Konfigurasi mikrotik untuk jaringan lan
Download as DOCX, PDF
2 likes2,753 views
This document provides instructions for configuring a Mikrotik router for a local area network (LAN) with the following topology: an ISP modem connected to the WAN port of the Mikrotik router, and the Mikrotik's LAN ports connected to a switch or hub which then connects to client PCs. It describes setting static IP addresses and subnets for the WAN and LAN interfaces, configuring DNS and default gateway settings, enabling NAT and firewall rules to allow clients internet access while blocking specific sites, and rebooting the Mikrotik for the changes to take effect.
![KONFIGURASI MIKROTIK UNTUK JARINGAN LAN
TOPOLOGI
ISP Telkom Speedy Modem Router Telkom Speedy (TPlink) Mikrotik Hub/switch PC
Client.
Asumsi awal :
1. Ip modem default 192.168.1.1(Sesuaikan dengan jaringan anda)
2. Ip mikrotik router 192.168.2.1
PERSIAPAN.
1. Pasang kabel straight dari modem ke port ether 1mikrotik, lalu pasang juga
dari port ether 2 mikrotik mengarah ke switch atau hub, lalu dari switch/hub
ke PC.
2. Gunakan winbox
3. Remote mikrotik dengan winbox, klik connect.
4. Winbox sudah terhubung dengan mikrotik.
5. Klik new terminal dan ganti nama ether1 dan ether2 dengan perintah :
[admin@MikroTik] > interface set 0 name=Public](https://image.slidesharecdn.com/konfigurasimikrotikuntukjaringanlan-150804071905-lva1-app6892/85/Konfigurasi-mikrotik-untuk-jaringan-lan-1-320.jpg)
![[admin@MikroTik] > interface set 1 name=Local
SETTING IP ADDRES UNTUK MASING MASING ETHERNET.
[admin@MikroTik] > ip address add address=192.168.1.2 netmask=255.255.255.0
interface=Public
[admin@MikroTik] > ip address add address=192.168.2.1 netmask=255.255.255.0
interface=Local
SETTING GATEWAY
[admin@MikroTik] > ip route add gateway=192.168.1.1
SETTING DNS
[admin@MikroTik] > ip dns set servers=180.131.144.144,180.131.145.145 allowremote-
requests=yes
SETTING FIREWALL NAT AGAR CLIENT BISA TERHUBUNG KE
INTERNET
[admin@MikroTik] > ip firewall nat add chain=srcnat out-interface=Public
action=masquerade
[admin@MikroTik] > ip pool add name=pool ranges=192.168.2.2-192.168.2.254
SETTING PROXY UNTUK BLOCKING SITUS
[admin@MikroTik] > ip firewall nat add chain=dstnat protocol=tcp dst-port=80
action=redirect to-ports=3128 comment="" disabled=no
[admin@MikroTik] > ip firewall nat add chain=dstnat protocol=tcp dst-port=3128
action=redirect to-ports=3128 comment="" disabled=no
[admin@MikroTik] > ip firewall nat add chain=dstnat protocol=tcp dst-port=8000
action=redirect to-ports=3128
[admin@MikroTik] > ip proxy access add dst-host=www.facebook.com action=deny
[admin@MikroTik] > ip proxy access add dst-host=www.youtube.com action=deny
[admin@MikroTik] > ip proxy print
enabled: yes
src-address: 0.0.0.0
port: 3128
parent-proxy: 0.0.0.0
parent-proxy-port: 0
cache-administrator: "rizalinux@gmail.com"
max-cache-size: unlimited
cache-on-disk: yes
max-client-connections: 1000
max-server-connections: 1000
max-fresh-time: 3d
serialize-connections: no
always-from-cache: no
cache-hit-dscp: 4
cache-drive: system
[admin@MikroTik] > system reboot
Reboot, yes? [y/N]:
y system will reboot shortly
SETTING IP CLIENT
Ip address 192.168.2.2 (yang diperbolehkan 2 s/d 254)
Subnet mask 255. 255. 255.0
Gateway 192.168.2.1
OUT PUT HASIL KONFIGURASI
Silahkan buka halaman web situs yang di block (facebook dan youtube). Jika
konfigurasinya sudah benar, maka aka nada out put seperti berikut :](https://image.slidesharecdn.com/konfigurasimikrotikuntukjaringanlan-150804071905-lva1-app6892/85/Konfigurasi-mikrotik-untuk-jaringan-lan-2-320.jpg)
More Related Content
What's hot (20)
Viewers also liked (6)
Similar to Konfigurasi mikrotik untuk jaringan lan (20)
Recently uploaded (14)
![phase_4_presentation[1] - Read-Only.pptx Iot](https://cdn.slidesharecdn.com/ss_thumbnails/phase4presentation1-read-only-250301195122-ec11f187-thumbnail.jpg?width=560&fit=bounds)
Konfigurasi mikrotik untuk jaringan lan
- 1. KONFIGURASI MIKROTIK UNTUK JARINGAN LAN TOPOLOGI ISP Telkom Speedy Modem Router Telkom Speedy (TPlink) Mikrotik Hub/switch PC Client. Asumsi awal : 1. Ip modem default 192.168.1.1(Sesuaikan dengan jaringan anda) 2. Ip mikrotik router 192.168.2.1 PERSIAPAN. 1. Pasang kabel straight dari modem ke port ether 1mikrotik, lalu pasang juga dari port ether 2 mikrotik mengarah ke switch atau hub, lalu dari switch/hub ke PC. 2. Gunakan winbox 3. Remote mikrotik dengan winbox, klik connect. 4. Winbox sudah terhubung dengan mikrotik. 5. Klik new terminal dan ganti nama ether1 dan ether2 dengan perintah : [admin@MikroTik] > interface set 0 name=Public
- 2. [admin@MikroTik] > interface set 1 name=Local SETTING IP ADDRES UNTUK MASING MASING ETHERNET. [admin@MikroTik] > ip address add address=192.168.1.2 netmask=255.255.255.0 interface=Public [admin@MikroTik] > ip address add address=192.168.2.1 netmask=255.255.255.0 interface=Local SETTING GATEWAY [admin@MikroTik] > ip route add gateway=192.168.1.1 SETTING DNS [admin@MikroTik] > ip dns set servers=180.131.144.144,180.131.145.145 allowremote- requests=yes SETTING FIREWALL NAT AGAR CLIENT BISA TERHUBUNG KE INTERNET [admin@MikroTik] > ip firewall nat add chain=srcnat out-interface=Public action=masquerade [admin@MikroTik] > ip pool add name=pool ranges=192.168.2.2-192.168.2.254 SETTING PROXY UNTUK BLOCKING SITUS [admin@MikroTik] > ip firewall nat add chain=dstnat protocol=tcp dst-port=80 action=redirect to-ports=3128 comment="" disabled=no [admin@MikroTik] > ip firewall nat add chain=dstnat protocol=tcp dst-port=3128 action=redirect to-ports=3128 comment="" disabled=no [admin@MikroTik] > ip firewall nat add chain=dstnat protocol=tcp dst-port=8000 action=redirect to-ports=3128 [admin@MikroTik] > ip proxy access add dst-host=www.facebook.com action=deny [admin@MikroTik] > ip proxy access add dst-host=www.youtube.com action=deny [admin@MikroTik] > ip proxy print enabled: yes src-address: 0.0.0.0 port: 3128 parent-proxy: 0.0.0.0 parent-proxy-port: 0 cache-administrator: "rizalinux@gmail.com" max-cache-size: unlimited cache-on-disk: yes max-client-connections: 1000 max-server-connections: 1000 max-fresh-time: 3d serialize-connections: no always-from-cache: no cache-hit-dscp: 4 cache-drive: system [admin@MikroTik] > system reboot Reboot, yes? [y/N]: y system will reboot shortly SETTING IP CLIENT Ip address 192.168.2.2 (yang diperbolehkan 2 s/d 254) Subnet mask 255. 255. 255.0 Gateway 192.168.2.1 OUT PUT HASIL KONFIGURASI Silahkan buka halaman web situs yang di block (facebook dan youtube). Jika konfigurasinya sudah benar, maka aka nada out put seperti berikut :