ini topologi yang kita akan buat..
Konfigurasi
Server
1. IP Internet = Sesuai dengan yang diberikan Oleh ISP (192.168.1.254)
3.
IP LAN AP = 192.168.10.1/26
4. Gateway = 192.168.1.254
xxx = 2 - 253
Konfigurasi
Client
5.
IP LAN =
192.168.7.xxx/26
6.
Gateway =
192.168.7.0/26
Konfigurasi
Akses Point
7.
IP LAN =
192.168.10.xxx/26
8.
Gateway =
192.168.10.1/26
Keterangan
: xxx merupakan address antara 2 sampai 254
Konfigurasi
Proxy Server
1.
Sistem
Operasi = OS (linux)
2.
Port
Proxy = 3128
3.
Cache
Manager =
nama_peserta@sekolah.sch.id
5.
Proxy server
dengan Blocking
Site =www.google.com www.facebook.com
Konfigurasi Router
1. NAT = yes
LANGKAH PERTAMA KONFIGURASI
Memberi IP Gateway
[miktorik@admin] > ip route add gateway=192.168.1.254
Konfigurasi Router
1. NAT = yes
LANGKAH PERTAMA KONFIGURASI
CONFIGURASI
SERVER
1.Cek interface, pastikan 2 nic dikenali oleh system
[mikrotik@admin] >interface print
0 R ether1 ether 0 0 1500
1 R ether2 ether 0 0 1500
Mengganti nama interface
[mikrotik@admin] > interface ethernet set ether1 name=internet
[mikrotik@admin] > interface ethernet set ether2 name=local
1.Cek interface, pastikan 2 nic dikenali oleh system
[mikrotik@admin] >interface print
0 R ether1 ether 0 0 1500
1 R ether2 ether 0 0 1500
Mengganti nama interface
[mikrotik@admin] > interface ethernet set ether1 name=internet
[mikrotik@admin] > interface ethernet set ether2 name=local
[mikrotik@admin]
> interface ethernet set ether3 name=AP
Memberi IP address pasa masing-masing NIC
[mikrotik@admin] > ip address add address=192.168.1.2/24 interface=internet
[miktorik@admin] > ip address add address=192.168.7.1/26 interface=local
Memberi IP address pasa masing-masing NIC
[mikrotik@admin] > ip address add address=192.168.1.2/24 interface=internet
[miktorik@admin] > ip address add address=192.168.7.1/26 interface=local
[miktorik@admin]
> ip address add address=192.168.10.1/26 interface=AP
Memberi IP Gateway
[miktorik@admin] > ip route add gateway=192.168.1.254
Setting IP
DNS (sesuaikan dns anda dari isp)
[mikrotik@admin] >ip dns set server=202.134.0.155 allow-remote-requests=yes
Source NAT (Network Address Translation) / Masquerading
Agar semua komputer Client yang ada di LAN bisa terhubung ke internet, maka Anda perlu menambahkan NAT (Masquerade) pada Mikrotik.
[mikrotik@admin] >ip firewall nat add chain=srcnat action=masquerade out-interface=internet
[mikrotik@admin] >ip dns set server=202.134.0.155 allow-remote-requests=yes
Source NAT (Network Address Translation) / Masquerading
Agar semua komputer Client yang ada di LAN bisa terhubung ke internet, maka Anda perlu menambahkan NAT (Masquerade) pada Mikrotik.
[mikrotik@admin] >ip firewall nat add chain=srcnat action=masquerade out-interface=internet
Setting Proxy Server
ip proxy set enabled=yes port=3128
cache-administrator=nama@sekolah.sch.id
Transparan Proxy
ip firewall nat add chain=dstnat
protocol=tcp dst-port=80 acti
on=redirect to-ports=3128
ip firewall nat add chain=dstnat
protocol=tcp dst-port=443 acti
on=redirect to-ports=3128
Block Situs
ip proxy access add action=deny dst-port=80
dst-host=www.facebook.com
ip proxy access add action=deny dst-port=80
dst-host=www.google.com
0 Comments