BAB 4 IMPLEMENTASI DAN EVALUASI

BAB 4 IMPLEMENTASI DAN EVALUASI

4.1

Spesifikasi router mikrotik Adapun perancangan pembuatan jaringan ini dilakukan dengan menggunakan

router untuk jaringan yaitu Mikrotik. Mikrotik yang digunakan adalah RB450G untuk kolokasi jaringan dan untuk setiap building menggunakan router yang ada di wireless yaitu RB411. Versi mikrotik yang dipakai adalah v4.2 berikut spesifikasi router yang dipakai 4.1.1

Spesifikasi wireless router RB411 RB411 adalah produk routerboard yang sangat mungil dan diperuntukkan bagi penggunaan SOHO. Memiliki 1 buah port ethernet 10/100, dengan prosesor baru Atheros 400MHz. Sudah termasuk dengan lisensi level 3 dan adaptor 24V. berikut hardware yang dipakai: • CPU: Atheros AR7130 300MHz • Memory: 32MB DDR onboard memory chip • Root loader: RouterBOOT, 1Mbit Flash chip • Data storage: 64MB onboard NAND memory chip • Ethernet ports: 1 10/100 Mbit/s Fast Ethernet port supporting AutoMDI/X • Serial ports: One DB9 RS232C asynchronous serial port • LEDs: Power, user LED

72

73 • Power options: Power over Ethernet: 10..28V DC (except power over datalines); • Power jack: 10..28V DC; Overvoltage protection • Dimensions: 105mm x 105mm (4.13 in x 4.13 in) • MiniPCI WLAN Atheros MiniPCI R52 Wireless 802.11a+b+g 54Mbps 2.4/5GHz • : Operational: 70% relative humidity (non-condensing) • Currently Temperature: Operational: -20°C to +70°C (-4°F to 158°F) • Humidity supported OS: RouterOS 3.0

4.1.2

Spesifikasi router mikrotik RB450G

RB450G adalah produk routerboard yang sangat ringkas dan diperuntukkan bagi penggunaan SOHO atau untuk router utama. Memiliki 5 buah port ethernet 10/100/1000, Sudah termasuk dengan lisensi level 4. berikut hardware yang diapkai • CPU: AR7161 680 MHz Atheros CPU • Memory: 256MB DDR onboard memory chip • Root loader: RouterBOOT, 1Mbit Flash chip • Data storage: 512MB onboard NAND memory chip • Ethernet ports: 5 buah 10/100/1000 Mbit/s Gigabit Ethernet port supporting

Auto-MDI/X • Serial ports: One DB9 RS232C asynchronous serial port • LEDs: Power, user LED

74 • Watchdog: IDT internal SoC hardware watchdog timer • Power options: Power over Ethernet: 18..28V DC (except power over

datalines); Power jack: 10..28V DC; Overvoltage protection • Dimensions: 116mm x 90mm • Currently supported OS: RouterOS

4.2 Implementasi Perancangan

4.2.1

Aplikasi winbox

Untuk mengakses router pertama kali, kita mengakses router

menggunakan winbox dengan mencoba terhubung berdasarkan alamat macaddress dari interface router yang terhubung langsung.

Gambar 4.1 login winbox dengan menggunakan Mac-Address

75 Tekan connect agar dapat tersambung dengan router yang dituju sesuai IP address atau MAC address.

4.2.2

Konfigurasi router utama Ada beberapa cara dalam mengkonfigurasi router, yaitu telnet, SSH,

console, web dan gui (winbox). Dalam pengkonfigurasi router ini kami mencoba menggunakan cara telnet, kecuali dalam penyettingan IP. Alasan kami menggunkan telnet adalah dengan menggunakan telnet

kita dapat semakin

mengerti lebih mendalam hal – hal yang berkaitan dalam penyettingan router ini. Hal pertama yang dilakukan untuk melakukan pengaturan router adalah dengan mengatur IP Address di setiap interface yang akan digunakan. Pada dasarnya agar router dapat menghubungkan jaringan lokal dengan internet adalah dengan mengatur IP public interface yang terhubung langsung dengan internet dalam hal ini interfacenya adalah interface ether1 serta IP private dalam hal ini adalah bridge1 yang terhubung langsung dengan jaringan lokal. Untuk mengatur IP public, IP tersebut haruslah IP yang terdaftar di Asia Pacific Network Information Center ( APNIC ). Berikut ini adalah pengaturan ip melalui winbox, IPÆADDRESSÆADD==isi IPaddreas 10.36.1.2/16,interface bridge1Æ APPLYÆOK. Akan terlihat pada gambar di bawah ini:

76

Gambar 4.2 IP Address

Setelah mengkonfigurasi IP address menggunakan winbox, untuk pengkonfigugurasian selanjutnya kita akan mencoba menggunakan perintah telnet. Selanjutnya kita akan mengkonfigurasi Default Route. Berikut adalah penjelasan dari Default Route yang ada: 0.0.0.0 / 0 Æ 120.29.156.193 Ini merupakan default route agar semua traffic akan diarahkan keluar menuju IP 120.29.156.193. berikut adalah perintah default route dalam telnet: [bakhtiar@MikroTik] > ip route [bakhtiar@MikroTik] /ip route>add comment="Route Utama" disabled=no distance=1 dst-address=0.0.0.0/0 \ gateway=120.29.156.193 check-gateway=arp scope=30 target-scope=10

77 [bakhtiar@MikroTik] /ip route>add comment="Fail Over" disabled=no distance=2 dst-address=0.0.0.0/0 \ gateway=120.29.156.193 check-gateway=arp scope=30 target-scope=10 Untuk melihat hasil perintah diatas dapat dilihat pada gambar dibawah ini:

Gambar 4.3 IP Route Setelah mengatur default route, kita akan mengkonfigurasi IP NAT . NAT digunakan untuk mentranslasikan dari IP local menjadi IP publik sehingga setiap IP

local

dapat

mengakses

Internet.

Beruikut

adalah

perintah

untuk

mengkonfigurasi NAT pada telnet :

[bakhtiar@MikroTik] > ip firewall nat [bakhtiar@MikroTik] /ip firewall nat>add action=src-nat chain=srcnat comment=""

disabled=no

addresses=120.29.156.195

protocol=tcp

src-address=10.36.1.107

to-

78 [bakhtiar@MikroTik] /ip firewall nat>add action=dst-nat chain=dstnat comment="" disabled=no dst-address=120.29.156.195 dst-port=80 protocol=tcp to-addresses=10.36.1.102 to-ports=80 [bakhtiar@MikroTik] /ip firewall nat>add action=src-nat chain=srcnat comment="" disabled=no to-addresses=120.29.156.195 [bakhtiar@MikroTik] /ip firewall nat>add action=dst-nat chain=dstnat comment=""

disabled=no

dst-address=120.29.156.195

dst-port=6101-6199

protocol=tcp to-addresses=10.36.1.111 to-ports=6101-6199 [bakhtiar@MikroTik] /ip firewall nat>add action=dst-nat chain=dstnat comment=""

disabled=no

dst-address=120.29.156.195

dst-port=6000-6100


disabled=no

dst-address=120.29.156.195

dst-port=6200-6299


disabled=no

dst-address=120.29.156.195

dst-port=6300-6399


disabled=no

dst-address=120.29.156.195

dst-port=6400-6499


disabled=no

dst-address=120.29.156.195

dst-port=6500-6599

protocol=tcp to-addresses=10.36.1.106 to-ports=6500-6599 Untuk melihat hasil perintah diatas dapat dilihat pada gambar dibawah ini:

79

Gambar 4.4 IP NAT Setelah mengkonfigurasi IP NAT kita akan mengkonfigurasi IP mangle yang digunakan untuk

memisahkan bandwith internasional, lokal,serta link

download lokal. Berikut adalah perintah yang digunakan untuk membuat mangle: [bakhtiar@MikroTik] > ip firewall mangle [bakhtiar@MikroTik] /ip firewall mangle>add action=add-dst-to-address-list address-list=download address-list-timeout=0s chain=prerouting comment="" content=.avi disabled=no dst-address-list=nice in-interface=bridge1 [bakhtiar@MikroTik] /ip firewall mangle>add action=add-dst-to-address-list address-list=download address-list-timeout=0s chain=prerouting comment="" content=.rar disabled=no dst-address-list=nice in-interface=bridge1

80 [bakhtiar@MikroTik] /ip firewall mangle>add action=add-dst-to-address-list address-list=download address-list-timeout=0s chain=prerouting comment="" content=.zip disabled=no dst-address-list=nice in-interface=bridge1 [bakhtiar@MikroTik] /ip firewall mangle>add action=add-dst-to-address-list address-list=download address-list-timeout=0s chain=prerouting comment="" content=.mpeg disabled=no dst-address-list=nice in-interface=bridge1 [bakhtiar@MikroTik] /ip firewall mangle>add action=add-dst-to-address-list address-list=download address-list-timeout=0s chain=prerouting comment="" content=.wmv disabled=no dst-address-list=nice in-interface=bridge1 [bakhtiar@MikroTik] /ip firewall mangle>add action=add-dst-to-address-list address-list=download address-list-timeout=0s chain=prerouting comment="" content=.flv disabled=no dst-address-list=nice in-interface=bridge1 [bakhtiar@MikroTik] /ip firewall mangle>add action=add-dst-to-address-list address-list=download address-list-timeout=0s chain=prerouting comment="" content=.mkv disabled=no dst-address-list=nice in-interface=bridge1 [bakhtiar@MikroTik] /ip firewall mangle>add action=add-dst-to-address-list address-list=download address-list-timeout=0s chain=prerouting comment="" content=.7z disabled=no dst-address-list=nice in-interface=bridge1 [bakhtiar@MikroTik] /ip firewall mangle>add action=add-dst-to-address-list address-list=download address-list-timeout=0s chain=prerouting comment="" content=.rm disabled=no dst-address-list=nice in-interface=bridge1 [bakhtiar@MikroTik] /ip firewall mangle>add action=add-dst-to-address-list address-list=download address-list-timeout=0s chain=prerouting comment="" content=.rmvb disabled=no dst-address-list=nice in-interface=bridge1

81 [bakhtiar@MikroTik] /ip firewall mangle>add action=add-dst-to-address-list address-list=download address-list-timeout=0s chain=prerouting comment="" content=.mp3 disabled=no dst-address-list=nice in-interface=bridge1 [bakhtiar@MikroTik] /ip firewall mangle>add action=add-dst-to-address-list address-list=download address-list-timeout=0s chain=prerouting comment="" content=.mp4 disabled=no dst-address-list=nice in-interface=bridge1 [bakhtiar@MikroTik] /ip firewall mangle>add action=add-dst-to-address-list address-list=download address-list-timeout=0s chain=prerouting comment="" content=.exe disabled=no dst-address-list=nice in-interface=bridge1 [bakhtiar@MikroTik] /ip firewall mangle>add action=add-dst-to-address-list address-list=download address-list-timeout=0s chain=prerouting comment="" content=.iso disabled=no dst-address-list=nice in-interface=bridge1 [bakhtiar@MikroTik] /ip firewall mangle>add action=add-dst-to-address-list address-list=download address-list-timeout=0s chain=prerouting comment="" content=.001 disabled=no dst-address-list=nice in-interface=bridge1 [bakhtiar@MikroTik] /ip firewall mangle>add action=add-dst-to-address-list address-list=download address-list-timeout=0s chain=prerouting comment="" content=.002 disabled=no dst-address-list=nice in-interface=bridge1 [bakhtiar@MikroTik] /ip firewall mangle>add action=add-dst-to-address-list address-list=download address-list-timeout=0s chain=prerouting comment="" content=.003 disabled=no dst-address-list=nice in-interface=bridge1 [bakhtiar@MikroTik] /ip firewall mangle>add action=add-dst-to-address-list address-list=download address-list-timeout=0s chain=prerouting comment="" content=.004 disabled=no dst-address-list=nice in-interface=bridge1

82 [bakhtiar@MikroTik] /ip firewall mangle>add action=add-dst-to-address-list address-list=download address-list-timeout=0s chain=prerouting comment="" content=.005 disabled=no dst-address-list=nice in-interface=bridge1 [bakhtiar@MikroTik] /ip firewall mangle>add action=add-dst-to-address-list address-list=download address-list-timeout=0s chain=prerouting comment="" content=.006 disabled=no dst-address-list=nice in-interface=bridge1 [bakhtiar@MikroTik] /ip firewall mangle>add action=add-dst-to-address-list address-list=download address-list-timeout=0s chain=prerouting comment="" content=.007 disabled=no dst-address-list=nice in-interface=bridge1 [bakhtiar@MikroTik] /ip firewall mangle>add action=add-dst-to-address-list address-list=download address-list-timeout=0s chain=prerouting comment="" content=.008 disabled=no dst-address-list=nice in-interface=bridge1 [bakhtiar@MikroTik] /ip firewall mangle>add action=add-dst-to-address-list address-list=download address-list-timeout=0s chain=prerouting comment="" content=.009 disabled=no dst-address-list=nice in-interface=bridge1 [bakhtiar@MikroTik] /ip firewall mangle>add action=mark-connection chain=prerouting

comment=""

disabled=no

dst-address-list=download

in-

interface=bridge1 new-connection-mark=con-download passthrough=yes [bakhtiar@MikroTik]

/ip

firewall

mangle>add

action=mark-packet

chain=prerouting comment="" connection-mark=con-download disabled=no new-packet-mark=paket-DL-IIX passthrough=no [bakhtiar@MikroTik] /ip firewall mangle>add action=mark-connection chain=prerouting

comment=""

disabled=no

dst-address-list=nice

interface=bridge1 new-connection-mark=con-lokal passthrough=yes

in-

83 [bakhtiar@MikroTik]

/ip

firewall

mangle>add

action=mark-packet

chain=prerouting comment="" connection-mark=con-lokal disabled=no newpacket-mark=paket-lokal passthrough=no [bakhtiar@MikroTik] chain=prerouting

/ip

comment=""

firewall

mangle>add

disabled=no

action=mark-packet

new-packet-mark=paket-inter

passthrough=no Untuk melihat hasil perintah diatas dapat dilihat pada gambar dibawah ini:

Gambar 4.5 IP Manggle Untuk mengatur pemakaian bandwidth, kita menggunakan simple queue untuk mengatur besar bandwidth disetiap router. Berikut adalah konfigurasi yang dilakukan melalui telnet :

84

[bakhtiar@MikroTik] > queue simple [bakhtiar@MikroTik] /queue simple>add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s comment=""direction=both disabled=no dst-address=0.0.0.0/0 interface=all

limit-at=0/0

max-limit=0/0

name=Parent-Lokal

packet-

marks=paket-lokal parent=none priority=8 queue=default-small/default-small target-addresses=10.36.1.0/24 total-queue=default-small [bakhtiar@MikroTik] /queue simple>add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s comment="" direction=both disabled=no dst-address=0.0.0.0/0 interface=all limit-at=0/0 max-limit=18M/17500k name=Parent-DL packetmarks=paket-DL-IIX parent=none priority=8 queue=default-small/default-small total-queue=default-small [bakhtiar@MikroTik] /queue simple>add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s comment="" direction=both disabled=no dst-address=0.0.0.0/0 interface=all limit-at=0/0 max-limit=1300k/1300k name=Parent-Inter packetmarks=paket-inter parent=none priority=8 queue=default-small/default-small total-queue=default-small [bakhtiar@MikroTik] /queue simple>add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s comment="" direction=both disabled=no dst-address=0.0.0.0/0 interface=all limit-at=2M/2M max-limit=15M/15M name="IIX_DL- Building A" parent=Parent-DL priority=8 queue=default-small/default-small targetaddresses=10.36.1.102/32 total-queue=default-small [bakhtiar@MikroTik] /queue simple>add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s comment="" direction=both disabled=no dst-address=0.0.0.0/0

85 interface=all limit-at=384k/384k max-limit=1M/1M name="inter-Building A" parent=Parent-Inter

priority=8

queue=default-small/default-small

target-

addresses= 10.36.1.102/32 total-queue=default-small [bakhtiar@MikroTik] /queue simple>add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s comment="" direction=both disabled=no dst-address=0.0.0.0/0 interface=all limit-at=2M/2M max-limit=15M/15M name="IIX_DL- Building B" parent=Parent-DL priority=8 queue=default-small/default-small targetaddresses=10.36.1.103/32 total-queue=default-small [bakhtiar@MikroTik] /queue simple>add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s comment="" direction=both disabled=no dst-address=0.0.0.0/0 interface=all limit-at=2M/2M max-limit=15M/15M name="IIX_DL- Building E" parent=Parent-DL priority=8 queue=default-small/default-small targetaddresses=10.36.1.110/32 total-queue=default-small [bakhtiar@MikroTik] /queue simple>add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s comment="" direction=both disabled=no dst-address=0.0.0.0/0 interface=all limit-at=2M/2M max-limit=15M/15M name="IIX_DL- Building C" parent=Parent-DL

priority=8 queue=default-small/default-small target-

addresses=10.36.1.105/32 total-queue=default-small [bakhtiar@MikroTik] /queue simple>add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s comment="" direction=both disabled=no dst-address=0.0.0.0/0 interface=all limit-at=2M/2M max-limit=15M/15M name="IIX_DL- Building D" parent=Parent-DL priority=8 queue=default-small/default-small targetaddresses=10.36.1.106/32 total-queue=default-small

86 [bakhtiar@MikroTik] /queue simple>add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s comment="" direction=both disabled=no dst-address=0.0.0.0/0 interface=all limit-at=2M/2M max-limit=15M/15M name="IIX_DL- Building F" parent=Parent-DL

priority=8


target-

addresses=10.36.1.111/32 total-queue=default-small [bakhtiar@MikroTik] /queue simple>add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s comment="" direction=both disabled=no dst-address=0.0.0.0/0 interface=all limit-at=128k/128k max-limit=1M/1M name="inter-Building B" parent=Parent-Inter

priority=8


target-

addresses=10.36.1.103/32 total-queue=default-small [bakhtiar@MikroTik] /queue simple>add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s comment="" direction=both disabled=no dst-address=0.0.0.0/0 interface=all limit-at=128k/128k max-limit=1M/1M name="inter-Building C" parent=Parent-Inter

priority=8


target-

addresses=10.36.1.105/32 total-queue=default-small [bakhtiar@MikroTik] /queue simple>add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s comment=""direction=both disabled=no dst-address=0.0.0.0/0 interface=all limit-at=384k/384k max-limit=1M/1M name="inter-Building D" parent=Parent-Inter

priority=8


target-

addresses=10.36.1.106/32 total-queue=default-small [bakhtiar@MikroTik] /queue simple>add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s comment="" direction=both disabled=no dst-address=0.0.0.0/0 interface=all limit-at=128k/128k max-limit=1M/1M name="inter-Building E"

87 parent=Parent-Inter

priority=8


target-

addresses=10.36.1.110/32 total-queue=default-small [bakhtiar@MikroTik] /queue simple>add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s comment="" direction=both disabled=no dst-address=0.0.0.0/0 interface=all limit-at=128k/128k max-limit=1M/1M name="inter-Building F" parent=Parent-Inter

priority=8


target-

addresses=10.36.1.111/32 total-queue=default-small [bakhtiar@MikroTik] /queue simple>add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s comment="" direction=both disabled=no dst-address=0.0.0.0/0 interface=all

limit-at=64k/64k

parent=Parent-Inter

priority=8

max-limit=128k/128k

name=Irfandi-Slipi


target-

addresses=172.16.20.2/32 total-queue=default-small [bakhtiar@MikroTik] /queue simple>add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s comment="" direction=both disabled=no dst-address=0.0.0.0/0 interface=all limit-at=512k/512k max-limit=1M/1M name=IIX-DL-Irfandi-Slipi parent=Parent-DL

priority=8


target-

addresses=172.16.20.2/32 total-queue=default-small [bakhtiar@MikroTik] /queue simple>add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s comment="" direction=both disabled=no dst-address=0.0.0.0/0 interface=all limit-at=128k/128k max-limit=1M/1M name=107 parent=ParentInter

priority=8


addresses=10.36.1.107/32 total-queue=default-small

target-

88

[bakhtiar@MikroTik] /queue simple>add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s comment="" direction=both disabled=no dst-address=0.0.0.0/0 interface=all limit-at=2M/2M max-limit=15M/17M name=107-dl parent=ParentDL

priority=8


target-


limit-at=512k/512k

parent=Parent-DL

priority=8

max-limit=2M/2M

name=Davin-DL


target-


limit-at=64k/64k

parent=Parent-Inter

priority=8

max-limit=128k/128k

name=Davin-inter


target-


limit-at=512k/512k

parent=Parent-DL

priority=8

max-limit=2M/2M

name=Michael-DL



target-

89 [bakhtiar@MikroTik] /queue simple>add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s comment="" direction=both disabled=no dst-address=0.0.0.0/0 interface=all

limit-at=64k/64k

parent=Parent-Inter

priority=8

max-limit=128k/128k

name=Michael-Inter


target-

addresses=10.36.1.114/32 total-queue=default-small [bakhtiar@MikroTik] /queue simple>add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s comment="" direction=both disabled=no dst-address=0.0.0.0/0 interface=all limit-at=28k/128k max-limit=1M/1M name="Inter-Cakra 35" parent=Parent-Inter

priority=8


target-

addresses=10.36.1.115/32 total-queue=default-small [bakhtiar@MikroTik] /queue simple>add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s comment="" direction=both disabled=no dst-address=0.0.0.0/0 interface=all limit-at=2M/2M max-limit=15M/15M name="IIX_DL-Cakra 35" parent=Parent-DL

priority=8



target-

90 Dari gambar 4.6 dibawah ini adalah hasil dari pengkonfigurasian simple queue.

Gambar 4.6 Simple Queue

4.2.3 Konfigurasi Router Setiap Building Untuk menghubungkan antar gedung yang jaraknya sudah tidak dapat dijangkau lagi oleh kabel UTP, kita menggunakan media wireless sebagai pengganti kabel UTP untuk mengalirkan data. Dalam menggunakan media wireless, setidaknya dibutuhkan 1 perangkat wireless yang bertindak sebagai Access Point dan 1 Perangkat wireless yang digunakan sebagai station atau penerima. Dikarenakan konfigurasi setiap building sebagian besar adalah sama dan terlalu banyak untuk dibahas, maka kami akan memberikan contoh konfigurasi router +

wireless Building A yang berfungsi sebagai Wireless

91 Access Point serta Building B sebagai Station + Router. Berikut adalah konfigurasi mikrotik sebagai Access Point :

Gambar 4.7 Mikrotik Gedung A sebagai Access Point Untuk memfungsikan mikrotik sebagai Access Point hal-hal yang perlu dilakukan adalah sebagai berikut : 1. Pilih menu Wireless 2. Pilih interface yang akan dijadikan akses poin 3. Pada tab wireless Æ pilih mode ap bridge Ætentukan bandnya( frekuensi yang akan digunakan )Ætentukan frekuensi yang akan digunanÆmasukan SSID( Service Set Identifier ) harus unikÆtentukan range scan list ( untuk menscan jarak frekuensi yang digunakan untuk menangkap client

BAB 4 IMPLEMENTASI DAN EVALUASI

Recommend Documents