Brian7

UKK Paket 2

-->> Gateway Internet, Webproxy, DHCP Server
     dan Firewall, kemudian internet tersebut dishare
     ke client melalui jalur kabel dan wireless

GATEWAY INTERNET

1. eth1 : IP ISP
    IP > DHCP client > add
    interface > eth1

2. eth2 : 192.168.xxx.1/24
    IP > Addresses > add
    interface : eth2

3. IP > DHCP server
    IP pool : 192.168.xxx.2 - 192.168.xxx.10
    DHCP setup : eth2 & wlan

4. IP > firewall
    NAT > add
        chain : srcnat
        out.interface : eth1
        action : masquerade
5. IP > DNS
    (ceklis) allow remote request

6. test ping dari terminal winbox ke www.google.com

7. test ping dari PC client di CMD ke www.google.com
   (pastikan pengaturan IP di adapter setting LAN di obtain)

8. wlan : 192.168.xxx.1/24
    wireless > diaktifkan (ceklis)
    IP > Addresses > add
    interface : wlan

9. wireless
    mode : ap bridge
    SSID : nama_kalian@XIIKJB

10. cek wifi di client (hp/laptop) sudah muncul belum



PENJADWALAN AKSES WIFI

1. cek time router
   system > SNTP clients
    (ceklis) enabled
    primary NTP server : id.pool.ntp.org atau
                 202.168.32.12
2. system > clock
    (ceklis) Time Zone Autodetect
    Time zone name : Asia/Jakarta

3. IP > firewall > add
    chain : forward
    in.interface : wlan (akses yg di blokir dari wifi)
    out.interface : eth1
    action : drop
    time : 19:00:00 - 23:59:00
    (copy > time ) : 00:00:00 - 07:00:00

4. test di cmd client ping -t ke internet
   ubah clock : (jgn ceklis) time zone autodetect
   pilih wilayah yg jam nya sekitar waktu yg di blokir
   filter rulesnya di disable & enable kembali


PROXY

1. IP > Web Proxy
    (ceklis) enabled
    cache administrator : nama@sekolah.sch.id
   IP > Firewall > NAT
    chain : dstnat
    in.interface : wlan
    action : redirect
    to port : 8080
    protocol : tcp
    dst.port : 80
   IP > Web Proxy
    acces > add
        dst.host : www.linux.or.id
        action : deny
    acces > add
        path : *.mp3*   action :deny
    acces > add
        path : *.mkv*   action :deny

2. test di browser client yg menggunakan wifi,
   alamat www.linux.or.id

3. test download mp3 dan mkv

UKK PAKET 3

--->>> Gateway internet menggunakan IP static,
    blokir site youtube, HotSpot, bypass alamat,
    membuat user untuk HotSpot, dan mengubah
    tampilan login HotSpot


GATEWAY INTERNET STATIC

1. IP > address
    eth1 : 192.168.1.10/24
    eth2 : 192.168.100.1/24

2. IP > Routes > add
    Dst.add : 0.0.0.0/0
    gateway : 192.168.1.1

3. ping di terminal winbox ke gateway

4. IP > DNS
    (ceklis) allow remote request
    servers : 8.8.8.8 dan 8.8.4.4
   test ping google.com

5. atur IP PC Client
    IP : 192.168.100.xxx
    subnetmask : 255.255.255.0
    gateway : 192.168.100.1
    DNS : 192.168.100.1

6. IP > firewall > NAT > add
    chain : srcnat
    out.interface : eth1
    action : masquerade

7. test ping google dari client


BLOKIR SITE YOUTUBE

1. IP > firewall > layer 7 protocol > add
    name : youtube
    regexp : ^.+(youtube).*$

   IP > firewall > filter rules > add
    chain : forward
    layer 7 protocol : youtube
    action : drop
    in.interface : eth2
  test buka youtube di client


HOTSPOT

1. IP > address > add
    wlan : 192.168.200.1/24
   wireless di klik enable
    SSID : nama@XIIKJB
    mode : ap bridge

2. IP > hotspot > hotspot setup
    interface : wlan
    masquerade (jangan di ceklis)
    address pool : .2 - .10
    DNS name : nama.com


BYPASS ALAMAT

1. IP > hotspot > walled garden > add
    action : allow
    Dst.host : bsnp-indonesia.org


USER HOTSPOT

1. IP > hotspot > user profile > add
    name : guru
  (copy)name : siswa    rate limit : 256K

2. IP > hotspot > user > add
    name : siswa
    password : siswa
    profile : siswa
  (copy) -->> buat untuk guru
Test hotspot, login, test bandwidth : speedtest.cbn.net.id

3. agar tdk otomatis login saat sudah logout
  IP > hotspot > servers profile > klik hsprof
    login : (jangan ceklis) cookie


TAMPILAN LOGIN HOTSPOT

1. file > login.html -->> drag ke desktop > edit (notepad)