Pembahasan UKK Paket 2 TKJ 2023: Perbedaan antara revisi
Baris 59: | Baris 59: | ||
== CLI hasil Konfigurasi Router 1 == | == CLI hasil Konfigurasi Router 1 == | ||
# may/18/2024 09:09:07 by RouterOS 6.48.6 | |||
# software id = 7BQN-24WM | |||
# | |||
# model = RB941-2nD | |||
# serial number = HD5084GJDQD | |||
/interface wireless | |||
set [ find default-name=wlan1 ] band=2ghz-b/g/n disabled=no frequency=2472 \ | |||
mode=ap-bridge ssid=UKK_no_absen | |||
/interface vlan | |||
add interface=ether2 name=guru vlan-id=20 | |||
/interface wireless | add interface=ether2 name=siswa vlan-id=10 | ||
/interface wireless security-profiles | |||
set [ find default-name=wlan1 ] band=2ghz-b/g/n disabled=no frequency=2472 \ | set [ find default=yes ] supplicant-identity=MikroTik | ||
/ip hotspot profile | |||
mode=ap-bridge ssid=UKK_no_absen | add dns-name=portalsmk.sch.id hotspot-address=192.168.20.1 name=hsprof1 | ||
/ip hotspot user profile | |||
/interface vlan | add name=kepsek rate-limit=5m/5m | ||
add name=guru rate-limit=2m/2m | |||
add interface=ether2 name=guru vlan-id=20 | add name=siswa rate-limit=1m/1m | ||
/ip pool | |||
add interface=ether2 name=siswa vlan-id=10 | add name=dhcp_pool0 ranges=192.168.40.10-192.168.40.50 | ||
add name=dhcp_pool1 ranges=192.168.60.10-192.168.60.50 | |||
/interface wireless security-profiles | add name=hs-pool-6 ranges=192.168.20.10-192.168.20.50 | ||
/ip dhcp-server | |||
set [ find default=yes ] supplicant-identity=MikroTik | add address-pool=dhcp_pool0 disabled=no interface=siswa name=dhcp1 | ||
add address-pool=dhcp_pool1 disabled=no interface=guru name=dhcp2 | |||
/ip hotspot profile | add address-pool=hs-pool-6 disabled=no interface=wlan1 lease-time=1h name=dhcp3 | ||
/ip hotspot | |||
add dns-name=portalsmk.sch.id hotspot-address=192.168.20.1 name=hsprof1 | add address-pool=hs-pool-6 disabled=no interface=wlan1 name=hotspot1 profile=\ | ||
hsprof1 | |||
/ip hotspot user profile | /ip address | ||
add address=192.168.40.1/24 interface=siswa network=192.168.40.0 | |||
add name=kepsek rate-limit=5m/5m | add address=192.168.60.1/24 interface=guru network=192.168.60.0 | ||
add address=192.168.20.1/24 interface=wlan1 network=192.168.20.0 | |||
add name=guru rate-limit=2m/2m | /ip dhcp-client | ||
add disabled=no interface=ether1 | |||
add name=siswa rate-limit=1m/1m | /ip dhcp-server network | ||
add address=192.168.20.0/24 comment="hotspot network" gateway=192.168.20.1 | |||
/ip pool | add address=192.168.40.0/24 gateway=192.168.40.1 | ||
add address=192.168.60.0/24 gateway=192.168.60.1 | |||
add name=dhcp_pool0 ranges=192.168.40.10-192.168.40.50 | /ip firewall filter | ||
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" \ | |||
add name=dhcp_pool1 ranges=192.168.60.10-192.168.60.50 | disabled=yes | ||
/ip firewall nat | |||
add name=hs-pool-6 ranges=192.168.20.10-192.168.20.50 | add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" \ | ||
disabled=yes | |||
/ip dhcp-server | add action=masquerade chain=srcnat out-interface=ether1 | ||
add action=masquerade chain=srcnat comment="masquerade hotspot network" \ | |||
add address-pool=dhcp_pool0 disabled=no interface=siswa name=dhcp1 | src-address=192.168.20.0/24 | ||
/ip hotspot user | |||
add address-pool=dhcp_pool1 disabled=no interface=guru name=dhcp2 | add disabled=yes name=kepalasekolah password=123 profile=kepsek | ||
add name=siswa password=456 profile=siswa | |||
add address-pool=hs-pool-6 disabled=no interface=wlan1 lease-time=1h name=dhcp3 | add name=guru password=789 profile=guru | ||
/system clock | |||
/ip hotspot | set time-zone-name=Asia/Jakarta | ||
/system identity | |||
add address-pool=hs-pool-6 disabled=no interface=wlan1 name=hotspot1 profile=\ | set name=RouterOS | ||
hsprof1 | |||
/ip address | |||
add address=192.168.40.1/24 interface=siswa network=192.168.40.0 | |||
add address=192.168.60.1/24 interface=guru network=192.168.60.0 | |||
add address=192.168.20.1/24 interface=wlan1 network=192.168.20.0 | |||
/ip dhcp-client | |||
add disabled=no interface=ether1 | |||
/ip dhcp-server network | |||
add address=192.168.20.0/24 comment="hotspot network" gateway=192.168.20.1 | |||
add address=192.168.40.0/24 gateway=192.168.40.1 | |||
add address=192.168.60.0/24 gateway=192.168.60.1 | |||
/ip firewall filter | |||
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" \ | |||
disabled=yes | |||
/ip firewall nat | |||
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" \ | |||
disabled=yes | |||
add action=masquerade chain=srcnat out-interface=ether1 | |||
add action=masquerade chain=srcnat comment="masquerade hotspot network" \ | |||
src-address=192.168.20.0/24 | |||
/ip hotspot user | |||
add disabled=yes name=kepalasekolah password=123 profile=kepsek | |||
add name=siswa password=456 profile=siswa | |||
add name=guru password=789 profile=guru | |||
/system clock | |||
set time-zone-name=Asia/Jakarta | |||
/system identity | |||
set name=RouterOS | |||
= Router 2 = | = Router 2 = |
Revisi per 18 Mei 2024 02.38
Topologi
Router 1
Interface VLAN
Tambahkan VLAN 1 dan VLAN 2
VLAN 1 Siswa dengan ID 10
VLAN 2 Guru dengan ID 20
DHCP Client
Buka menu IP -> DHCP Client -> + -> interface pilih ether1, lalu klik OK
IP Address
Tambahkan IP Address
DHCP Server
Tambahkan DHCP Server dengan mengklik DHCP Setup
Interface : siswa -> Next
Address to Give Out : 192.168.40.10 - 192.168.40.50 lalu Next sampai Succesfully
Interface : guru -> Next
Address to Give Out : 192.168.60.10 - 192.168.60.50 lalu Next sampai Succesfully
Firewall ->NAT
Buka menu IP -> Firewall -> Tab NAT -> +
Tab General :
Chain : srcnat
Out Interface : ether1
Tab Action :
Action : masquerade
Klik OK
IP -> Hotspot
Buka Menu Interfaces, lalu aktifkan wlan1 dengan cara mengklik tombol ceklis (warna biru). Lalu klik 2x wlan1
Tab Wireless
Mode : ap bridge
Band : 2Ghz/B/G/N
SSID : UKK_no_absen
OK
Buka IP -> Hotspot -> Hotspot Setup
CLI hasil Konfigurasi Router 1
# may/18/2024 09:09:07 by RouterOS 6.48.6 # software id = 7BQN-24WM # # model = RB941-2nD # serial number = HD5084GJDQD /interface wireless set [ find default-name=wlan1 ] band=2ghz-b/g/n disabled=no frequency=2472 \ mode=ap-bridge ssid=UKK_no_absen /interface vlan add interface=ether2 name=guru vlan-id=20 add interface=ether2 name=siswa vlan-id=10 /interface wireless security-profiles set [ find default=yes ] supplicant-identity=MikroTik /ip hotspot profile add dns-name=portalsmk.sch.id hotspot-address=192.168.20.1 name=hsprof1 /ip hotspot user profile add name=kepsek rate-limit=5m/5m add name=guru rate-limit=2m/2m add name=siswa rate-limit=1m/1m /ip pool add name=dhcp_pool0 ranges=192.168.40.10-192.168.40.50 add name=dhcp_pool1 ranges=192.168.60.10-192.168.60.50 add name=hs-pool-6 ranges=192.168.20.10-192.168.20.50 /ip dhcp-server add address-pool=dhcp_pool0 disabled=no interface=siswa name=dhcp1 add address-pool=dhcp_pool1 disabled=no interface=guru name=dhcp2 add address-pool=hs-pool-6 disabled=no interface=wlan1 lease-time=1h name=dhcp3 /ip hotspot add address-pool=hs-pool-6 disabled=no interface=wlan1 name=hotspot1 profile=\ hsprof1 /ip address add address=192.168.40.1/24 interface=siswa network=192.168.40.0 add address=192.168.60.1/24 interface=guru network=192.168.60.0 add address=192.168.20.1/24 interface=wlan1 network=192.168.20.0 /ip dhcp-client add disabled=no interface=ether1 /ip dhcp-server network add address=192.168.20.0/24 comment="hotspot network" gateway=192.168.20.1 add address=192.168.40.0/24 gateway=192.168.40.1 add address=192.168.60.0/24 gateway=192.168.60.1 /ip firewall filter add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" \ disabled=yes /ip firewall nat add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" \ disabled=yes add action=masquerade chain=srcnat out-interface=ether1 add action=masquerade chain=srcnat comment="masquerade hotspot network" \ src-address=192.168.20.0/24 /ip hotspot user add disabled=yes name=kepalasekolah password=123 profile=kepsek add name=siswa password=456 profile=siswa add name=guru password=789 profile=guru /system clock set time-zone-name=Asia/Jakarta /system identity set name=RouterOS
Router 2
Bridge
Buka Menu Bridge, lalu buka
Tab Bridge -> +
Name : bridge1
Tab Port -> +
masukkan
ether1
ether2
ether3
Switch
Buka Menu Switch
Tab Port
ether1 klik 2x, lalu rubah bagian berikut:
VLAN Mode : secure
VLAN Header : add if missing
ether2 klik 2x, lalu rubah bagian berikut:
VLAN Mode : secure
VLAN Header : always trip
Default VLAN ID : 10
ether3 klik 2x, lalu rubah bagian berikut:
VLAN Mode : secure
VLAN Header : always trip
Default VLAN ID : 20
Tab VLAN -> +
VLAN ID : 10
Port : ether1 -> klik tombol panah kebawah
: ether2
OK
VLAN ID : 20
Port : ether1 -> klik tombol panah kebawah
: ether3
OK