Follow us on...
Follow us on G+ Follow us on Twitter Follow us on Facebook Watch us on YouTube
Register
Results 1 to 2 of 2
  1. #1
    Status
    Offline
    mALe's Avatar
    Baru Gabung
    Join Date
    Jul 2009
    Posts
    0
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0

    Post [ASK] External Proxy + QOS pisahkan IIX dan inter

    salam kenal semua..
    Click here to enlarge

    saya sedang mencoba membuat external proxy (squid) + mikrotik + QOS untuk mengatur bw serta memisahkan traffik iix dan inter. point yg pengen di dapet ;
    - Semua traffik klien masuk ke proxy terlebih dahulu
    - bw management pemisah IIX dan internasional bisa berfungsi...

    kurang lebih topology nya seperti ini


    Internet--------Mikrotik--------Client
    ------------------|
    ----------------Proxy

    Mikrotik:
    eth1 (ke intrnt)= 10.98.1.2/29
    eth2 (ke proxy)= 192.168.10.1/29
    eth3 (ke klien)= 192.168.11.1/24

    Proxy:
    eth1 = 192.168.10.2/29

    Client:
    192.168.11.0/26

    setting NAT nya
    /ip firewall nat pr
    0 ;;; NAT
    chain=srcnat action=masquerade out-interface=ether1
    1 ;;; Redirect ke esternal proxy
    chain=dstnat action=dst-nat to-addresses=192.168.10.2 to-ports=3128 protocol=tcp dst-port=80
    Nah, kalo redirect nya tidak diaktifkan..BW manajemen dan pisah IIX serta inter nya bisa berjalan lancar Click here to enlarge
    dengan config mangle seperti dibawah ini...
    0 chain=prerouting action=mark-connection new-connection-mark=iix passthrough=yes dst-address=10.98.1.0/29
    src-address-list=nice

    1 chain=prerouting action=mark-connection new-connection-mark=inter passthrough=yes dst-address=10.98.1.0/29
    src-address-list=!nice

    2 chain=prerouting action=mark-connection new-connection-mark=inter passthrough=yes src-address=10.98.1.0/29
    dst-address-list=!nice

    3 chain=prerouting action=mark-packet new-packet-mark=iix passthrough=no connection-mark=iix

    4 chain=prerouting action=mark-packet new-packet-mark=inter passthrough=no connection-mark=inter

    5 chain=prerouting action=mark-connection new-connection-mark=iix passthrough=yes src-address=10.98.1.0/29
    dst-address-list=nice
    tapi kalo redirect ke proxy nya di aktifkan...Click here to enlarge bw management nya jadi kacau..Click here to enlarge tolong di bantu juragan juragan master disini...Click here to enlarge saya ubek ubek di forum, nemunya yg buat internal..coba di utak atik mangle buat external ga berhasil..Click here to enlarge sya yakin agan agan disini bisa membantu..Click here to enlargeterima kasih sebelumnya..Click here to enlarge

  2. #2
    Status
    Offline
    dingo's Avatar
    Member Super Senior
    Join Date
    Jan 2008
    Location
    Puncak Kesejukan
    Posts
    641
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by mALe Click here to enlarge
    salam kenal semua..
    Click here to enlarge

    saya sedang mencoba membuat external proxy (squid) + mikrotik + QOS untuk mengatur bw serta memisahkan traffik iix dan inter. point yg pengen di dapet ;
    - Semua traffik klien masuk ke proxy terlebih dahulu
    - bw management pemisah IIX dan internasional bisa berfungsi...

    kurang lebih topology nya seperti ini


    Internet--------Mikrotik--------Client
    ------------------|
    ----------------Proxy

    Mikrotik:
    eth1 (ke intrnt)= 10.98.1.2/29
    eth2 (ke proxy)= 192.168.10.1/29
    eth3 (ke klien)= 192.168.11.1/24

    Proxy:
    eth1 = 192.168.10.2/29

    Client:
    192.168.11.0/26

    setting NAT nya


    Nah, kalo redirect nya tidak diaktifkan..BW manajemen dan pisah IIX serta inter nya bisa berjalan lancar Click here to enlarge
    dengan config mangle seperti dibawah ini...


    tapi kalo redirect ke proxy nya di aktifkan...Click here to enlarge bw management nya jadi kacau..Click here to enlarge tolong di bantu juragan juragan master disini...Click here to enlarge saya ubek ubek di forum, nemunya yg buat internal..coba di utak atik mangle buat external ga berhasil..Click here to enlarge sya yakin agan agan disini bisa membantu..Click here to enlargeterima kasih sebelumnya..Click here to enlarge
    scr=address, dst-address kosongkan...

  3. The Following User Says Thank You to dingo For This Useful Post:


 

 

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. LB + External Proxy
    By riswan in forum Tutorial
    Replies: 19
    Last Post: 02-12-2010, 17:54
  2. Dstnat untuk proxy external ke mikrotik dengan proxy internal
    By awarmanf in forum General Networking
    Replies: 3
    Last Post: 21-02-2010, 21:17
  3. proxy external
    By sufandi in forum General Networking
    Replies: 23
    Last Post: 21-07-2009, 18:18
  4. [ask]web-proxy dan squid external
    By dotter in forum Beginner Basics
    Replies: 14
    Last Post: 07-07-2009, 22:38

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •