Download as docx, pdf, or txt
Download as docx, pdf, or txt
You are on page 1of 2

Konfigurasi Mikrotik sesuai Paket 2 UKK 2015

Mengubah nama Router Mikrotik


System identity set name=UKK2015
Mengubah nama port / ether di mikrotik
Interface set name=awan ether1
Interface set name=kabel ether2
Interface set name=hotspot ether3
Memberi IP Address di ketiga interface
Ip address add address=200.100.10.13/24 interface=awan
Ip address add address=192.168.50.1/27 interface=kabel
Ip address add address=10.10.10.1/24 interface=hotspot
Memberi IP Route / Gateway
Ip route add gateway=200.100.10.1
Konfigurasi DNS Server
Ip dns set servers=200.100.10.1 allow-remote-request=yes
Memberi Firewall di interface awan
Ip firewall nat add chain=srcnat out-interface=awan action=masquerade

Konfigurasi DHCP Server

Ip
Ip
Ip
Ip

pool add name=TKJ ranges=10.10.10.6-10.10.10.30


dhcp-server network add address=10.10.10.0/24 gateway=10.10.10.1
dhcp-server add interface=wifi address-pool=TKJ
dhcp-server enable numbers=0

Konfigurasi Proxy Server


Ip proxy set enable=yes src-address=0.0.0.0 port=3128 cacheadministrator=ichsanheriyanto@gmail.com cache-on-disk=yes alwaysfrom-cache=yes

Memberi Firewall untuk Proxy Server

Ip firewall nat add chain=dstnat protocol=tcp dst-port=80 action=dst-nat


to-addresses=192.168.50.1 to-ports=3128
Ip firewall nat add chain=dstnat protocol=tcp dst-port=80 action=dst-nat
to-addresses=10.10.10.1 to-ports=3128
Melakukan Filter di Firewall
Ip firewall filter add chain=input in-interface=awan src-address=0.0.0.0/0
protocol=tcp dst-port=3128 action=drop
Memasukkan domain yang akan diblokir
Ip proxy access add dst-host=:youtube.com action=deny
Ip proxy access add dst-host=:facebook.com action=deny

Konfigurasi Hotspot
Ip hotspot setup
Interface: Hotspot
Local address: 10.10.10.1/24
Masquerade: yes
Address pool: 10.10.10.6-10.10.10.30
Certtificates: none
Sntp: (kosong)
DNS Server: 200.100.10.1
DNS Name: (kosong)
Name of local user: admin
Password user: 12345
Menambah user baru di login Hotspot
Ip hotspot user add name=ichsan password=12345

Konfigurasi Limit Bandwidth


Queue simple remove numbers=0
Queue simple add name=LAN target-addresses=192.168.50.0/27
interface=kabel limit-at=512k/512k max-limit=512k/512k
Queue simple add name=Wireless target-addresses=10.10.10.0/24
interface=hotspot limit-at=256k/256k max-limit=256k/256k

You might also like