Chains ->
LAN -> Mikrotik RouterOS -> ADSL Modem -> INTERNET
For the LAN, we use a class C ip address, with the network 192.168.10.0/24. For RouterOS, we need two ethernet cards. One (ether1 - 192.168.1.2/24) for connection to an ADSL modem and one more (ether2 - 192.168.10.1/24) for connection to the LAN. For ADSL Modem, our IP set 192.168.1.1/24.
Before typing anything, make sure you are on the root menu by typing "/"
1. Set IP for each ethernet card ²
ip address add address = 192.168.1.2/24 interface = ether1 (public)
ip address add address = 192.168.10.1/24 interface = ether2 (local)
To display the results of the above command type the following command:
ip address print
Then do the testing by trying nge-ping to the gateway or to a computer on the LAN. If the result is successful, then you are correct IP configuration
ping 192.168.1.1ping 192.168.10.10
2. Adding Routingip route add gateway = 192.168.1.1
3. Setting DNS
ip dns set primary-dns = 202.134.1.10 allow-remote-requests = yesip dns set secondary-dns = 202.134.0.155 allow-remote-requests = yes
Because of this connection use of Telkom's Speedy, the DNS reply aq pake ya have Telkom. Please adjust your DNS provider.
After that you try to do ping to yahoo.com for example:
ping yahoo.com
If the result is successful, then the DNS settings are correct
4. Source NAT (Network Address Translation) / Masquerading
For all existing computers on the LAN can connect to the internet as well, then you need to add NAT (Masquerade) on Mikrotik.
ip firewall nat add chain = srcnat action = masquerade out-interface = ether1
Now try to ping yahoo.com from your computer on the LAN
ping yahoo.com
If the result is successful, then the settings are correct masquerade
5. DHCP (Dynamic Host Configuration Protocol)
Due to practical reasons, my friend wanted to use the DHCP Server. Let klo each existing clients connect, she does not need the IP settings manually. Stay obtain from the DHCP Server aja, dah wrong. Fortunately there is also a feature of this Mikrotik DHCP server. So yes there is a problem .. ga 8)* Create an IP Address Pool
ip pool add name = dhcp-pool ranges = 192.168.0.2-192.168.0.254
* Add a DHCP Networkip dhcp-server network add address = 192.168.10.0/24 gateway = 192.168.10.1 dns-server = 202.134.1.10,202.134.0.155
* Adding a DHCP Server
ip dhcp-server add name = DHCP_LAN disabled = no interface = ether2 address-pool = dhcp-poolNow try testing from a client computer, to request the IP Address from a DHCP Server. If successful, then once again, settingannya've bener
6. Bandwidth Management
For all client computers on the LAN bandwidth not fight each other, it is necessary to a distinguished name is bandwidth management or bandwidth control, the idea: (I use a simple que so much easier;
queue simple add name = "Billing" target-address = 192.168.10.2/32 dst-address = 0.0.0.0 / 0 interface = Local queue = default priority = 8 limit-at = 16000/32000 max-limit = 16000/64000
queue simple add name = "Cashier" target-addresses = 192.168.10.3/32 dst-address = 0.0.0.0 / 0 interface = Local parent = Shaping priority = 8 queue = default / default limit-at = 0 / 8000 max-limit = 0 / 256 000 total-queue = default
Continue command to all clients who want to limit bnadwithnya.
7. Graphing
Mikrotik is also equipped with traffic monitoring function like a normal MRTG. So we can see how many packets passed on the PC Mikrotik us.
tool graphing set store-every = 5min
Next we will monitor the packets through all interfaces ² yg imaginable in our Mikrotik PC, klo on my computer there and ether2 ether1.
tool graphing interface add interface = all store-on-disk = yes
Now try to navigate your browser to the IP Router Mikrotik. can here:
http://192.168.10.1/graphs/
Later there will be any kind of interface option imaginable in your router. Just click on one, then you will be able to see the graph of paket2 distinguished through the interface.
Source: http://diqie.wordpress.com/2007/08/06/seting-roter-mikrotik/
Tidak ada komentar:
Posting Komentar