Belajar IT Bersama: SuperLab Mikrotik Mudah2#1

Assalamualaikum wr.wb

Pada kesempatan kali ini saya akan melajutkan superlab mikrotik kita sekarang Superlab Mikrotik#2, tetap semangatkan? pastinya semangat ya, okelah langsung saja ke topologi

Dengan topologi diatas tujuan saya adalah

Mengkoneksikan semua PC ke internet

Melimit penggunaan internet beberapa PC

Memblok situs

Menggunakan DNS Nawala

Meremote Router dari jaringan local yang sama

Meremote Router dari jaringan local yang berbeda

Konfigurasi pertama pastikan semua router 1,2,3 mendapatkan akses internet dengan cara menkonfigurasi router ISP , router ini kita seting dasarnya saja kok. yaitu, ip,rute,firewall nat,dns

[admin@MikroTik] > /system identity set name=ISP

[admin@ISP] > ip address
add address=10.0.1.5/24 interface=ether1
add address=1.1.1.1/24 interface=ether2
add address=2.2.2.1/24 interface=ether3
add address=3.3.3.1/24 interface=ether4

[admin@ISP] > ip route add gateway=10.0.1.4
[admin@ISP] > ip firewall nat add action=masquerade chain=srcnat out-interface=ether1

[admin@ISP] > ip dns set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4

Konfigurasi 2
Kita konfigurasi di R1,R2,R3 identity,ip address,ip dns,ip rute dan firewall nat

[admin@MikroTik] >/system identity set name=R1

[admin@R1] > ip address
add address=1.1.1.2/24 interface=ether1
add address=4.4.4.1/24 interface=ether2

[admin@R1] > ip route add gateway=1.1.1.1
[admin@R1] > ip firewall add action=masquerade chain=srcnat out-interface=ether1

[admin@R1] > ip dns set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4

[admin@MikroTik] >/system identity set name=R2

[admin@R2] > ip address
add address=2.2.2.3/24 interface=ether1
add address=5.5.5.1/24 interface=ether2
add address=6.6.6.1/24 interface=ether3

[admin@R2] > ip firewall add action=masquerade chain=srcnat out-interface=ether1
[admin@R2] > ip dns set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
[admin@R2] > ip route add gateway=2.2.2.1

[admin@MikroTik] >/system identity set name=R3

[admin@R3] > ip address
add address=3.3.3.2/24 interface=ether1 network=3.3.3.0
add address=9.9.9.1/24 interface=ether2 network=9.9.9.0
[admin@R3] > ip dns set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4

[admin@R3] > ip route add gateway=3.3.3.1
[admin@R3] > ip firewall nat add action=masquerade chain=srcnat out-interface=ether1

Konfigurasi 2
adalah kita memberi ip di pc1 dengan cara mengetikkan ip dan gateway-nya (dipisahkan dengan spasi)contoh seperti berikut

PC1> ip 4.4.4.2/24 4.4.4.1
Checking for duplicate address...
PC1 : 4.4.4.2 255.255.255.0 gateway 4.4.4.1

kita tes dengan ping

PC1> ping 8.8.4.4

84 bytes from 8.8.4.4 icmp_seq=1 ttl=40 time=47.611 ms
84 bytes from 8.8.4.4 icmp_seq=2 ttl=40 time=49.860 ms
84 bytes from 8.8.4.4 icmp_seq=3 ttl=40 time=50.659 ms
84 bytes from 8.8.4.4 icmp_seq=4 ttl=40 time=46.859 ms
84 bytes from 8.8.4.4 icmp_seq=5 ttl=40 time=40.320 ms

Konfigurasi 3
adalah dengan setingan dasar untuk R4 dan mengaktifkan Dhcp relay

[admin@MikroTik] >/system identity set name=R4
[admin@R4] > ip address
add address=5.5.5.2/24 interface=ether1
add address=7.7.7.1/24 interface=ether2

[admin@R4] > ip dns set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
[admin@R4] > ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1

[admin@R4] > ip route
add distance=1 gateway=5.5.5.1

sekarang mengaktifkan Dhcp Relay

[admin@R4] > ip dhcp-relay
add dhcp-server=5.5.5.1 disabled=no interface=ether2 name=relay1

DHCP Relay sudah diaktifkan tapi yang jadi pertanyaan adalah dapat ipnya dari mana? tidak usah bingung ip tersebut di dapatkan dari R2 dengan cara DHCP Server setup dan mengarahkan ip ke pc2&pc3(dibawahnya R4)

[admin@R2] > ip dhcp-server setup
Select interface to run DHCP server on

dhcp server interface: ether2
Select network for DHCP addresses

dhcp address space: 7.7.7.0/24 (Ini sudah diganti)
Select gateway for given network

gateway for dhcp network: 7.7.7.1
If this is remote network, enter address of DHCP relay

There is no such IP network on selected interface
dhcp relay: 7.7.7.1
Select pool of ip addresses given out by DHCP server

addresses to give out: 7.7.7.2-7.7.7.254
Select DNS servers

dns servers: 8.8.8.8,8.8.4.4
Select lease time

lease time: 3d

Kemudian cek apakah pc2&3 bisa mendapat IP tidak dan bisa internetan tidak

PC2> dhcp
DORA IP 7.7.7.253/24 GW 7.7.7.1

PC3> dhcp
DORA IP 7.7.7.252/24 GW 7.7.7.1

PC3> ping 8.8.4.4

84 bytes from 8.8.4.4 icmp_seq=1 ttl=39 time=47.116 ms
84 bytes from 8.8.4.4 icmp_seq=2 ttl=39 time=39.416 ms
84 bytes from 8.8.4.4 icmp_seq=3 ttl=39 time=39.498 ms
84 bytes from 8.8.4.4 icmp_seq=4 ttl=39 time=43.637 ms
84 bytes from 8.8.4.4 icmp_seq=5 ttl=39 time=40.038 ms

PC2> ping 8.8.4.4

84 bytes from 8.8.4.4 icmp_seq=1 ttl=39 time=38.003 ms
84 bytes from 8.8.4.4 icmp_seq=2 ttl=39 time=38.516 ms
84 bytes from 8.8.4.4 icmp_seq=3 ttl=39 time=37.467 ms
84 bytes from 8.8.4.4 icmp_seq=4 ttl=39 time=39.291 ms
84 bytes from 8.8.4.4 icmp_seq=5 ttl=39 time=39.768 ms

Konfigurasi 4
Dikonfigurasi router 5 ini kita akan setup Dhcp server dan kemudian ip yang di terima client di buat permanent(static)

[admin@MikroTik] >/system identity set name=R5

[admin@R5] > ip address
add address=6.6.6.2/24 interface=ether1
add address=8.8.8.1/24 interface=ether2
[admin@R5] > ip dns set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4

[admin@R5] > ip route add gateway=6.6.6.1

[admin@R5] > ip firewall nat add action=masquerade chain=srcnat out-interface=ether1

Kemudian kita setup Dhcpnya

[admin@R5] > ip dhcp-server setup
Select interface to run DHCP server on

dhcp server interface: ether2
Select network for DHCP addresses

dhcp address space: 8.8.8.0/24
Select gateway for given network

gateway for dhcp network: 8.8.8.1
Select pool of ip addresses given out by DHCP server

addresses to give out: 8.8.8.2-8.8.8.254
Select DNS servers

dns servers: 8.8.8.8,8.8.4.4
Select lease time

lease time: 3d

Kita cek di client apakah sudah dapat IP tidak

PC4> dhcp
DORA IP 8.8.8.253/24 GW 8.8.8.1

PC5> dhcp
DORA IP 8.8.8.254/24 GW 8.8.8.1

Alhamdulillah sudah dapat, kemudian kita jadikan IP tersebut yang semuala DHCP menjadi Static dengan cara sebagai berikut

[admin@R5] >/ip dhcp-server lease make-static numbers=0

#   ADDRESS
0   8.8.8.254                                                 00:50:79:66:68:04 PC51
1 D 8.8.8.253                                                 00:50:79:66:68:03 PC41

Seperti yang anda lihat di atas nomer 0 sudah menjadi static .

Konfigurasi 5
Dikonfigurasi 5 yaitu kita mengkonfigurasi router 6, yang nantinya akan kita buat DHCP server ,tapi ini beda dengan dhcp sever pada umumnya kita akan buat dhcp server di Interface bridge. pertama kita konfigurasi IP address, dns, firewall nat,route. dan bridge

[admin@MikroTik] >/system identity set name=R6

[admin@R6] > ip address add address=9.9.9.2/24 interface=ether1

Kita membuat interface bridge dulu

[admin@R6] > interface bridge

add name=bridge_dhcp

port add bridge=bridge_dhcp interface=ether2

port add bridge=bridge_dhcp interface=ether3

port add bridge=bridge_dhcp interface=ether4

Kemudian kita berikan IP pada Interface bridge dan yang tak boleh ketinggalan ip route,dns,firewall nat tersebut

[admin@R6] > ip address add address=10.10.10.1/24 interface=bridge_dhcp
[admin@R6] > ip route add gateway=9.9.9.1

[admin@R6] > ip dns set servers=8.8.8.8,8.8.4.4 allow-remote-requests=yes
[admin@R6] > ip firewall nat add chain=srcnat out-interface=ether1 action=masquerade

Konfigurasi 6
Disini kita akan mengkonfigurasi Tunnel PPTP di router 1,2,3 kita mulai dari

R1

[admin@R1] > interface pptp-client
add connect-to=2.2.2.3 disabled=no name=pptp-out2 password=12 user=ID
add connect-to=3.3.3.2 disabled=no name=pptp-out3 password=12 user=ID

[admin@R2] > /interface pptp-server server set enabled=yes

[admin@R2] > ppp secret
add local-address=12.12.12.2 name=ID password=12 remote-address=12.12.12.1

[admin@R3] > /interface pptp-server server set enabled=yes

[admin@R3] > ppp secret
add local-address=13.13.13.2 name=ID password=12 remote-address=13.13.13.1
add local-address=15.15.15.2 name=ID1 password=12 remote-address=15.15.15.1

Kita cek di R1

[admin@R1] > interface pptp-client print
Flags: X - disabled, R - running
0 R name="pptp-out2" max-mtu=1450 max-mru=1450 mrru=disabled connect-to=2.2.2.3 user="ID" password="12" profile=default-encryption keepalive-timeout=60
add-default-route=no dial-on-demand=no allow=pap,chap,mschap1,mschap2

1 R name="pptp-out3" max-mtu=1450 max-mru=1450 mrru=disabled connect-to=3.3.3.2 user="ID" password="12" profile=default-encryption keepalive-timeout=60
add-default-route=no dial-on-demand=no allow=pap,chap,mschap1,mschap2

Konfigurasinya aktif apabila ada "R" di belakan nomer urut

Selanjutnya tambahkan konfigurasi ip route dan firewall NAT dari R1 ke R2 dan R3 dengan gatewaynya adalah interface PPTP

[admin@R1] > ip firewall nat
add action=masquerade chain=srcnat out-interface=pptp-out2
add action=masquerade chain=srcnat out-interface=pptp-out3

[admin@R1] > ip route
add distance=1 dst-address=5.5.5.0/24 gateway=pptp-out2
add distance=1 dst-address=6.6.6.0/24 gateway=pptp-out2
add distance=1 dst-address=7.7.7.0/24 gateway=pptp-out2

add distance=1 dst-address=8.8.8.0/24 gateway=pptp-out2

add distance=1 dst-address=9.9.9.0/24 gateway=pptp-out3
add distance=1 dst-address=10.10.10.0/24 gateway=pptp-out3

Kemudian tambahkan rute dari R2 ke R3

[admin@R2] /ip route>
add dst-address=7.7.7.0/24 gateway=5.5.5.2
add dst-address=8.8.8.0/24 gateway=6.6.6.2

dari R3 ke R2

[admin@R3] > ip route
add distance=1 dst-address=10.10.10.0/24 gateway=9.9.9.2

Konfigurasi 7
Dikonfigurasi ini kita akan menghubungkan R2 dan R3 dengan menggunakan L2TP.

[admin@R2] > interface l2tp-server server set enabled=yes
[admin@R2] > ppp secret add name=IDJ password=12 local-address=15.15.15.2 remote-address=15.15.15.3 numbers=0 disabled=no

[admin@R3] > interface l2tp-client add user=ad password=12 connect-to=2.2.2.3 disabled=no

Setelah itu tambahkan routing setiap routing pada R2 dan R3

[admin@R2] > ip route add dst-address=9.9.9.0/24 gateway=l2tp-out1
[admin@R2] > ip route add dst-address=10.10.10.0/24 gateway=l2tp-out1

[admin@R3] > ip route add dst-address=5.5.5.0/24 gateway=<l2tp-ID1>
[admin@R3] > ip route add dst-address=7.7.7.0/24 gateway=<l2tp-ID1>
[admin@R3] > ip route add dst-address=6.6.6.0/24 gateway=<l2tp-ID1>
[admin@R3] > ip route add dst-address=8.8.8.0/24 gateway=<l2tp-ID1>