Cara Setting Mikrotik PPPoE

http://wirelessrouterproxy.blogspot.com/2011/09/cara-setting-mikrotik-pppoesupaya-bisa.html

Cara Setting Mikrotik PPPoE,Supaya Bisa Di remote dari jarak jauh atau di luar Jaringan

Label: Mikrotik

Biasanya Modem Dial up,nah sekarang kita buat mikrotiknya dial up dgn settingan PPPOE client,agar bisa di remote di luar jaringan.ok kita mulai

Langkah awal yaitu membuat modem menjadi bridge,seperti gambar di bawah ini:

http://wirelessrouterproxy.blogspot.com/search/label/Mikrotik



http://1.bp.blogspot.com/-2w40xZ5fHrg/TnMpCZ6i_DI/AAAAAAAAEVk/CpWWeJkNf2Q/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BMikrotik%2BPPPOE%252CSupaya%2BBisa%2BDi%2Bremote%2Bdari%2Bjarak%2Bjauh%2B%2Bawal.jpg

http://3.bp.blogspot.com/-KTZYLNh9rRc/TnMpnbF4gZI/AAAAAAAAEVs/s0TlALcLSCw/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BMikrotik%2BPPPOE%252CSupaya%2BBisa%2BDi%2Bremote%2Bdari%2Bjarak%2Bjauh%2B1.jpg

http://3.bp.blogspot.com/-H0ZuOSRBCyQ/TnMpt5buypI/AAAAAAAAEV0/8YzAn2In2Z0/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BMikrotik%2BPPPOE%252CSupaya%2BBisa%2BDi%2Bremote%2Bdari%2Bjarak%2Bjauh%2B2.jpg

http://2.bp.blogspot.com/-WGAaG5oxXtg/TnMp3Xe70WI/AAAAAAAAEV8/1q7-u9Pu6cE/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BMikrotik%2BPPPOE%252CSupaya%2BBisa%2BDi%2Bremote%2Bdari%2Bjarak%2Bjauh%2B3.jpg

http://4.bp.blogspot.com/-EXrVA-vmeFc/TnMp9NCGqgI/AAAAAAAAEWE/lOCZ5xVySHw/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BMikrotik%2BPPPOE%252CSupaya%2BBisa%2BDi%2Bremote%2Bdari%2Bjarak%2Bjauh%2B4.jpg

Selanjut remote Mikrotik anda menggunakan winbox dan Klik “Interface” kemudian di halaman “Interface list” klik tanda + dan pilih “PPPoE Client”,seperti gambar di bawah ini:

http://1.bp.blogspot.com/-tbNEr8V-350/TnMqC07MFTI/AAAAAAAAEWM/0MdZC5dWBdI/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BMikrotik%2BPPPOE%252CSupaya%2BBisa%2BDi%2Bremote%2Bdari%2Bjarak%2Bjauh%2B5.jpg

http://4.bp.blogspot.com/-tu-cb3eVZw8/TnMqMeQdDTI/AAAAAAAAEWU/HFE8lgrL7Hg/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BMikrotik%2BPPPOE%252CSupaya%2BBisa%2BDi%2Bremote%2Bdari%2Bjarak%2Bjauh%2B6.jpg

http://3.bp.blogspot.com/-YM7fhLlq85E/TnMqRB7Nb3I/AAAAAAAAEWc/plXxB5lRUVw/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BMikrotik%2BPPPOE%252CSupaya%2BBisa%2BDi%2Bremote%2Bdari%2Bjarak%2Bjauh%2B7.jpg

Selanjutnya di Tab general isi:name=”public”interface=”ether1” (ethernet yang kabel Lan nya nanti akan di colokkan di port ether1 Mikrotik ke modem,seperti gambar di bawah ini:

http://2.bp.blogspot.com/-vhTyZb1Qix0/TnMr0y5BczI/AAAAAAAAEWk/QHEyUFyc_jE/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BMikrotik%2BPPPOE%252CSupaya%2BBisa%2BDi%2Bremote%2Bdari%2Bjarak%2Bjauh%2B8.jpg

Selanjutnya di tab sebelahnya TAB “Dial Out” isi:user:”[email protected]” (ini bisa anda lihat di lembaran user speedy yang di berikan speedy kepada anda.password:” *********”(ini juga bisa anda lihat di lembaran user speedy yang di berikan speedy kepada anda, kemudian klik “OK”seperti gambar di bawah ini:

http://4.bp.blogspot.com/-mbKSDOtUSTg/TnMsb6Cbg9I/AAAAAAAAEWs/C002UoMPdSY/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BMikrotik%2BPPPOE%252CSupaya%2BBisa%2BDi%2Bremote%2Bdari%2Bjarak%2Bjauh%2B9.jpg

Selanjutnya beri nama untuk ethernet2 (ethernet yang akan di colokkan ke HUB) dengan nama “local” ,klik “interface” kemudian double klik ether2 dan ganti namanya dengan “local” (tanpa tanda kutip) Kemudian klik “OK”seperti gambar di bawah:

http://2.bp.blogspot.com/-_b-bUZ8-LU4/TnMsi2jZJRI/AAAAAAAAEW0/hEWjhlYcFek/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BMikrotik%2BPPPOE%252CSupaya%2BBisa%2BDi%2Bremote%2Bdari%2Bjarak%2Bjauh%2B10.jpg

Selanjutnya Set Ip untuk interface local (ethernet yang akan di colokkan ke HUB) ,klik “Ip’ kemudian “address” dan klik tanda + dan isi ip misalnya 192.168.34.1/24,Kemudian klik “OK”seperti gambar di bawah ini:

Langkah berikutnya restart mikrotik anda seperti gambar di bawah ini:

http://1.bp.blogspot.com/-liD8y7MeAVY/TnMsqOw7h-I/AAAAAAAAEW8/hckptZDb7Rw/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BMikrotik%2BPPPOE%252CSupaya%2BBisa%2BDi%2Bremote%2Bdari%2Bjarak%2Bjauh%2B11.jpg

http://1.bp.blogspot.com/-R8oYx-XIlRk/TnMsxmzlzSI/AAAAAAAAEXE/_aOPt9oyI5I/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BMikrotik%2BPPPOE%252CSupaya%2BBisa%2BDi%2Bremote%2Bdari%2Bjarak%2Bjauh%2B12.jpg

Kemudian Colokkan Ethernet1 ke Modem,dan Ethernet2 Mikrotik Ke HUB,dan Sebuah PC ke HUB,dan masukkan ip address di PC:Ip address=192.168.34.2Netmask=255.255.255.0Gateway=192.168.34.1DNS=203.130.193.74 (DNS sesuaikan dengan DNS speedy anda)Kemudian kembali remote winbox dan test ping di “New Terminal” contohnya ping yahoo.com jika reply berarti telah sukses seperti gambar di bawah ini:

http://1.bp.blogspot.com/-uCXpQb9kKwA/TnMs3QbCk0I/AAAAAAAAEXM/NyxGGSXSdeE/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BMikrotik%2BPPPOE%252CSupaya%2BBisa%2BDi%2Bremote%2Bdari%2Bjarak%2Bjauh%2B13.jpg

Selanjutnya test ping yahoo.com di cmd pc anda jika reply berarti telah konek ke internet dan silahkan browsing,seperti gambar di bawah ini:

Untuk me remote winbox dari jarak jauh atau di luar jaringan tinggal anda masukkan ip publicnya di winbox,untuk mengetahui ip publicnya buka winbox dan klik “Ip” kemudian “address” dan anda bisa lihat ip address yang statusnya “D” dan interface nya “public” ,ip address tersebut anda catat dan simpan nanti untuk di masukkan di winbox dari jarak jauh atau di luar jaringan,seperti gambar di bawah ini:

http://2.bp.blogspot.com/-dkwlrZ3c7zc/TnMs9NIoglI/AAAAAAAAEXU/abr3swrY4-w/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BMikrotik%2BPPPOE%252CSupaya%2BBisa%2BDi%2Bremote%2Bdari%2Bjarak%2Bjauh%2B14.jpg

http://3.bp.blogspot.com/-sdElPMEwT6o/TnMtEGWBLVI/AAAAAAAAEXc/p9BiuYbpRo0/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BMikrotik%2BPPPOE%252CSupaya%2BBisa%2BDi%2Bremote%2Bdari%2Bjarak%2Bjauh%2B15.jpg

Sekian dan selamat mencobaBagi anda yang menginginkan setting Mikrotik Full + Squid Proxy High Peforma silahkan hub 081371862723 a/n HUSNI (Bisa Di setting dari online atau dari jarak kauh).

http://2.bp.blogspot.com/-hzOgjwtpjQM/TnMtSlwuavI/AAAAAAAAEXk/QDC0nVKc0NQ/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BMikrotik%2BPPPOE%252CSupaya%2BBisa%2BDi%2Bremote%2Bdari%2Bjarak%2Bjauh%2B16.jpg

http://1.bp.blogspot.com/-1D2ymHM8ORs/TnMtZinVvsI/AAAAAAAAEXs/spEggQNKWCQ/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BMikrotik%2BPPPOE%252CSupaya%2BBisa%2BDi%2Bremote%2Bdari%2Bjarak%2Bjauh%2B17.jpg

Cara Setting Hit,Queues Tree,Mangle Mikrotik + Squid Proxy External (Lengkap)

Label: Mikrotik

Dengan Router Mikrotik di tambah Squid ProxyExternal seperti ubuntu,ClearOs,IpCop Dll…Performa akan menjadi mantab,apalagi menggunakan Squid Lusca…Cache semua pada di telan…Ok berikut ini saya post Cara Setting Hit,Queues Tree,Mangle Mikrotik + Squid Proxy External,Untuk Setting Squid nya nggak saya post karena…Ini Label Mikrotik,Untuk Setting squid lihat di label Squid,,,

Ip Addess MengarahMikrotik =192.168.0.5 Ke Modem (internet)Ip Address Mengarah Local =192.168.34.1 Ke ClientIp Address Mengarah Squid Proxy =192.168.35.1 Ke Squid Proxy

Ip Address Squid Proxy =192.168.35.2 Ip Squid Proxy External

Terobosan….:

1. Total bandwidth dari Modem (internet) 4 MB2. Client Download dari Modem dilimit dengan queue tree,jika file datanya telah

tersimpan di Squid Proxy maka otomatis tidak terlimit alias lepas Loss3. Untuk client yang download file seperti .flv .exe .rar .zip youtube dll…..dilimit 1

MB untuk semua file bagi rata,kecuali yang berbau bokep….bokep saya kasih 128 aja bagi rata…..nah…jika extention seperti .flv .exe .rar .zip youtube dll tersebut pernah di download…otomatis tersimpan di Squid proxy ..dan otomatis tidak terlimit extention tersebut…alias lepas loss….

4. Untuk ping ….ini perlu….bagi bagi client yang main poker,pointblank,atau game lainnya..saya gunakan queue tree juga…tapi tidak di limit…

5. Untuk Upload…tidak perlu di limit…demi kenyamanan pemain game


http://wirelessrouterproxy.blogspot.com/2011/06/cara-setting-hitqueues-treemangle.html

http://wirelessrouterproxy.blogspot.com/2011/06/cara-setting-hitqueues-treemangle.html

http://4.bp.blogspot.com/-ulg7F7aoWDg/TnLvOPJn5MI/AAAAAAAAEVM/_27AJxQAdm8/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BHit%252CQueues%2BTree%252CMangle%2BMikrotik%2B%252B%2BSquid%2BProxy%2BExternal%2B%2528Lengkap%2529%2Bawal.png

Berikut langkahnya dari awal…dari Router Mikrotik belum berisi..alias kosong…:

Kita mainkan di new terminal semua:

1. Set interface:

/interface set 0 name=public \;/interface set 1 name=local \;/interface set 2 name=proxy

2. Set Ip address (Sesuaikan Ip address dgn jaringan anda):

/ip address add address=192.168.0.5 \netmask=255.255.255.0 \interface=public \;/ip address add address=192.168.34.1 \netmask=255.255.255.0 \interface=local \;/ip address add address=192.168.35.1 \netmask=255.255.255.0 \interface=proxy

3. Set Gateway (Sesuaikan Gateway dengan gateway jaringan anda):

/ip route add gateway=192.168.0.1

4. Set DNS (sesuaikan DNS sengan jaringan anda):

A. Cara set DNS Untuk RB Os versi 4.XX kebawah:

/ip dns set primary-dns=203.130.208.18 \ ;/ip dns set secondary-dns=203.130.193.74 \allow-remote-requests=yes

B. Cara set DNS untuk RB Os versi 4.XX keatas:

/ip dns set servers=203.130.208.18,203.130.193.74 \allow-remote-requests=yes

5. Set Ip Firewall Nat …..termasuk nat untuk redirect ke proxy…saya gunakan port 3128 pada squid saya (ip addressnya sesuaikan dengan jaringan anda):

/ip firewall nat add chain=srcnat out-interface=public \src-address=192.168.34.0/24 action=masquerade \src-address-list="wirelessrouterproxy.blogspot.com client" \comment="LOCAL NAT MASQUERADE"

/ip firewall nat add chain=srcnat out-interface=public \src-address=192.168.35.0/24 action=masquerade \src-address-list="wirelessrouterproxy.blogspot.com proxy" \comment="PROXY NAT MASQUERADE"/ip firewall nat add action=dst-nat chain=dstnat \comment="REDIRECT KE PROXY" disabled=no \dst-port=80,8080,3128 in-interface=local \protocol=tcp src-address=!192.168.35.0/24 \to-addresses=192.168.35.2 to-ports=3128

/ip firewall nat add action=dst-nat \chain=dstnat comment="TRANSPARENT DNS UDP LOCAL" \disabled=no dst-port=53 in-interface=local \protocol=udp to-ports=53

/ip firewall nat add action=dst-nat \chain=dstnat disabled=no dst-port=53 in-interface=local \protocol=tcp to-ports=53 comment="TRANSPARENT DNS TCP LOCAL"

/ip firewall nat add action=dst-nat \chain=dstnat disabled=no dst-port=53 in-interface=proxy \protocol=udp to-ports=53 comment="TRANSPARENT DNS UDP PROXY"

/ip firewall nat add action=dst-nat \chain=dstnat disabled=no dst-port=53 in-interface=proxy \protocol=tcp to-ports=53 comment="TRANSPARENT DNS TCP PROXY"

6. Selanjutnya Keamanan jaringan :

/ip firewall filter add action=add-src-to-address-list \address-list="PORT SCANNER1" \address-list-timeout=2w chain=input \comment="PORT SCANNER2 KE ADDRESS \LIST " disabled=no protocol=tcp psd=21,3s,3,1

/ip firewall filter add action=add-src-to-address-list \address-list="PORT SCANNER2" address-list-timeout=2w \chain=input comment="NMAP FIN Stealth scan" disabled=no \protocol=tcp tcp-flags=fin,!syn,!rst,!psh,!ack,!urg

/ip firewall filter add action=add-src-to-address-list \address-list="PORT SCANNER3" address-list-timeout=2w \chain=input comment="SYN/FIN scan" disabled=no \protocol=tcp tcp-flags=fin,syn

/ip firewall filter add action=add-src-to-address-list \address-list="PORT SCANNER4" address-list-timeout=2w \chain=input comment="SYN/RST scan" disabled=no \protocol=tcp tcp-flags=syn,rst

/ip firewall filter add action=add-src-to-address-list \address-list="PORT SCANNER5" address-list-timeout=2w \chain=input comment="FIN/PSH/URG scan" disabled=no \protocol=tcp tcp-flags=fin,psh,urg,!syn,!rst,!ack

/ip firewall filter add action=add-src-to-address-list \address-list="PORT SCANNER6" address-list-timeout=2w \chain=input comment="ALL/ALL scan" disabled=no \protocol=tcp tcp-flags=fin,syn,rst,psh,ack,urg

/ip firewall filter add action=add-src-to-address-list \address-list="PORT SCANNER7" address-list-timeout=2w \chain=input comment="NMAP NULL scan" disabled=no \protocol=tcp tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg

/ip firewall filter add action=drop chain=input \comment="BLOK PORT SCANNER" disabled=no \src-address-list="PORT SCANNER1"

/ip firewall filter add action=accept chain=input \comment="IZINKAN MENDIRIKAN KONEKSI" \connection-state=established disabled=no

/ip firewall filter add action=accept chain=input \comment="IZINKAN KONEKSI TERKAIT" \connection-state=related disabled=no

/ip firewall filter add action=accept chain=input \comment="IZINKAN PING LOCAL" \disabled=no protocol=icmp \src-address-list=\"wirelessrouterproxy.blogspot.com client"

/ip firewall filter add action=accept chain=input \comment="IZINKAN PING PROXY" disabled=no \protocol=icmp src-address-list=\

"wirelessrouterproxy.blogspot.com proxy"

/ip firewall filter add action=accept chain=input \comment="IZINKAN INPUT DARI LOCAL" disabled=no \src-address-list="wirelessrouterproxy.blogspot.com client"

/ip firewall filter add action=accept chain=input \comment="IZINKAN INPUT DARI PROXY" disabled=no \src-address-list="wirelessrouterproxy.blogspot.com proxy"

/ip firewall filter add action=jump chain=forward \comment="FILTER PAKET YANG JELEK" disabled=no \jump-target=tcp protocol=tcp

/ip firewall filter add action=jump \chain=forward disabled=no jump-target=udp \protocol=udp

/ip firewall filter add action=jump \chain=forward disabled=no jump-target=icmp protocol=icmp

/ip firewall filter add action=drop chain=tcp \comment="TOLAK SMTP" disabled=no dst-port=25 \protocol=tcp

/ip firewall filter add action=drop chain=tcp \comment="TOLAK RPC2portmapper" disabled=no \dst-port=135 protocol=tcp

/ip firewall filter add action=drop chain=tcp \comment="TOLAK NBT" disabled=no dst-port=137-139 \protocol=tcp

/ip firewall filter add action=drop \chain=tcp comment="TOLAK CIFS" disabled=no \dst-port=445 protocol=tcp

/ip firewall filter add action=drop chain=tcp \comment="TOLAK NFS" disabled=no dst-port=2049 \protocol=tcp

/ip firewall filter add action=drop chain=tcp \comment="TOLAK NETBUS" disabled=no dst-port=20034 \protocol=tcp

/ip firewall filter add action=drop chain=tcp \

comment="TOLAK BackOriffice" disabled=no dst-port=\3133 protocol=tcp

/ip firewall filter add action=drop chain=tcp \comment="BLOK DHCP" disabled=no dst-port=67-68 \protocol=tcp/ip firewall filter add action=drop chain=tcp \comment="TOLAK P2P" disabled=no p2p=all-p2p

/ip firewall filter add action=drop chain=udp \comment="TOLAK TFTP" disabled=no dst-port=69 \protocol=udp

/ip firewall filter add action=drop chain=udp \comment="TOLAK PRC portmapper" disabled=no \dst-port=111 protocol=udp

/ip firewall filter add action=drop chain=udp \comment="TOLAK PRC portmapper" disabled=no \dst-port=135 protocol=udp

/ip firewall filter add action=drop chain=tcp \comment="TOLAK NETBUS" disabled=no \dst-port=12345-12346 protocol=tcp

/ip firewall filter add action=drop chain=udp \comment="BLOK NBT" disabled=no dst-port=137-139 \protocol=udp

/ip firewall filter add action=drop chain=udp \comment="BLOK NFS" disabled=no dst-port=2049 \protocol=udp

/ip firewall filter add action=drop \chain=udp comment="TOLAK BackOriffice" \disabled=no dst-port=3133 protocol=udp

/ip firewall filter add action=accept chain=icmp \comment="limit packets 5/secs" disabled=no \icmp-options=0:0-255 limit=5,5 protocol=icmp

/ip firewall filter add action=accept chain=icmp \comment="limit packets 5/secs" disabled=no \icmp-options=3:0 protocol=icmp

/ip firewall filter add action=accept \

chain=icmp comment="limit packets 5/secs" \disabled=no icmp-options=3:3 limit=5,5 protocol=icmp

/ip firewall filter add action=accept chain=icmp \comment="limit packets 5/secs" disabled=no \icmp-options=3:4 limit=5,5 protocol=icmp

/ip firewall filter add action=accept chain=icmp \comment="limit packets 5/secs" disabled=no \icmp-options=8:0-255 limit=5,5 protocol=icmp

/ip firewall filter add action=accept \chain=icmp comment="limit packets 5/secs" \disabled=no icmp-options=11:0-255 limit=5,5 protocol=icmp

/ip firewall filter add action=accept chain=forward \comment="Allow Established connections" \connection-state=established disabled=no

/ip firewall filter add action=accept chain=forward \comment="Allow Forward from LOCAL Network" \disabled=no src-address-list=\"wirelessrouterproxy.blogspot.com client"

/ip firewall filter add action=accept chain=forward \comment="Allow Forward from PROXY Network" \disabled=no src-address-list=\"wirelessrouterproxy.blogspot.com proxy"

7. Selanjutnya buat address list untuk client anda…tujuannya hanya ip address yang di buat ini yang bisa terkoneksi ke internet…jika client anda melebihi sebanayak yang terdaftar di bawah ini…silahkan di tambah..sesuai dgn jumlah client anda….(Sesuaikan ip addresnya dengan jaringan anda): /ip firewall address-list \add address=192.168.35.2 \comment="SQUID PROXY EXTERNAL" \disabled=no list=\"wirelessrouterproxy.blogspot.com proxy"

/ip firewall address-list \add address=192.168.34.2 \comment="CLIENT1" \disabled=no list=\

"wirelessrouterproxy.blogspot.com client"

/ip firewall address-list \add address=192.168.34.3 \comment="CLIENT2" \disabled=no list=\"wirelessrouterproxy.blogspot.com client"







/ip firewall address-list \add address=192.168.34.10 \

comment="CLIENT9" \disabled=no list=\"wirelessrouterproxy.blogspot.com client"



8. Selanjutnya Firwall layer7,yang nanti nya untuk limit .exe .zip .rar dll:

/ip firewall layer7-protocol add name=YOUTUBE regexp="http/(0\\.9|1\\.0|1\\.1)[\\x09-\\x0d ][1-5][0-9][0\ -9][\\x09-\\x0d -~]*(content-type: video)"

/ip firewall layer7-protocol add name="EXE" \regexp="\\.(exe)"

/ip firewall layer7-protocol add name="RAR" \regexp="\\.(rar)"

/ip firewall layer7-protocol add name="7z" \regexp="\\.(7z)"

/ip firewall layer7-protocol add name="CAB" \regexp="\\.(cab)"

/ip firewall layer7-protocol add name="ASF" \regexp="\\.(asf)"

/ip firewall layer7-protocol add name="MOV" \regexp="\\.(mov)"

/ip firewall layer7-protocol add name="WMV" \regexp="\\.(wmv)"

/ip firewall layer7-protocol add name="MPG" \regexp="\\.(mpg)"

/ip firewall layer7-protocol add name="MPEG" \regexp="\\.(mpeg)"

/ip firewall layer7-protocol add name="MKV" \regexp="\\.(mkv)"

/ip firewall layer7-protocol add name="ZIP" \regexp="\\.(zip)"

/ip firewall layer7-protocol add name="AVI" \regexp="\\.(avi)"

/ip firewall layer7-protocol add name="FLV" \regexp="\\.(flv)"

/ip firewall layer7-protocol add name="WAV" \regexp="\\.(wav)"

/ip firewall layer7-protocol add name="RM" \regexp="\\.(rm)"

/ip firewall layer7-protocol add name="MP3" \regexp="\\.(mp3)"

/ip firewall layer7-protocol add name="MP4" \regexp="\\.(mp4)"

/ip firewall layer7-protocol add name="RAM" \regexp="\\.(ram)"

/ip firewall layer7-protocol add name="RMVB" \regexp="\\.(rmvb)"

/ip firewall layer7-protocol add name="DAT" \regexp="\\.(dat)"

/ip firewall layer7-protocol add name="DAA" \regexp="\\.(daa)"

/ip firewall layer7-protocol add name="ISO" \regexp="\\.(iso)"

/ip firewall layer7-protocol add name="NRG" \regexp="\\.(nrg)"

/ip firewall layer7-protocol add name="BIN" \

regexp="\\.(bin)"

/ip firewall layer7-protocol add name="VCD" \regexp="\\.(vcd)"

9. Selanjutanya Mangle…….

A. Mangle Suid Hit:

/ip firewall mangle add action=mark-packet \chain=forward comment="SQUID PROXY HIT" \disabled=no dscp=12 \new-packet-mark="PROXY HIT" passthrough=no Mangle Squid koneksi dan squid Paket:

/ip firewall mangle add action=mark-connection \chain=prerouting comment="BROWSING SQUID" disabled=no \dst-address-list="!wirelessrouterproxy.blogspot.com client" \dst-port=80,443 new-connection-mark="SQUID KONEKSI" \passthrough=yes protocol=tcp \src-address-list="wirelessrouterproxy.blogspot.com proxy"

/ip firewall mangle add action=mark-packet \chain=forward comment="SQUID PAKET" \connection-mark="SQUID KONEKSI" disabled=no \new-packet-mark="SQUID PAKET" passthrough=no

B. Mangle Semua koneksi masuk dan koneksi keluar:

/ip firewall mangle add action=mark-connection \chain=prerouting comment="TANDA SEMUA KONEKSI" disabled=no \dst-address-list="!wirelessrouterproxy.blogspot.com client" \in-interface=local new-connection-mark="SEMUA KONEKSI MASUK" \passthrough=yes

/ip firewall mangle add action=mark-connection \chain=forward disabled=no \new-connection-mark="SEMUA KONEKSI KELUAR" \out-interface=local passthrough=yes \src-address-list="!wirelessrouterproxy.blogspot.com client" \comment="SEMUA KONEKSI KELUAR"

/ip firewall mangle add chain=prerouting \action=mark-packet new-packet-mark="SEMUA PAKET_MASUK"\

passthrough=yes connection-mark="SEMUA KONEKSI MASUK" \comment="SEMUA PAKET MASUK"

/ip firewall mangle add chain=forward \action=mark-packet new-packet-mark="SEMUA PAKET KELUAR" \ passthrough=yes connection-mark="SEMUA KONEKSI KELUAR" comment="SEMUA PAKET KELUAR"

C. Mangle Browsing koneksi yang koneksi dari semua koneksi masuk:

/ip firewall mangle add action=mark-connection chain=prerouting \comment="BROWSING CLIENT" \connection-mark="SEMUA KONEKSI MASUK" disabled=no \new-connection-mark="BROWSING KONEKSI" \passthrough=yes protocol=tcp

D. Mangle Koneksi ICMP dengan dscp1:

/ip firewall mangle add action=mark-connection \chain=postrouting disabled=no dscp=1 \new-connection-mark="ICMP KONEKSI" passthrough=yes \comment="ICMP KOMEKSI"

E. Mangle Game koneksi yang koneksi dari semua koneksi masuk:F. Mangle Pointblank,Poker,dan RF online,jika anda ingin memasukkan game

lainnya silahkan cari port game tersebut:

/ip firewall mangle add action=mark-connection \chain=prerouting comment="POINT BLANK" \connection-mark="SEMUA KONEKSI MASUK" \disabled=no dst-port=40000-40010 \new-connection-mark="GAME KONEKSI" \passthrough=yes protocol=udp

/ip firewall mangle add action=mark-connection \chain=prerouting comment="POKER" \connection-mark="SEMUA KONEKSI MASUK" \disabled=no dst-port=9339,843 \new-connection-mark="GAME KONEKSI" \passthrough=yes protocol=tcp

/ip firewall mangle add action=mark-connection \chain=prerouting comment="RF ONLINE" \connection-mark="SEMUA KONEKSI MASUK" disabled=no \dst-port=10001,10002,10003,10004,10005,10006,10007 \

new-connection-mark="GAME KONEKSI" \passthrough=yes protocol=udp

G. Mangle ICMP PAKET:

/ip firewall mangle add action=mark-packet \chain=postrouting connection-mark="ICMP KONEKSI" \disabled=no new-packet-mark="ICMP PAKET" passthrough=no \comment="ICMP PAKET"

H. Selanjutnya mangle Game Paket:

/ip firewall mangle add action=mark-packet \chain=forward comment="SEMUA GAME DIPAKETKAN" \connection-mark="GAME KONEKSI" disabled=no \new-packet-mark="GAME PAKET" passthrough=no

I. Selanjutnya Bowsing paket:

/ip firewall mangle add action=mark-packet \chain=forward comment="BROWSING PAKET" \connection-bytes=0-131072 \connection-mark="BROWSING KONEKSI" \disabled=no new-packet-mark="BROWSING PAKET" \passthrough=no protocol=tcp

J. Change dscp ICMP dan Port 53:

/ip firewall mangle add action=change-dscp \chain=postrouting comment="ICMP CHANGE DSCP" \disabled=no new-dscp=1 protocol=icmp

/ip firewall mangle add action=change-dscp \chain=postrouting disabled=no dst-port=53 new-dscp=1 \protocol=udp

/ip firewall mangle add action=change-dscp \chain=postrouting disabled=no dst-port=53 new-dscp=1 \protocol=tcp

K. Mangle Extention file seperti .zip .rar .flv .exe dll :

/ip firewall mangle add action=mark-connection \chain=forward comment="EXTENTION KONEKSI" \disabled=no in-interface=local \new-connection-mark="EXTENTION KONEKSI" \

passthrough=yes

/ip firewall mangle add action=mark-packet \chain=forward comment="YOUTUBE MARK" \connection-mark="EXTENTION KONEKSI" disabled=no \new-packet-mark="YOUTUBE" passthrough=no

/ip firewall mangle add action=mark-packet \chain=forward comment="WMV MARK" \connection-mark="EXTENTION KONEKSI" disabled=no \new-packet-mark="WMV" passthrough=no

/ip firewall mangle add action=mark-packet \chain=forward comment="EXE MARK" \connection-mark="EXTENTION KONEKSI" disabled=no \new-packet-mark="EXE" passthrough=no

/ip firewall mangle add action=mark-packet \chain=forward comment="ZIP MARK" \connection-mark="EXTENTION KONEKSI" \new-packet-mark="ZIP" passthrough=no

/ip firewall mangle add action=mark-packet \chain=forward comment="RAR MARK" \connection-mark="EXTENTION KONEKSI" \new-packet-mark="RAR" passthrough=no

/ip firewall mangle add action=mark-packet \chain=forward comment="MPG MARK" \connection-mark="EXTENTION KONEKSI" \new-packet-mark="MPG" passthrough=no

/ip firewall mangle add action=mark-packet \chain=forward comment="MPEG MARK" \connection-mark="EXTENTION KONEKSI" \new-packet-mark="MPEG" passthrough=no

/ip firewall mangle add action=mark-packet \chain=forward comment="MP3 MARK" \connection-mark="EXTENTION KONEKSI" \new-packet-mark="MP3" passthrough=no

/ip firewall mangle add action=mark-packet \chain=forward comment="MOV MARK" \connection-mark="EXTENTION KONEKSI" \new-packet-mark="MOV" passthrough=no

/ip firewall mangle add action=mark-packet \chain=forward comment="ISO MARK" disabled=no \connection-mark="EXTENTION KONEKSI" \new-packet-mark="ISO" \passthrough=no

/ip firewall mangle add action=mark-packet \chain=forward comment="MKV MARK" \connection-mark="EXTENTION KONEKSI" \new-packet-mark="MKV" passthrough=no

/ip firewall mangle add action=mark-packet \chain=forward comment="FLV MARK" \connection-mark="EXTENTION KONEKSI" \new-packet-mark="FLV" passthrough=no

/ip firewall mangle add action=mark-packet \chain=forward comment="AVI MARK" \connection-mark="EXTENTION KONEKSI" \new-packet-mark="AVI" passthrough=no

/ip firewall mangle add action=mark-packet \chain=forward comment="CAB MARK" \connection-mark="EXTENTION KONEKSI" \new-packet-mark="CAB" passthrough=no

/ip firewall mangle add action=mark-packet \chain=forward comment="ASF MARK" \connection-mark="EXTENTION KONEKSI" \new-packet-mark="ASF" passthrough=no

/ip firewall mangle add action=mark-packet \chain=forward comment="WAV MARK" \connection-mark="EXTENTION KONEKSI" \new-packet-mark="WAV" passthrough=no

/ip firewall mangle add action=mark-packet \chain=forward comment="RM MARK" \connection-mark="EXTENTION KONEKSI" \new-packet-mark="RM" passthrough=no

/ip firewall mangle add action=mark-packet \chain=forward comment="RAM MARK" \connection-mark="EXTENTION KONEKSI" \new-packet-mark="RAM" passthrough=no

/ip firewall mangle add action=mark-packet \chain=forward comment="RMVB MARK" \connection-mark="EXTENTION KONEKSI" \new-packet-mark="RMVB" passthrough=no

/ip firewall mangle add action=mark-packet \chain=forward comment="DAT MARK" \connection-mark="EXTENTION KONEKSI" \new-packet-mark="DAT" passthrough=no

/ip firewall mangle add action=mark-packet \chain=forward comment="DAA MARK" \connection-mark="EXTENTION KONEKSI" \new-packet-mark="DAA" passthrough=no

/ip firewall mangle add action=mark-packet \chain=forward comment="NRG MARK" \connection-mark="EXTENTION KONEKSI" \new-packet-mark="NRG" passthrough=no

/ip firewall mangle add action=mark-packet \chain=forward comment="BIN MARK" \connection-mark="EXTENTION KONEKSI" \new-packet-mark="BIN" passthrough=no

/ip firewall mangle add action=mark-packet \chain=forward comment="VCD MARK" \connection-mark="EXTENTION KONEKSI" \new-packet-mark="VCD" passthrough=no

L. Mangle Paket client (sesuaikan Ip addressnya dengan ip address client jaringan anda):

/ip firewall mangle add action=mark-packet \chain=forward comment="CLIENT1" \connection-mark="SEMUA KONEKSI KELUAR" \disabled=no dst-address=192.168.34.2 \new-packet-mark="CLIENT1" \passthrough=no protocol=tcp

/ip firewall mangle add action=mark-packet \chain=forward comment="CLIENT2" \connection-mark="SEMUA KONEKSI KELUAR" \disabled=no dst-address=192.168.34.3 \new-packet-mark="CLIENT2" \

passthrough=no protocol=tcp







/ip firewall mangle add action=mark-packet \chain=forward comment="CLIENT9" \

connection-mark="SEMUA KONEKSI KELUAR" \disabled=no dst-address=192.168.34.10 \new-packet-mark="CLIENT9" \passthrough=no protocol=tcp



10. Queue Tree

A. Queue tree ICMP prioritas ke 1:

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s disabled=no \limit-at=0 max-limit=0 name="ICMP PING" \packet-mark="ICMP PAKET" parent=public priority=1 \queue="default"

B. Queue Squid Hit Prioritas ke 2:

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s disabled=no \limit-at=0 max-limit=0 name="SQUID HIT" \packet-mark="PROXY HIT" parent=local priority=2 \queue=default

C. Queue Limit Extention prioritas ke 3 (jika anda ingin melimit yang berbeda silahkan ubah max-limitnya):

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=1000000 \name="LIMIT FILE EXTENTION" parent=global-out priority=3

/queue tree add burst-limit=0 \

burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=128000 \name="AVI" packet-mark=AVI parent="LIMIT FILE EXTENTION" \priority=3 queue=default

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=0 \name="EXE" packet-mark="EXE" parent="LIMIT FILE EXTENTION" \priority=3 queue=default

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=128000 \name="FLV" packet-mark="FLV" parent="LIMIT FILE EXTENTION" \priority=3 queue=default

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=0 \name="YOUTUBE" packet-mark="YOUTUBE" \parent="LIMIT FILE EXTENTION" priority=3 queue=default

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=0 \name="ISO" packet-mark=iso parent="LIMIT FILE EXTENTION" \priority=3 queue=default

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=0 name="MP3" \packet-mark="MP3" parent="LIMIT FILE EXTENTION" \priority=3 queue=default

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=0 name="MP4" \packet-mark="MP4" parent="LIMIT FILE EXTENTION" \priority=3 queue=default

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=128000 \name="MPEG" packet-mark="MPEG" parent="LIMIT FILE EXTENTION" \priority=3 queue=default

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=128000 \name="MPG" packet-mark="MPG" parent="LIMIT FILE EXTENTION" \priority=3 queue=default

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=0 \name="RAR" packet-mark="RAR" parent="LIMIT FILE EXTENTION" \priority=3 queue=default

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=128000 \name="WMV" packet-mark="WMV" \parent="LIMIT FILE EXTENTION" priority=3 queue=default

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=0 \name="ZIP" packet-mark="ZIP" parent="LIMIT FILE EXTENTION" \priority=3 queue=default

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=0 \name="CAB" packet-mark="CAB" parent="LIMIT FILE EXTENTION" \priority=3 queue=default

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=0 \name="ASF" packet-mark="ASF" parent="LIMIT FILE EXTENTION" \priority=3 queue=default

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=0 \name="MOV" packet-mark="MOV" parent="LIMIT FILE EXTENTION" \priority=3 queue=default

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=0 \

name="MKV" packet-mark="MKV" parent="LIMIT FILE EXTENTION" \priority=3 queue=default

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=0 \name="WAV" packet-mark="WAV" parent="LIMIT FILE EXTENTION" \priority=3 queue=default

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=0 \name="RM" packet-mark="RM" parent="LIMIT FILE EXTENTION" \priority=3 queue=default

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=0 \name="RAM" packet-mark="RAM" parent="LIMIT FILE EXTENTION" \priority=3 queue=default

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=0 \name="RMVB" packet-mark="RMVB" parent="LIMIT FILE EXTENTION" \priority=3 queue=default

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=0 \name="DAT" packet-mark="DAT" parent="LIMIT FILE EXTENTION" \priority=3 queue=default

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=0 \name="DAA" packet-mark="DAA" parent="LIMIT FILE EXTENTION" \priority=3 queue=default

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=0 \name="NRG" packet-mark="NRG" parent="LIMIT FILE EXTENTION" \priority=3 queue=default

/queue tree add burst-limit=0 \

burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=0 \name="BIN" packet-mark="BIN" parent="LIMIT FILE EXTENTION" \priority=3 queue=default

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=0 \name="VCD" packet-mark="VCD" parent="LIMIT FILE EXTENTION" \priority=3 queue=default

D. Queue tree Semua Upload Prioritas ke 4 :

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=0 \name="+++TOTAL UPLOAD+++" \packet-mark="SEMUA PAKET MASUK" \parent=public priority=4 queue=default

E. Total download Prioritas ke 5 :

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=0 \name="+++TOTAL DOWNLOAD+++" packet-mark="SEMUA PAKET KELUAR" \parent=global-out priority=5

F. Game download Prioritas ke 6 :

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=0 \name="GAME DOWNLOAD" packet-mark="GAME PAKET" \parent="+++TOTAL DOWNLOAD+++" priority=6 \queue=default

G. Queue Browsing Paket Priority ke 7

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s \disabled=no limit-at=0 max-limit=0 \name="BROWSING PAKET" packet-mark="BROWSING PAKET" \parent="+++TOTAL DOWNLOAD+++" priority=7 queue=default

Queue tree Total download client priority8

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s disabled=no \limit-at=0 max-limit=0 name="+++TOTAL DOWNLOAD CLIENT+++" \parent="+++TOTAL DOWNLOAD+++" priority=8

H. Queue tree client priority8

/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s disabled=no limit-at=0 \max-limit=0 name="CLIENT1" packet-mark="CLIENT1" \parent="+++TOTAL DOWNLOAD CLIENT+++" priority=8 queue=default







/queue tree add burst-limit=0 \burst-threshold=0 burst-time=0s disabled=no limit-at=0 \max-limit=0 name="CLIENT8" packet-mark="CLIENT8" \

parent="+++TOTAL DOWNLOAD CLIENT+++" priority=8 queue=default




Sekarang percobaan …..saya coba youtube Buka youtube.com..dan cari video kesukaan anda..yang belum pernah di putar..dan belum pernah di cache squid external proxy anda,seperti gambar di bawah ini:

Video terlimit….Limit Extention nya merah …kemudian Static youtube nya ..penuh sampai 1 MB Avg rate nya,lihat gambar di bawah ini:

http://3.bp.blogspot.com/-Dwa9tdlMpgU/Tf9ZSeBcVGI/AAAAAAAAD_k/pe5yxavyL2M/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BHit%252CQueues%2BTree%252CMangle%2BMikrotik%2B%252B%2BSquid%2BProxy%2BExternal%2B%2528Lengkap%2529%2B1.png

http://1.bp.blogspot.com/-M_uSTwAkYjw/Tf-VSRlqKmI/AAAAAAAAD_0/ESVPH2JL7uQ/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BHit%252CQueues%2BTree%252CMangle%2BMikrotik%2B%252B%2BSquid%2BProxy%2BExternal%2B%2528Lengkap%2529%2B2.png

Tunggu videonya berbutar sampai selesai…squid external proxy akan menyimpan content tersebutsampai selesai seperti gambar di bawah ini:

Biasanya mozilla firefox juga mempunya cache…untuk memastikan cache tersebut telah tersimpan di squid external proxy …maka hapus cache mozilla firefox,seperti gambar di bawah ini:

http://4.bp.blogspot.com/-_Ywkv9PCTAc/Tf9ZcWLJr0I/AAAAAAAAD_s/6oEakAJ7MVo/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BHit%252CQueues%2BTree%252CMangle%2BMikrotik%2B%252B%2BSquid%2BProxy%2BExternal%2B%2528Lengkap%2529%2B2.png

http://1.bp.blogspot.com/-8-eCEobHR4Q/Tf-VbnydM5I/AAAAAAAAD_8/tL6ZPSGKJ88/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BHit%252CQueues%2BTree%252CMangle%2BMikrotik%2B%252B%2BSquid%2BProxy%2BExternal%2B%2528Lengkap%2529%2B4.png

http://2.bp.blogspot.com/-DZ_xZJOzc3c/Tf-Vq1Z1QLI/AAAAAAAAEAE/ZqjyeLAcz5U/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BHit%252CQueues%2BTree%252CMangle%2BMikrotik%2B%252B%2BSquid%2BProxy%2BExternal%2B%2528Lengkap%2529%2B5.png

Pilih everityng dan clear now,seperti gambar di bawah ini:

Sekarang tutup mozilla firefox anda….dan buka kembali youtube.com..selanjutnya cari video yang tadi…dan putar…terlihat bahwa video tersebut telah tercache di squid proxy…loading streamingnya jauh mendahului play video tersebut…seperti tanda panah gambar di bawah ini:

http://3.bp.blogspot.com/-RTvMPefD0io/Tf-VzNxZbdI/AAAAAAAAEAM/NA8ccy_thY8/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BHit%252CQueues%2BTree%252CMangle%2BMikrotik%2B%252B%2BSquid%2BProxy%2BExternal%2B%2528Lengkap%2529%2B6.png

Kemudian secara bersamaan video itu terputar…buka winbox…dan lihat queue tree untuk limit extention…di bawah ini bias dilihat…bahwa video youtube tersebut tidak terlimit…karena sudah ada tersimpan di cache squid external proxy anda…

Klik Gambar Untuk Memperjelas!!!

gimana pendapat anda?apakah ini yang anda cari?.....

---Propesi anda milik anda...Saya menyediakan Setting Mikrotik,Squid,Wireless dll....Hub... 081371862723 a/n HUSNI

--Selamat Mencoba--

---SILAHKAN BERI KOMENTAR DI BAWAH INI------DAN BERTANYA BILA BELUM PAHAM---

http://1.bp.blogspot.com/-4M0LQUObiRE/Tf-V7Jor2yI/AAAAAAAAEAU/rBKoBJOZ8Ic/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BHit%252CQueues%2BTree%252CMangle%2BMikrotik%2B%252B%2BSquid%2BProxy%2BExternal%2B%2528Lengkap%2529%2B7.png

http://2.bp.blogspot.com/-qukJPTP_P3k/Tf-WDRsXofI/AAAAAAAAEAc/_i9Lnr3luis/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BHit%252CQueues%2BTree%252CMangle%2BMikrotik%2B%252B%2BSquid%2BProxy%2BExternal%2B%2528Lengkap%2529%2B8.png

Cara Setting Load Balance Mikrotik ( 3 Modem di gabungkan dalam satu Mikrotik Router)

Label: Mikrotik

--Jika anda mempunyai 3 buah modem kemudian anda ingin gabungkan menjadi satu dengan mikrotik router, berikut ini cara settingnya:

--Remote Mikrotik Router anda dengan Winbox,download winbox ((DI SINI))--Di halaman utama winbox pilih “New Terminal” kemudian beri nama interface ether0,ether1,ether2,ether3 dengan perintah:

/interface print

/interface set 0 name=modem1;/interface set 1 name=modem2;/interface set 2 name=modem3;/interface set 3 name=local

Seperti gambar di bawah ini:

--Masukkan ip address untuk modem1,modem2,modem3,dal local (untuk local ip addressnya ciptaan sendiri),dengan perintah:

/ip address add address=192.168.11.2 netmask=255.255.255.0 interface=modem1;/ip

http://ixp.mikrotik.co.id/download/winbox-2.2.15.exe


http://wirelessrouterproxy.blogspot.com/2011/03/cara-setting-load-balance-mikrotik-3.html

http://wirelessrouterproxy.blogspot.com/2011/03/cara-setting-load-balance-mikrotik-3.html

http://4.bp.blogspot.com/-6cxThNKW6u0/TnMG0o6IWrI/AAAAAAAAEVU/CHNGZuHgx_U/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BLoad%2BBalance%2BMikrotik%2B%2B3%2BModem%2B-%2BAwal.png

http://2.bp.blogspot.com/-7F-3b3u9c_g/TZGCQHpuv-I/AAAAAAAADQ0/UGmvTPi-dLw/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BLoad%2BBalance%2BMikrotik%2B%2B3%2BModem%2B-%2B1.jpg

address add address=192.168.12.2 netmask=255.255.255.0 interface=modem2;/ip address add address=192.168.13.2 netmask=255.255.255.0 interface=modem3;/ip address add address=192.168.99.1 netmask=255.255.255.0 interface=local


--Kemudian masukkan gateway untuk modem1,modem2,modem3 dengan perintah:

/ip route add dst-address=0.0.0.0/0 gateway=192.168.11.1 distance=1 check-gateway=ping;/ ip route add dst-address=0.0.0.0/0 gateway=192.168.12.1 distance=1 check-gateway=ping;/ip route add dst-address=0.0.0.0/0 gateway=192.168.13.1 distance=1 check-gateway=ping


--Kemudian masukkan DNS,dengan perintah:

/ip dns set servers=203.130.193.74,203.130.208.18 allow-remote-request=yes

Jika timbul keterangan bad argument name servers (line 1 column 13) maka ubah perintahnya seperti di bawah ini:

/ip dns set primary-dns=203.130.193.74;/ip dns set secondary-dns=203.130.208.18 allow-remote-request=yes

http://1.bp.blogspot.com/-C_8HAbyo-48/TZGCWE-RQhI/AAAAAAAADQ8/4rrTZiw3alw/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BLoad%2BBalance%2BMikrotik%2B%2B3%2BModem%2B-%2B2.jpg

http://2.bp.blogspot.com/-r1I1MQAfHGE/TZGCct8ki_I/AAAAAAAADRE/xXYGCUiw7GA/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BLoad%2BBalance%2BMikrotik%2B%2B3%2BModem%2B-%2B3.jpg


--Kemudian masukkan NAT untuk modem1,modem2,modem3,dengan perintah:

/ip firewall nat add chain=srcnat out-interface=modem1 action=masquerade;/ ip firewall nat add chain=srcnat out-interface=modem2 action=masquerade;/ip firewall nat add chain=srcnat out-interface=modem3 action=masquerade


--Kemudian Address-list,dengan perintah:

/ip firewall address-list add address=192.168.11.0/24 list=lokal;/ ip firewall address-list add address=192.168.12.0/24 list=lokal;/ip firewall address-list add address=192.168.13.0/24 list=lokal;/ip firewall address-list add address=192.168.99.0/24 list=lokal


http://4.bp.blogspot.com/-VfLC1hkcdWk/TZGCi4j1x6I/AAAAAAAADRM/TrySaHcBziI/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BLoad%2BBalance%2BMikrotik%2B%2B3%2BModem%2B-%2B4.jpg

http://2.bp.blogspot.com/-xvdJdJGPWDg/TZGCpI4WWBI/AAAAAAAADRU/6vRFhlu0iag/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BLoad%2BBalance%2BMikrotik%2B%2B3%2BModem%2B-%2B5.jpg

--Kemudian Mangle Traffic lokal,dengan perintah:

/ip firewall mangle add action=accept chain=prerouting dst-address-list=lokal in-interface=local comment=”traffic_local”/ip firewall mangle add action=accept chain=output dst-address-list=lokal


--Kemudian Buat Mangle untuk Mark-Connection Traffic ,Dengan perintah:

/ip firewall mangle add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=modem1 new-connection-mark=con-from-modem1 passthrough=yes comment=”Traffic_modem1”;/ip firewall mangle add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=modem2 new-connection-mark=con-from-modem2 passthrough=yes comment=”Traffic_modem2”;/ip firewall mangle add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=modem3 new-connection-mark=con-from-modem3 passthrough=yes comment=”Traffic_modem3”


http://2.bp.blogspot.com/-QxsgQqLTYLI/TZGCuUCBLnI/AAAAAAAADRc/Li1w8Nrix-o/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BLoad%2BBalance%2BMikrotik%2B%2B3%2BModem%2B-%2B6.jpg

http://3.bp.blogspot.com/-tVNFCWSdkw4/TZGCzjJteuI/AAAAAAAADRk/b0vc2PYN0_Q/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BLoad%2BBalance%2BMikrotik%2B%2B3%2BModem%2B-%2B7.jpg

--Kemudian buat Mangle supaya traffic DNS melewati Gateway ISP modem1,modem2,modem3 ….bukan dari gateway yang lain….perintahnya:

/ip firewall mangle add action=mark-connection chain=output comment=dns dst-address=203.130.193.74 dst-port=53 new-connection-mark=dns passthrough=yes protocol=tcp /ip firewall mangle add action=mark-connection chain=output dst-address=203.130.193.74 dst-port=53 new-connection-mark=dns passthrough=yes protocol=udp/ip firewall mangle add action=mark-routing chain=output connection-mark=dns new-routing-mark=route-to-modem1 passthrough=no


--Kemudian buat Routing BackUp,gunanya bila di antara 3 modem tersebut ada sebuah modem yang nggak konek maka semua koneksi akan melewati gateway yang masih konek internet,perintahnya:

/ip route add check-gateway=ping dst-address=0.0.0.0/0 gateway=192.168.11.1 routing-mark=route-to-modem1 distance=1/ip route add check-gateway=ping dst-address=0.0.0.0/0 gateway=192.168.12.1 routing-

http://1.bp.blogspot.com/-RZsYJcj4-_M/TZGC-AB93gI/AAAAAAAADRs/H_CYW_IF7nI/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BLoad%2BBalance%2BMikrotik%2B%2B3%2BModem%2B-%2B8.jpg

http://4.bp.blogspot.com/-fUryZcHPr74/TZGDD_iJjbI/AAAAAAAADR0/oksSFN3l324/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BLoad%2BBalance%2BMikrotik%2B%2B3%2BModem%2B-%2B9.jpg

mark=route-to-modem1 distance=2/ip route add check-gateway=ping dst-address=0.0.0.0/0 gateway=192.168.13.1 routing-mark=route-to-modem1 distance=3/ip route add check-gateway=ping dst-address=0.0.0.0/0 gateway=192.168.12.1 routing-mark=route-to-modem2 distance=1/ip route add check-gateway=ping dst-address=0.0.0.0/0 gateway=192.168.11.1 routing-mark=route-to-modem2 distance=2/ip route add check-gateway=ping dst-address=0.0.0.0/0 gateway=192.168.11.1 routing-mark=route-to-modem2 distance=3


--Cara Setting Load Balance Mikrotik ( 3 Modem di gabungkan dalam satu Mikrotik Router) Telah selesai-------------------Selamat Mencoba--

---SILAHKAN BERI KOMENTAR DI BAWAH INI------DAN BERTANYA BILA BELUM PAHAM---

Bagi anda yang ingin Mendirikan interrnet share,saya menyediakan paket hemat 1 Paket Access Point dan 1 Paket Station Client,Langsung Instalasi Ketempat Untuk Seluruh Indonesia,Berikut Di bawah Paket Hemat yang saya sediakan....Baca Selengkapnya...

http://wirelessrouterproxy.blogspot.com/2011/03/paket-hemat-internet-share-langsung-di.html

http://2.bp.blogspot.com/-kdmYrsSXExk/TZGDKNIONsI/AAAAAAAADR8/_W8U1BK9eB4/s1600/www.wirelessrouterproxy.blogspot.com%2B-%2BCara%2BSetting%2BLoad%2BBalance%2BMikrotik%2B%2B3%2BModem%2B-%2B10.jpg

Cara Setting Mikrotik PPPoE

Documents