Follow us on...
Follow us on G+ Follow us on Twitter Follow us on Facebook Watch us on YouTube
Register
Results 1 to 8 of 8
  1. #1
    Status
    Offline
    kaspo's Avatar
    Newbie
    Join Date
    Dec 2009
    Posts
    59
    Reviews
    Read 0 Reviews
    Downloads
    1
    Uploads
    0
    Feedback Score
    0

    [ASK] Web server supaya gak kelimit di jaringan yang berbeda

    saya punya web server di 192.168.10.100. supaya jaringan saya yang 192.168.50.0/24 bisa akses tanpa kelimit bandwith gimana caranya.

    misalnya ip 192.168.50.10 untuk akses internet saya limit hanya 15k/15k. tapi untuk akses web server 192.168.10.100 tidak kelimit.

    saya udah coba ini tapi belum berhasil :

    0 chain=prerouting action=mark-connection new-connection-mark=con-server
    passthrough=yes src-address=192.168.50.0/24 dst-address=192.168.10.100

    1 chain=prerouting action=mark-packet new-packet-mark=unlimit passthrough=no
    connection-mark=con-server


    [black@Jogja] > /queue simple print
    Flags: X - disabled, I - invalid, D - dynamic
    0 name="unlimit" dst-address=0.0.0.0/0 interface=all parent=none
    packet-marks=unlimit direction=both priority=8
    queue=default-small/default-small limit-at=0/0 max-limit=0/0
    burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
    total-queue=default-small

    1 name="queue1" target-addresses=192.168.50.10/32 dst-address=0.0.0.0/0
    interface=all parent=none direction=both priority=8
    queue=default-small/default-small limit-at=0/0 max-limit=15k/15k
    burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
    total-queue=default-small


    trims.

  2. #2
    Status
    Offline
    kaspo's Avatar
    Newbie
    Join Date
    Dec 2009
    Posts
    59
    Reviews
    Read 0 Reviews
    Downloads
    1
    Uploads
    0
    Feedback Score
    0
    Belum ada yang mampir ya?

  3. #3
    Status
    Offline
    siber's Avatar
    Member Super Senior
    Join Date
    Oct 2009
    Location
    www.hikmah-teknologi.com
    Posts
    616
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    di mangle nya tambahin dst-adress !192.168.10.100

  4. #4
    Status
    Offline
    xeon's Avatar
    Verified Account - Partner
    Join Date
    Mar 2008
    Location
    DKI Jakarta
    Posts
    1,539
    Reviews
    Read 0 Reviews
    Downloads
    3
    Uploads
    0
    Feedback Score
    2 (100%)
    Click here to enlarge Originally Posted by kaspo Click here to enlarge
    saya punya web server di 192.168.10.100. supaya jaringan saya yang 192.168.50.0/24 bisa akses tanpa kelimit bandwith gimana caranya.

    misalnya ip 192.168.50.10 untuk akses internet saya limit hanya 15k/15k. tapi untuk akses web server 192.168.10.100 tidak kelimit.

    saya udah coba ini tapi belum berhasil :

    0 chain=prerouting action=mark-connection new-connection-mark=con-server
    passthrough=yes src-address=192.168.50.0/24 dst-address=192.168.10.100

    1 chain=prerouting action=mark-packet new-packet-mark=unlimit passthrough=no
    connection-mark=con-server


    [black@Jogja] > /queue simple print
    Flags: X - disabled, I - invalid, D - dynamic
    0 name="unlimit" dst-address=0.0.0.0/0 interface=all parent=none
    packet-marks=unlimit direction=both priority=8
    queue=default-small/default-small limit-at=0/0 max-limit=0/0
    burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
    total-queue=default-small

    1 name="queue1" target-addresses=192.168.50.10/32 dst-address=0.0.0.0/0
    interface=all parent=none direction=both priority=8
    queue=default-small/default-small limit-at=0/0 max-limit=15k/15k
    burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
    total-queue=default-small


    trims.
    Simple queue dibuang, diganti pake queue tree, pasti jalan. Buat lagi mangle buat ke internet.

  5. #5
    Status
    Offline
    tukangkabel's Avatar
    Member
    Join Date
    Dec 2009
    Location
    dimana ada proyek
    Posts
    134
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    4 (100%)
    kalau saya menggunakan trik seperti berikut

    - untuk network local saya masukin dalam addresslist
    /ip firewall address-list
    add address=192.168.22.0/24 comment="" disabled=no list=local
    add address=192.168.1.0/30 comment="" disabled=no list=local
    add address=192.168.12.252/30 comment="" disabled=no list=local


    lalu saya mangle untuk chain forward dari address list local menuju address list local dan pada passtrough nya no dengan tujuan semua paket dari local menuju local di loss kan saja..
    /ip firewall mangle
    add action=mark-packet chain=forward comment=local disabled=no \
    dst-address-list=local new-packet-mark=mp_local passthrough=no \
    src-address-list=local


    setelah mangle mp_local saya bikin.. baru kemudian mangle2 lainnya yang bertujuan untuk di queue di taroh di bawah mangle mp_local tersebut.. agar selain paket yg menuju local atau dari local dapat di mangle dan di lanjutkan pada queue.. saya menggunakan queue tree..

    semoga bermanfaat.. CMIIWClick here to enlarge

  6. #6
    Status
    Offline
    yosanpro's Avatar
    Co-Admin
    Join Date
    Nov 2007
    Location
    Bantul, Bantul, Yogyakarta
    Posts
    2,548
    Reviews
    Read 0 Reviews
    Downloads
    11
    Uploads
    4
    Feedback Score
    1 (100%)
    Paling enak pake queue tree itu, kalo pake simple queue susah implementasinya...

    Coba liad-liad tutorial dulu deh...

  7. #7
    Status
    Offline
    yulley's Avatar
    Baru Gabung
    Join Date
    Jul 2007
    Posts
    5
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    klo usernya dilimit dari user manager, apa caranya juga sama buat bypass limit ke web server?

    mohon pencerahannya... thanks...

  8. #8
    Status
    Offline
    ucok_karnadi's Avatar
    ..:: Masih Bodoh ::..
    Join Date
    Jan 2009
    Location
    PATI - JAWA TENGAH
    Posts
    1,187
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    buat satu mangle (mirip mangle proxy HIT tapi diganti dengan IP tujuan) untuk capture packet. setelah itu baru buatkan rule queuenya. bila di simple maka tarik ke paling atas. kalau di tree ya langsung aja.
    selamat mencoba dan semoga berhasil. dan bila saya salah mohon maaf, karena manusia tempat hilaf dan lupa
    makasih
    ___________________________________________


 

 

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Koneksi 2 segmen IP yang berbeda
    By subseven in forum Beginner Basics
    Replies: 20
    Last Post: 12-07-2016, 13:33
  2. Hotspot Mikrotik 2 area yang berbeda tp 1 radius server
    By semuthitam in forum General Networking
    Replies: 15
    Last Post: 13-05-2013, 23:40
  3. menggabungkan 2 jaringan dengan segmen IP yg berbeda
    By novel in forum Beginner Basics
    Replies: 6
    Last Post: 27-01-2012, 11:05
  4. Koneksi 2 segmen IP yang berbeda
    By subseven in forum Beginner Basics
    Replies: 0
    Last Post: 08-02-2010, 11:58
  5. Set Mikrotik dngn 2 Jaringan n ISP yg Berbeda
    By PRESCOTT in forum ISP / Network Link
    Replies: 2
    Last Post: 29-11-2008, 15:20

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •