Kamis, 19 Maret 2009

Konfigurasi Mikrotik

1. Mengganti nama mikrotik

# system identity set name=……

2. Mengganti password

# password

old password:….

new password:…..

retype new password:…..

3. Membuat user baru dan mendisable user

#user print –> melihat user yg ada

#user add name=”….” group=full

#user disable ….. –> men-disable user yg dituju

4. Memberikan nama pada interface

#interface edit ether1 name –> meng-edit secara notepad

#interface ethernet set ether1 name=…… –> mengganti nama scr langsung

**Coba salah satu aja.

5. Meng-aktifkan dan meng-non-aktifkan interface

#interface enable ether1

#interface disable ether1

6. Set IP untuk masing-masing ethernet card

# ip address add address=202.10.10.2/24 interface=ether1

# ip address add address=192.168.1.254/24 interface=ether2

7. Menampilkan IP Address

# ip address print

8. Menambahkan Routing

# ip route add gateway=202.10.10.1

9. Setting Domain Name Server (DNS)

#ip dns set primary-dns=202.129.188.5 allow-remote-requests=yes

#ip dns set secondary-dns=202.129.188.1 allow-remote-requests=yes

10. Source NAT (Network Address Translation)/ masqureading

Agar semua komputer yang ada di LAN Client bisa terhubung ke internet juga, maka perlu menambahkan NAT (masqureade) pada mikrotik.

#ip firewall nat add chain=srcnat action=masquerade out-interface=ether1

11. DHCP (Dynamic Host Configuration Protocol)

Membuat IP Address Pool

#ip pool add name=dhcp-pool ranges=192.168.10.2-192.168.10.254

Menambahkan DHCP Network

#ip dhcp-server network add address=192.168.10.0/24 gateway=192.168.10.1 dns-server=202.129.188.5,202.129.188.1

Menambahkan Server DHCP

#ip dhcp-server add name=dhcp_LAN disabled=no interface=ether2 address-pool=dhcp-pool

12. Bandwidth Control

Model yang gunakan adalah queue tree.

Misal :

Minimal Download : 300/10*1024 = 30720 bps

Maksimal Download : 600/10*1024 = 61440 bps

Minimal Upload : 50/10*1024= 5120 bps

Maksimal Upload : 60/10*1024= 6144 bps

Tandai semua paket yang asalnya dari LAN

# ip firewall mangle add src-address=192.168.10.0/24 action=mark-connection new-connection-mark=clients-con chain=prerouting

#ip firewall mangle add connection-mark=clients-con action=mark-packet new-packet-mark=clients chain=prerouting

Menambahkan rule yang akan membatasi kecepatan download

#queue tree add name=clients-download parent=ether2 packet-mark=clients limit-at=30720 max-limit-61440

Menambahkan rule yang akan membatasi kecepatan upload

#queue tree add name=clients-upload parent=ether1 packet-mark=client limit-at=5120 max-limit=6144

13. Graphing/MRTG Mikrotik ( Berfungsi monitoring trafik )

#tool graphing set store-every=5min

#tool graphing interface add-interface=all store-on-disk=yes

posted by manutd4ever @ Kamis, Maret 19, 2009  
0 Comments:
Posting Komentar
<< Home
 
Ads here!!! Lorem ipsum dolor sit amet, consectetuer adipiscing elit, sed diam nonummy nibh euismod tincidunt ut laoreet dolore magna aliquam erat volutpat. Ut wisi enim ad minim veniam,
 
About Me

Name: manutd4ever
Home: solo, jateng, Indonesia
About Me: rocha 4ever
See my complete profile
Previous Post
Archives
Template by
Blogger templates