LANGKAH KERJA PENYELESAIAN UKK PRAKTIKUM TP. 2017-2018 VER.

1
TOPOLOGI:

Nama : ………………………………..

LANGKAH KERJA:
NO STEP BY STEP CHECK
LIST
1. Siapkan Peralatan Dan Bahan. ……..
2. Mengkrimping cable ……..
- Gambar straight cable.
3. Hidupkan seluruh perangkat (PC, Laptop, Switch, Router, Akses Point) ……..
4. Pasang kabel pada titik c dan d
KONFIGURASI ROUTER ……..
a. Buka winbox

b. Me-reset router
[admin@MikroTik] > system reset-configuration no-defaults=yes
c. Mengganti identitas router:
[admin@MikroTik] > system identity set name=namaanda
d. Mengganti nama interface:
[admin@namaanda] > interface set 0 name=1public
[admin@namaanda] > interface set 1 name=2lan
[admin@namaanda] > interface set 2 name=3hotspot
Cek interface:
[admin@namaanda] > interface print (Lihat hasilnya)

e. Menambahkan IP Address:
[admin@namaanda] > ip address add address=192.168.108.xx/24 interface=1public
[admin@namaanda] > ip address add address=192.168.200.xx/24 interface=2lan
[admin@namaanda] > ip address add address=172.16.xx.1/24 interface=3hotspot
© BY Nopi Eko Hermansyah, MT, MTCNA, MTCRE, MTA
 Cek IP Address:
[admin@namaanda] > ip address Print – missal ip no absen 40.

f. Menambahkan IP Gateway:
[admin@namaanda] > ip route add gateway=192.168.108.1
Cek IP gateway:
[admin@namaanda] > ip route print

g. Menambahkan IP DNS
[admin@namaanda] > ip dns set servers=202.134.0.155,8.8.8.8 allow-remote-requests=yes
Cek IP DNS:
[admin@namaanda] > ip dns print

h. Menambahkan NAT pada firewall

[admin@namaanda] > ip firewall nat add chain=srcnat out-interface=1public action=masquerade
Cek firewall NAT
[admin@namaanda] > ip firewall nat print

**************************************************************************************************************************************
i. Pasang Kabel Pada titik A
j. Tes Ping ke gateway
[admin@namaanda] > ping 192.168.108.1
Hasil ping:

(catatan: tekan ctrl + c untuk menghentikan hasil ping)

k. Tes Ping ke internet

[admin@namaanda] > ping 8.8.8.8

(catatan: tekan ctrl + c untuk menghentikan hasil ping)

(jika reply berarti lanjutkan ke DHCP server ether2-lan dan ether3-hotspot)

© BY Nopi Eko Hermansyah, MT, MTCNA, MTCRE, MTA

 l. Pengaturan DHCP Server pada Interface Lan (2lan)
[admin@namaanda] > ip dhcp-server setup
Select interface to run DHCP server on

dhcp server interface: 2lan

Select network for DHCP addresses

dhcp address space: 192.168.200.0/24

Select gateway for given network

gateway for dhcp network: 192.168.200.xx

If this is remote network, enter address of DHCP relay

There is no such IP network on selected interface

dhcp relay: 192.168.200.xx Tergantung no.absen anda
Select pool of ip addresses given out by DHCP server

addresses to give out: 192.168.200.1-192.168.200.39,192.168.200.41-192.168.200.254

Select DNS servers

dns servers: 192.168.200.XX,172.16.xx.1

Select lease time

lease time: 3d

m. Pengaturan DHCP pada interface Hotspot (3hotspot)

[admin@namaanda] > ip dhcp-server setup
Select interface to run DHCP server on

dhcp server interface: 3hotspot

Select network for DHCP addresses

dhcp address space: 172.16.xx.0/24

Select gateway for given network

gateway for dhcp network: 192.168.200.xx

If this is remote network, enter address of DHCP relay

There is no such IP network on selected interface

dhcp relay: 192.168.xx.1
Tergantung no.absen anda
Select pool of ip addresses given out by DHCP server

addresses to give out: 172.16.XX.1-172.16. 254

Select DNS servers

dns servers: 192.168.100.40,172.16.XX.1

Select lease time

lease time: 3d

© BY Nopi Eko Hermansyah, MT, MTCNA, MTCRE, MTA

 n. Pengaturan Proxy
Klik ip – web proxy – klik (web proxy setting)

Pemblokiran Website:

Pemblokiran File :

© BY Nopi Eko Hermansyah, MT, MTCNA, MTCRE, MTA

 Pemblokiran konten:

Pengalihan domain www.mikrotik.com ke bsnp-indonesia,org

o. Mengalihkan Port Browser:

[admin@namaanda]>ip firewall nat add chain=dst-nat protocol=tcp port=80 action=redirect to-port=3128
[admin@namaanda]>ip firewall nat add chain=dst-nat protocol=tcp port=8080 action=redirect to-port=3128
[admin@namaanda]>ip firewall nat add chain=dst-nat protocol=tcp port=8000 action=redirect to-port=3128

p. Setting Firewall Pembatasan Akses Internet jam tertentu:

1. Setting Jam/waktu:
[admin@namaanda]> system clock set time =15:47:29 date=Mar/02/2016 (Sesuaikan dengan tanggal
praktikum.ujian saat ini)
2. Setting Script:
[admin@namaanda]>system script add name=hotspotON source="/interface enable number=2"
[admin@namaanda]>system script add name=hotspotOFF source="/interface disable number=2"
3. Setting Schedule:
[admin@namaanda]> system scheduler add name=hotspot-aktif start-time=07:00:00 on-event=hotspotON
[admin@namaanda]> system scheduler add name=hotspot-mati start-time=19:00:00 on-event=hotspotOFF

q. Pengaturan Pemblokiran akses ping ke mikrotik

[admin@namaanda] > ip firewall address-list add address=192.168.200.1-192.168.200.50 list=ping-mikrotik
[admin@namaanda] > ip firewall filter add chain=input protocol=icmp src-address-list=ping-mikrotik action=drop
Hasil :

Lakukan pengetesan PING dari computer client –PING ke gateway (contoh 192.168.100.40)

 sesuaikan ip gateway anda.

© BY Nopi Eko Hermansyah, MT, MTCNA, MTCRE, MTA

 r. KONFIGURASI PC CLIENT-Lan

KONFIGURASI AKSES POINT:

-Reset AP
-Matikan/Disable DHCP Server
-Matikan/Disable fungsi WPS/QSS
-setting SSID

KONFIGURASI LAPTOP-Wireless :

Selanjutnya cek IP pada laptop, jika sudah mendapatkan ip secara otomatis, maka konfigurasi
DHCP berhasil.

Selanjutnya melakukan pengecekan apakah sudah berhasil memblokir website:

© BY Nopi Eko Hermansyah, MT, MTCNA, MTCRE, MTA

 1. Klik Pengaturan/setting pada Webbrowser misal Google chrome.

klik connection – lan setting

2. Cek pada web browser.

Indicator keberhasilan jika webbrowser dapat memblokir website linux.or.iddan blokir file dengan
ekstensi .mkv

© BY Nopi Eko Hermansyah, MT, MTCNA, MTCRE, MTA