Superlab Cisco #2

Superlab Cisco #2

Superlab Cisco

February 14, 2017 Add Comment

Assalamualaikum wr.wb


Alhamdulillah saya diberi kesempatan untuk membagikan ilmu lagi kali ini kita mencoba sesuatu yang baru  yaitu Superlab Cisco #2 hari ini semangatkan? harus semangat ok!!,ini masih belum selesai masih banyak lagi yang mau saya bagikan, cukup basa basinya sekarang langsung saja berikut topologinya

 Tujuan dari Lab

• menghubungkan semua pc agar bisa mengakses internet menggunakan server internet dengan beberapa materi

Materi konfigurasi

• konfigurasi router menggunakan eigrp untuk menghubungan beberapa router
• konfigarsi static nat 
• konfigurasi vlan dengan trunk

konfigurasi pertama
    kita konfigurasi bagian kiri dahulu

kita konfigurasi di R1 dahulu

IDN-R1(config)#int fa0/0

IDN-R1(config-if)#no sh

IDN-R1(config-if)#ip addr 11.11.11.1 255.255.255.0

IDN-R1(config-if)#int fa1/0

IDN-R1(config-if)#no sh

IDN-R1(config-if)#ip addr 12.12.12.1 255.255.255.0

IDN-R1(config-if)#int se2/0

IDN-R1(config-if)#no sh

IDN-R1(config-if)#clock rate 56000

IDN-R1(config-if)#ip addr 13.13.13.1 255.255.255.0

IDN-R1(config-if)#ex

selanjutnya di R2

IDN-R2(config)#int fa1/0

IDN-R2(config-if)#no sh

IDN-R2(config-if)#ip addr 11.11.11.2 255.255.255.0

IDN-R2(config-if)#int fa0/0

IDN-R2(config-if)#no sh

IDN-R2(config-if)#ip addr 10.10.10.1 255.255.255.0

IDN-R2(config-if)#ex

selanjutnya coba kita cek ip nya

IDN-R2(config)#do sh ip int br

 selanjutnya kita konfigursari rigrp pada R1 dan R2

IDN-R1(config)#router eigrp 100

IDN-R1(config-router)#net 11.11.11.0

IDN-R1(config-router)#net 12.12.12.0

IDN-R1(config-router)#net 13.13.13.0

IDN-R1(config-router)#no auto-summary 

dan yang di router 2

IDN-R2(config)#router eigrp 100

IDN-R2(config-router)#net 10.10.10.0

IDN-R2(config-router)#net 11.11.11.0

IDN-R1(config-router)#no auto-summary

kita konfigurasi ip address pc1,alamatnya seperti gambar dibawah ini

 sekarang konfigurasi static NAT di R1

IDN-R1(config)#ip route 0.0.0.0 0.0.0.0 11.11.11.2

IDN-R1(config)#ip nat inside source static 12.12.12.2 11.11.11.2

IDN-R1(config)#int fa0/0

IDN-R1(config-if)#ip nat inside

IDN-R1(config-if)#int fa1/0

IDN-R1(config-if)#ip nat inside

 coba kita cek ip nat translations-nya

 dan juga route defaultnya

sekarang kita pinda ke kanan tepatnya didaerah seperti dibawah ini

mulai konfigurasi ip addressnya(maaf belum sempat menyasih identitasnya)

Router(config)#int fa0/0

Router(config-if)#no sh

Router(config-if)#ip addr 23.23.23.1 255.255.255.0

Router(config-if)#int se2/0

Router(config-if)#no sh

Router(config-if)#clock rate 56000

Router(config-if)#ip addr 16.16.16.2 255.255.255.0

 

Router(config-if)#int fa1/0

Router(config-if)#no sh

Router(config-if)#ip addr 21.21.21.1 255.255.255.0

sekarang di router 5

IDN-R5(config)#int fa0/0

IDN-R5(config-if)#no sh

IDN-R5(config-if)#ip addr 21.21.21.2 255.255.255.0

IDN-R5(config-if)#int fa1/0

IDN-R5(config-if)#ip addr 20.20.20.1 255.255.255.0

IDN-R5(config-if)#no sh

 oke selanjutnya kita buat eigrp di router 4

Router(config)#router eigrp 100

Router(config-router)#net 23.23.23.0

Router(config-router)#net 21.21.21.0

Router(config-router)#net 16.16.16.0

Router(config-router)#no auto-summary

di router 5 juga ya

IDN-R5(config)#router eigrp 100

IDN-R5(config-router)#net 21.21.21.0

IDN-R5(config-router)#net 20.20.20.0

IDN-R5(config-router)#no auto-summary

sekarang kita konfigurasi nat static di router 4

Router(config)#ip route 0.0.0.0 0.0.0.0 21.21.21.2

Router(config)#ip nat inside source static 23.23.23.2 21.21.21.2

Router(config)#int fa0/0

Router(config-if)#ip nat inside 

Router(config-if)#int fa1/0

Router(config-if)#ip nat outside

sekarang kita pindah ke tengah tepatnya seperti gambar dibawah ini kita akan mengkonfigurasi vlan

 kita mulai dari switch dahulu

Switch(config)#vlan 100

Switch(config-vlan)#name IDN-vlan100

Switch(config-vlan)#ex

Switch(config)#vlan 200

Switch(config-vlan)#name IDN-vlan200

Switch(config-vlan)#ex

Switch(config)#int f0/5

Switch(config-if)#switchport mode trunk

assign interface vlan

Switch(config-if)#int fa0/1

Switch(config-if)#switchport mode access

Switch(config-if)#switchport access vlan 100

Switch(config-if)#int fa0/2

Switch(config-if)#switchport mode access

Switch(config-if)#switchport access vlan 100

Switch(config-if)#int fa0/4

Switch(config-if)#switchport mode access

Switch(config-if)#switchport access vlan 200

Switch(config-if)#int fa0/3

Switch(config-if)#switchport mode access

Switch(config-if)#switchport access vlan 200

Switch(config-if)#ex

kita coba lihat vlan-nya

sekarang konfigurasi routernya

Router(config)#int fa0/0

Router(config-if)#no sh

Router(config-if)#int fa0/0.100

Router(config-subif)#encapsulation dot1Q 100

Router(config-subif)#ip addr 14.14.14.1 255.255.255.0

Router(config-subif)#ex

Router(config)#int fa0/0.200

Router(config-subif)#encapsulation dot1Q 200

Router(config-subif)#ip addr 15.15.15.1 255.255.255.0

 sekarang konfigurasi routing di router3

Router(config)#router eigrp 100

Router(config-router)#net 14.14.14.0

Router(config-router)#net 15.15.15.0

Router(config-router)#net 13.13.13.0

Router(config-router)#net 16.16.16.0

Router(config-router)#no auto-summary

kemudian isi dns di server

 dan akses di pc client

Sekian tentang Superlab Cisco #2 besok InshaAllah ada lagi, tetap semangat berbagi!!!!!

Superlab Cisco #1

Superlab Cisco #1

Superlab Cisco

February 12, 2017 2 Comments

Assalamualaikum wr.wb


Alhamdulillah saya diberi kesempatan untuk membagikan ilmu lagi kali ini kita mencoba sesuatu yang baru  yaitu Superlab Cisco #1 hari ini semangatkan? harus semangat ok!!,ini masih belum selesai masih banyak lagi yang mau saya bagikan, cukup basa basinya sekarang langsung saja berikut topologinya

Materi Lab

• VLAN
• Trunking
• DHCP Server
• EIGRP
• RIPv2
• OSPF
• DNS
• Redistribute

Tujuan Lab

Menghubungkan semua PC agar dapat mengakses Server yang ada di sebelah kiri, untuk menghubungkannya Router menggunakan EIGRP, RIPv2, OSPF yang saling diredistribute, salah satu Switch Layer 3 MLS juga menggunakan EIGRP untuk Routing protocolnya agar terhubung dengan jaringan lainnya dalam topologi tersebut.

PC akan diberikan alamat IP secara dinamis oleh DHCP Server, yang menjadi DHCP Server adalah Router dan MLS, setiap satu switch juga dipisahkan dengan VLAN.

Oke kita siapkan tenaga dan pikiran dan mulai konfigurasi, pertama kita akan konfigurasi di daerah dibawah ini terlebih dahulu

kita konfigurasi switchnya terlebih dahulu untuk pembuatan vlan dan trunking interface yang mengarah ke router.knp kok swithnya di setting?supaya hasil akhirnya tercapai yaitu pc atau lapto bisa saling komunikasi dengan ping

Switch(config)#hostname IDN-Switch2

IDN-Switch2(config)#vlan 10

IDN-Switch2(config-vlan)#name IDN-Vlan10

IDN-Switch2(config-vlan)#ex

IDN-Switch2(config)#vlan 20

IDN-Switch2(config-vlan)#name IDN-Vlan20

IDN-Switch2(config-vlan)#ex

IDN-Switch2(config)#interface fa0/1

IDN-Switch2(config-if)#switchport mode trunk

IDN-Switch2(config-if)#int fa0/2

IDN-Switch2(config-if)#switchport mode access

IDN-Switch2(config-if)#switchport access vlan 10

IDN-Switch2(config-if)#int f0/3

IDN-Switch2(config-if)#switchport mode access

IDN-Switch2(config-if)#switchport access vlan 10

IDN-Switch2(config-if)#int f0/4

IDN-Switch2(config-if)#switchport mode access

IDN-Switch2(config-if)#switchport access vlan 20

IDN-Switch2(config-if)#int f0/5

IDN-Switch2(config-if)#switchport mode access

IDN-Switch2(config-if)#switchport access vlan 20

IDN-Switch2(config-if)#ex

IDN-Switch2(config)#ex

kemudian kita lihat

IDN-Switch2#show vlan

 dan hasilnya

selanjutnya kita mengkonfigurasinya

IDN-R1(config)#int f0/0

IDN-R1(config-if)#no sh

IDN-R1(config-if)#ip addr 11.11.11.1 255.255.255.0

IDN-R1(config-if)#int serial2/0

IDN-R1(config-if)#no sh

IDN-R1(config-if)#no shutdown

%LINK-5-CHANGED: Interface Serial2/0, changed state to down

IDN-R1(config-if)#c

IDN-R1(config-if)#cl

IDN-R1(config-if)#clock r

IDN-R1(config-if)#clock rate 56000

This command applies only to DCE interfaces

IDN-R1(config-if)#ip addr 12.12.12.1 255.255.255.0

IDN-R1(config-if)#int fa1/0

IDN-R1(config-if)#no sh

IDN-R1(config-if)#

%LINK-5-CHANGED: Interface FastEthernet1/0, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1/0, changed state to up

IDN-R1(config-if)#int fa1/0.10

IDN-R1(config-subif)#

%LINK-5-CHANGED: Interface FastEthernet1/0.10, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1/0.10, changed state to up

IDN-R1(config-subif)#en

IDN-R1(config-subif)#encapsulation d

IDN-R1(config-subif)#encapsulation dot1Q 10

IDN-R1(config-subif)#ip addr 10.10.10.1 255.255.255.0

IDN-R1(config-subif)#int fa1/0.20

IDN-R1(config-subif)#

%LINK-5-CHANGED: Interface FastEthernet1/0.20, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1/0.20, changed state to up

IDN-R1(config-subif)#en

IDN-R1(config-subif)#encapsulation d

IDN-R1(config-subif)#encapsulation dot1Q 20

IDN-R1(config-subif)#ip addr 20.20.20.1 255.255.255.0

IDN-R1(config-subif)#ex

IDN-R1(config)#do sh ip int br

Interface IP-Address OK? Method Status Protocol

FastEthernet0/0 11.11.11.1 YES manual up up

FastEthernet1/0 unassigned YES unset up up

FastEthernet1/0.10 10.10.10.1 YES manual up up

FastEthernet1/0.20 20.20.20.1 YES manual up up

Serial2/0 12.12.12.1 YES manual down down

Serial3/0 unassigned YES unset administratively down down

FastEthernet4/0 unassigned YES unset administratively down down

FastEthernet5/0 unassigned YES unset administratively down down

FastEthernet6/0 unassigned YES unset administratively down down

IDN-R1(config)#ro

IDN-R1(config)#router o

IDN-R1(config)#router ospf 10

IDN-R1(config-router)#net

IDN-R1(config-router)#networ

IDN-R1(config-router)#network 11.11.11.0 0.0.0.255 area 0

IDN-R1(config-router)#net 10.10.10.0 0.0.0.255 area 0

IDN-R1(config-router)#net 20.20.20.0 0.0.0.255 area 0

IDN-R1(config-router)#net 12.12.12.0 0.0.0.255 area 0

IDN-R1(config-router)#ex

 

Switch(config)#hostname IDN-SW1

IDN-SW1(config)#hostname IDN-SW3

IDN-SW3(config)#vlan 30

IDN-SW3(config-vlan)#na

IDN-SW3(config-vlan)#name Vlan-30

IDN-SW3(config-vlan)#ex

IDN-SW3(config)#vlan 40

IDN-SW3(config-vlan)#na

IDN-SW3(config-vlan)#name Vlan40

IDN-SW3(config-vlan)#ex

IDN-SW3(config)#int fa0/2

IDN-SW3(config-if)#sw

IDN-SW3(config-if)#switchport m

IDN-SW3(config-if)#switchport mode a

IDN-SW3(config-if)#switchport mode access

IDN-SW3(config-if)#sw

IDN-SW3(config-if)#switchport a

IDN-SW3(config-if)#switchport access v

IDN-SW3(config-if)#switchport access vlan 30

IDN-SW3(config-if)#int fa0/3

IDN-SW3(config-if)#sw

IDN-SW3(config-if)#switchport m

IDN-SW3(config-if)#switchport mode a

IDN-SW3(config-if)#switchport mode access

IDN-SW3(config-if)#sw

IDN-SW3(config-if)#switchport a

IDN-SW3(config-if)#switchport access v

IDN-SW3(config-if)#switchport access vlan 30

IDN-SW3(config-if)#ex

IDN-SW3(config)#int fa0/4

IDN-SW3(config-if)#sw

IDN-SW3(config-if)#switchport m

IDN-SW3(config-if)#switchport mode a

IDN-SW3(config-if)#switchport mode access

IDN-SW3(config-if)#sw

IDN-SW3(config-if)#switchport a

IDN-SW3(config-if)#switchport access v

IDN-SW3(config-if)#switchport a

IDN-SW3(config-if)#switchport access v

IDN-SW3(config-if)#switchport access vlan 40

IDN-SW3(config-if)#int fa0/5

IDN-SW3(config-if)#sw

IDN-SW3(config-if)#switchport a

IDN-SW3(config-if)#switchport m

IDN-SW3(config-if)#switchport mode

% Incomplete command.

IDN-SW3(config-if)#switchport mode a

IDN-SW3(config-if)#switchport mode access

IDN-SW3(config-if)#sw

IDN-SW3(config-if)#switchport a

IDN-SW3(config-if)#switchport access v

IDN-SW3(config-if)#switchport access vlan 40

IDN-SW3(config-if)#ex

IDN-SW3(config)#int fa

IDN-SW3(config)#int fastEthernet 0/1

IDN-SW3(config-if)#sw

IDN-SW3(config-if)#switchport m

IDN-SW3(config-if)#switchport mode t

IDN-SW3(config-if)#switchport mode trunk

IDN-SW3(config-if)#ex

IDN-SW3(config)#

 

Router>en

Router#conf t

Enter configuration commands, one per line. End with CNTL/Z.

Router(config)#int seria2/0

Router(config-if)#no sh

Router(config-if)#

%LINK-5-CHANGED: Interface Serial2/0, changed state to up

Router(config-if)#cl

Router(config-if)#clock r

Router(config-if)#clock rate 56000

Router(config-if)#

%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial2/0, changed state to up

Router(config-if)#ip addr 12.12.12.2 255.255.255.0

Router(config-if)#int serial3/0

Router(config-if)#no sh

%LINK-5-CHANGED: Interface Serial3/0, changed state to down

Router(config-if)#cl

Router(config-if)#clock r

Router(config-if)#clock rate 56000

This command applies only to DCE interfaces

Router(config-if)#ip addr 23.23.23.2 255.255.255.0

Router(config-if)#ro

Router(config-if)#rou

Router(config-if)#ex

Router(config)#ro

Router(config)#router o

Router(config)#router ospf 10

Router(config-router)#net 12.12.12.0 0.0.0.255

% Incomplete command.

Router(config-router)#net 12.12.12.0 0.0.0.255 area 0

Router(config-router)#net 12.12.12.0 0.0.0.255 area 0

00:15:45: %OSPF-5-ADJCHG: Process 10, Nbr 20.20.20.1 on Serial2/0 from LOADING to FULL, Loading Done

Router(config-router)#red

Router(config-router)#redistribute r

Router(config-router)#redistribute rip s

Router(config-router)#redistribute rip subnets

Router(config-router)#ex

Router(config)#rou

Router(config)#router r

Router(config)#router rip

Router(config-router)#ver2

^

% Invalid input detected at '^' marker.

Router(config-router)#ver 2

Router(config-router)#ner 23.23.23.0

^

% Invalid input detected at '^' marker.

Router(config-router)#net

Router(config-router)#network 23.23.23.0

Router(config-router)#re

Router(config-router)#redistribute o

Router(config-router)#redistribute ospf 10 m

Router(config-router)#redistribute ospf 10 me

Router(config-router)#redistribute ospf 10 metric 1

Router(config-router)#ex

Router(config)#

 

Router>en

Router#conf t

Enter configuration commands, one per line. End with CNTL/Z.

Router(config)#int fa0/0

Router(config-if)#no sh

Router(config-if)#

%LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up

Router(config-if)#ip addr 34.34.34.3 255.255.255.0

Router(config-if)#int fa1/0

Router(config-if)#no sh

Router(config-if)#

%LINK-5-CHANGED: Interface FastEthernet1/0, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1/0, changed state to up

Router(config-if)#ip addr 31.31.31.1 255.255.255.0

Router(config-if)#int seria2/0

Router(config-if)#no sh

Router(config-if)#

%LINK-5-CHANGED: Interface Serial2/0, changed state to up

Router(config-if)#cl

Router(config-if)#clock r

Router(config-if)#clock rate 5

%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial2/0, changed state to up

6

^

% Invalid input detected at '^' marker.

Router(config-if)#clo

Router(config-if)#clock r

Router(config-if)#clock rate 56000

Router(config-if)#ip addr 23.23.23.3

% Incomplete command.

Router(config-if)#ip addr 23.23.23.3 255.255.255.0

Router(config-if)#ro

Router(config-if)#rou

Router(config-if)#ex

Router(config)#ro

Router(config)#router r

Router(config)#router rip

Router(config-router)#ver 2

Router(config-router)#net 23.23.23.0

Router(config-router)#red

Router(config-router)#redistribute ei

Router(config-router)#redistribute eigrp m

Router(config-router)#redistribute eigrp 10

Router(config-router)#redistribute eigrp 10 me

Router(config-router)#redistribute eigrp 10 metric 1

Router(config-router)#ex

Router(config)#ro

Router(config)#router ei

Router(config)#router eigrp 10

Router(config-router)#net 34.34.34.0

Router(config-router)#redi

Router(config-router)#redistribute r

Router(config-router)#redistribute rip m

Router(config-router)#redistribute rip metric 1 1 1 1 1

Router(config-router)#ex

Router(config)#

%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up

%DUAL-5-NBRCHANGE: IP-EIGRP 10: Neighbor 34.34.34.4 (FastEthernet0/0) is up: new adjacency

Router#conf terminal

Enter configuration commands, one per line. End with CNTL/Z.

Router(config)#int f0/0

Router(config-if)#no sh

Router(config-if)#no shutdown

Router(config-if)#

%LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up

Router(config-if)#ip addr 34.34.34.4 255.255.255.0

Router(config-if)#int fa1/0

Router(config-if)#no sh

Router(config-if)#

%LINK-5-CHANGED: Interface FastEthernet1/0, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1/0, changed state to up

Router(config-if)#ip addr 44.44.44.1 255.255.255.0

Router(config-if)#int fa6/0

Router(config-if)#no sh

Router(config-if)#

%LINK-5-CHANGED: Interface FastEthernet6/0, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet6/0, changed state to up

Router(config-if)#int fa6/0.30

Router(config-subif)#

%LINK-5-CHANGED: Interface FastEthernet6/0.30, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet6/0.30, changed state to up

Router(config-subif)#en

Router(config-subif)#encapsulation d

Router(config-subif)#encapsulation dot1Q 30

Router(config-subif)#ip addr 30.30.30.0 255.255.255.0

Bad mask /24 for address 30.30.30.0

Router(config-subif)#ip addr 30.30.30.1 255.255.255.0

Router(config-subif)#int fa6/0.40

Router(config-subif)#

%LINK-5-CHANGED: Interface FastEthernet6/0.40, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet6/0.40, changed state to up

Router(config-subif)#en

Router(config-subif)#encapsulation d

Router(config-subif)#encapsulation dot1Q 40

Router(config-subif)#ip addr 40.40.40.1 255.255.255.0

Router(config-subif)#ex

Router(config)#ro

Router(config)#router ei

Router(config)#router eigrp 10

Router(config-router)#

Router(config-router)#net 34.34.34.0

Router(config-router)#net44.44.44.44.0

^

% Invalid input detected at '^' marker.

Router(config-router)#net44.44.44.0

^

% Invalid input detected at '^' marker.

Router(config-router)#net 44.44.44.0

Router(config-router)#net 30.30.30.0

Router(config-router)#net 40.40.40.0

Router(config-router)#ex

Router(config)#

Router#

%SYS-5-CONFIG_I: Configured from console by console

Router#rout

Router#hos

Router#host

Router#conf t

Enter configuration commands, one per line. End with CNTL/Z.

Router(config)#tou

Router(config)#hos

Router(config)#hostname IDN-R4

IDN-R4(config)#

Superlab Mikrotik mudah Lab10#1

Superlab Mikrotik mudah Lab10#1

Superlab Mikrotik

February 01, 2017 Add Comment

 Assalamualaikum wr.wb


Alhamdulillah saya diberi kesempatan untuk membagikan ilmu lagi kali ini masih tentang mikrotik s yaitu Superlab Mikrotik mudah Lab 10#1 hari ini semangatkan? harus semangat ok!!,nggak nyanka sekarang sudah lab 10 ,ini masih belum selesai masih banyak lagi yang mau saya bagikan, cukup basa basinya sekarang langsung saja berikut topologinya

 Tujuan dari lab ini adalah

• Masing-masing device pada kawasannya dapat saling berkomunikasi.

• Semua device dapat mengakses internet.

• Membagun hotspot mikrotik

• Melindungi komputer pada salah satu network dari network lainnya Limitasi Bandwith youtube

 Konfigurasi 1
kita beri IP address kepada setiap router dan identity
R1

[admin@MikroTik] > /system identity set name=R1
[admin@R1] > ip address
add address=10.0.1.6/24 interface=ether1 network=10.0.1.0
add address=1.1.1.1/24 interface=ether2 network=1.1.1.0
add address=2.2.2.1/24 interface=ether3 network=2.2.2.0
add address=5.5.5.1/24 interface=ether4 network=5.5.5.0

R2

di R2 akan ditambahkan interface bridge
[admin@R2] > ip address
add address=2.2.2.2/24 interface=ether1 network=2.2.2.0
[admin@R2] > interface  bridge
add name=bridgeR3
[admin@R2] >/interface bridge port
add bridge=bridgeR3 interface=ether2
add bridge=bridgeR3 interface=ether3

jangan lupa beri IP address di interface bridgenya

[admin@R2] >add address=3.3.3.1/24 interface=bridgeR3 

R3

[admin@R3] > ip address
add address=1.1.1.2/24 interface=ether1 network=1.1.1.0
add address=4.4.4.1/24 interface=ether2 network=4.4.4.0

 Konfigurasi 2
kita akan melakukkan setup dhcp di ruter 2 dan router3
R2 (interface bridge)

[admin@R2] > ip dhcp-server setup
Select interface to run DHCP server on

dhcp server interface: bridgeR3
Select network for DHCP addresses

dhcp address space: 3.3.3.0/24
Select gateway for given network

gateway for dhcp network: 3.3.3.1
Select pool of ip addresses given out by DHCP server

addresses to give out: 3.3.3.2-3.3.3.254
Select DNS servers

dns servers: 8.8.8.8
Select lease time

lease time: 3d 

uju coba dengan salah satu client

PC1> dhcp
DORA IP 3.3.3.253/24 GW 3.3.3.1

Sekarang router 3 menggunakan ether2

[admin@R3] > ip dhcp-server setup
Select interface to run DHCP server on

dhcp server interface: ether2
Select network for DHCP addresses

dhcp address space: 4.4.4.0/24
Select gateway for given network

gateway for dhcp network: 4.4.4.1
Select pool of ip addresses given out by DHCP server

addresses to give out: 4.4.4.2-4.4.4.254
Select DNS servers

dns servers: 8.8.8.8
Select lease time

lease time: 3d

uji coba dengan beberapa pc client

PC5> dhcp
DORA IP 4.4.4.254/24 GW 4.4.4.1

PC4> dhcp
DORA IP 4.4.4.252/24 GW 4.4.4.1

Selanjutnya, kita lakukan konfigurasi policy routing untuk mengatur
kebijakan routing. Kali ini, kebijakan routing yang akan lakukan adalah
dengan memberikan konfigurasi tambahan pada routing.

[admin@R1] > ip route add dst-address=3.3.3.0/24 type=prohibit

Konfigurasi 3
kita akan membuat hotspot dan user-usernya pertama kita harus setup hotspotnya dulu kali ini di R1 ether4

[admin@R1] > ip hotspot setup          
Select interface to run HotSpot on

hotspot interface: ether4
Set HotSpot address for interface

local address of network: 5.5.5.1/24
masquerade network: yes
Set pool for HotSpot addresses

address pool of network: 5.5.5.2-5.5.5.254
Select hotspot SSL certificate

select certificate: none                   
Select SMTP server

ip address of smtp server: 0.0.0.0
Setup DNS configuration

dns servers: 8.8.8.8,8.8.4.4
DNS name of local hotspot server

dns name: login.IDN 

kita tambahkan setingan user bisa ditambah bisa juga tidak

[admin@R1] >  /ip hotspot user
add name=admin password=asek
add name=khunaifi password=asek
add name=anang password=asek

Konfigurasi 4
Sekarang kita akan berkecimpung di firewall yaitu firewal layer7 dan firewall mangel terus ditambah makanan penutup yaitu simple queue
sekarang kita akan memblock situs youtube dengan firewall layer7 dulu,pertama tambahkan konfigurasi regexp dulu

[admin@R1] > ip firewall layer7-protocol
add name=youtube regexp="^.+(youtube.com).*"

Kemudian tambahkan rule drop untuk regexp tadi

[admin@R1] > ip firewall filter add action=drop chain=forward layer7-protocol=youtube

Bila setingan kita jebol maka limit saja bandwidhnya

[admin@R1] > ip firewall layer7-protocol add name=youtibe regexp="\"r[0-9]+---[a-z]+-+[a-z0-9-]+\\.googlevideo\\.com\""

Tandai paket youtube

[admin@R1] > /ip firewall mangle
add action=mark-connection chain=prerouting new-connection-mark=targetyoutube
add action=mark-packet chain=prerouting connection-mark=targetyoutube new-packet-mark=" tandai  youtube" passthrough=no

Paket sudah ditandai sekarang limit bandwidhnya menggunakan simple queue

[admin@R1] > queue  simple
add max-limit=512k/512k name=" quweuwe" packet-marks="tandai  youtube" target=5.5.5.0/24

Sekian tentang Lab 10 mikrotik seson 1 besok InshaAllah ada lagi, tetap semangat berbagi!!!!! Tapi besok sudah seson 2

Superlab Mikrotik mudah Lab9#1

Superlab Mikrotik mudah Lab9#1

Superlab Mikrotik

February 01, 2017 Add Comment

Assalamualaikum wr.wb


Alhamdulillah saya diberi kesempatan untuk membagikan ilmu lagi kali ini masih tentang mikrotik s yaitu Superlab Mikrotik mudah Lab 9#1 hari ini semangatkan? harus semangat ok!!,nggak nyanka sekarang sudah lab 9 ini masih belum selesai masih banyak lagi yang mau saya bagikan, cukup basa basinya sekarang langsung saja berikut topologinya

Tujuan dari lab ini adalah

• Masing-masing device pada kawasannya dapat saling berkomunikasi.

• Semua device dapat mengakses internet

• Router 1 dan Router 5 pada kawasan yang berbeda dapat berkomunikasi menggunakan tunnnel

Konfigurasi 1
kita konfigurasi dulu ISP seperti biasa yaitu supaya konek dengan internet dulu dan jangan lupa identitynya

[admin@MikroTik] > /system identity set name=ISP
[admin@ISP] > ip addres
add address=10.0.1.5/24 interface=ether1 network=10.0.1.0
add address=1.1.1.1/24 interface=ether2 network=1.1.1.0
add address=2.2.2.1/24 interface=ether3 network=2.2.2.0

[admin@ISP] > ip dns
set allow-remote-requests=yes servers=8.8.8.8
[admin@ISP] > ip route add gateway=10.0.1.4
[admin@ISP] > ip firewall  nat
add action=masquerade chain=srcnat out-interface=ether1

konfigurasi 2
kita muali menkonfigurasi ip setiap router dibagian kiri

R1

[admin@MikroTik] > /system identity set name=R1

[admin@R1] > ip address
add address=1.1.1.2/24 interface=ether1
add address=3.3.3.1/24 interface=ether3
add address=4.4.4.1/24 interface=ether2

R2

[admin@MikroTik] > /system identity set name=R2

[admin@R2] > ip address
add address=4.4.4.2/24 interface=ether1
add address=5.5.5.1/24 interface=ether2
add address=6.6.6.1/24 interface=ether3

R3

[admin@MikroTik] > /system identity set name=R3
[admin@R3] > ip address
add address=6.6.6.2/24 interface=ether1
add address=7.7.7.1/24 interface=ether2
add address=8.8.8.1/24 interface=ether3   

R4

[admin@MikroTik] > /system identity set name=R4
[admin@R4] > ip address
add address=5.5.5.2/24 interface=ether1
add address=7.7.7.2/24 interface=ether2
add address=9.9.9.1/24 interface=ether3  

Konfigurasi 2
kita tambahkan static rute supaya router bisa saling terhubung

[admin@R1] > ip route

add dst-address=6.6.6.0/24 gateway=4.4.4.2
add dst-address=5.5.5.0/24 gateway=4.4.4.2
add dst-address=7.7.7.0/24 gateway=4.4.4.2
add dst-address=8.8.8.0/24 gateway=4.4.4.2    
add dst-address=9.9.9.0/24 gateway=4.4.4.2    

Konfigurasi di R2

[admin@R2] >/ip route

add dst-address=1.1.1.0/24 gateway=4.4.4.1  
add dst-address=7.7.7.0/24 gateway=6.6.6.2
add dst-address=7.7.7.0/24 gateway=5.5.5.2
add dst-address=8.8.8.0/24 gateway=6.6.6.2
add dst-address=8.8.8.0/24 gateway=5.5.5.2
add dst-address=9.9.9.0/24 gateway=6.6.6.2
add dst-address=9.9.9.0/24 gateway=5.5.5.2

Knfigurasi di R3

[admin@R3] > ip route      
add dst-address=1.1.1.0/24 gateway=6.6.6.1
add dst-address=1.1.1.0/24 gateway=7.7.7.2

add dst-address=4.4.4.0/24 gateway=6.6.6.1    
add dst-address=4.4.4.0/24 gateway=7.7.7.2
add dst-address=5.5.5.0/24 gateway=6.6.6.1
add dst-address=5.5.5.0/24 gateway=7.7.7.2
add dst-address=9.9.9.0/24 gateway=6.6.6.1
add dst-address=9.9.9.0/24 gateway=7.7.7.2

Konfigurasi di R4

[admin@R4] > ip route
add dst-address=1.1.1.0/24 gateway=5.5.5.1
add dst-address=1.1.1.0/24 gateway=7.7.7.1
add dst-address=4.4.4.0/24 gateway=5.5.5.1
add dst-address=4.4.4.0/24 gateway=7.7.7.1
add dst-address=6.6.6.0/24 gateway=5.5.5.1
add dst-address=6.6.6.0/24 gateway=7.7.7.1
add dst-address=8.8.8.0/24 gateway=5.5.5.1
add dst-address=8.8.8.0/24 gateway=7.7.7.1

Konfigurasi 3
Karena semua ruter diatas belum bisa konek internet makakita konfigurasi supaya konek dengan internet
R1

[admin@R1] > ip route add gateway=1.1.1.1
[admin@R4] >/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
[admin@R1] > ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4

R2

[admin@R2] > ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
[admin@R2] > ip firewall  nat
add action=masquerade chain=srcnat out-interface=ether1
[admin@R2] > ip route add  gateway=4.4.4.1

R3

[admin@R3] >ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
[admin@R3] >ip firewall  nat
add action=masquerade chain=srcnat out-interface=ether1

[admin@R3] >ip route add  gateway=6.6.6.1

R4

[admin@R4] > ip firewall nat
add chain=srcnat out-interface=ether1 action=masquerade
[admin@R4] > ip dns
set allow-remote-requests=yes servers=8.8.8.8
[admin@R4] >ip route add  gateway=5.5.5.1

Konfigurasi 4
gantian sekarang kita berganti ke sisi kanan yaitu mulai di R5

Kita muali dari R5 kita set identity,ip address, dan dhcp server

[admin@MikroTik] > /system identity set name=R5
[admin@R5] > ip address
add address=2.2.2.3/24 interface=ether1
add address=10.10.10.1/24 interface=ether3
add address=11.11.11.1/24 interface=ether2
[admin@R5] > ip dns set servers=8.8.8.8,8.8.4.4

Kemudian kita setup dhcp 2x dan arahkan ke network R6-R7 dan R6-R8 biar Router 6 mengaktifkan dhcp relay

[admin@R5] > ip dhcp-server setup
Select interface to run DHCP server on

dhcp server interface: ether2
Select network for DHCP addresses

dhcp address space: 13.13.13.0/24
Select gateway for given network

gateway for dhcp network: 13.13.13.1
If this is remote network, enter address of DHCP relay

There is no such IP network on selected interface
dhcp relay: 13.13.13.1
Select pool of ip addresses given out by DHCP server

addresses to give out: 13.13.13.2-13.13.13.254
Select DNS servers

dns servers: 8.8.8.8
Select lease time

lease time: 3d

Kemudian yang lakukan lagi

[admin@R5] > ip dhcp-server setup
Select interface to run DHCP server on

dhcp server interface: ether2
Select network for DHCP addresses

dhcp address space: 12.12.12.0/24
Select gateway for given network

gateway for dhcp network: 12.12.12.1
If this is remote network, enter address of DHCP relay

There is no such IP network on selected interface
dhcp relay: 12.12.12.1
Select pool of ip addresses given out by DHCP server

addresses to give out: 12.12.12.2-12.12.12.254
Select DNS servers

dns servers: 8.8.8.8
Select lease time

lease time: 3d

Konfigurasi 5
kita konfigurasi ip addaress dan aktifkan dhcp relay jangan lupa set identitynya

admin@MikroTik] > /system identity set name=R6
[admin@R6] > ip address
add address=11.11.11.2/24 interface=ether1
add address=12.12.12.1/24 interface=ether2
add address=13.13.13.1/24 interface=ether3 

kemudian dhcp relay

[admin@R6] > ip dhcp-relay
add dhcp-server=11.11.11.1 disabled=no interface=ether3 local-address=13.13.13.1 name=relay_et3
add dhcp-server=11.11.11.1 disabled=no interface=ether2 local-address=12.12.12.1 name=relay_et2

Konigurasi 6 kita aktifkan

[admin@R7] > ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether1
[admin@R8] > ip dhcp-client add dhcp-options=hostname,clientid disabled=no interface=ether1 

cek di ip dhcp-client pr

[admin@R7] > ip dhcp-client pr

[admin@R8] >ip dhcp-client pr

sesuai dengan topologi diatas yaitu kita akan bangun bridge di R7 dan R8
R7

[admin@R7] > interface bridge
add name=bridge_r7
[admin@R7] > /interface bridge port
add bridge=bridge_r7 interface=ether2
add bridge=bridge_r7 interface=ether3

R8

[admin@R8] > interface bridge
add name=bridge_r8
[admin@R8] >/interface bridge port
add bridge=bridge_r8 interface=ether2
add bridge=bridge_r8 interface=ether3

jangan lupa beri ip kita akan setup dhcp di bridge tersebut

[admin@R7] > ip address
add address=14.14.14.1/24 interface=bridge_r7 

Sekarang setup dhcp interface bridge

[admin@R7] > ip dhcp-server setup          
Select interface to run DHCP server on

dhcp server interface: bridge_r7
Select network for DHCP addresses

dhcp address space: 14.14.14.0/24
Select gateway for given network

gateway for dhcp network: 14.14.14.1
Select pool of ip addresses given out by DHCP server

addresses to give out: 14.14.14.2-14.14.14.254
Select DNS servers

dns servers: 8.8.8.8
Select lease time

lease time: 3d

Konfigurasi 7
karena router -router belum terhubung maka kali ini kita akan menghubungkannya dengan dynamic routing yaitu ospf
R5

[admin@R5] >/routing ospf  network
add area=backbone network=2.2.2.0/24
add area=backbone network=10.10.10.0/24
add area=backbone network=11.11.11.0/24

R6

[admin@R6] > routing ospf network
add area=backbone network=11.11.11.0/24
add area=backbone network=12.12.12.0/24
add area=backbone network=13.13.13.0/24

R7

[admin@R7] > routing ospf network
add area=backbone network=13.13.13.0/24
add area=backbone network=14.14.14.0/24

R8

[admin@R8] > routing network
add area=backbone network=14.14.14.0/24
add area=backbone network=16.16.16.0/24

Sekarang tambahkan default rute dan dns
R5

[admin@R5] > ip route add gateway=2.2.2.1

[admin@R5] >ip dns set servers=8.8.8.8,8.8.4.4

R6

[admin@R6] > ip route add gateway=11.11.11.1
[admin@R6] >ip dns set servers=8.8.8.8,8.8.4.4

R7

[admin@R7] > ip route add gateway=13.13.13.1
[admin@R7] > ip dns set servers=8.8.8.8,8.8.4.4

R8

[admin@R8] > ip route add gateway=14.14.14.1
[admin@R8] >ip dns set servers=8.8.8.8,8.8.4.4

Konfigurasi 8
kita buat interface eoip dan bridge(portnya eoip dan ether 1)
R1

[admin@R1] > /interface eoip
add name=eoip_ke_r5 remote-address=2.2.2.3 tunnel-id=1
[admin@R1] > interface bridge
add name=bridge_eoip
[admin@R1] >/interface bridge port
add bridge=bridge_eoip interface=eoip_ke_r5
add bridge=bridge_eoip interface=ether1

Sekarang di R5

[admin@R5] > interface eoip
add name=eoip_ke_r1 remote-address=1.1.1.2 tunnel-id=1
jangan lupabridgenya sama seperti yang di atas

[admin@R5] > interface bridge
add name=bridge_eoip
[admin@R5] >/interface bridge port
add bridge=bridge_eoip interface=eoip_ke_r1
add bridge=bridge_eoip interface=ether1

jangan lupa beri IP address
R5

[admin@R5] > ip address
add address=17.17.17.2/24 interface=bridge_eoip

R1

[admin@R1] > ip address
add address=17.17.17.3/24 interface=bridge_eoip

supaya bisa berkomunikasi kita tambahkan static rute di kedua ruter

[admin@R1] >ip route add dst-address=10.10.10.0/24 gateway=17.17.17.3

[admin@R5] > ip route add distance=1 dst-address=3.3.3.0/24 gateway=17.17.17.2

Selanjutnya, kita akan melindungi router R5 dan client dari R8,7,
maka disini kita akan mengatur Firewall Filter

[admin@R5] > ip firewall filter add action=drop chain=input src-address=13.13.13.0/24
[admin@R5] > ip firewall filter add action=accept  chain=input src-address=12.12.12.0/24        
[admin@R5] > ip firewall filter add action=reject   chain=input src-address=15.15.15.0/24 

dan coba lihat di ip firewall filter pr

[admin@R5] > ip firewall filter print 
Flags: X - disabled, I - invalid, D - dynamic
 0    chain=input action=log in-interface=bridge_eoip log=no log-prefix="yang_ngeping_ker5"

 1    chain=input action=drop src-address=13.13.13.0/24 log=no log-prefix=""

 2    chain=input action=accept src-address=12.12.12.0/24 log=no log-prefix=""

 3    chain=input action=reject reject-with=icmp-network-unreachable src-address=15.15.15.0/24 log=no log-prefix=""

Selanjutnya kita lakukan konfigurasi firewall logging untuk mencatat log
siapa saja yang telah melakukan ping ke router kita

[admin@R1] > ip firewall filter
add action=log chain=input log-prefix=yang_ngeping_ker1 protocol=icmp
begitu juga di router 5
[admin@R5] > ip firewall filter
add action=log chain=input in-interface=bridge_eoip log-prefix=yang_ngeping_ker5

Sekian tentang Lab 9 mikrotik seson 1 besok InshaAllah ada lagi, tetap semangat berbagi!!!!!

Superlab Mikrotik mudah Lab8#1

Superlab Mikrotik mudah Lab8#1

Superlab Mikrotik

February 01, 2017 Add Comment

 Assalamualaikum wr.wb


Alhamdulillah saya diberi kesempatan untuk membagikan ilmu lagi kali ini masih tentang mikrotik yaitu Superlab Mikrotik mudah Lab6#1 hari ini semangatkan? harus semangat ok!!, cukup basa basinya sekarang langsung saja berikut topologinya

Lab ini bertujuan untuk

• mengkonfigurasi PPPoE Server dan Client

• Bloking Situs Tertentu menggunakan firewall (Filter Rule)
• MenDrop Packet Situs Tertentu menggunakan (Address List)

• Logging Packet (ICMP) dengan firewall 

• Konfigurasi DNS Static pada Router

• Konfigurasi DHCP Server dengan IP-Pool 

Langsung saja ke konfigurasinya
Konfigurasi 1
Kita seting R1untuk ip address dan tambahkan interface bridge jangan lupa identitynya

[admin@MikroTik] > /system identity set name=R1
[admin@R1] > interface bridge
add name=bridge_dhcp
[admin@R1] > interface bridge port
add bridge=bridge_dhcp interface=ether2
add bridge=bridge_dhcp interface=ether3

selanjutnya tambahkan default rute,dns dan nat

[admin@R2] > ip dns set allow-remote-requests=yes servers=8.8.8.8
[admin@R1] > ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
[admin@R1] > ip route add  gateway=10.0.1.4

selanjutnya kita setup dhcp supaya client mendapatkan ip otomatis kali ini kita menggunakan interface brige yang kita buat tadi

[admin@R1] > ip dhcp-server setup          
Select interface to run DHCP server on

dhcp server interface: bridge_dhcp
Select network for DHCP addresses

dhcp address space: 3.3.3.0/24
Select gateway for given network

gateway for dhcp network: 3.3.3.1
Select pool of ip addresses given out by DHCP server

addresses to give out: 3.3.3.2-3.3.3.254
Select DNS servers

dns servers: 8.8.8.8
Select lease time

lease time: 3d

Konfigurasi 2
kita mulai konfigurasi PPPOEnya mulai dari ip pool untuk pppoe

[admin@R1] > ip pool add name=pool_ppoe ranges=10.0.1.7-10.0.1.12

kemudian ppp profile agar client dapat menggunakannya

[admin@R1] > ppp profile
add local-address=10.0.1.2 name=ppoe_profil remote-address=pool_ppoe

Konfigurasi PPPoE Service
Tambahkan Service PPPoE pada PPPoE Server, isikan Service Name,
Interface PPPoE dan Default Profile untuk Service PPPoE, Service Name
akan digunakan sebagai nama service pada PPPoE, pada interface pilih
interface yg mengarah ke client. untuk Default Profile pilih profile yang
sudah tadi dibuat.

[admin@R1] > interface pppoe-server server add service-name=pppoe1 interface=ether3 default-profile=ppoe_profil 

tambahkan username dan pasword di ppp secret

[admin@R1] > ppp secret
add name=coba password=123 profile=ppoe_profil service=pppoe

konfigurasi nat untuk pppoe

[admin@R1] > ip firewall  nat
add chain=srcnat out-interface=ether1 src-address=10.0.1.6-10.0.1.12

Konfigurasi3
Sekarang kita beralih ke router2
Pertama kita tambahkan ip address dulu dan identitynya

[admin@MikroTik] > /system identity set name=R2
[admin@R2] > ip address
add address=10.0.1.7/24 interface=ether1
add address=1.1.1.1/24 interface=ether2
add address=2.2.2.1/24 interface=ether3

Sekarang tambahkan konfigurasi default rute,nat,dan dns

[admin@R2] > ip dns
set allow-remote-requests=yes servers=8.8.8.8
[admin@R2] >add action=masquerade chain=srcnat out-interface=ether1
[admin@R2] > ip route add  gateway=10.0.1.4

kemudian kita setup dhcp untuk ether2 supaya client bisa mendapatkan ip otomatis.

[admin@R2] > ip dhcp-server setup            
Select interface to run DHCP server on

dhcp server interface: ether2
Select network for DHCP addresses

dhcp address space: 1.1.1.0/24
Select gateway for given network

gateway for dhcp network: 1.1.1.1
Select pool of ip addresses given out by DHCP server

addresses to give out: 1.1.1.2-1.1.1.254
Select DNS servers

dns servers: 8.8.8.8
Select lease time

lease time: 3d

Konfigurasi Firewall Logging
Pada konfigurasi Firewall Logging kita kan membuat log ping (icmp) secara otomatis pada router

[admin@R2] > ip firewall filter
add action=log chain=input in-interface=ether2 protocol=icmp

Konfigurasi 4
kita akan mengarahkan trafik ke dns server yang kita buat

[admin@R2] > ip dns
set allow-remote-requests=yes servers=8.8.8.8

Tambahkan alamat menuju Dns kita

[admin@R2] >/ip dns static
add address=2.2.2.6 name=www.kompas.com
add address=2.2.2.7 name=www.detik.com

konfigurasi firewall redirect dns static

[admin@R2] > /ip firewall nat
add action=redirect chain=dstnat dst-port=53 protocol=udp to-ports=53

Konfigurasi 5
Disini kita akan melakukan pemblokiran website (firewall filter) pertama kita cari tahu dulu alamat ip website yang mau kita block ,biasanya dengan nslokup di cmd atau terminal(bila di linux),konfigurasi seperti yang dibawah,ini memblok situs detik.com

[admin@R2] >add action=redirect chain=dstnat dst-address=203.190.242.211 dst-port=53 protocol=udp to-ports=53

Sekarang kita akan memblok lagi kali ini menggunakan firewall konten, kita akan memblok konten seperti facebook dan lain lainnya

[admin@R2] >/ip firewall filteradd action=drop chain=output content=facebook
[admin@R2] > /ip firewall filter add action=drop chain=output content=twiter

Masih dalm memblok lagi kali ini menggunakan ip addresslist

[admin@R2] > ip firewall address-list
add address=202.146.4.100 list=kompas.com
add address=202.61.113.35 list=kompas.com
[admin@R2] >/ip firewall filter
add action=drop chain=forward dst-address-list=kompas.com

Sekian tentang Lab 8 mikrotik seson 1 besok InshaAllah ada lagi, tetap semangat berbagi!!!!!