MEMBANGUN
INTERNET GATEWAY (PC ROUTER DAN PROXY SERVER) – MIKROTIK 3.20
A. Host Name / Identitas System
Ø
system identity set name=TKJSMKN1Pacitan
B. Interface
Ø
interface print
Ø
interface set ether1 name=Internet
comment=”Internet”
Ø
interface set ether2 name=Lokal comment=”Lokal”
Ø
interface print
C. IP Address
Ø
ip address print
Ø
ip address add address=192.168.1.220/24
interface=Internet (Ket:
IP hrs beda antar server)
Ø
ip address add address=10.14.2.254/24
interface=Lokal
Ø
ip address print
D. IP Gateway
Ø
ip route print
Ø
ip route add gateway=192.168.1.1 (Ket: IP penyedia koneksi internet)
Ø
ip route print
E. Domain Name Server (DNS)
Ø
ip dns print
Ø
ip dns set primary-dns=203.130.208.18
Ø
ip dns set secondary-dns=203.130.196.155
Ø
ip dns set allow-remote-requests=yes
Ø
ip dns print
Ø
ping www.google.co.id
Ø
ping www.facebook.com
Ø
ping www.youtube.com
F. Sharing Internet (Firewall NAT)
Ø
ip firewall nat print
Ø
ip firewall nat add chain=srcnat
out-interface=Internet action=masquerade
Ø
ip firewall nat print
Ø
ping www.google.co.id
Ø
ping www.facebook.com
Ø
ping www.youtube.com
G. Transparent Proxy
Ø
ip firewall nat print
Ø
ip firewall nat add chain=dstnat action=redirect
to-ports=3128 protocol=tcp in-interface=Lokal dst-port=80
Ø
ip firewall nat add chain=dstnat action=redirect
to-ports=3128 protocol=tcp in-interface=Lokal dst-port=8080
Ø
ip firewall nat add chain=dstnat action=redirect
to-ports=3128 protocol=tcp in-interface=Lokal dst-port=8000
Ø
ip firewall nat print
H. Web Proxy
Ø
ip proxy print
Ø
ip proxy set enabled=yes src-address=0.0.0.0
port=3128 parent-proxy=0.0.0.0 parent-proxy-port=0 cache-administrator=”johan@smkn1pacitan.sch.id”
cache-on-disk=yes always-from-cache=yes
Ø
ip proxy print
Ø
ip proxy monitor
I.
Blok
Situs
Ø
ip proxy direct add action=allow
src-address=0.0.0.0
Ø
ip proxy direct print
Ø
ip proxy access add dst-host=www.facebook.com
action=deny
Ø
ip proxy access add dst-host=www.youtube.com
action=deny
Ø
ip proxy access print
0 komentar:
Posting Komentar