Follow us on...
Follow us on G+ Follow us on Twitter Follow us on Facebook Watch us on YouTube
Register
Page 1 of 2 12 LastLast
Results 1 to 15 of 20
  1. #1
    Status
    Offline
    farelio's Avatar
    Newbie
    Join Date
    Aug 2007
    Posts
    54
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0

    Smile (ask) biar gak bisa gonta ganti ip ...

    teman2 aku mau tanya neeh ... gimana cara ngeblock kompi user agar mereka tidak bisa seenaknya ganti ganti IP addres untuk informasi begini topologi jaringanya


    -----ispA---------mikrotik1-----switch-hub------mikrotik2-------ispB--------
    ---------------------------------\/----------------------------------------
    user1-----user2--------user3--------user4--------user5



    mikrotik 1 :
    ip publik : 202.xxx.xxx.xxx
    ip local : 192.168.0.150/24

    mikrotik2 :
    ip publik :123.xxx.xxx.xxx
    ip local : 10.0.0.1/24

    jumlah client kurang lebih 100 dengan pembagian 50 untuk mikrotik1, 50 lagi untuk mikrotik2, switch-hub jadi 1 ... permasalahan yang sering terjadi user suka ganti ip address bila dirasa koneksi di mikrotik1 menjadi lambat dan mereka mengganti ke ip mikrotik2 ...atau sebaliknya.... yang ingin saya tanyakan bagaimana agar masing2 user tidak bisa mengganti ipaddress...ataupun mereka bisa mengganti ipaddress koneksi mereka menjadi terputus ( keblock ) ... bagaimana script di firewall filter utk ngeblock koneksi baik itu untuk ip addrs or mac addrs ... terimakasih sebelumnya atas pencerahanya ....salam
    Last edited by farelio; 17-08-2007 at 18:39. Reason: jadi berantakan

  2. #2
    Status
    Offline
    [a]
    [a]'s Avatar
    Administrator
    Join Date
    Jun 2007
    Location
    Jakarta, Indonesia, Indonesia
    Posts
    1,729
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    1 (100%)
    di set arpnya jadi reply only...

    masalah ini pernah dibahas di thread2 sebelumnya..silahkan gunakan fasilitas search yahh...

    Click here to enlarge

  3. The Following User Says Thank You to [a] For This Useful Post:


  4. #3
    Status
    Offline
    farelio's Avatar
    Newbie
    Join Date
    Aug 2007
    Posts
    54
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by [a] Click here to enlarge
    di set arpnya jadi reply only...

    masalah ini pernah dibahas di thread2 sebelumnya..silahkan gunakan fasilitas search yahh...

    Click here to enlarge
    ada cara lain gak bro ... soalnya aku pernah pake cara itu malah jadi gak bisa connect semua Click here to enlarge

  5. #4
    Status
    Offline
    [a]
    [a]'s Avatar
    Administrator
    Join Date
    Jun 2007
    Location
    Jakarta, Indonesia, Indonesia
    Posts
    1,729
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    1 (100%)
    bisa connect dunks...

    nanti klo dah diset reply only,

    entry arp di ARP list musti dibikin static untuk pc2 yang boleh connect ajah...

    jadi misalnya PC1, mac addrnya : xxxx, musti diset static...

  6. #5
    Status
    Offline
    farelio's Avatar
    Newbie
    Join Date
    Aug 2007
    Posts
    54
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by [a] Click here to enlarge
    bisa connect dunks...

    nanti klo dah diset reply only,

    entry arp di ARP list musti dibikin static untuk pc2 yang boleh connect ajah...

    jadi misalnya PC1, mac addrnya : xxxx, musti diset static...
    cara ngebikin reply-only gini khan ...... di dialog winbox klik interface ... trus pilih salah satu ethernet ... di tab ARP pilih reply-only ........ maaf bila ada yang salahClick here to enlarge

  7. #6
    Status
    Offline
    [a]
    [a]'s Avatar
    Administrator
    Join Date
    Jun 2007
    Location
    Jakarta, Indonesia, Indonesia
    Posts
    1,729
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    1 (100%)
    tulll...


    lanjut dgn settingan static-nya yah.

    good luck..

  8. #7
    Status
    Offline
    farelio's Avatar
    Newbie
    Join Date
    Aug 2007
    Posts
    54
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by [a] Click here to enlarge
    tulll...


    lanjut dgn settingan static-nya yah.

    good luck..

    ok thanks bro ...... Click here to enlargeClick here to enlargeClick here to enlarge

  9. #8
    Status
    Offline
    locantop's Avatar
    Member
    Join Date
    Jul 2007
    Posts
    268
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by [a] Click here to enlarge
    di set arpnya jadi reply only...

    masalah ini pernah dibahas di thread2 sebelumnya..silahkan gunakan fasilitas search yahh...

    Click here to enlarge
    cara supaya bisa jadi reply only dimana? kok ga ada yah pilihan di arp nya....

  10. #9
    Status
    Offline
    nux
    nux's Avatar
    Member
    Join Date
    Jul 2007
    Posts
    268
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    di interface pilih salah satu (interface), nanti di ARP ada pilihan: enabled, disabled, proxy-arp, reply-only. nah....

  11. #10
    Status
    Offline
    locantop's Avatar
    Member
    Join Date
    Jul 2007
    Posts
    268
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by nux Click here to enlarge
    di interface pilih salah satu (interface), nanti di ARP ada pilihan: enabled, disabled, proxy-arp, reply-only. nah....
    aduh gawat kok ga ada pilihan reply-only nya......

  12. #11
    Status
    Offline
    lini's Avatar
    Forum Guru
    Join Date
    Sep 2007
    Location
    Karawaci
    Posts
    1,961
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    2 (100%)
    Click here to enlarge Originally Posted by locantop Click here to enlarge
    aduh gawat kok ga ada pilihan reply-only nya......
    berarti bukan mikrotik kale tuh Click here to enlarge mie kriting

  13. #12
    Status
    Offline
    locantop's Avatar
    Member
    Join Date
    Jul 2007
    Posts
    268
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by lini Click here to enlarge
    berarti bukan mikrotik kale tuh Click here to enlarge mie kriting
    ah bos lini ini bisa aje hehehe. Udah ketemu hehe.itu di set semua interface?
    Last edited by locantop; 03-12-2007 at 20:43.

  14. #13
    Status
    Offline
    ponywaterhouse's Avatar
    Forum Guru
    Join Date
    Jul 2007
    Posts
    1,507
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by locantop Click here to enlarge
    ah bos lini ini bisa aje hehehe. Udah ketemu hehe.itu di set semua interface?
    cukup ke interface yg ada klien nya aja sih..

  15. #14
    Status
    Offline
    t3rm's Avatar
    Member Super Senior
    Join Date
    Aug 2007
    Posts
    665
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Wah ini masih mengandalkan mac-address ..Click here to enlarge

    Hari geenee kan tool untuk berbuat kenakalan makin banyak. Kalau mac nya diganti - ganti gimana ? atau disesuaikan dengan yang boleh login ke system ?

    PPPoE menurut saya lebih baik, CMIIW

  16. #15
    Status
    Offline
    [a]
    [a]'s Avatar
    Administrator
    Join Date
    Jun 2007
    Location
    Jakarta, Indonesia, Indonesia
    Posts
    1,729
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    1 (100%)
    tiap konfigurasi keamanan pasti ada celah...ga ada satupun satu sistem didunia ini yang 'cracker proof'....klo blum ada celah, bukan berarti ga bakal ada....

    nah, yang setidaknya kita bisa perbuat adalah 'mempersulit' langkah para 'cracker' untuk menembus sistem kita....

    PPPoE memang bagus, namun klo client yg dimaksud adalah PC di kantor yg notabene bisa sampe diatas 200 pc, konfigurasi kaya gini menurut gua malah ga efisien...tlalu njelimet dan resource extensive....klo untuk client yg jumlahnya ga banyak, boleh juga kok....

    just my opinion yahh Click here to enlarge

  17. The Following User Says Thank You to [a] For This Useful Post:


 

 
Page 1 of 2 12 LastLast

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •