PEMBAHASAN UKK PAKET 1

INSTALASI JARINGAN SEDERHANA

ROUTER 1
Langkah 1 : Reset Configuration dan Memberikan Identitas pada Mikrotik
a. System → Reset Configuration → Centang “No Default Configuration” → Reset Configuration;
b. System → Identity → Identity : “R1-Nama Peserta” → Ok.
Catatan : IP defauld Mikrotik 192.168.88.x/24

Langkah 2 : Cek Interface ethernet dan wlan

a. Cek Interface yang terhubung → Interface;
b. Wireless → Aktifkan wlan1.

Langkah 3 : Konfigurasi Interface VLAN

a. Interface → VLAN → + → Name : Lab_Admin → VLAN ID : 10 → Interface : ether2 (Interface
VLAN Trungking/port yang menghubungkan antara Router 1 dengan Router 2);
b. Interface → VLAN → + → Name : Lab_Jaringan → VLAN ID : 20 → Interface : ether2 (Interface
VLAN Trungking/port yang menghubungkan antara Router 1 dengan Router 2).

Langkah 4 : Setting IP Address pada VLAN1, dan VLAN2 dan Wlan1

a. IP → DHCP Client → + → Interface : ether1 (Interface yang terhubung dengan internet) →
Pastikan ststusnya “Bound”;
b. IP → Addresses → + → Addresses : 192.168.10.1/28 → Interface : Lab_Admin → Ok;
c. IP → Addresses → + → Addresses : 192.168.20.1/28 → Interface : Lab_Jaringan → Ok.
d. IP → Addresses → + → Addresses : 192.168.30.1/24 → Interface : wlan1 → Ok.

Langkah 5 : Setting DHCP Server

a. IP → DHCP Server → DHCP Setup → DHCP Server Interface : Lab_Admin (Interface yang
terhubung ke client, agar mendapatkan IP secara otomatis) → Next → Ok;
b. IP → DHCP Server → DHCP Setup → DHCP Server Interface : Lab_Jaringan (Interface yang
terhubung ke client, agar mendapatkan IP secara otomatis) → Next → Ok;
c. IP → DHCP Server → DHCP Setup → DHCP Server Interface : wlan1 (Interface yang terhubung
ke jaringan wireless, agar mendapatkan IP secara otomatis) → Next → Ok;

Langkah 6 : Konfigurasi Router pada ether1

a. IP → DNS → Centang “Allow remote Requests” Ok;
b. IP → Firewall → NAT → + → General → Chain : srcnat → Out Interface : ether1 (Terhubung ke
Internet) → Action → Action : Masqurade → Ok;
c. Cek Koneksi Router → New Terminal → ping google.com → Pastikan telah terkoneksi dengan
internet.

Langkah 7 : Konfigurasi Hotspot

a. IP → Hotspot → Servers → Hotspot Setup → Hotspot Interface : wlan1 (Interface yang terhubung
ke jaringan wireless) → Next → DNS Name : nama_peserta.net → Next
b. IP → Hotspot → Server Profiles → Login → “Hilangkan Centang Cookie”
c. IP → Hotspot → Users Profiles → General → Name : “tamu” → Share Users : “100” → Ok;
d. IP → Hotspot → Users → + → General → Name : “tamu” → Password : “guest” → Profile :
tamu → Ok;
e. Wireless → wlan1 → Wireless → Mode : ap bridge → Band : 2GHz-B/G/N → SSID :
nama_peserta@smkn1grogol → Ok;
ROUTER 2
Langkah 1 : Reset Configuration dan Memberikan Identitas pada Mikrotik
a. System → Reset Configuration → Centang “No Default Configuration” → Reset Configuration;
b. System → Identity → Identity : “Switch-Nama Peserta” → Ok.
Catatan : IP defauld Mikrotik 192.168.88.x/24

Langkah 2 : Konfigurasi VLAN Trunking dengan VLAN Access

a. Bridge → + → General → Name : bridge 1 → Ok;
b. Ports → + → General → Interface : ether1 → Bridge : bridge 1 (Bridge yang telah dibuat pada
point a) → Ok;
c. Ports → + → General → Interface : ether2 → Bridge : bridge 1 (Bridge yang telah dibuat pada
point a) → Ok;
d. Ports → + → General → Interface : ether3 → Bridge : bridge 1 (Bridge yang telah dibuat pada
point a) → Ok;
e. Switch → VLAN → + → Switch : switch1 → VLAN ID : 10 → Port : ether1; ether2 → Ok;
f. Switch → VLAN → + → Switch : switch1 → VLAN ID : 20 → Port : ether1; ether3 → Ok;
g. Switch → Port → Double Klik ether1 → VLAN Mode : secure → VLAN Header : add if
missing → Defauld VLAN ID : 0 → Ok;
h. Switch → Port → Double Klik ether2 → VLAN Mode : secure → VLAN Header : always steep
→ Defauld VLAN ID : 10 → Ok;
i. Switch → Port → Double Klik ether3 → VLAN Mode : secure → VLAN Header : always steep
→ Defauld VLAN ID : 20 → Ok;

UJI COBA KONFIGURASI

a. Cek IP Client (Lab Admin) → 192.168.10.x
b. Cek IP Client (Lab Jaringan) → 192.168.20.x
c. Cek IP Client (Lab Jaringan) → 192.168.30.x
POINT TAMBAHAN
ROUTER 1
Langkah 8 : Blokir IP agar tidak dapat ping ke Router Utama
a. IP → Firewall → Filter Rules → + → General → Chain : input → Src Address :
192.168.10.2-192.168.10.5 → Protocol : icmp → Action → Action : drop → Ok.

Langkah 9 : Blokir IP agar tidak dapat ping ke Client Wireless

a. IP → Firewall → Filter Rules → + → General → Chain : forward → Src Address :
192.168.20.2-192.168.20.5 → Dst Address : 192.168.30.0/24 (Alamat Jaringan Wireless)
→ Protocol : icmp → Action → Action : drop → Ok.

Langkah 10 : Buat rule logging agar tersimpan di disk

a. IP → Firewall → Filter Rules → + → General → Chain : input → Action → Action : log →
Log Prefix : masuk-router- → Ok;
b. Cek Log → Log;
c. System → Logging → Rules → + → Prefix : masuk-router- → Action : disk → Ok.

Langkah 11 : Konfigurasi Web Proxy

a. IP → Web Proxy → Centang Enable dan Anonymous → Cache Administrator :
nama_peserta@smkn1grogolkediri.sch.id → Apply → Pastikan tulisan dibawah
Running → Ok;
b. Konfigurasi NAT untuk Transparent Proxy → IP → Firewall → NAT → + → Chain :
dstnat → Protocol : 6 (tcp) → Dst. Port : 80 → Action → Action : redirect → To port : 8080
→ Ok.

Langkah 12 : Blokir Site

a. IP → Firewall → Filter Rules → + → General → Chain : forward → Src. Address :
192.168.200.0/24 (Network ether3 / WiFi) → Out Interface : ether1 → Advanced →
Content : linux.org → Action → Action : drop → Ok
Atau IP → Web Proxy → Access → + → Dst. Port : 80 → Dst. Host : linux.org →
Actions : deny → Ok
b. IP → Firewall → Layer 7 Protocols → + → Name : blok-youtube → Regexp :
^.+(youtube.com).*$ → Ok → Filter Rules → + → General → Chain : Forward → Src.
Address : 192.168.200.0/24 (Alamat Jaringan Wireless) → Protocol : 6(tcp) → In Interface
: wlan1 → Advanced → Layer 7 Protocol : blok-youtube → Action → Action : drop → Ok

Langkah 13 : Blokir File

a. IP → Firewall → Filter Rules → + → General → Chain : forward → Advanced → Content :
.mp3 → Action → Action : drop → Ok
Atau IP → Web Proxy → Access → + → Dst. Port : 80 → Path : *.mp3 → Actions :
deny → Ok
b. IP → Firewall → Filter Rules → + → General → Chain : forward → Advanced → Content :
.mkv → Action → Action : drop → Ok
Atau IP → Web Proxy → Access → + → Dst. Port : 80 → Path : *.mkv → Actions :
deny → Ok

Langkah 14 : Bypass Site

a. IP → Hotspot → Wallet Garden → Allow → Dst. Host : bnsp.go.id
Langkah 15 : Uji coba Konfigurasi
a. Cek IP Client (VLAN1) → 192.168.10.xx → IP router 192.168.10.1
Ping router → 192.168.10.6 → Sukses
Ping router → 192.168.10.2 s/d 192.168.10.5 → Gagal
b. Cek IP Client (VLAN2) → 192.168.20.xx → IP Wlan1 192.168.30.xx
Ping router → 192.168.20.2 → Sukses
Ping Wireless → 192.168.30.10 (IP yang terhubung dengan jaringan wireless) →
Gagal
c. Uji Coba Blokir File → .mkv (https://bit.ly/ujikommkv) → .mp3
(https://bit.ly/ujikommp3)
d. Uji Coba Web Proxy
e. Uji Coba Bypass → Login page
f. Uji Coba Blokir Content
g. Uji Coba Blokir Situs (Linux dan Youtube)
h. Cek Loging telah tersimpan di disk