Lab Mikrotik 13

 Konfigurasi

wawan-R2

Lakukan konfigurasi R2 terlebih dahulu dikarenakan R2 nantinya akan mendistribusikan internet kepada seluruh device yang ada di dalam jaringan tersebut.

[admin@Mikrotik] > system identity set name=wawan-R2

R2

[admin@wawan-R2] > ip dhcp-client add interface=ether1 add-default-route=yes use-peer-dns=yes use-peer-ntp=yes disable=no

[admin@wawan-R2] > ip address add address=1.1.1.1/30 interface=ether2

[admin@wawan-R2] > ip address add address=2.2.2.1/30 interface=ether3

[admin@wawan-R2] > ip address add address=10.10.10.1/24 interface=ether4

Setelah itu atur dns server dan firewall nat agar client dapat mengakses internet nantinya.

[admin@wawan-R2] > ip dns set servers=8.8.8.8 allow remote requests=yes

[admin@wawan-R2] > ip firewall nat add chain==srcnat action=masquerade out-interface=ether1

Setelah melakukan konfigurasi di wawan-R2, lakukan konfigurasi yang sama kepada R1 dan R3 agar jaringan local yang dimilikinya dapat mengakses internet.

wawan-R1

[admin@Mikrotik] > system identity set name=wawan-R1

[admin@wawan-R1] > interface bridge add name=bridge

[admin@wawan-R1] > interface bridge port add interface=ether2 bridge=bridge

[admin@wawan-R1] > interface bridge port add interface=ether3 bridge=bridge

[admin@wawan-R1] > ip address add address=1.1.1.2/30 interface=ether1

[admin@wawan-R1] > ip address add address=192.168.1.1/24 interface=bridge

[admin@wawan-R1] > ip route add gateway=1.1.1.1

[admin@wawan-R1] > ip dns set servers=8.8.8.8 allow-remote-requests=yes

[admin@wawan-R1] > ip firewall nat add chain=srcnat action=masquerade out-interface=ether1

wawan-R3

[admin@Mikrotik] > system identity set name=wawan-R3

[admin@wawan-R3] > ip address add address=2.2.2.2/30 interface=ether1

[admin@wawan-R3] > ip address add address=192.168.2.1/24 interface=ether2

[admin@wawan-R3] > ip route add gateway=2.2.2.1

[admin@wawan-R3] > ip dns set servers=8.8.8.8 allow-remote-requests=yes

[admin@wawan-R3] > ip firewall nat add chain=srcnat action=masquerade out-interface=ether1

Jika sudah melakukan konfigurasi dasar untuk setiap router, langkah selanjutnya adalah menjadikan DHCP Server pada wawan-R1 dan wawan-R3 dikarenakan hanya jaringan local pada lukman-R1 dan wawan-R3 yang menggunakan IP DHCP, sedangkan wawan-R2 tidak.

wawan-R1

[admin@wawan-R1] > ip dhcp-server setup

Select interface to run DHCP server on

dhcp server interface: bridge1

Select network for DHCP addresses

dhcp address space: 192.168.1.0/24

Select gateway for given network

gateway for dhcp network: 192.168.1.1

Select pool of ip addresses given out by DHCP server

addresses to give out: 192.168.1.2-192.168.1.254

Select DNS servers

dns servers: 8.8.8.8

Select lease time

lease time: 3d

 

wawan-R3

[admin@wawan-R3] > ip dhcp-server setup

Select interface to run DHCP server on

dhcp server interface: ether2

Select network for DHCP addresses

dhcp address space: 192.168.2.0/24

Select gateway for given network

gateway for dhcp network: 192.168.2.1

Select pool of ip addresses given out by DHCP server

addresses to give out: 192.168.2.2-192.168.2.254

Select DNS servers

dns servers: 8.8.8.8

Select lease time

lease time: 3d

Setelah DHCP Server ditambahkan ke setiap router, langkah selanjutnya yaitu adalah menambahkan routing pada setiap router agar jaringan local dapat berkomunikasi satu sama lain.

[admin@wawan-R1] > routing ospf network add network=192.168.1.0/24 area=backbone

[admin@wawan-R1] > routing ospf network add network=1.1.1.0/30 area=backbone

wawan-R2

[admin@wawan-R2] > routing ospf network add network=19.19.0.0/16 area=backbone

[admin@wawan-R2] > routing ospf network add network=1.1.1.0/30 area=backbone

[admin@wawan-R2] > routing ospf network add network=2.2.2.0/30 area=backbone

[admin@wawan-R2] > routing ospf network add network=10.10.10.0/24 area=backbone

[admin@wawan-R3] > routing ospf network add network=2.2.2.0/30 area=backbone

[admin@wawan-R3] > routing ospf network add network=192.168.2.0/24 area=backbone

Setelah itu pastikan setiap jaringan local dapat ping ke luar jaringan dan juga dapat mengakses internet. Jika sudah menambahkan routing, langkah selanjutnya sesuai skenario yang ada, yaitu kita akan membuat hotspot pada wawan-R2.

wawan-R2

[admin@wawan-R2] > ip hotspot setup

Select interface to run HotSpot on

hotspot interface: ether4

Set HotSpot address for interface

local address of network: 10.10.10.1/24

masquerade network: yes

Set pool for HotSpot addresses

address pool of network: 10.10.10.2-10.10.10.254

Select hotspot SSL certificate

select certificate: none

Select SMTP server

ip address of smtp server: 0.0.0.0

Setup DNS configuration

dns servers: 10.10.10.1

DNS name of local hotspot server

dns name: login.idn.id

Create local hotspot user

name of local hotspot user: idn

password for the user: 12345

Setelah membuat hotspot pada wawan-R2, jadikan salah satu user agar dapat mengakses internet tanpa login hotspot.

[admin@wawan-R2] > ip hotspot ip-binding add server=all mac-address=08:00:27:37:37:B3 to-address=10.10.10.253 disabled=no type=bypassed