Follow us on...
Follow us on G+ Follow us on Twitter Follow us on Facebook Watch us on YouTube
Register
Results 1 to 6 of 6
  1. #1
    Status
    Offline
    kidx13's Avatar
    Member
    Join Date
    Aug 2010
    Posts
    197
    Reviews
    Read 0 Reviews
    Downloads
    1
    Uploads
    0
    Feedback Score
    0

    Limit berdasarkan Ip sumber dan ip tujuan

    Mau nanya, masalahku sampai saat ini adalah web server yang ada dijaringan lokal ikut terlimit jika diakses oleh user hotspot.
    makanya saya ubah motedenya.

    limit pada user hotspot saya matikan, lalu saya buatkan pengaturan limit berdasarkan ip sumber dan ip tujuan.


    ether1 --- internet
    ether2-lan ---> u/ jaringan lan. 192.168.1.100
    ether3-hotspot ---> u/ jaringan hostpot. 192.168.10.10
    ether5-server ---> u/ web server. 192.168.0.1


    Ip address
    klien lan : 192.168.1.111 - 192.168.1.130
    Klien hotspot : 192.168.10.111 - 192.168.10.130
    server web : 192.168.0.2

    Limit untuk masing2 ip klien
    Klien lan ke internet : 128k/512k
    klien hotspot ke internet : 128k/384k
    web server ke internet : 256k/1024k
    klien lan ke web server : 1024/1024k
    klien hotspot ke webserver : 512k/512k

    bagaimana pengaturannya di mikrotik ?
    Click here to enlargeClick here to enlargeClick here to enlarge

  2. #2
    Status
    Offline
    dedisetiaji's Avatar
    Newbie
    Join Date
    Sep 2009
    Location
    Purworejo
    Posts
    26
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by kidx13 Click here to enlarge
    Mau nanya, masalahku sampai saat ini adalah web server yang ada dijaringan lokal ikut terlimit jika diakses oleh user hotspot.
    makanya saya ubah motedenya.

    limit pada user hotspot saya matikan, lalu saya buatkan pengaturan limit berdasarkan ip sumber dan ip tujuan.


    ether1 --- internet
    ether2-lan ---> u/ jaringan lan. 192.168.1.100
    ether3-hotspot ---> u/ jaringan hostpot. 192.168.10.10
    ether5-server ---> u/ web server. 192.168.0.1


    Ip address
    klien lan : 192.168.1.111 - 192.168.1.130
    Klien hotspot : 192.168.10.111 - 192.168.10.130
    server web : 192.168.0.2

    Limit untuk masing2 ip klien
    Klien lan ke internet : 128k/512k
    klien hotspot ke internet : 128k/384k
    web server ke internet : 256k/1024k
    klien lan ke web server : 1024/1024k
    klien hotspot ke webserver : 512k/512k

    bagaimana pengaturannya di mikrotik ?
    Click here to enlargeClick here to enlargeClick here to enlarge

    hehe coba jawab aja yak...
    kalo limit berdasarkan IP Sumber kan bisa dimasukkan terlebih dahulu ke Address list (IP - Firewall - Address list)...nah abis itu masukin ke mangle, nah itu clue nya

    CMIIWClick here to enlarge

  3. #3
    Status
    Offline
    kidx13's Avatar
    Member
    Join Date
    Aug 2010
    Posts
    197
    Reviews
    Read 0 Reviews
    Downloads
    1
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge masih kurang mengerti dengan mikrotik
    bisa diberikan contoh script nya ?

  4. #4
    Status
    Offline
    a3m-nix's Avatar
    Newbie
    Join Date
    Dec 2009
    Posts
    38
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by kidx13 Click here to enlarge
    Click here to enlarge masih kurang mengerti dengan mikrotik
    bisa diberikan contoh script nya ?
    coba bantu dikit...
    di ip firewall mangel, buat rule untuk mark connection & mark paket berdasar ip sumber dan tujuan (src address & dst address), di Queue tree atau Simple queue lakukan limit sesuai kebutuhan berdasarkan packet mark tadi. Click here to enlarge

  5. #5
    Status
    Offline
    budikristianto's Avatar
    Newbie
    Join Date
    Feb 2011
    Posts
    45
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by kidx13 Click here to enlarge
    Click here to enlarge masih kurang mengerti dengan mikrotik
    bisa diberikan contoh script nya ?

    ini unuk trafic web server ke AP / hotspot

    Ip Firewall mangle, tambahin IP nya aja kalo kurang mantap

    0 chain=forward action=mark-connection new-connection-mark=server passthrough=yes protocol=tcp
    in-interface=server out-interface=ap

    1 chain=forward action=mark-packet new-packet-mark=SERVER_ passthrough=no protocol=tcp in-interface=server
    out-interface=ap connection-mark=server


    pake queue tree karena sy anggap pake usermanager untuk hotsot bia ga ketuker2, sorry kalo salah

    0 name="server1" parent=global-out packet-mark=SERVER_ limit-at=0 queue=default priority=2 max-limit=512k/512k
    burst-limit=0 burst-threshold=0 burst-time=0s

  6. #6
    Status
    Offline
    kidx13's Avatar
    Member
    Join Date
    Aug 2010
    Posts
    197
    Reviews
    Read 0 Reviews
    Downloads
    1
    Uploads
    0
    Feedback Score
    0
    ini settingan saya mohon di koreksi


    ether1 --- internet
    ether2-lan ---> u/ jaringan lan. 192.168.1.100
    ether3-hotspot ---> u/ jaringan hostpot. 192.168.10.10
    ether5-server ---> u/ web server. 192.168.0.1


    Ip address
    klien lan : 192.168.1.111 - 192.168.1.130
    Klien hotspot : 192.168.10.111 - 192.168.10.130
    server web : 192.168.0.2

    ip server : 192.168.0.2
    ip lokal : 192.168.10.101 - 192.168.10.130

    /ip fi ma
    0 ;;; Limit Download Unlimit Browsing
    chain=prerouting action=mark-connection new-connection-mark=Download passthrough=yes protocol=tcp in-interface=pppoe-speedy src-port=21,80,8080
    connection-bytes=262146-4294967295

    1 chain=prerouting action=mark-packet new-packet-mark=Download passthrough=no in-interface=pppoe-speedy connection-mark=Download

    2 ;;; Testing
    chain=prerouting action=mark-connection new-connection-mark=conn-lan passthrough=yes dst-address-list=ip-server in-interface=ether3-hotspot

    3 chain=prerouting action=mark-connection new-connection-mark=conn-internet passthrough=yes dst-address-list=!ip-server in-interface=ether3-hotspot

    4 chain=prerouting action=mark-packet new-packet-mark=packet-lan passthrough=no connection-mark=conn-lan

    5 chain=prerouting action=mark-packet new-packet-mark=packet-internet passthrough=no connection-mark=conn-internet

    7 ;;; Sharing LAN
    chain=prerouting action=mark-packet new-packet-mark=Sharing LAN passthrough=yes src-address-list=ip-lokal dst-address-list=ip-lokal


    contoh simple queue
    3 X name="101-lan" target-addresses=192.168.10.101/32 dst-address=192.168.0.2/32 interface=all parent=none packet-marks=packet-lan direction=both
    priority=8 queue=default-small/default-small limit-at=0/0 max-limit=512k/512k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
    total-queue=default-small

    4 X name="101-net" target-addresses=192.168.10.101/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=packet-internet direction=both
    priority=8 queue=default-small/default-small limit-at=0/0 max-limit=56k/224k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
    total-queue=default-small

 

 

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. (Ask) Cara limit bandwidth berdasarkan group
    By reef33 in forum General Networking
    Replies: 6
    Last Post: 23-07-2011, 10:19
  2. Tanya : Limit bandwith berdasarkan mac address
    By Yudhiez in forum General Networking
    Replies: 0
    Last Post: 06-03-2010, 10:55
  3. Replies: 2
    Last Post: 12-12-2008, 16:53
  4. [help] bandwidth limit berdasarkan waktu
    By flytosky in forum General Networking
    Replies: 20
    Last Post: 17-09-2007, 23:10

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •