202.134.1.10[admin@proxy]ip dns>set secondary-dns=202.134.0.155
[admin@proxy]ip dns>set allow-remote-request=yes
![Page 24: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/24.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 24
Langkah 4• Setting address pool.
[admin@Proxy]>/ip pool[admin@Proxy]ip pool>add name=dhcp-pool range=192.168.0.2-192.168.0.150
[admin@Proxy]>/ip dhcp-server[admin@Proxy]ip dhcp-server>/networkadd address=192.168.0.0/24 gateway=192.168.0.1
![Page 25: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/25.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 25
Langkag 5• Menentukan interface lan dhcp
dan mengaktifkan dhcp server.
[admin@Proxy]ip dhcp-server>add interface=lan address-pool=dhcp-pool[admin@Proxy]ip dhcp-server>enable 0
![Page 26: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/26.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 26
Langkah 6
• Setting IP firewall nat.
[admin@proxy]>/ip firewall nat[admin@proxy]ip firewall nat>add chain=srcnat out-interface=publicaction=masquerade src-address=192.168.0.0/24
![Page 27: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/27.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 27
Langkah 7• Setting Komputer klien.
Klik Start>Control Panel>Network Connections>Local Area Connection>Properties>Internet Protocol (TCP/IP)>IP address automatically>OK
![Page 28: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/28.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 28
![Page 29: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/29.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 29
Interface LocalAddress :192.168.0.1/24
Interface PublicAddress : 10.0.1.200/24
InternetGateway10.0.1.1
Manajemen bandwidth
Gambar : Topologi bandwidth kontrol limiter.
![Page 30: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/30.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 30
Manajemen bandwidth dalam MikrotikOS:
• Queue Tree • Queue Simple
![Page 31: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/31.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 31
a. IP firewall mangle.• [admin@proxy]>/ip firewall mangle• [admin@proxy]ip firewall mangle> add chain=prerouting src-address=192.168.0.3
action=mark-connection new-connection-mark=laptop-con
• [admin@proxy]ip firewall mangle> add chain=prerouting connection-mark=laptop-con
action=mark-packet new-packet-mark=laptop
![Page 32: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/32.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 32
b. Konfigurasi Queue Tree• [admin@proxy]>/queue tree• [admin@Proxy] queue tree>
add name="laptop-download" parent=lan packet-
mark=laptop limit-at=64000 queue=default priority=8 max-limit=128000 burst-limit=0 burst-threshold=0 burst-time=0s
• [admin@Proxy] queue tree> add name="laptop-upload" parent=public packet-
mark=laptop limit-at=32000 queue=default priority=8 max-limit=64000burst-limit=0 burst-threshold=0 burst-time=0s
![Page 33: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/33.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 33
Queue Simple• [admin@proxy]>/queue simple • [admin@Proxy]queue simple>
add name=limit-lan interface=lan target-address=192.168.0.0/24 max-limit=64000/128000
• [admin@Proxy]queue simple>• add name=laptop target-addresses=192.168.0.4
interface=lan
![Page 34: Monday, June 30, 2014 Slat Pertemua 11 JARINGAN KOMPUTER Dengan MikroTikOS Oleh: Kustanto E-mail:kus_sinus@yahoo.co.id Web site: kus2008.wordpress.com](https://reader036.vdocuments.site/reader036/viewer/2022062511/551a6b7c550346b52d8b4d0f/html5/thumbnails/34.jpg)
Tuesday, April 11, 2023
Slat Pertemua 1 34
Thanks
Terima Kasih