Video MikroTik Static Route

Akhir-akhir ini lagi rajin membuat video tutorial rencananya sih pengen di upload semua semoga tutorial singkat saya ini mudah dipahami, untuk bertanya-tanya atau sekedar kenalan bisa email saya di ans.nasrun@gmail.com atau mention ke twitter @ansharitkj. Selamat Menikmati

Read More

Bandwidth Management Mikrotik Menggunakan PCQ Equal

Sebelumnya saya telah membahas bagaimana Cara Block Open Recursive DNS di Mikrotik kali AnshariTKJ.com akan membahas bagaimana cara mengatur bandwidth di mikrotik menggunakan PCQ Equal.

Konfigurasi PCQ:

[admin@anshari] /queue type>
add  name="512kbps_Download" kind=pcq pcq-rate=512k pcq-limit=50 pcq-classifier=dst-address pcq-total-limit=2000\
     pcq-burst-rate=0 pcq-burst-threshold=0 pcq-burst-time=10s pcq-src-address-mask=32 pcq-dst-address-mask=32\
     pcq-src-address6-mask=64 pcq-dst-address6-mask=64

add name="512kbps_upload" kind=pcq pcq-rate=512k pcq-limit=50 pcq-classifier=src-address pcq-total-limit=2000\
    pcq-burst-rate=0 pcq-burst-threshold=0 pcq-burst-time=10s pcq-src-address-mask=32 pcq-dst-address-mask=32\
    pcq-src-address6-mask=64 pcq-dst-address6-mask=64

add name="1MBps_download" kind=pcq pcq-rate=1M pcq-limit=50 pcq-classifier=dst-address pcq-total-limit=2000\
    pcq-burst-rate=0 pcq-burst-threshold=0 pcq-burst-time=10s pcq-src-address-mask=32 pcq-dst-address-mask=32\
    pcq-src-address6-mask=64 pcq-dst-address6-mask=64

add name="1MBps_upload" kind=pcq pcq-rate=1M pcq-limit=50 pcq-classifier=src-address pcq-total-limit=2000 pcq-burst-rate=0\
    pcq-burst-threshold=0 pcq-burst-time=10s pcq-src-address-mask=32 pcq-dst-address-mask=32 pcq-src-address6-mask=64\
    pcq-dst-address6-mask=64

Konfigurasi Simple Queue:

[admin@anshari] /queue simple>
add name="Total" target-addresses=192.168.1.0/24,192.168.2.0/24 interface=all parent=none packet-marks="" direction=both\
    priority=8 queue=default-small/default-small limit-at=0/0 max-limit=0/0 burst-limit=0/0 burst-threshold=0/0\
    burst-time=0s/0s total-queue=default-small

add name="512kbps" target-addresses=192.168.1.0/24 interface=all parent=Total packet-marks="" direction=both priority=2\
    queue=512kbps_upload/512kbps_Download limit-at=0/0 max-limit=0/0 burst-limit=0/0 burst-threshold=0/0\
    burst-time=0s/0s total-queue=default-small

add name="1MBps" target-addresses=192.168.2.0/24 interface=all parent=Total packet-marks="" direction=both priority=1\
    queue=1MBps_upload/1MBps_download limit-at=0/0 max-limit=0/0 burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s\
    total-queue=default-small

Read More

Cara Block Open Recursive DNS di Mikrotik

Block Open Recursive DNS di Mikrotik, Tutorial berikut ini berguna untuk mengatasi adanya Open Recursive DNS Attack / DNS Amplification Attack pada Mikrotik yang telah men-checklist "Allow Remote Request" perintahnya adalah sebagai berikut:

/ip firewall filter
add action=drop chain=input connection-limit=0,32 dst-port=53 fragment=no in-interface="ether-yg-ke-WAN" protocol=udp
add action=drop chain=input connection-limit=0,32 dst-port=53 fragment=no in-interface="ether-yg-ke-WAN" protocol=tcp

Klik link berikut (Mikrotik Tutorial) untuk melihat tutorial saya yang lain mengenai MikroTik. Artikel berikutnya AnshariTKJ.com akan membahas mengenai How to Bandwidth Management Mikrotik Using PCQ Equal. See you next time :)

Read More

OSPF Configuration Using Mikrotik

R1 Configuration

/ip adddress add address=180.50.1.186/30 interface=ether1
/ip adddress add address=10.10.10.1/30 interface=ether3
/ip dns set servers=8.8.8.8,8.8.4.4 allow-remote-requests=yes
/ip route add dst-address=0.0.0.0/0 gateway=180.50.1.185 type=unicast
/ip firewall nat add chain=srcnat out-interface=ether1 action=masquerade
/routing ospf instance add name=area0 redistribute-connected=as-type-1 router-id=0.0.0.0
/routing ospf area add name=areanol area-id=0.0.0.0 instance=area0 
/routing ospf network add area=areanol network=10.10.10.0/30
/routing ospf network add area=areanol network=180.50.1.185/30

R2 Configuration

/ip adddress add address=10.10.10.1/30 interface=ether1
/ip adddress add address=192.168.2.1/24 interface=ether2
/routing ospf instance add name=area0 redistribute-connected=as-type-1 router-id=0.0.0.0
/routing ospf area add name=areanol area-id=0.0.0.0 instance=area0 
/routing ospf network add area=areanol network=10.10.10.0/30
/routing ospf network add area=areanol network=192.168.2.0/24

Read More

Cara Mudah Mengoneksikan Mikrotik ke Internet

Cara mudah konfigurasi mikrotik ke internet

Topologi

Konfigurasi Mikrotik
Setting IP Address

/ip address add address=180.50.1.186/30 interface=ether1
/ip address add address=192.168.1.1/24 interface=ether2

Setting DNS Server

/ip dns set servers=8.8.8.8,8.8.4.4 allow-remote-requests=yes

Setting Gateway

/ip route add dst-address=0.0.0.0/0 gateway=192.50.1.185 type=unicast

Setting Nat Masquirade agar IP lokal bisa menggunakan koneksi internet

/ip firewall nat add chain=srcnat out-interface=ether1 action=masquerade

Setting IP client dengan
IP address   : 192.168.1.2
Netmask     : 255.255.255.0
Gateway     : 192.168.1.1
DNS           : 8.8.8.8 dan 8.8.4.4

Read More