Router Mikrotik

Mikrotik Settings

  1. Setting Connection Wlanap

Ket :

  • Default Authenticate : Active ( Access list tidak berlaku)

  • Default Forward : Active ( Antar client dapat saling berkomunikasi)

  • Hide SSID : Active (SSID pada AP tsb tersembunyi)

a. Standarisasi Wireless :

– 802.11a : 5..GHz : 54 mbps— 100 mbps

– 802.11b : 2,4 GHz : 11 mbps

– 802.11g : 2,4 GHz : max 54 mbps

– 802.1F : Standart POE

b. Standarisasi Channel :

– 802.11a : 5.8GHz : ada 13 channel

– 802.11b : 2.4GHz : ada 11 channel

c. Superchannel :

– 802.11b/9 : 2300 2500

– 802.11a : 4900 5900

d. WDS setting

– Untuk Point to Point : Static

– Untuk Point to multi point : Dimanic

  1. Setting IP address

ip

Ket :

  • System perhitungan IP address

    • 192.168.0.0/24 : 1—254 Netmask : 255.255.255.0

    • 192.168.0.0/25 : 1—128 Netmask : 255.255.255.128

    • 192.168.0.0/26 : 1—64 Netmask : 255.255.255.192

    • 192.168.0.0/27 : 1—32 Netmask : 255.255.255.224

    • 192.168.0.0/28 : 1—16 Netmask : 255.255.255.240

    • 192.168.0.0/29 : 1—8 Netmask : 255.255.255.248

    • 192.168.0.0/30 : 1—4 Netmask : 255.255.255.252

    • 192.168.0.0/32 : 1—2 Netmask : 255.255.255.250

  1. Setting Mangle

IP > Firewall> Tab Mangle

    1. Connection ICMP

    • Chain : prerouting

    • Protocol : 1 (icmp)

    • Action : Mark Connetion

    • New Connetion Mark : conn-icmp

    • Passtrough : Active

    1. Paket ICMP

– Chain : Prerouting

– Connetion Mark : conn-icmp

– Action : Mark Packet

– New Packet Mark : bw-icmp

– Passtrough : non Active

    1. Connection 192.168.0.0/24

– Chain : Prerouting

– Src.Address : 192.168.0.0/24

– Action : Mark Connection

– New Packet Mark : conn-192

– Passtrough : Active

    1. Paket 192.168.0.0/24

– Chain : Prerouting

– Connetion Mark : conn-192

– Action : Mark Packet

– New Packet Mark : pkt-192

– Passtrough : non Active

  1. Setting NAT

IP > Firewall > Tab NAT

    • Chain : srcnat

    • Out Interface : ether1

    • Action : Masquerade

  1. Setting Filter Rules

IP > Firewall

(accept established connections)

1. Chain : input

Conn State : Established

Action : Accept

(Accept Related Connections)

2. chain : Input

Conn state : Related

Action : Accept

(Drop Invalid Connections)

3. Chain : Input

Conn state : Invalid

Action : Drop

(UDP)

4. Chain : Input

Protocol : 17(udp)

Action : accept

(Allow limited pings)

5. Chain : Input

Protocol : 1(icmp)

Action : Accept

(Drop access pings)

6. Chain : Input

Protocol : 1(icmp)

Action : drop

(Accept snpm)

7. Chain : Input

Protocol : 17(udp)

src.Prot : 161

(dari isp)

8. Chain : Input

Src.Address : 202.51.233.144/28

Action : Accept

(dari isp)

9. Chain : Input

src.Address : 202.87.254.0/24

Action : Accept

(from our private LAN)

10. Chain : Input

src.Address : 10.1.0.0/20

Action : Accept

(Log everything else)

11. Chain : Input

Action : log

Log.Prefix : Drop out

(Drop Everything else)

12 Chain : input

Action : log

System Bloker IP address

1. Chain : Forward

src.address : 0.0.0.0 (Not)

action : drop

2. Chain : Forward

src. address : 192.168.0.1 (not)

Action : accept

  1. Setting Domain Name Server (DNS)

dns1

Static DNS :

– Name : bts1.com

– Address : 10.1.9.1

– Name : bts1.com

– Address : 10.1.1.202

Settings DNS :

dns21

– Primasy DNS : Isi DNS Utama

– Seconday DNS : Isi DNS alternatif

– Allow Remote Request : Active

  1. Setting DHCP

  • IP > DHCP Server

  • Tab DHCP > Setup

  • DHCP Server Interface : Pilih interface DHCP

  • DHCP Address Space : 192.168.0.0/24

  • Gateway for DHCP Network : 192.168.0.1

  • Addresses to Give out : 192.168.0.2-192.168.0.254

  • DNS Server : masukan IP DNS

– Lease time : Authomatic

Tinggalkan Balasan

Isikan data di bawah atau klik salah satu ikon untuk log in:

Logo WordPress.com

You are commenting using your WordPress.com account. Logout / Ubah )

Gambar Twitter

You are commenting using your Twitter account. Logout / Ubah )

Foto Facebook

You are commenting using your Facebook account. Logout / Ubah )

Foto Google+

You are commenting using your Google+ account. Logout / Ubah )

Connecting to %s

%d blogger menyukai ini: