Thread: (nanya) bagaimana setingan 2 tingkat mikrotik

topologi:

bagaimana mengkoneksikan rb1 dan rb2?
kete ;
1. ping dari rb2 ke rb1 sudah bisa
2. pada rb 1 ada usermanager
3. rb 1 sudah berjalan normal, dan dipakai user
4. rb2 sepertinya setingan sudah lengkap, tapi ga bisa ping ke yahoo.com
mohon petunjuk, link, dll, sebelumnya terima kasih

Originally Posted by naga wulan

topologi:

bagaimana mengkoneksikan rb1 dan rb2?
kete ;
1. ping dari rb2 ke rb1 sudah bisa
2. pada rb 1 ada usermanager
3. rb 1 sudah berjalan normal, dan dipakai user
4. rb2 sepertinya setingan sudah lengkap, tapi ga bisa ping ke yahoo.com
mohon petunjuk, link, dll, sebelumnya terima kasih

mari dishare disini untuk settingan yang rb2 om,
sebenernya langkah awal cek dulu untuk settingan gateway dan nat nya...
coba di cek lagi om...

nat rb2

0 chain=srcnat action=masquerade out-interface=Modem

raoute rb2
# DST-ADDRESS PREF-SRC G GATEWAY DISTANCE INTERFACE
0 A S 0.0.0.0/0 r 192.168.1.2 1 Modem
1 ADC 192.168.0.0/24 192.168.0.30 0 Lan
2 ADC 192.168.1.0/24 192.168.1.2 0 Modem

mohon analisanya gann..

Originally Posted by naga wulan

nat rb2

0 chain=srcnat action=masquerade out-interface=Modem

raoute rb2
# DST-ADDRESS PREF-SRC G GATEWAY DISTANCE INTERFACE
0 A S 0.0.0.0/0 r 192.168.1.2 1 Modem
1 ADC 192.168.0.0/24 192.168.0.30 0 Lan
2 ADC 192.168.1.0/24 192.168.1.2 0 Modem

mohon analisanya gann..

interface modem itu ada di RB1 ya?
bisa diperjelas topologinya, sekalian IP dan PORT di RB1 dan RB2, biar mudah dianalisa dan routingnya.

Originally Posted by naga wulan

nat rb2

0 chain=srcnat action=masquerade out-interface=Modem

raoute rb2
# DST-ADDRESS PREF-SRC G GATEWAY DISTANCE INTERFACE
0 A S 0.0.0.0/0 r 192.168.1.2 1 Modem
1 ADC 192.168.0.0/24 192.168.0.30 0 Lan
2 ADC 192.168.1.0/24 192.168.1.2 0 Modem

mohon analisanya gann..

Iya gan kan modem ada di rb1 kok di rb2 ada interface modemnya??? cb dishare disini settingan rb1 dan rb2 nya gan biar jelas and bisa dibantu ama yang laen.

rb1
[admin@MikroTik] > ip address pr
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK BROADCAST INTERFACE
0 192.168.1.2/24 192.168.1.0 192.168.1.255 Modem
1 192.168.0.1/24 192.168.0.0 192.168.0.255 Lan
2 D xxx.xx.xxx.xx/32 118.96.200.1 0.0.0.0 pppoe-out1
[admin@MikroTik] > interface pr
Flags: D - dynamic, X - disabled, R - running, S - slave
# NAME TYPE MTU L2MTU
0 R Modem ether 1500 1526
1 R Lan ether 1500 1524
2 R ether3 ether 1500 1524
3 ether4 ether 1500 1524
4 ether5 ether 1500 1524
5 R pppoe-out1 pppoe-out 1480
[admin@MikroTik] > ip firewall filter-rule pr
bad command name filter-rule (line 1 column 13)
[admin@MikroTik] > ip fi fi pr
Flags: X - disabled, I - invalid, D - dynamic
0 X ;;; place hotspot rules here
chain=unused-hs-chain action=passthrough

1 ;;; izinkan yang bayar
chain=forward action=accept src-address-list=allowed

2 chain=forward action=accept dst-address-list=allowed

3 ;;; blokir yang belum bayar
chain=forward action=drop src-address-list=!allowed

4 chain=forward action=drop dst-address-list=!allowed

5 ;;; Allow semua akses internet to client
chain=forward action=accept dst-address=192.168.0.0/24
in-interface=pppoe-out1 out-interface=Lan

6 ;;; Allow Remote winbox dari Publik
chain=input action=accept protocol=tcp in-interface=pppoe-out1
dst-port=8291

7 ;;; remote userman
chain=input action=accept protocol=tcp in-interface=pppoe-out1
dst-port=81

8 ;;; Allow DNS Traffic
chain=input action=accept protocol=udp in-interface=pppoe-out1
src-port=53

9 ;;; Allow Ping Traceroute Traffic
chain=input action=accept protocol=icmp in-interface=pppoe-out1

10 ;;; Log Ip Yang Di Tolak
chain=input action=add-src-to-address-list connection-state=new
address-list=spam address-list-timeout=30m in-interface=pppoe-out1

11 ;;; Drop Semua Akses yang tidak di ijinkan
chain=input action=drop in-interface=pppoe-out1

[admin@MikroTik] > ip fi nat pr
Flags: X - disabled, I - invalid, D - dynamic
0 X ;;; place hotspot rules here
chain=unused-hs-chain action=passthrough

1 X chain=srcnat action=masquerade out-interface=Modem

2 ;;; masquerade hotspot network
chain=srcnat action=masquerade src-address=192.168.0.0/24

3 chain=srcnat action=masquerade out-interface=Modem
[admin@MikroTik] > ip route pr
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC G GATEWAY DISTANCE IN..
0 X S 0.0.0.0/0 192.168.1.1 1
1 ADS 0.0.0.0/0 r 118.96.200.1 1 pp..
2 ADC 118.96.200.1/32 xxx.xx.xxx.xx 0 pp..
3 ADC 192.168.0.0/24 192.168.0.1 0 Lan
4 ADC 192.168.1.0/24 192.168.1.2 0 Mo..
[admin@MikroTik] > ip pool pr
# NAME RANGES
0 dhcp-pool 192.168.0.1-192.168.0.254
1 dhcp_pool1 192.168.0.2-192.168.0.254

rb 2

[admin@MikroTik] > ip address pr
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK BROADCAST INTERFACE
0 192.168.1.2/24 192.168.1.0 192.168.1.255 Modem
1 192.168.0.30/24 192.168.0.0 192.168.0.255 Lan
[admin@MikroTik] > ip fi fi pr
Flags: X - disabled, I - invalid, D - dynamic
[admin@MikroTik] > ip nat pr
bad command name nat (line 1 column 4)
[admin@MikroTik] > ip fi nat pr
Flags: X - disabled, I - invalid, D - dynamic
0 chain=srcnat action=masquerade out-interface=Modem
[admin@MikroTik] > interface pr
Flags: D - dynamic, X - disabled, R - running, S - slave
# NAME TYPE MTU L2MTU
0 Modem ether 1500 1526
1 R Lan ether 1500 1524
2 ether3 ether 1500 1524
3 R ether4 ether 1500 1524
4 ether5 ether 1500 1524

terima kasih responnya. yang modem di rb2 itu memang interface (Lan) dari rb1, DNS rb2 disamain dengan DNS rb1 (DNS speedy), gateway seingat saya memang sudah interface dari rb1,
mohon penjelasannya apa lagi yang harus saya ganti, mungkin saya kurang menangkap maksud agan yang di atas?