Konfigurasi Dasar Mikrotik Menggunakan CLI


1. Set identitas router / ganti hostname : [admin@MikroTik] > system identity set name=Router_Ku

2. Menambahakan ip address pada ether1 : [admin@Router_Ku] >ip address add address=192.168.1.2/24 interface=ether1

3. Menambahkan Default Routes :  [admin@Router_Ku] > ip route add gateway=192.168.1.1

4. Set IP DNS :  [admin@Router_Ku] > ip dns set servers=8.8.8.8

5. Set Firewall Nat : [admin@Router_Ku] > ip firewall nat add chain=srcnat out-interface=ether1 action=masquerade

6. Konfigurasi DHCP Server :

[admin@Router_Ku] > ip dhcp-server setup
Select interface to run DHCP server on

dhcp server interface: ether2
Select network for DHCP addresses

dhcp address space: 192.168.2.0/24
Select gateway for given network

gateway for dhcp network: 192.168.2.1
Select pool of ip addresses given out by DHCP server

addresses to give out: 192.168.2.2-192.168.2.254
Select DNS servers

dns servers: 8.8.8.8
Select lease time

lease time: 10m


7. Konfigurasi Interface Bridge : [admin@Router_Ku] > interface bridge add name=bridge1

8. Menambahakan Port yang akan di bridge contoh akan mengabungkan port 2 & 3 di bridge1 
[admin@Router_Ku] > interface bridge port add interface=ether2 bridge=bridge1
[admin@Router_Ku] > interface bridge port add interface=ether3 bridge=bridge1

9. Memasang IP di interface bridge : 
[admin@Router_Ku] > ip address add address=192.168.2.1/24 interface=bridge1

10. Pasang Firewall blok akses winbox ip lan 192.168.2.0/30 
[admin@Router_Ku] > ip firewall filter add action=drop chain=input dst-port=8291
 protocol=tcp src-address=192.168.2.0/24

11. Konfigurasi Statik route ip tertentu, misal kita mau dst address 192.168.3.0/24 via 10.10.10.1

[admin@Router_Ku] > ip route add dst-address 192.168.3.0/24 gateway=10.10.10.1

12. Blok ketika client mendownload suatu file yang berexstensi .mkv

[admin@Router_Ku] > /ip firewall filter add action=drop chain=forward content=.mkv dst-port=80 protocol=tcp

13. Cara backup mikrotik dengan fitur export, file backup dalam format rsc bisa di buka di notepad

[admin@Router_Ku] > export file=nama_file
lalu file bisa di drag n drop ke laptop di menu files mikrotik 

[admin@Router_Ku] > ip address export file=nama_file
jika kita ingin membackup hanya ip address saja.

14. Konfigurasi pembagian bandwidth pada perangkat pc1 memiliki ip 192.168.2.2 dan perangkat pc2 192.168.2.3
[admin@Router_Ku] > /queue simple 
>add max-limit=2/2M name=limit_semua target 192.168.2.0/24
>add max-limit=512l/512k max-limti=1M/1M name=limit_pc1 parent=limit_semua target 192.168.2.2
>add max-limit=512l/512k max-limti=1M/1M name=limit_pc2 parent=limit_semua target 192.168.2.3



Tidak ada komentar: