Lab Super Mikrotik 7

Superlab 7

Topologi 

Pertama adalah pemberian alamat IP pada setiap Router agar terhubung ke Internet

[admin@MikroTik] > system identity set name=IDN-R1
[admin@IDN-R1] > ip address add address=19.19.19.1/16 interface=ether1
[admin@IDN-R1] > ip address add address=192.168.10.1/24 interface=ether3
[admin@IDN-R1] > ip address add address=192.168.100.11/24 interface=ether2
[admin@IDN-R1] > ip route add gateway=19.19.19.4 
[admin@IDN-R1] > ip dns set servers=8.8.8.8 allow-remote-requests=yes 
[admin@IDN-R1] > ip firewall nat add chain=srcnat action=masquerade out-interface

[admin@MikroTik] > system identity set name=IDN-R2
[admin@IDN-R2] > ip address add address=19.19.19.2/16 interface=ether1
[admin@IDN-R2] > ip address add address=192.168.100.12/24 interface=ether2
[admin@IDN-R2] > ip address add address=192.168.20.1/24 interface=ether3
[admin@IDN-R2] > ip route add gateway=19.19.19.4
[admin@IDN-R2] > ip dns set servers=8.8.8.8 allow-remote-requests=yes 
[admin@IDN-R2] > ip firewall nat add chain=srcnat action=masquerade out-interface=ether1

Lalu konfigurasi VRRP sebagai redudancy :

[admin@IDN-R1] > interface vrrp add interface=ether2 vrid=49 priority=254
[admin@IDN-R1] > ip address add address=192.168.100.1/24 disabled=no interface=vrrp1

[admin@IDN-R2] > interface vrrp add interface=ether2 vrid=49 priority=100
[admin@IDN-R2] > ip address add address=192.168.100.1/24 interface=vrrp1

Konfigurasi hostspot

[admin@IDN-R2] > ip hotspot setup 
Select interface to run HotSpot on 

hotspot interface: ether3
Set HotSpot address for interface 

local address of network: 192.168.20.1/24
masquerade network: yes
Set pool for HotSpot addresses 

address pool of network: 192.168.20.2-192.168.20.254
Select hotspot SSL certificate 

select certificate: none                    
Select SMTP server 

ip address of smtp server: 0.0.0.0
Setup DNS configuration 

dns servers: 8.8.8.8,192.168.20.1
DNS name of local hotspot server 

dns name: hostspot.idn.com
Create local hotspot user 

name of local hotspot user: admin
password for the user:

Lalu membuat salah satu client tidak perlu melakukan proses login

[admin@IDN-R2] > ip hotspot user add server=hotspot1 name=user1 password=123 profile=default 
[admin@IDN-R2] > ip hotspot user profile add name=uprof1 address-pool=none shared-users=5
[admin@IDN-R2] > ip hotspot ip-binding add mac-address=00:0C:29:04:FF:33 type=bypassed 
[admin@IDN-R2] > ip hotspot host make-binding numbers=0 type=regular

GAMBAR Pada R1 saya akan mencoba transparent proxy

[admin@IDN-R1] > ip proxy set enabled=yes 
[admin@IDN-R1] > ip firewall nat add chain=dstnat protocol=tcp dst-port=80 action=redirect to-ports=8080
[admin@IDN-R1] > ip proxy access add dst-port=80 dst-host=www.detik.com action=deny

Memblokir detik.com .....

Lalu saya limit bandwidth download dan upload

 .... Inilah hasilnya .....