Follow us on...
Follow us on G+ Follow us on Twitter Follow us on Facebook Watch us on YouTube
Register
Page 1 of 2 12 LastLast
Results 1 to 15 of 16
  1. #1
    Status
    Offline
    lem0nlime's Avatar
    Baru Gabung
    Join Date
    May 2010
    Posts
    13
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0

    Exclamation IP forwarding di mikrotik

    Siang semua,

    langsung aja ya gan,Kasusnya begini ane punya Mail server di bawah Mikrotik

    Internet <== Mikrotik <== Mail server

    Ane dapet 4 ip Publik,1 dah di kasih buat mikrotik sebagai router nah satu IP Publik lagi mau ane kasih ke Mail Server (di bawah Mikrotik tentunya) gimana ya Konfigurasi nya? Click here to enlarge
    bingung gan ane,kalo cuma port forwarding ane dah sering Click here to enlarge

    Thanks B4

  2. #2
    Status
    Offline
    pos_ronda's Avatar
    VIP Member
    Join Date
    Aug 2009
    Location
    Sleman, Indonesia
    Posts
    887
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    kalau gak salah itu dinamakan 1:1 mapping
    caranya

    Code:
    /ip firewall nat add chain=dstnat dst-address=[ip public] action=netmap to-addresses=[ip private mail server]
    
    /ip firewall nat add chain=srcnat src-address=[ip private mail server] action=netmap to-addresses=[ip public]
    semoga membantu

  3. #3
    Status
    Offline
    lem0nlime's Avatar
    Baru Gabung
    Join Date
    May 2010
    Posts
    13
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Thanks gan buat advicenya,
    tapi maksud ane Kalau Misalnya IP Publicnya di tanem di mail server gimana konfigurasinya gan?
    Click here to enlarge

  4. #4
    Status
    Offline
    xeon's Avatar
    Verified Account - Partner
    Join Date
    Mar 2008
    Location
    DKI Jakarta
    Posts
    1,539
    Reviews
    Read 0 Reviews
    Downloads
    3
    Uploads
    0
    Feedback Score
    2 (100%)
    Dikasih IP point to point juga atau tidak?
    Kalau dikasih, bisa main routing, kalau tidak dikasih, maka 2 port yang dari internet dan yang ke arah mail server harus di bridge.

  5. The Following User Says Thank You to xeon For This Useful Post:


  6. #5
    Status
    Offline
    lem0nlime's Avatar
    Baru Gabung
    Join Date
    May 2010
    Posts
    13
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    iya gan dari 5 IP Pub. udah dipake 1 di MT
    ada sisa 4 iya bisa tolong jelasin ga metode PTP tsb + routingnya
    Click here to enlarge Thanks ya gan sebelumnya ane dah coba googling tapi rata2 ko cuma port forwarding sama netmap aja

  7. #6
    Status
    Offline
    mas_aziz's Avatar
    Newbie
    Join Date
    Oct 2009
    Posts
    20
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by lem0nlime Click here to enlarge
    iya gan dari 5 IP Pub. udah dipake 1 di MT
    ada sisa 4 iya bisa tolong jelasin ga metode PTP tsb + routingnya
    Click here to enlarge Thanks ya gan sebelumnya ane dah coba googling tapi rata2 ko cuma port forwarding sama netmap aja
    Sebenernya kl pake mikrotik ane blm pernah coba, tapi kl lebih scure untuk kebutuhan Mail server, mending di DMZ aja.

    Lebih simple, cuma saran gan, Click here to enlarge

    /ip firewall nat add chain=dstnat action=dst-nat dst-address=201.201.201.3 dst-port=25 to-addresses=192.168.1.2 to-ports=25 protocol=tcp disabled=no

    Tinggal ditambahin aja Port yang boleh lewat.

  8. #7
    Status
    Offline
    lem0nlime's Avatar
    Baru Gabung
    Join Date
    May 2010
    Posts
    13
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Makasih gan udah kasih Saran,
    Kalo cuma begitu masalahnya udah beres gan,
    kasusnya ane mau nanem IP Public di Mail server yang Posisinya di Bawah Router Mikrotik Click here to enlarge

  9. #8
    Status
    Offline
    akbar_lana's Avatar
    VIP Member
    Join Date
    Aug 2007
    Location
    Jakarta, Indonesia, Indonesia
    Posts
    735
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    1 (100%)
    Click here to enlarge Originally Posted by lem0nlime Click here to enlarge
    Makasih gan udah kasih Saran,
    Kalo cuma begitu masalahnya udah beres gan,
    kasusnya ane mau nanem IP Public di Mail server yang Posisinya di Bawah Router Mikrotik Click here to enlarge
    ada 4 IP public dan jika 4 IP tersebut dengan network /29 ialah:
    1.1.1.2 -> Mikrotik
    1.1.1.3 -> Mail Server
    1.1.1.4 -> Web Server
    1.1.1.5 -> DNS Server

    gateway IP Public: 1.1.1.1

    dan tuk IP Private Mail Server & Web Server:
    Mail Server: 192.168.1.10
    Web Server: 192.168.1.20
    DNS Server: 192.168.1.30

    maka tuk me-DMZ kan IP Public ke server ialah dengan cara:
    1. Buat IP Public Alias pada sisi Mikrotik
    Code:
    /ip address
    add address=1.1.1.2/29 interface=<to-isp>
    add address=1.1.1.3/29 interface=<to-isp>
    add address=1.1.1.4/29 interface=<to-isp>
    add address=1.1.1.5/29 interface=<to-isp>
    2. Masukan default gateway ISP pada Mikrotik
    Code:
    /ip route
    add gateway=1.1.1.1
    3. Buat DMZ tuk masing2 server:
    Code:
    /ip firewall nat
    add chain=srcnat src-address=192.168.1.10 action=src-nat to-addresses=1.1.1.3 comment="DMZ Mail Server"
    add chain=dstnat dst-address=1.1.1.3 action=dst-nat to-address=192.168.1.10
    add chain=srcnat src-address=192.168.1.20 action=src-nat to-addresses=1.1.1.4 comment="DMZ WebServer"
    add chain=dstnat dst-address=1.1.1.4 action=dst-nat to-address=192.168.1.20
    add chain=srcnat src-address=192.168.1.30 action=src-nat to-addresses=1.1.1.5 comment="DMZ DNS Server"
    add chain=dstnat dst-address=1.1.1.5 action=dst-nat to-address=192.168.1.30
    tinggal di lakukan uji coba saja apakah telah berhasil atau tidak...Click here to enlarge

    Dan mohon di koreksi apabila terjadi kesalahan...Click here to enlarge

  10. The Following User Says Thank You to akbar_lana For This Useful Post:


  11. #9
    Status
    Offline
    lini's Avatar
    Forum Guru
    Join Date
    Sep 2007
    Location
    Karawaci
    Posts
    1,961
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    2 (100%)
    penjelasan rekan2 diatas sudah pada benar tuh bro.

    kalo anda cuman punya 4 ip usable alias /30 maka tidak ada cara lain selain menggunakan dstnat dan srcnat.

    CMIIW

  12. #10
    Status
    Offline
    lem0nlime's Avatar
    Baru Gabung
    Join Date
    May 2010
    Posts
    13
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Berarti Memang ga bisa ya masang IP Public Di Mail Server
    ( Bukan di dstnat dan srcnat )Click here to enlarge

  13. #11
    Status
    Offline
    akbar_lana's Avatar
    VIP Member
    Join Date
    Aug 2007
    Location
    Jakarta, Indonesia, Indonesia
    Posts
    735
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    1 (100%)
    Click here to enlarge Originally Posted by lem0nlime Click here to enlarge
    Berarti Memang ga bisa ya masang IP Public Di Mail Server
    ( Bukan di dstnat dan srcnat )Click here to enlarge
    ada 1 cara lagi, call ISP minta request tambahan IP Public di belakang IP Public sekarang...Click here to enlarge

  14. The Following User Says Thank You to akbar_lana For This Useful Post:


  15. #12
    Status
    Offline
    lem0nlime's Avatar
    Baru Gabung
    Join Date
    May 2010
    Posts
    13
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    lah 4 Ip Public tsb bukannya sudah lebih dari Cukup ya Click here to enlarge
    Posisinya sekarang MT dah pake 1 IP Public dan tersisa 4 buah
    nah IP IP tersebut mau ane tanemin langsung di Mail Servernya
    ada yang ngasih Hint ke ane kalo pake IP Point to Point dan main di routing
    cuman belum jelas caranya gimana,mungkin agan bisa jelasin Click here to enlarge

  16. #13
    Status
    Offline
    akbar_lana's Avatar
    VIP Member
    Join Date
    Aug 2007
    Location
    Jakarta, Indonesia, Indonesia
    Posts
    735
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    1 (100%)
    Click here to enlarge Originally Posted by lem0nlime Click here to enlarge
    lah 4 Ip Public tsb bukannya sudah lebih dari Cukup ya Click here to enlarge
    Posisinya sekarang MT dah pake 1 IP Public dan tersisa 4 buah
    nah IP IP tersebut mau ane tanemin langsung di Mail Servernya
    ada yang ngasih Hint ke ane kalo pake IP Point to Point dan main di routing
    cuman belum jelas caranya gimana,mungkin agan bisa jelasin Click here to enlarge
    wait...? 4 IP Public yg di maksud itu netmasknya /30 atau /29 jika /30 sudah tidak bisa di pecah lagi karna mesti ada namanya ip network & broadcast (2 IP otomatis sudah terpakai) sedangkan klo /29 masih bisa di pecah jadi 2 buah /30

    misal 1.1.1.4/30 maka ip nya ialah:
    1.1.1.4 --> di gunakan untuk network IP
    1.1.1.5 --> umumnya di pakai oleh ISP sebagai gateway client
    1.1.1.6 --> IP client
    1.1.1.7 --> di gunakan untuk broadcast IP

    berarti dengan /30 tidak ada IP yg tersisa..Click here to enlarge
    (kecuali menggunakan metode /32 1 IP dan 1 network IP, seperti yg biasa di gunakan oleh VPN services)

  17. #14
    Status
    Offline
    lem0nlime's Avatar
    Baru Gabung
    Join Date
    May 2010
    Posts
    13
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    /29 gan yang bisa di pake 1.1.1.210 - 1.1.1.214
    (udah pernah ane test pasang di interface yang ke ISP semua IP tersebut dan bisa di Ping dari luar)
    jadi gimana ya gan solusinya Click here to enlarge

  18. #15
    Status
    Offline
    akbar_lana's Avatar
    VIP Member
    Join Date
    Aug 2007
    Location
    Jakarta, Indonesia, Indonesia
    Posts
    735
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    1 (100%)
    Click here to enlarge Originally Posted by lem0nlime Click here to enlarge
    /29 gan yang bisa di pake 1.1.1.210 - 1.1.1.214
    (udah pernah ane test pasang di interface yang ke ISP semua IP tersebut dan bisa di Ping dari luar)
    jadi gimana ya gan solusinya Click here to enlarge
    bukannya diatas total yg di bisa pake ada 5....Click here to enlarge

    ydah minta tolong sama ISP nya tuk di pecah aja menjadi:
    1.1.1.208/30 dan 1.1.1.212/30

    dimana:
    1.1.1.208/30 terhubung antara ISP dengan Mikrotik anda:
    1.1.1.209 di sisi ISP dan 1.1.1.210 router mikrotik anda

    dan:
    1.1.1.212/30 terhubung antara Mikrotik dengan Mail Server anda:
    1.1.1.213 di sisi Mikrotik anda dan 1.1.1.214 pada Mail Server anda

    Mudah2an dah cukup jelas....Click here to enlarge

 

 
Page 1 of 2 12 LastLast

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Port Forwarding dibelakang Modem Speedy dan Mikrotik
    By lukiluck in forum General Networking
    Replies: 18
    Last Post: 25-10-2010, 15:41
  2. ip forwarding ??
    By upikbiru in forum General Networking
    Replies: 6
    Last Post: 16-03-2010, 15:15
  3. {ASK} help forwarding ip public ke mikrotik
    By depalaza in forum Beginner Basics
    Replies: 0
    Last Post: 25-09-2009, 12:56
  4. Forwarding
    By OnCom08 in forum Scripting @ Mikrotik
    Replies: 2
    Last Post: 30-11-2008, 13:54
  5. [help] teknik forwarding
    By vio_koe in forum General Networking
    Replies: 14
    Last Post: 08-08-2008, 02:49

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •