Setting Mikrotik Melalui CLI

Di artikel kali ini saya akan berbagi sedikit tentang cara mikrotik melalui settingan CLI, berhubungan sebentar lagi udah mau Ujian Kompetensi Kejuruan jadi saya mau berbagi sesuatu yang sedikit bermanfaat.

langsung saja ini settingannya

1. Mengganti nama interface
interface set 0 name=ether1-Public
interface set 1 name=ether2-LAN
interface set 2 name=ether3-Hotspot

2. Setting ip pada setiap interface
ip address add interface=ether1-Public address=192.168.1.2/24 network=192.168.1.0
ip address add interface=ether2-LAN address=192.168.50.1/27 network=192.168.50.0
ip address add interface=ether3-Hotspot address=10.10.10.1/24 network=10.10.10.0

3. Setting DNS
ip dns set servers=192.168.1.1 allow-remote-requests=yes

4. Setting IP Route
ip route add gateway=192.168.1.1

5. Setting clock
system ntp client set mode=unicast enabled=yes primary-ntp=203.160.128.6 secondary-ntp=203.169.224.16
system clock set time-zone-name=Asia/Makassar

6. Setting NAT
ip firewall add chain=srcnat out-interface=ether1-Public action=masquerade

7.Setting DHCP server
ip dhcp-server setup
(*interface isi dengan ether2-LAN)
(*enter)
(*enter)
(*enter)
(*enter)
(*enter)
(*enter)
system reboot

8. Setting hotspot
ip hotspot setup
(*enter)
(*enter)
(*enter)
(*enter)
(*sertificate ganti menjadi none)
(*enter)
(*enter)
(*dns name : <alamatlogin> contoh login.com)
(*user password : admin admin)

9. Anti Clonning mac
ip hotspsot set hotspot1 addresses-per-mac=1

a. limit bandwidth
ip hotspot user profile add name=user256 address-pool=hs-pool-3 rate-limit=256k/256k shared-users=10
ip hotspot user profile add name=user512 rate-limit=512k/512k shared-users=15

b. user login
ip hotspot user add name=256k password=256k profile=user256 server=hotspot1
ip hotspot user add name=512k password=512k profile=user512 server=hotspot1

c. ip proxy
ip proxy set enabled=yes port=3128 cache-administrator=*alamat email* max-cache-size=unlimited cache-on-disk=yes max-client-connections=1000 max-server-connections=1000 always-from-cache=yes

-memblokir web-
ip proxy access add src-address=0.0.0.0/0 dst-host=www.facebook.com action=deny
ip proxy access add src-address=0.0.0.0/0 dst-host=www.youtube.com action=deny

d. setting nat menjadi proxy
ip firewall nat add chain=dstnat dst-port=53 protocol=tcp action=redirect to-ports=53
ip firewall nat add chain=dstnat dst-port=53 protocol=udp action=redirect to-ports=53
ip firewall nat add chain=dstnat dst-port=80 protocol=tcp action=redirect to-ports=3128
ip firewall nat add chain=dstnat dst-port=8080 protocol=tcp action=redirect to-ports=3128
ip firewall nat add chain=dstnat dst-port=8000 protocol=tcp action=redirect to-ports=3128

system reboot


sudah selesai, saya sudah coba dan berhasil jika ada problem post di komentar saja atau chat ke admin di facebook

kurang lebihnya mohon maaf
terimakasih sudah menyimak
semoga bermanfaat