Thread: routing link ke private ip koq masuk ke publik terus????

para suhu ane minta bantuan & pencerahan ni,...
ane lagi buat router cuma masih bingung routenya....
di MK ada 3 lan

ip lan 192.168.2.250
ip wan 192.168.7.205
ip modeminet 192.168.0.254

nah dari wan tu kan mau konek ke ap lain, setiap ngeping hasilny TTL expired to transit.stlah ditrace ternyata link masuk ke modem inet.wan disini cuma buat link aja tanpa ngasih akses inet.jadi buat komunikasi antar gedung.untuk route ny:

mangle
/ip firewall mangle add chain=prerouting action=mark-connection new connection mark = satu passtrough=yes
/ip firewall mangle add chain=prerouting action=mark-connection new connection mark = dua passtrough=yes
/ip firewall mangle add chain=prerouting in interface=lan connection-mark=satu action=mark-routing new routing mark = satu passtrough=yes
/ip firewall mangle add chain=prerouting in interface=lan connection-mark= dua action=mark-routing new routing mark = dua passtrough=yes

ip route
/ip route add dst-address=0.0.0.0/0 gateway=192.168.0.1 interface=modeminet(default gateway modem inet)
/ip route add dst-address=0.0.0.0/0 gateway=192.168.0.1 interface=modeminet mark=dua
/ip route add dst-address=0.0.0.0/0 gateway=192.168.7.205 interface=wan mark=satu
/ip route add dst-address=192.168.1.0/24 gateway=192.168.7.203 interface=wan

mohon koreksi serta pencerahan.
thx

/ip route add dst-address=192.168.1.0/24 gateway=192.168.7.203 interface=wan


gatewaynya gak salah gan? itu statusnya reachable gak?

itu status apnya gmna??
wan=etherx = 192.168.7.253
|
ap
|
station = wlanx = 192.168.7.203
ether = 192.168.1.0/24

kaya gitu bukan??

Originally Posted by mailmamen

para suhu ane minta bantuan & pencerahan ni,...
ane lagi buat router cuma masih bingung routenya....
di MK ada 3 lan

ip lan 192.168.2.250
ip wan 192.168.7.205
ip modeminet 192.168.0.254

nah dari wan tu kan mau konek ke ap lain, setiap ngeping hasilny TTL expired to transit.stlah ditrace ternyata link masuk ke modem inet.wan disini cuma buat link aja tanpa ngasih akses inet.jadi buat komunikasi antar gedung.untuk route ny:

mangle
/ip firewall mangle add chain=prerouting action=mark-connection new connection mark = satu passtrough=yes
/ip firewall mangle add chain=prerouting action=mark-connection new connection mark = dua passtrough=yes
/ip firewall mangle add chain=prerouting in interface=lan connection-mark=satu action=mark-routing new routing mark = satu passtrough=yes
/ip firewall mangle add chain=prerouting in interface=lan connection-mark= dua action=mark-routing new routing mark = dua passtrough=yes

ip route
/ip route add dst-address=0.0.0.0/0 gateway=192.168.0.1 interface=modeminet(default gateway modem inet)
/ip route add dst-address=0.0.0.0/0 gateway=192.168.0.1 interface=modeminet mark=dua
/ip route add dst-address=0.0.0.0/0 gateway=192.168.7.205 interface=wan mark=satu
/ip route add dst-address=192.168.1.0/24 gateway=192.168.7.203 interface=wan

mohon koreksi serta pencerahan.
thx

coba gambarin dulu deh topologinya kek gimana

no pict = hoax

Originally Posted by si_faisal

bikin dulu address list untuk network link2 local yang terhubung langsung ke router gan, trus accept koneksinya biar ngak kebawa sama mangle mark routing yang ke internet

ip firewall mangle, chain=prerouting dst-address-list=link_local action=accept

taruh di paling atas

hth

gan maksih scriptnya...
script agan ampuh & tambah dikit2 firewal akhirnya selesai dah caseny.thx buat agan2 yg udah ngasih masukan buat nubie yg sedang mencari ilmu.