Membangun Internet Gateway

MEMBANGUN INTERNET GATEWAY (PC ROUTER DAN PROXY SERVER) – MIKROTIK 3.20

A.      Host Name / Identitas System

Ø  system identity set name=TKJSMKN1Pacitan

B.      Interface

Ø  interface print

Ø  interface set ether1 name=Internet comment=”Internet”

Ø  interface set ether2 name=Lokal comment=”Lokal”

Ø  interface print

C.      IP Address

Ø  ip address print

Ø  ip address add address=192.168.1.220/24 interface=Internet                      (Ket: IP hrs beda antar server)

Ø  ip address add address=10.14.2.254/24 interface=Lokal

Ø  ip address print

D.      IP Gateway

Ø  ip route print

Ø  ip route add gateway=192.168.1.1            (Ket: IP penyedia koneksi internet)

Ø  ip route print

E.       Domain Name Server (DNS)

Ø  ip dns print

Ø  ip dns set primary-dns=203.130.208.18

Ø  ip dns set secondary-dns=203.130.196.155

Ø  ip dns set allow-remote-requests=yes

Ø  ip dns print

Ø  ping www.google.co.id

Ø  ping www.facebook.com

Ø  ping www.youtube.com

F.       Sharing Internet (Firewall NAT)

Ø  ip firewall nat print

Ø  ip firewall nat add chain=srcnat out-interface=Internet action=masquerade

Ø  ip firewall nat print

Ø  ping www.google.co.id

Ø  ping www.facebook.com

Ø  ping www.youtube.com

G.     Transparent Proxy

Ø  ip firewall nat print

Ø  ip firewall nat add chain=dstnat action=redirect to-ports=3128 protocol=tcp in-interface=Lokal dst-port=80

Ø  ip firewall nat add chain=dstnat action=redirect to-ports=3128 protocol=tcp in-interface=Lokal dst-port=8080

Ø  ip firewall nat add chain=dstnat action=redirect to-ports=3128 protocol=tcp in-interface=Lokal dst-port=8000

Ø  ip firewall nat print

H.     Web Proxy

Ø  ip proxy print

Ø  ip proxy set enabled=yes src-address=0.0.0.0 port=3128 parent-proxy=0.0.0.0 parent-proxy-port=0 cache-administrator=”johan@smkn1pacitan.sch.id” cache-on-disk=yes always-from-cache=yes

Ø  ip proxy print

Ø  ip proxy monitor

I.        Blok Situs

Ø  ip proxy direct add action=allow src-address=0.0.0.0

Ø  ip proxy direct print

Ø  ip proxy access add dst-host=www.facebook.com action=deny

Ø  ip proxy access add dst-host=www.youtube.com action=deny

Ø  ip proxy access print

 

sumber : http://rickacym.blogspot.com/2012/11/membangun-internet-gateway-pc-router.html