Install Webmin di Ubuntu Server

Webmin merupakan administrasi sistem di linux yang menggunakan interface web. Kita dapat melakukan setting atau konfigurasi server seperti web, dns, proxy, user account dll di webmin ini. Berikut cara install webmin di ubuntu 12.04 LTS

Metode 1: Install webmin melalui APT

Untuk install webmin dengan APT, buka terminal dan login sebagai root
1- Edit /etc/apt/sources.list
# pico /etc/apt/sources.list

2- Tambahkan baris
deb http://download.webmin.com/download/repository sarge contrib deb http://webmin.mirror.somersettechsolutions.co.uk/repository sarge contrib
Simpan dan keluar

3- Langkah berikutnya adalah import GPG key
wget http://www.webmin.com/jcameron-key.asc apt-key add jcameron-key.asc

4- Update source list
sudo apt-get update

5- Lalu install webmin
sudo apt-get install webmin


Method 2: Install Webmin Secara Manual

Download versi terakhir dari webmin dan pilih paket debian
wget http://www.webmin.com/download/deb/webmin-current.deb
Install webmin dengan perintah:
dpkg --install webmin-current.deb

Sekarang akses webmin dengan membuka browser dan ketikkan: https://server-ip-anda:10000/
Selesai.

Share:

Read More

SETTING MIKROTIK DAN SQUID PROXY FULL VERSI

Alat Yang di Gunakan :
- Modem Speedy
- RB750 ROS 4.6 atau Mikrotik v5.xx
- Squid proxy yang berjalan transparant pada port 3128 + zph

Topologi :
- Speedy 2M down dan 512 up
- 1M untuk jatah download semua client dengan batasan maksimal 256kbps/client
- Akses tanpa dibatasi limit untuk beberapa IP tertentu (dalam hal ini IP 192.168.2.16 dan 192.168.2.17)
- Browsing tidak dibatasi
- Aplikasi QOS pada outbound/paket yang keluar dari modem speedy

Manifest IP address yang digunakan :
[MODEM]
Public IP Address = 192.168.1.2/24
[CLIENTS]
Client IP Address = 192.168.2.2-192.168.2.17 (ip selain itu tidak konek internet)
[SQUID BOX]
Proxy Ip Address = 192.168.3.2
squid.conf dengan zph
http_port 3128 transparent
zph_mode tos
zph_local 0x30
zph_parent 0
zph_option 136

================Basic Configuration================

/interface ethernet
set 0 comment="Public Interface" name=Public
set 1 comment="Local Interface" name=Local
set 2 comment="Proxy Interface" name=Proxy

/ip address
add address=192.168.2.1/24 broadcast=192.168.2.2 comment="" disabled=no \
interface=Local network=192.168.2.0
add address=192.168.3.1/24 broadcast=192.168.3.2 comment="" disabled=no \
interface=Proxy network=192.168.3.0
add address=192.168.1.2/24 broadcast=192.168.1.3 comment="" disabled=no \
interface=Public network=192.168.1.0

/ip dns
set allow-remote-requests=yes cache-max-ttl=1w cache-size=4096KiB \
max-udp-packet-size=512 servers="125.160.4.82,203.130.196.155"
(sesuaikan dengan DNS ISP sobat)

/ip route
add gateway=192.168.1.1 comment="" disabled=no

/ip service
set telnet address=0.0.0.0/0 disabled=yes port=23
set ftp address=0.0.0.0/0 disabled=yes port=21
set www address=0.0.0.0/0 disabled=no port=80
set ssh address=0.0.0.0/0 disabled=yes port=22
set www-ssl address=0.0.0.0/0 certificate=none disabled=yes port=443
set api address=0.0.0.0/0 disabled=yes port=8728
set winbox address=0.0.0.0/0 disabled=no port=8291

/system ntp client
set enabled=yes mode=unicast primary-ntp=152.118.24.8 secondary-ntp=\
202.169.224.16

/ip firewall address-list
add address=192.168.3.1/24 comment="" disabled=no list=ProxyNET
add address=192.168.2.2-192.168.2.17 comment="" disabled=no list=localNet
(saya hanya menjalankan client konek internet 2-17 client)

=================end of basic configuration=================

Untuk firewall filternya saya terapkan yang terpentingnya saja.

/ip firewall filter
add action=drop chain=input comment="Drop Invalid connections" \
connection-state=invalid disabled=no
add action=add-src-to-address-list address-list="port scanners" \
address-list-timeout=2w chain=input comment="Port scanners to list " \
disabled=no protocol=tcp psd=21,3s,3,1
add action=add-src-to-address-list address-list="port scanners" \
address-list-timeout=2w chain=input comment="NMAP FIN Stealth scan" \
disabled=no protocol=tcp tcp-flags=fin,!syn,!rst,!psh,!ack,!urg
add action=add-src-to-address-list address-list="port scanners" \
address-list-timeout=2w chain=input comment="SYN/FIN scan" disabled=no \
protocol=tcp tcp-flags=fin,syn
add action=add-src-to-address-list address-list="port scanners" \
address-list-timeout=2w chain=input comment="SYN/RST scan" disabled=no \
protocol=tcp tcp-flags=syn,rst
add action=add-src-to-address-list address-list="port scanners" \
address-list-timeout=2w chain=input comment="FIN/PSH/URG scan" disabled=\
no protocol=tcp tcp-flags=fin,psh,urg,!syn,!rst,!ack
add action=add-src-to-address-list address-list="port scanners" \
address-list-timeout=2w chain=input comment="ALL/ALL scan" disabled=no \
protocol=tcp tcp-flags=fin,syn,rst,psh,ack,urg
add action=add-src-to-address-list address-list="port scanners" \
address-list-timeout=2w chain=input comment="NMAP NULL scan" disabled=no \
protocol=tcp tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg
add action=drop chain=input comment="Dropping port scanners" disabled=no \
src-address-list="port scanners"
add action=accept chain=input comment="Allow Established connections" \
connection-state=established disabled=no
add action=accept chain=input comment="Allow Related connections" \
connection-state=related disabled=no
add action=accept chain=input comment="Allow ICMP from LOCAL Network" \
disabled=no protocol=icmp src-address-list=localNet
add action=accept chain=input comment="Allow ICMP from PROXY Network" \
disabled=no protocol=icmp src-address-list=ProxyNET
add action=accept chain=input comment="Allow Input from LOCAL Network" \
disabled=no src-address-list=localNet
add action=accept chain=input comment="Allow Input from PROXY Network" \
disabled=no src-address-list=ProxyNET
add action=drop chain=input comment="Drop everything else" disabled=no
add action=drop chain=forward comment="Drop Invalid connections" \
connection-state=invalid disabled=no
add action=jump chain=forward comment="Bad packets filtering" disabled=no \
jump-target=tcp protocol=tcp
add action=jump chain=forward comment="" disabled=no jump-target=udp \
protocol=udp
add action=jump chain=forward comment="" disabled=no jump-target=icmp \
protocol=icmp
add action=drop chain=tcp comment="deny SMTP" disabled=no dst-port=25 \
protocol=tcp
add action=drop chain=tcp comment="deny TFTP" disabled=no dst-port=69 \
protocol=tcp
add action=drop chain=tcp comment="deny RPC portmapper" disabled=no dst-port=\
111 protocol=tcp
add action=drop chain=tcp comment="deny RPC portmapper" disabled=no dst-port=\
135 protocol=tcp
add action=drop chain=tcp comment="deny NBT" disabled=no dst-port=137-139 \
protocol=tcp
add action=drop chain=tcp comment="deny cifs" disabled=no dst-port=445 \
protocol=tcp
add action=drop chain=tcp comment="deny NFS" disabled=no dst-port=2049 \
protocol=tcp
add action=drop chain=tcp comment="deny NetBus" disabled=no dst-port=\
12345-12346 protocol=tcp
add action=drop chain=tcp comment="deny NetBus" disabled=no dst-port=20034 \
protocol=tcp
add action=drop chain=tcp comment="deny BackOriffice" disabled=no dst-port=\
3133 protocol=tcp
add action=drop chain=tcp comment="deny DHCP" disabled=no dst-port=67-68 \
protocol=tcp
add action=drop chain=tcp comment="deny P2P" disabled=no p2p=all-p2p
add action=drop chain=udp comment="deny TFTP" disabled=no dst-port=69 \
protocol=udp
add action=drop chain=udp comment="deny PRC portmapper" disabled=no dst-port=\
111 protocol=udp
add action=drop chain=udp comment="deny PRC portmapper" disabled=no dst-port=\
135 protocol=udp
add action=drop chain=udp comment="deny NBT" disabled=no dst-port=137-139 \
protocol=udp
add action=drop chain=udp comment="deny NFS" disabled=no dst-port=2049 \
protocol=udp
add action=drop chain=udp comment="deny BackOriffice" disabled=no dst-port=\
3133 protocol=udp
add action=accept chain=icmp comment="limit packets 5/secs" disabled=no \
icmp-options=0:0-255 limit=5,5 protocol=icmp
add action=accept chain=icmp comment="limit packets 5/secs" disabled=no \
icmp-options=3:0 protocol=icmp
add action=accept chain=icmp comment="limit packets 5/secs" disabled=no \
icmp-options=3:3 limit=5,5 protocol=icmp
add action=accept chain=icmp comment="limit packets 5/secs" disabled=no \
icmp-options=3:4 limit=5,5 protocol=icmp
add action=accept chain=icmp comment="limit packets 5/secs" disabled=no \
icmp-options=8:0-255 limit=5,5 protocol=icmp
add action=accept chain=icmp comment="limit packets 5/secs" disabled=no \
icmp-options=11:0-255 limit=5,5 protocol=icmp
add action=drop chain=icmp comment="Drop other icmp packets" disabled=no
add action=accept chain=forward comment="Allow Established connections" \
connection-state=established disabled=no
add action=accept chain=forward comment="Allow Forward from LOCAL Network" \
disabled=no src-address-list=localNet
add action=accept chain=forward comment="Allow Forward from PROXY Network" \
disabled=no src-address-list=ProxyNET
add action=drop chain=forward comment="Drop everything else" disabled=no

Untuk NAT nya sebagai berikut :

/ip firewall nat
add action=masquerade src-address-list=localNet chain=srcnat comment="NAT-LOCAL" disabled=no \
out-interface=Public
add action=masquerade src-address-list=ProxyNet chain=srcnat comment="NAT-PROXY" disabled=no \
out-interface=Public
add action=dst-nat chain=dstnat comment="TRANSPARENT PROXY" disabled=no \
dst-address-list=!ProxyNET dst-port=80,8080,3128 in-interface=Local \
protocol=tcp to-addresses=192.168.3.2 to-ports=3128

(atau yang saya punya redirect proxy seperti ini :)

add action=dst-nat chain=dstnat comment="TRANSPARENT PROXY" disabled=no \
src-address=192.168.2.2-192.168.2.17 dst-port=80,8080,3128 in-interface=Local \
protocol=tcp to-addresses=192.168.3.2 to-ports=3128
add action=dst-nat chain=dstnat comment="TRANSPARENT DNS" disabled=no \
dst-port=53 in-interface=Local protocol=udp to-ports=53
add action=dst-nat chain=dstnat comment="" disabled=no dst-port=53 \
in-interface=Local protocol=tcp to-ports=53
add action=dst-nat chain=dstnat comment="" disabled=no dst-port=53 \
in-interface=Proxy protocol=udp to-ports=53
add action=dst-nat chain=dstnat comment="" disabled=no dst-port=53 \
in-interface=Proxy protocol=tcp to-ports=53

Penjelasan :

- Transparent DNS agar client tidak bisa menggunakan NS selain yang terpasang di mikrotik

  (bisa sobat gunakan atau tidak, tergantung keinginan)

- Mengarahkan request dari client tujuan port 80,8080,3128 ke squid external

  saya beri contoh 2 untuk redirect terserah sobat mo pilih yang mana pastinya keduanya jalan

  jika ada interface lain misalkan hotspot sobat tingal tambahkan tanda ! pada src.address atau   dst.address list

Untuk manglenya biar saya jelaskan satu-persatu biar tidak bingung :

/ip firewall mangle
add action=mark-packet chain=forward comment="PROXY-HIT-DSCP 12" disabled=no \
dscp=12 new-packet-mark=proxy-hit passthrough=no

Menandai paket proxy-hit dari external proxy yang nantinya pada rule queue diberikan kebebasan tanpa proses limitasi

add action=change-dscp chain=postrouting comment=CRITICAL disabled=no \
new-dscp=1 protocol=icmp
add action=change-dscp chain=postrouting comment="" disabled=no dst-port=53 \
new-dscp=1 protocol=udp
add action=change-dscp chain=postrouting comment="" disabled=no dst-port=53 \
new-dscp=1 protocol=tcp
add action=mark-connection chain=postrouting comment="" disabled=no dscp=1 \
new-connection-mark=critical_conn passthrough=yes
add action=mark-packet chain=postrouting comment="" connection-mark=\
critical_conn disabled=no new-packet-mark=critical_pkt passthrough=no

Menandai paket ICMP dan DNS request untuk diberikan prioritas tertinggi

add action=mark-connection chain=prerouting comment=MARK-ALL-CONN disabled=no \
dst-address-list=!localNet in-interface=Local new-connection-mark=\
all.pre_conn passthrough=yes
add action=mark-connection chain=forward comment="" disabled=no \
new-connection-mark=all.post_conn out-interface=Local passthrough=yes \
src-address-list=!localNet
add action=mark-packet chain=prerouting comment="" connection-mark=\
all.pre_conn disabled=no new-packet-mark=all.pre_pkt passthrough=yes
add action=mark-packet chain=forward comment="" connection-mark=all.post_conn \
disabled=no new-packet-mark=all.post_pkt passthrough=yes

Menandai SEMUA paket keluar masuk dari Local interface SELAIN ke Local Address

add action=mark-connection chain=prerouting comment=GAMES connection-mark=\
all.pre_conn disabled=no dst-port=9339,843 new-connection-mark=games_conn \
passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting comment="" connection-mark=\
all.pre_conn disabled=no dst-port=40000-40010 new-connection-mark=\
games_conn passthrough=yes protocol=udp
add action=mark-packet chain=forward comment="" connection-mark=games_conn \
disabled=no new-packet-mark=games_pkt passthrough=no

Menandai Paket GAMES untuk diberikan prioritas KEDUA

add action=mark-connection chain=prerouting comment=HTTP-CLIENT \
connection-mark=all.pre_conn disabled=no new-connection-mark=\
browsing_conn packet-size=0-64 passthrough=yes protocol=tcp tcp-flags=ack
add action=mark-connection chain=prerouting comment="" connection-mark=\
all.pre_conn disabled=no dst-port=80,443 new-connection-mark=\
browsing_conn passthrough=yes protocol=tcp
add action=mark-packet chain=forward comment="" connection-bytes=0-131072 \
connection-mark=browsing_conn disabled=no new-packet-mark=browsing_pkt \
passthrough=no protocol=tcp
add action=mark-connection chain=prerouting comment=HTTP-PROXY disabled=no \
dst-address-list=!localNet dst-port=80,443 new-connection-mark=proxy_conn \
passthrough=yes protocol=tcp src-address-list=ProxyNET
add action=mark-packet chain=forward comment="" connection-mark=proxy_conn \
disabled=no new-packet-mark=proxy_pkt passthrough=no

Menandai paket untuk browsing TERMASUK http req dari external proxy dengan conn-byte=0-131072 serta paket-paket protocol tcp yang berukuran kecil (packet-size=0-64 tcp-flags=ack) untuk diberikan prioritas KETIGA

add action=mark-connection chain=prerouting comment=REALTIME connection-mark=\
all.pre_conn disabled=no dst-port=22,179,110,161,8291 \
new-connection-mark=realtime_conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting comment="" connection-mark=\
all.pre_conn disabled=no dst-port=123 new-connection-mark=realtime_conn \
passthrough=yes protocol=udp
add action=mark-packet chain=forward comment="" connection-mark=realtime_conn \
disabled=no new-packet-mark=realtime_pkt passthrough=no

Menandai paket-paket REALTIME ACCESS untuk diberikan prioritas KEEMPAT

add action=mark-connection chain=prerouting comment=FILETRANSER \
connection-mark=all.pre_conn disabled=no dst-port=20,21,23 \
new-connection-mark=communication_conn passthrough=yes protocol=tcp
add action=mark-packet chain=forward comment="" connection-mark=\
communication_conn disabled=no new-packet-mark=communication_pkt \
passthrough=no

Menandai paket-paket FILETRANSFER untuk diberikan prioritas KELIMA

add action=mark-connection chain=prerouting comment=NORMAL connection-mark=\
all.pre_conn disabled=no dst-address-list=!ProxyNET new-connection-mark=\
normal_conn passthrough=yes
add action=mark-packet chain=forward comment="" connection-mark=normal_conn \
disabled=no new-packet-mark=normal_pkt passthrough=no

Menandai semua paket yang tersisa SELAIN tujuan Proxy untuk diberikan prioritas KEENAM

add action=mark-packet chain=forward comment=DOWNLOAD connection-bytes=\
131072-4294967295 connection-mark=all.post_conn disabled=no dst-address=\
192.168.2.2 new-packet-mark=client1 passthrough=no protocol=tcp
add action=mark-packet chain=forward comment="" connection-bytes=\
131072-4294967295 connection-mark=all.post_conn disabled=no dst-address=\
192.168.2.3 new-packet-mark=client2 passthrough=no protocol=tcp

………………..dst sampai jumlah client yang di perlukanterpenuhi

add action=mark-packet chain=forward comment=DOWNLOAD-NO-LIMIT connection-bytes=\
131072-4294967295 connection-mark=all.post_conn disabled=no dst-address=\
192.168.2.16 new-packet-mark=client16 passthrough=no protocol=tcp
add action=mark-packet chain=forward comment="" connection-bytes=\
131072-4294967295 connection-mark=all.post_conn disabled=no dst-address=\
192.168.2.17 new-packet-mark=client17 passthrough=no protocol=tcp

Menandai paket protocol tcp yang diteruskan ke client untuk memberikan batasan download pada masing-masing client dengan conn-byte=131072-4294967295

Setelah itu buat queue type nya

/queue type
add kind=pcq name=pcq_up pcq-classifier=src-address pcq-limit=200 pcq-rate=0 \
pcq-total-limit=8000
add kind=pcq name=pcq_down pcq-classifier=dst-address pcq-limit=200 pcq-rate=\
0 pcq-total-limit=8000
add kind=pfifo name=pfifo-critical pfifo-limit=10
add kind=pcq name=pcq_critical.up pcq-classifier=src-address,src-port \
pcq-limit=20 pcq-rate=0 pcq-total-limit=500
add kind=pcq name=pcq_critical.down pcq-classifier=dst-address,dst-port \
pcq-limit=20 pcq-rate=0 pcq-total-limit=500

di lanjut menambahkan queue tree nya…..

/queue tree
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name="A. PROXY HIT" packet-mark=proxy-hit parent=Local \
priority=1 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name="B. CRITICAL" packet-mark=critical_pkt parent=Public \
priority=1 queue=pfifo-critical

Tanpa limit dengan prioritas pertama untuk proxy hit dan critical

add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name="C. INBOUND" packet-mark=all.post_pkt parent=global-out \
priority=8
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name="D. OUTBOUND" packet-mark=all.pre_pkt parent=Public \
priority=8

Membuat parent untuk inbound (traffic masuk ke client) dan outbound (traffic keluar dari public)

Untuk child INBOUND nya saya bagi menjadi beberapa prioritas seperti berikut :

add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name="A. GAMES" packet-mark=games_pkt parent="C. INBOUND" \
priority=2 queue=pcq_critical.down
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name="B. HTTP" packet-mark=browsing_pkt parent="C. INBOUND" \
priority=3 queue=pcq_down
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=64k \
max-limit=128k name="C. REALTIME" packet-mark=realtime_pkt parent=\
"C. INBOUND" priority=4 queue=pcq_critical.down
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=64k \
max-limit=128k name="D. FILETRANS" packet-mark=communication_pkt parent=\
"C. INBOUND" priority=5 queue=pcq_down
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=64k \
max-limit=128k name="E. NORMAL" packet-mark=normal_pkt parent=\
"C. INBOUND" priority=6 queue=pcq_down

selanjutnya parent untuk download per client nya :

add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=1024k name="F. DOWN 1M" parent="C. INBOUND" priority=8
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name="G. DOWN 2M" parent="C. INBOUND" priority=8

membuat 2 parent untuk 1M dan 2M (atau tanpa limit)

Setelah itu buat child nya, untuk memberikan batasan download per clientnya

add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=256k name=Client1 packet-mark=client1 parent=\
"F. DOWN 1M" priority=8 queue=pcq_down
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=256k name=Client2 packet-mark=client2 parent=\
"F. DOWN 1M" priority=8 queue=pcq_down

…………………..dst sampai semua paket ke client yang di perlukan terpenuhi

Batasan download sebesar 1M untuk semua client dan maksimum 256k per client

add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=Client16 packet-mark=client16 parent=\
"G. DOWN 2M" priority=8 queue=pcq_down
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name=Client17 packet-mark=client17 parent=\
"G. DOWN 2M" priority=8 queue=pcq_down

Tanpa batasan download untuk IP 192.168.2.16 dan 192.168.2.17

Kemudiam membuat limit untuk uploadnya

add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name="A. GAMES UP" packet-mark=games_pkt parent="D. OUTBOUND" \
priority=2 queue=pcq_critical.up
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=64k \
max-limit=256k name="B. HTTP UP" packet-mark=proxy_pkt parent=\
"D. OUTBOUND" priority=3 queue=pcq_up
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=32k \
max-limit=64k name="C. REALTIME UP" packet-mark=realtime_pkt parent=\
"D. OUTBOUND" priority=4 queue=pcq_critical.up
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=64k \
max-limit=128k name="D. FILETRANS UP" packet-mark=communication_pkt \
parent="D. OUTBOUND" priority=5 queue=pcq_up
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=64k \
max-limit=128k name="E. NORMAL UP" packet-mark=normal_pkt parent=\
"D. OUTBOUND" priority=6 queue=pcq_up

C a t a t a n 
- Silahkan sobat sesuaikan Untuk IP ADDRESS, Nama Ethernet. dll
- Tanda Hijau Biru dan Merah sengaja saya tandai agar sobat tidak tertukar jika sobat sudah memberi nama lain (maksudnya harus di sesuaikan)
- Tanda Jingga da Ping harus sama dengan yang ada di address list (jika sobat mengganti dengan nama lain)
- Silahkan sobat Kopi script yang saya buat dan pastekan dahulu di notepad (maksudnya di di hilangkan keterangan-keteranganya, buat satu block satu block biar tidak pusing eheheh)

Diurutkan berdasarkan prioritas paket keluar, mulai dari games, http request, realtime connection, filetransfer dan normal request, Hasil akhir yang saya capai, masing-masing client tidak terganggu oleh aktifitas download ketika mereka browsing atau main games, baik pada saat user sedang upload pun tidak mengganggu/memperbesar latency games…. sependek pengetahuan saya soal mikrotik setelah beberapa kali uji coba, mungkin ini settingan terbaik yang pernah saya buat. Semoga bermanfaat dan selamat mereset Mikrotiknya, succes!!!!

Share:

Read More

SETTING MIKROTIK BAGI PEMULA : Bagian 9 (Selesai)

SETTING MIKROTIK BAGI PEMULA : Bagian 9 (end)

Sub-Child-Parent (PAKET INTL)

/queue simple

Copy – Paste kode berikut :

add name="Billing - PAKET INTL" target-addresses=192.168.0.2/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET INTL” packet-marks=packet-intl direction=both priority=7 queue=default-small/default-small limit-at=15k/50k max-limit=30k/100k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client01 - PAKET INTL" target-addresses=192.168.0.3/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET INTL” packet-marks=packet-intl direction=both priority=7 queue=default-small/default-small limit-at=15k/50k max-limit=30k/100k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client02 - PAKET INTL" target-addresses=192.168.0.4/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET INTL” packet-marks=packet-intl direction=both priority=7 queue=default-small/default-small limit-at=15k/50k max-limit=30k/100k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client03 - PAKET INTL" target-addresses=192.168.0.5/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET INTL” packet-marks=packet-intl direction=both priority=7 queue=default-small/default-small limit-at=15k/50k max-limit=30k/100k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client04 - PAKET INTL" target-addresses=192.168.0.6/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET INTL” packet-marks=packet-intl direction=both priority=7 queue=default-small/default-small limit-at=15k/50k max-limit=30k/100k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client05 - PAKET INTL" target-addresses=192.168.0.7/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET INTL” packet-marks=packet-intl direction=both priority=7 queue=default-small/default-small limit-at=15k/50k max-limit=30k/100k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client06 - PAKET INTL" target-addresses=192.168.0.8/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET INTL” packet-marks=packet-intl direction=both priority=7 queue=default-small/default-small limit-at=15k/50k max-limit=30k/100k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client07 - PAKET INTL" target-addresses=192.168.0.9/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET INTL” packet-marks=packet-intl direction=both priority=7 queue=default-small/default-small limit-at=15k/50k max-limit=30k/100k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client08 - PAKET INTL" target-addresses=192.168.0.10/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET INTL” packet-marks=packet-intl direction=both priority=7 queue=default-small/default-small limit-at=15k/50k max-limit=30k/100k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client09 - PAKET INTL" target-addresses=192.168.0.11/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET INTL” packet-marks=packet-intl direction=both priority=7 queue=default-small/default-small limit-at=15k/50k max-limit=30k/100k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client10 - PAKET INTL" target-addresses=192.168.0.12/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET INTL” packet-marks=packet-intl direction=both priority=7 queue=default-small/default-small limit-at=15k/50k max-limit=30k/100k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client11 - PAKET INTL" target-addresses=192.168.0.13/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET INTL” packet-marks=packet-intl direction=both priority=7 queue=default-small/default-small limit-at=15k/50k max-limit=30k/100k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client12 - PAKET INTL" target-addresses=192.168.0.14/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET INTL” packet-marks=packet-intl direction=both priority=7 queue=default-small/default-small limit-at=15k/50k max-limit=30k/100k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client13 - PAKET INTL" target-addresses=192.168.0.15/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET INTL” packet-marks=packet-intl direction=both priority=7 queue=default-small/default-small limit-at=15k/50k max-limit=30k/100k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client14 - PAKET INTL" target-addresses=192.168.0.16/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET INTL” packet-marks=packet-intl direction=both priority=7 queue=default-small/default-small limit-at=15k/50k max-limit=30k/100k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client15 - PAKET INTL" target-addresses=192.168.0.17/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET INTL” packet-marks=packet-intl direction=both priority=7 queue=default-small/default-small limit-at=15k/50k max-limit=30k/100k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Unknown - PAKET INTL" target-addresses=192.168.0.0/24 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET INTL” packet-marks=packet-intl direction=both priority=8 queue=default-small/default-small limit-at=8/8 max-limit=8/8 burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

Selesai 

Share:

Read More

SETTING MIKROTIK BAGI PEMULA : Bagian 8

SETTING MIKROTIK BAGI PEMULA : Bagian 8

Sub-Child-Parent (PAKET IIX)

/queue simple

Copy – Paste kode berikut :

add name="Billing - PAKET IIX" target-addresses=192.168.0.2/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET IIX” packet-marks=packet-iix direction=both priority=5 queue=default-small/default-small limit-at=20k/70k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client01 - PAKET IIX" target-addresses=192.168.0.3/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET IIX” packet-marks=packet-iix direction=both priority=5 queue=default-small/default-small limit-at=20k/70k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client02 - PAKET IIX" target-addresses=192.168.0.4/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET IIX” packet-marks=packet-iix direction=both priority=5 queue=default-small/default-small limit-at=20k/70k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client03 - PAKET IIX" target-addresses=192.168.0.5/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET IIX” packet-marks=packet-iix direction=both priority=5 queue=default-small/default-small limit-at=20k/70k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client04 - PAKET IIX" target-addresses=192.168.0.6/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET IIX” packet-marks=packet-iix direction=both priority=5 queue=default-small/default-small limit-at=20k/70k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client05 - PAKET IIX" target-addresses=192.168.0.7/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET IIX” packet-marks=packet-iix direction=both priority=5 queue=default-small/default-small limit-at=20k/70k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client06 - PAKET IIX" target-addresses=192.168.0.8/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET IIX” packet-marks=packet-iix direction=both priority=5 queue=default-small/default-small limit-at=20k/70k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client07 - PAKET IIX" target-addresses=192.168.0.9/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET IIX” packet-marks=packet-iix direction=both priority=5 queue=default-small/default-small limit-at=20k/70k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client08 - PAKET IIX" target-addresses=192.168.0.10/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET IIX” packet-marks=packet-iix direction=both priority=5 queue=default-small/default-small limit-at=20k/70k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client09 - PAKET IIX" target-addresses=192.168.0.11/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET IIX” packet-marks=packet-iix direction=both priority=5 queue=default-small/default-small limit-at=20k/70k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client10 - PAKET IIX" target-addresses=192.168.0.12/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET IIX” packet-marks=packet-iix direction=both priority=5 queue=default-small/default-small limit-at=20k/70k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client11 - PAKET IIX" target-addresses=192.168.0.13/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET IIX” packet-marks=packet-iix direction=both priority=5 queue=default-small/default-small limit-at=20k/70k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client12 - PAKET IIX" target-addresses=192.168.0.14/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET IIX” packet-marks=packet-iix direction=both priority=5 queue=default-small/default-small limit-at=20k/70k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client13 - PAKET IIX" target-addresses=192.168.0.15/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET IIX” packet-marks=packet-iix direction=both priority=5 queue=default-small/default-small limit-at=20k/70k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client14 - PAKET IIX" target-addresses=192.168.0.16/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET IIX” packet-marks=packet-iix direction=both priority=5 queue=default-small/default-small limit-at=20k/70k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client15 - PAKET IIX" target-addresses=192.168.0.17/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET IIX” packet-marks=packet-iix direction=both priority=5 queue=default-small/default-small limit-at=20k/70k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Unknown - PAKET IIX" target-addresses=192.168.0.0/24 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET IIX” packet-marks=packet-iix direction=both priority=8 queue=default-small/default-small limit-at=8/8 max-limit=8/8 burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

Share:

Read More

SETTING MIKROTIK BAGI PEMULA : Bagian 7

SETTING MIKROTIK BAGI PEMULA : Bagian 7

Sub-Child-Parent (PAKET GAME ONLINE)

/queue simple

Copy – Paste kode berikut :

add name="Billing - PAKET GAME ONLINE" target-addresses=192.168.0.2/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET GAME ONLINE” packet-marks=packet-GAMES_TCP_1,packet-GAMES_TCP_2,packet-GAMES_TCP_3,packet-GAMES_TCP_4,packet-GAMES_UDP_1,packet-GAMES_UDP_2,packet-games_iix direction=both priority=3 queue=default-small/default-small limit-at=29k/100k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client01 - PAKET GAME ONLINE" target-addresses=192.168.0.3/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET GAME ONLINE” packet-marks=packet-GAMES_TCP_1,packet-GAMES_TCP_2,packet-GAMES_TCP_3,packet-GAMES_TCP_4,packet-GAMES_UDP_1,packet-GAMES_UDP_2,packet-games_iix direction=both priority=3 queue=default-small/default-small limit-at=29k/100k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client02 - PAKET GAME ONLINE" target-addresses=192.168.0.4/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET GAME ONLINE” packet-marks=packet-GAMES_TCP_1,packet-GAMES_TCP_2,packet-GAMES_TCP_3,packet-GAMES_TCP_4,packet-GAMES_UDP_1,packet-GAMES_UDP_2,packet-games_iix direction=both priority=3 queue=default-small/default-small limit-at=29k/100k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client03 - PAKET GAME ONLINE" target-addresses=192.168.0.5/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET GAME ONLINE” packet-marks=packet-GAMES_TCP_1,packet-GAMES_TCP_2,packet-GAMES_TCP_3,packet-GAMES_TCP_4,packet-GAMES_UDP_1,packet-GAMES_UDP_2,packet-games_iix direction=both priority=3 queue=default-small/default-small limit-at=29k/100k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client04 - PAKET GAME ONLINE" target-addresses=192.168.0.6/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET GAME ONLINE” packet-marks=packet-GAMES_TCP_1,packet-GAMES_TCP_2,packet-GAMES_TCP_3,packet-GAMES_TCP_4,packet-GAMES_UDP_1,packet-GAMES_UDP_2,packet-games_iix direction=both priority=3 queue=default-small/default-small limit-at=29k/100k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client05 - PAKET GAME ONLINE" target-addresses=192.168.0.7/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET GAME ONLINE” packet-marks=packet-GAMES_TCP_1,packet-GAMES_TCP_2,packet-GAMES_TCP_3,packet-GAMES_TCP_4,packet-GAMES_UDP_1,packet-GAMES_UDP_2,packet-games_iix direction=both priority=3 queue=default-small/default-small limit-at=29k/100k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client06 - PAKET GAME ONLINE" target-addresses=192.168.0.8/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET GAME ONLINE” packet-marks=packet-GAMES_TCP_1,packet-GAMES_TCP_2,packet-GAMES_TCP_3,packet-GAMES_TCP_4,packet-GAMES_UDP_1,packet-GAMES_UDP_2,packet-games_iix direction=both priority=3 queue=default-small/default-small limit-at=29k/100k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client07 - PAKET GAME ONLINE" target-addresses=192.168.0.9/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET GAME ONLINE” packet-marks=packet-GAMES_TCP_1,packet-GAMES_TCP_2,packet-GAMES_TCP_3,packet-GAMES_TCP_4,packet-GAMES_UDP_1,packet-GAMES_UDP_2,packet-games_iix direction=both priority=3 queue=default-small/default-small limit-at=29k/100k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client08 - PAKET GAME ONLINE" target-addresses=192.168.0.10/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET GAME ONLINE” packet-marks=packet-GAMES_TCP_1,packet-GAMES_TCP_2,packet-GAMES_TCP_3,packet-GAMES_TCP_4,packet-GAMES_UDP_1,packet-GAMES_UDP_2,packet-games_iix direction=both priority=3 queue=default-small/default-small limit-at=29k/100k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client09 - PAKET GAME ONLINE" target-addresses=192.168.0.11/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET GAME ONLINE” packet-marks=packet-GAMES_TCP_1,packet-GAMES_TCP_2,packet-GAMES_TCP_3,packet-GAMES_TCP_4,packet-GAMES_UDP_1,packet-GAMES_UDP_2,packet-games_iix direction=both priority=3 queue=default-small/default-small limit-at=29k/100k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client10 - PAKET GAME ONLINE" target-addresses=192.168.0.12/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET GAME ONLINE” packet-marks=packet-GAMES_TCP_1,packet-GAMES_TCP_2,packet-GAMES_TCP_3,packet-GAMES_TCP_4,packet-GAMES_UDP_1,packet-GAMES_UDP_2,packet-games_iix direction=both priority=3 queue=default-small/default-small limit-at=29k/100k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client11 - PAKET GAME ONLINE" target-addresses=192.168.0.13/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET GAME ONLINE” packet-marks=packet-GAMES_TCP_1,packet-GAMES_TCP_2,packet-GAMES_TCP_3,packet-GAMES_TCP_4,packet-GAMES_UDP_1,packet-GAMES_UDP_2,packet-games_iix direction=both priority=3 queue=default-small/default-small limit-at=29k/100k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client12 - PAKET GAME ONLINE" target-addresses=192.168.0.14/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET GAME ONLINE” packet-marks=packet-GAMES_TCP_1,packet-GAMES_TCP_2,packet-GAMES_TCP_3,packet-GAMES_TCP_4,packet-GAMES_UDP_1,packet-GAMES_UDP_2,packet-games_iix direction=both priority=3 queue=default-small/default-small limit-at=29k/100k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client13 - PAKET GAME ONLINE" target-addresses=192.168.0.15/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET GAME ONLINE” packet-marks=packet-GAMES_TCP_1,packet-GAMES_TCP_2,packet-GAMES_TCP_3,packet-GAMES_TCP_4,packet-GAMES_UDP_1,packet-GAMES_UDP_2,packet-games_iix direction=both priority=3 queue=default-small/default-small limit-at=29k/100k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client14 - PAKET GAME ONLINE" target-addresses=192.168.0.16/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET GAME ONLINE” packet-marks=packet-GAMES_TCP_1,packet-GAMES_TCP_2,packet-GAMES_TCP_3,packet-GAMES_TCP_4,packet-GAMES_UDP_1,packet-GAMES_UDP_2,packet-games_iix direction=both priority=3 queue=default-small/default-small limit-at=29k/100k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Client15 - PAKET GAME ONLINE" target-addresses=192.168.0.17/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET GAME ONLINE” packet-marks=packet-GAMES_TCP_1,packet-GAMES_TCP_2,packet-GAMES_TCP_3,packet-GAMES_TCP_4,packet-GAMES_UDP_1,packet-GAMES_UDP_2,packet-games_iix direction=both priority=3 queue=default-small/default-small limit-at=29k/100k max-limit=58k/200k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="Unknown - PAKET GAME ONLINE" target-addresses=192.168.0.0/32 dst-address=0.0.0.0/0 interface=To_Local parent=”PAKET GAME ONLINE” packet-marks=packet-GAMES_TCP_1,packet-GAMES_TCP_2,packet-GAMES_TCP_3,packet-GAMES_TCP_4,packet-GAMES_UDP_1,packet-GAMES_UDP_2,packet-games_iix direction=both priority=8 queue=default-small/default-small limit-at=8/8 max-limit=8/8 burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

Share:

Read More

SETTING MIKROTIK BAGI PEMULA : Bagian 6

SETTING MIKROTIK BAGI PEMULA : Bagian 6

Kita mulai dengan membuat Parent – Sub-Parent – Sub-Child-Parent Bandwidth Management.

Parent

Pada Winbox Pilih Menu Queue – Simple Queue, atau Pilih Menu New terminal dan ketik :

/queue simple

Copy – Paste kode berikut :

add name="INTERNET" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=packet-GAMES_TCP_1,packet-GAMES_TCP_2,packet-GAMES_TCP_3,packet-GAMES_TCP_4,packet-GAMES_UDP_1,packet-GAMES_UDP_2,packet-games_iix,packet-iix,packet-intl direction=both priority=1 queue=default-small/default-small  limit-at=500k/1700k max-limit=500k/1700k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

Sub-Parent

/queue simple

Copy – Paste kode berikut :

add name="PAKET GAME ONLINE" dst-address=0.0.0.0/0 interface=all parent=INTERNET packet-marks=packet-GAMES_TCP_1,packet-GAMES_TCP_2,packet-GAMES_TCP_3,packet-GAMES_TCP_4,packet-GAMES_UDP_1,packet-GAMES_UDP_2,packet-games_iix direction=both priority=2 queue=default-small/default-small limit-at=250/850k max-limit=500k/1700k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="PAKET IIX" dst-address=0.0.0.0/0 interface=all parent=INTERNET packet-marks=packet-iix direction=both priority=4 queue=default-small/default-small limit-at=250k/850k max-limit=500k/1700k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

add name="PAKET INTL" dst-address=0.0.0.0/0 interface=all parent=INTERNET packet-marks=packet-intl direction=both priority=6 queue=default-small/default-small limit-at=150k/650k max-limit=300k/1300k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

Share:

Read More

SETTING MIKROTIK BAGI PEMULA : Bagian 5

SETTING MIKROTIK BAGI PEMULA : Bagian 5

CHANGE SIMPLE QUEUE

Pengaturan simple queue ini yang menentukan pembagian Bandwidth Management. Disini saya menggunakan ISP Speedy Paket Eksekutif (2Mbps) dan setelah saya test di speedtest.net, pada pagi, siang, dan malam hari, kecepatan rata-rata pada koneksi IIX yang saya peroleh :

Download Speed = 1.70Mb/s (1750kbps)

Upload Speedy = 0,50Mb/s (500kbps)

Sedangkan kecepatan rata-rata pada koneksi internasional:

Download Speed = 1,30 Mb/s (1100kbps)

Upload Speed = 0,30Mb/s (300kbps).

Pengaturan bandwidth per client harus berdasarkan rumus, namun belum tentu berdasarkan jumlah client/komputer yang ada, tetapi perlu diperhitungkan berdasarkan jumlah client/komputer yang hidup secara bersamaan. Tiap client mendapatkan bandwidth terendah sebesar bandwidth rata-rata yang diperoleh dari ISP/Provider dibagi dengan jumlah unit client yang hidup secara bersamaan. Selanjutnya untuk batas bandwidth tertinggi tiap client diambil dari bandwidth terendah dari tiap client dikalikan batas atas bandwidth dari ISP/Provider, tetapi agar lebih aman diambil maksimal setengah dari bandwidth ISP/Provider. Rumus :

Limit At per Client = [Bandwitdh Download ISP] / [Jumlah PC Client]

Maksimal Limit = [Limit At] x 2

Sebagai contoh, saya mempunyai 22 client/komputer, diasumsikan jumlah client yang hidup secara bersamaan adalah 17 client/komputer, kecepatan koneksi IIX sebesar 1700kbps/500kbps, maka untuk setiap client/komputer akan dibuatkan 1 rule queue dengan Limit At : 1700 / 17 = 100kbps (Download) dan Limit At : 500 / 17 = 29,41kbps (Upload). Sedangkan untuk koneksi internasional kecepatan koneksi sebesar 1300kbps/300kbps dibuatkan rule queue dengan Limit At : 1300 / 17 = 76,5kbps (download) dan Limit At : 300 / 17 = 17,65kbps

Silahkan berinovasi dengan kecepatan Download/Upload Speed rata-rata koneksi IIX dan Internasional ISP/Provider anda, dengan cara melakukan test bandwidth di speedtest.net pada Pagi (Jam Sepi), Siang (Jam Sibuk) dan Malam Hari (Jam Sedang), baru kemudian anda ambil rata-rata kecepatan Download/Upload Speed koneksi IIX dan Internasional ISP/Provider anda. Jangan dijadikan patokan pengaturan bandwidth milik saya.

Share:

Read More

SETTING MIKROTIK BAGI PEMULA : Bagian 4

SETTING MIKROTIK BAGI PEMULA : Bagian 4

CHANGE FIREWALL MANGLE

Pada Winbox Pilih Menu New Terminal dan ketik :

/ip firewall mangle

Copy Paste kode berikut (per 3 baris) :

add chain=prereouting protocol=tcp dst-port=843,1818,2001,3010,4300,5105,5121,5126,5171,5340-5352,6000-6152,7777 connection-mark=conn-GAMES_TCP_1 dst-address-list=Local src-address-list=0.0.0.0/0 action=mark-connection new-connection-mark=conn-GAMES_TCP_1 passthrough=yes comment=”Mark Incoming Connection from TCP_1 Port Games to Local”

add chain=prereouting protocol=tcp dst-port=843,1818,2001,3010,4300,5105,5121,5126,5171,5340-5352,6000-6152,7777 connection-mark=conn-GAMES_TCP_1 dst-address-list=0.0.0.0/0 src-address-list= Local action=mark-connection new-connection-mark=conn-GAMES_TCP_1 passthrough=yes comment=”Mark Outgoing Connection from Local to TCP_1 Port Games”

add chain=prereouting connection-mark=conn-GAMES_TCP_1 action=mark-packet new-packet-mark=packet-GAMES_TCP_1 passthrough=no comment=”Mark TCP_1 Port Games Packet”

add chain=prereouting protocol=tcp dst-port=7341-7350,7451,8085,9600-9602,9300,9339,9376-9377,9400,9700,10001-10011 connection-mark=conn-GAMES_TCP_2 dst-address-list=Local src-address-list=0.0.0.0/0 action=mark-connection new-connection-mark=conn-GAMES_TCP_2 passthrough=yes comment=”Mark Incoming Connection from TCP_2 Port Games to Local”

add chain=prereouting protocol=tcp dst-port=7341-7350,7451,8085,9600-9602,9300,9339,9376-9377,9400,9700,10001-10011 connection-mark=conn-GAMES_TCP_2 dst-address-list=0.0.0.0/0 src-address-list= Local action=mark-connection new-connection-mark=conn-GAMES_TCP_2 passthrough=yes comment=”Mark Outgoing Connection from Local to TCP_2 Port Games”

add chain=prereouting connection-mark=conn-GAMES_TCP_2 action=mark-packet new-packet-mark=packet-GAMES_TCP_2 passthrough=no comment=”Mark TCP_2 Port Games Packet”

add chain=prereouting protocol=tcp dst-port= 10402,11011-11041,12011,12110,13008,13413,15000-15002,16402-16502,16666,18901-18909,19000 connection-mark=conn-GAMES_TCP_3 dst-address-list=Local src-address-list=0.0.0.0/0 action=mark-connection new-connection-mark=conn-GAMES_TCP_3 passthrough=yes comment=”Mark Incoming Connection from TCP_3 Port Games to Local”

add chain=prereouting protocol=tcp dst-port= 10402,11011-11041,12011,12110,13008,13413,15000-15002,16402-16502,16666,18901-18909,19000 connection-mark=conn-GAMES_TCP_3 dst-address-list=0.0.0.0/0 src-address-list= Local action=mark-connection new-connection-mark=conn-GAMES_TCP_3 passthrough=yes comment=”Mark Outgoing Connection from Local to TCP_3 Port Games”

add chain=prereouting connection-mark=conn-GAMES_TCP_3 action=mark-packet new-packet-mark=packet-GAMES_TCP_3 passthrough=no comment=”Mark TCP_3 Port Games Packet”

add chain=prereouting protocol=tcp dst-port=19101,22100,27780,28012,29000,29200,39100,39110,39220,39190,40000,49100 connection-mark=conn-GAMES_TCP_4 dst-address-list=Local src-address-list=0.0.0.0/0 action=mark-connection new-connection-mark=conn-GAMES_TCP_4 passthrough=yes comment=”Mark Incoming Connection from TCP_4 Port Games to Local”

add chain=prereouting protocol=tcp dst-port= 19101,22100,27780,28012,29000,29200,39100,39110,39220,39190,40000,49100 connection-mark=conn-GAMES_TCP_4 dst-address-list=0.0.0.0/0 src-address-list= Local action=mark-connection new-connection-mark=conn-GAMES_TCP_4 passthrough=yes comment=”Mark Outgoing Connection from Local to TCP_4 Port Games”

add chain=prereouting connection-mark=conn-GAMES_TCP_4 action=mark-packet new-packet-mark=packet-GAMES_TCP_4 passthrough=no comment=”Mark TCP_4 Port Games Packet”

add chain=prereouting protocol=udp dst-port=1293,1479,6100-6152,7777-7977,9401,9600-9602,12020-12080,30000,40000-40010 connection-mark=conn-GAMES_UDP_1 dst-address-list=Local src-address-list=0.0.0.0/0 action=mark-connection new-connection-mark=conn-GAMES_UDP_1 passthrough=yes comment=”Mark Incoming Connection from UDP_1 Port Games to Local”

add chain=prereouting protocol=udp dst-port=1293,1479,6100-6152,7777-7977,9401,9600-9602,12020-12080,30000,40000-40010 connection-mark=conn-GAMES_UDP_1 dst-address-list=0.0.0.0/0 src-address-list= Local action=mark-connection new-connection-mark=conn-GAMES_UDP_1 passthrough=yes comment=”Mark Outgoing Connection from Local to UDP_1 Port Games”

add chain=prereouting connection-mark=conn-GAMES_UDP_1 action=mark-packet new-packet-mark=packet-GAMES_UDP_1 passthrough=no comment=”Mark  UDP_1 Port Games Packet”

add chain=prereouting protocol=udp dst-port=42051-42052,11100-11125,11440-11460 connection-mark=conn-GAMES_UDP_2 dst-address-list=Local src-address-list=0.0.0.0/0 action=mark-connection new-connection-mark=conn-GAMES_UDP_2 passthrough=yes comment=”Mark Incoming Connection from UDP_2 Port Games to Local”

add chain=prereouting protocol=udp dst-port=42051-42052,11100-11125,11440-11460 connection-mark=conn-GAMES_UDP_2 dst-address-list=0.0.0.0/0 src-address-list=Local action=mark-connection new-connection-mark=conn-GAMES_UDP_2 passthrough=yes comment=”Mark Outgoing Connection from Local to UDP_2 Port Games”

add chain=prereouting connection-mark=conn-GAMES_UDP_2 action=mark-packet new-packet-mark=packet-GAMES_UDP_2 passthrough=no comment=”Mark  UDP_2 Port Games Packet”

add chain=prereouting protocol=icmp connection-mark=conn-games_iix  dst-address-list=Local src-address-list=games_iix action=mark-connection new-connection-mark=conn-games_iix passthrough=yes comment=”Mark Incoming Connection from Games Online to Local”

add chain=prereouting protocol=icmp connection-mark=conn-games_iix  dst-address-list=games_iix src-address-list=Local action=mark-connection new-connection-mark=conn-games_iix passthrough=yes comment=”Mark Outgoing Connection from Local to Games Online”

add chain=prereouting connection-mark=conn-games_iix  action=mark-packet new-packet-mark=packet-games_iix passthrough=no comment=”Mark Games Online Packet”

add chain=prereouting protocol=icmp connection-mark=conn-iix  dst-address-list=Local src-address-list=nice action=mark-connection new-connection-mark=conn-iix passthrough=yes comment=”Mark Incoming Connection from IIX to Local”

add chain=prereouting protocol=icmp connection-mark=conn-iix  dst-address-list=nice src-address-list=Local action=mark-connection new-connection-mark=conn-iix passthrough=yes comment=”Mark Outgoing Connection from Local to IIX”

add chain=prereouting connection-mark=conn-iix  action=mark-packet new-packet-mark=packet-iix passthrough=no comment=”Mark IIX Packet”

add chain=prereouting protocol=icmp connection-mark=conn-intl  dst-address-list=Local src-address-list=nice action=mark-connection new-connection-mark=conn-intl passthrough=yes comment=”Mark Incoming Connection from INTL to Local”

add chain=prereouting protocol=icmp connection-mark=conn-intl  dst-address-list=nice src-address-list=Local action=mark-connection new-connection-mark=conn-intl passthrough=yes comment=”Mark Outgoing Connection from Local to INTL”

add chain=prereouting connection-mark=conn-intl  action=mark-packet new-packet-mark=packet-intl passthrough=no comment=”Mark INTL Packet”

Share:

Read More

SETTING MIKROTIK BAGI PEMULA : Bagian 1

SETTING MIKROTIK BAGI PEMULA : Bagian 1

Sebelum memulai, terlebih dahulu kita samakan persepsi :

1.       Modem ADSL di ‘SET’ mode ‘BRIDGE’, jadi kalo masih mode ‘PPPoE’ silahkan di ‘RESET’ modemnya & setting ulang. Tutorial ini dikhususkan untuk ‘DIAL UP’ internet dari Mikrotik, bukan ‘DIAL UP’ dari Modem ADSL.

2.       Silahkan ‘RESET’ Mikrotiknya bila masih baru atau menggunakan setting ‘DEFAULT’ bawaan Mikrotik. Caranya :

-          Pada Winbox Pilih Menu ‘New Terminal’ dan ketik :

system – (tekan enter) – reset - (tekan enter) – Pilih Menu ‘Y’

-          Reboot Mikrotik

3.       Penulis menggunakan Winbox v2.2.16, bisa di download di SINI.

4.    Penulis menggunakan Mikrotik RB750 sebagai bahan percobaan, diimplementasikan pada Mikrotik RB750 dan Mikrotik RB800. Tutorial ini bebas diterapkan pada beberapa jenis mikrotik.

5.       Tutorial ini telah di Uji Coba pada War-NeT AnJeL@-NeT, alamat Jl. Lawu No. 003 Palangkaraya.

Selanjutnya, kita mulai dengan Log In Winbox dan memilih Mac Address (Jangan IP Address) untuk koneksi ke Mikrotik.

CHANGE NAME INTERFACE

Pada Winbox Pilih Menu Interface

Klik [+] klik 2x ether1 Name=To_speedy1

Klik [+] klik 2x ether2 Name=To_Local

CHANGE IP ADDRESSES

Pada Winbox Pilih Menu New Terminal, ketik :

/ip address

Copy-Paste kode berikut :

add address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255 interface=To_Local

add address=192.168.1.2/24 network=192.168.1.0 broadcast=192.168.1.255 interface=To_speedy1

CHANGE PPP – PPPoE Client

Pada Winbox Pilih Menu PPP – klik [+] - PPPoE Client

Tab General Name=pppoe-speedy1 Interfaces=To_speedy1

Tab Dial Out Service=internet User= ****01***2**@telkom.net (Username Speedy Anda) Password= (Password Speedy Anda) Profile=Default Checklist pada Pilih Menuan ‘Add Default Route & User Peer DNS’, Pilih Menuan Allow Checklist semua, OK.

CHANGE DNS

Pada Winbox Pilih Menu IP – DNS – Setting

Bila DNS Server  sudah muncul, tinggal memberi checklist pada Pilih Menuan ‘Allow Remote Requests’, OK

Gunakan juga DNS Server tersebut untuk PC Billing & PC Client Anda

CHANGE TCP/IP PC-BILLING / PC CLIENT

Setting terlebih dahulu PC/Komputer yang digunakan untuk proses instalasi mikrotik anda. Caranya :

Buka Control Panel – Network Connection – Local Area Connection – Klik kanan & Pilih Menu Properties – Internet Protocol (TCP/IP) – Properties.

Use the Following IP Address: IP Address = 192.168.0.2 Subnet Mask = 255.255.255.0 Gateway = 192.168.0.1

Use the Following DNS Server Addresses: Gunakan DNS Server & Alternatif DNS Server yang ada pada setting DNS Tadi.

Setting Mangle TCP/UDP Port

CHANGE TIME ZONE / ZONA WAKTU

Karena beberapa RouterBoard/Mikrotik tidak menggunakan Battere CMOS, agar zona waktu RouterBoard/Mikrotik berjalan normal maka harus kita setting.

Pada Winbox Pilih Menu System – NTP Client

Checklist Pilih Menuan ‘Enabled’, Mode=unicast Primary NTP Server & Secondary NTP Server diisi dengan DNS Server & Alternatif DNS Server yang ada pada setting DNS Tadi, OK

Pada Winbox Pilih Menu System – Clock

Time=(sesuaikan dengan zona waktu daerah anda) Date=(sesuaikan dengan tanggal terkini), Time Zone Name=Asia/Jakarta, OK.

CHANGE FIREWALL NAT

Pada Winbox Pilih Menu IP – Firewall – Tab NAT atau buka New Terminal dan ketik :

/ip firewall nat

add chain=srcnat src-address=192.168.0.0/24 out-interface=pppoe-speedy1 action=masquerade comment=” NAT from 192.168.0.0/24 output to To_speedy1”

add chain=srcnat src-address=192.168.0.2 out-interface=To_Local action=masquerade comment=” NAT from 192.168.0.2 output to to To_Local”

Sampai disini Anda seharusnya sudah bisa melakukan koneksi ke Internet, silahkan coba melakukan PING & Browsing

Share:

Read More