SETUP QUEUE (MIKROTIK)

Posted: Februari 16, 2008 by dennycharter in Networking
Tag:Mikrotik, QUEUE

0

1. kita bikin/setup mangle dulu =
[Charter@mikrotik] > ip firewall mangle print
Flags: X – disabled, I – invalid, D – dynamic
0 UP LOAD
chain=prerouting in-interface=LAN
src-address=xxx.xxx.xxx.xxx/xx action=mark-packet
new-packet-mark=test-up passthrough=no
1 MARK-KONEKSI
chain=forward src-address=xxx.xxx.xxx.xxx/xx
action=mark-connection
new-connection-mark=test-conn passthrough=yes
2 ;;; DOWN DIRECT KONEKSI
chain=forward in-interface=WAN
connection-mark=test-conn action=mark-packet
new-packet-mark=test-down passthrough=no
3 ;;; DOWN VIA PROXY
chain=output out-interface=LAN
dst-address=xxx.xxx.xxx.xxx/xx action=mark-packet
new-packet-mark=test-down passthrough=no
2. Tahap terahkir adalah membuat queue tree=
[Charter@mikrotik] > queue tree pr
Flags: X – disabled, I – invalid
0 name=”download” parent=LAN packet-mark=test-down
limit-at=32000 queue=default priority=8
max-limit=32000 burst-limit=0
burst-threshold=0 burst-time=0s
1 name=”UPLOAD” parent=global-in
packet-mark=test-up limit-at=32000
queue=default priority=8
max-limit=32000 burst-limit=0
burst-threshold=0 burst-time=0s

SETUP MIKROTIK

Posted: Februari 16, 2008 by dennycharter in Networking
Tag:Mikrotik, Setup

0

1. Setelah mikrotik terinstall dengan baik dan benar jalankan mikrotik anda
2. Masukkan username & password, dalam hal ini karena masih baru maka default username : admin pasword : blank
3. Ganti nama ethernet anda jika anda mau, dalam hal ini anda dapat memberikan nama apa saja = [charter@mikrotik] >interface
[charter@mikrotik] interface >print (melihat dulu berapa banyak ethernet yg terpasang)
[charter@mikrotik] interface >set 0 name=LAN
[charter@mikrotik] interface >set 1 name=WAN
4. kemudian nambahkan ip addressnya
[charter@mikrotik] >ip address
[charter@mikrotik] ip address >add address=192.168.0.1/255.255.0.0 interface=LAN —-> ini untuk ip interface lokal
[charter@mikrotik] ip address >add address=203.90.1.1/255.255.255.240 interface=WAN —> ini untuk ip global yg di dapet dari
ISP
5. kemudian masukin gatewaynya
[charter@mikrotik] > ip route
[charter@mikrotik] ip route >add gateway=xxx.xxx.xxx.xxx/xxx.xxx.xxx.xxx —-> ini merupakan gateway untuk keluar
6. kemudian setup webproxy
[charter@mikrotik] >ip web-proxy
[charter@mikrotik] ip web-proxy >set enable=yes
[charter@mikrotik] ip web-proxy >set transparent-proxy=yes
[charter@mikrotik] ip web-proxy >set max-object-size=1200KiB —> ini supaya nge loadnya ngacir si web proxy
7. Kemudian tambahkan rule supaya si client yg menggunakan port 80 akan di oper ke web-proxy
[charter@mikrotik] >ip firewall nat
[charter@mikrotik] ip firewall nat >add chain=dstnat protocol=tcp dst-port=80 action=redirect to-ports=3128
8. Kemudian masukan dns nya
[charter@mikrotik] >ip dns
[charter@mikrotik] ip dns >set primary-dns=xxx.xxx.xxx.xxx
[charter@mikrotik] ip dns >set secondary-dns=xxx.xxx.xxx.xxx
9. Sekarang masqurade interface WANnya
[charter@mikrotik]>ip firewall nat
[charter@mikrotik] ip firewall nat>add chain=srcnat out-interface=WAN action=masquerade
10. Sekarang coba ping ke gateway & dns dari mikrotik, kalo REPLY berarti dah konek

2 ISP 1 ROUTER WITH LOAD BALANCING (MIKROTIK)

Posted: Februari 16, 2008 by dennycharter in Networking
Tag:Load balancing, Mikrotik

/ ip address
add address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255 interface=Local comment=”" \
disabled=no
add address=10.111.0.2/24 network=10.111.0.0 broadcast=10.111.0.255 interface=wlan2 \
comment=”" disabled=no
add address=10.112.0.2/24 network=10.112.0.0 broadcast=10.112.0.255 interface=wlan1 \
comment=”" disabled=no
/ ip firewall mangle
add chain=prerouting in-interface=Local connection-state=new nth=1,1,0 \
action=mark-connection new-connection-mark=odd passthrough=yes comment=”" \
disabled=no
add chain=prerouting in-interface=Local connection-mark=odd action=mark-routing \
new-routing-mark=odd passthrough=no comment=”" disabled=no
add chain=prerouting in-interface=Local connection-state=new nth=1,1,1 \
action=mark-connection new-connection-mark=even passthrough=yes comment=”" \
disabled=no
add chain=prerouting in-interface=Local connection-mark=even action=mark-routing \
new-routing-mark=even passthrough=no comment=”" disabled=no
/ ip firewall nat
add chain=srcnat connection-mark=odd action=src-nat to-addresses=10.111.0.2 \
to-ports=0-65535 comment=”" disabled=no
add chain=srcnat connection-mark=even action=src-nat to-addresses=10.112.0.2 \
to-ports=0-65535 comment=”" disabled=no
/ ip route
add dst-address=0.0.0.0/0 gateway=10.111.0.1 scope=255 target-scope=10 routing-mark=odd \
comment=”" disabled=no
add dst-address=0.0.0.0/0 gateway=10.112.0.1 scope=255 target-scope=10 routing-mark=even \
comment=”" disabled=no
add dst-address=0.0.0.0/0 gateway=10.112.0.1 scope=255 target-scope=10 comment=”" \
disabled=no
Mangle
/ ip address
add address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255 interface=Local comment=”" \
disabled=no
add address=10.111.0.2/24 network=10.111.0.0 broadcast=10.111.0.255 interface=wlan2 \
comment=”" disabled=no
add address=10.112.0.2/24 network=10.112.0.0 broadcast=10.112.0.255 interface=wlan1 \
comment=”" disabled=no
router punya 2 upstream (WAN) interfaces dengan ip address 10.111.0.2/24 and 10.112.0.2/24. dan interface LAN dengan nama
interface “Local” dan ip address 192.168.0.1/24.
/ ip firewall mangle
add chain=prerouting in-interface=Local connection-state=new nth=1,1,0 \
action=mark-connection new-connection-mark=odd passthrough=yes comment=”" \
disabled=no
add chain=prerouting in-interface=Local connection-mark=odd action=mark-routing \
new-routing-mark=odd passthrough=no comment=”" disabled=no
add chain=prerouting in-interface=Local connection-state=new nth=1,1,1 \
action=mark-connection new-connection-mark=even passthrough=yes comment=”" \
disabled=no
add chain=prerouting in-interface=Local connection-mark=even action=mark-routing \
new-routing-mark=even passthrough=no comment=”" disabled=no
NAT
/ ip firewall nat
add chain=srcnat connection-mark=odd action=src-nat to-addresses=10.111.0.2 \
to-ports=0-65535 comment=”" disabled=no
add chain=srcnat connection-mark=even action=src-nat to-addresses=10.112.0.2 \
to-ports=0-65535 comment=”" disabled=no
Routing
/ ip route
add dst-address=0.0.0.0/0 gateway=10.111.0.1 scope=255 target-scope=10 routing-mark=odd \
comment=”" disabled=no
add dst-address=0.0.0.0/0 gateway=10.112.0.1 scope=255 target-scope=10 routing-mark=even \
comment=”" disabled=no
add dst-address=0.0.0.0/0 gateway=10.112.0.1 scope=255 target-scope=10 comment=”" \
disabled=no comment=”gateway for the router itself”

copas from : http://dennycharter.wordpress.com/2008/02/16/2-isp-1-router-with-load-balancing-mikrotik/