Follow us on...
Follow us on G+ Follow us on Twitter Follow us on Facebook Watch us on YouTube
Register
Results 1 to 10 of 10
  1. #1
    Status
    Offline
    ngacir nich's Avatar
    Baru Gabung
    Join Date
    Sep 2009
    Posts
    6
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0

    setingan nat salah

    tolong para master saya dah buntu banget...saya coba instal proxy external pi lom jalan kemungkinan disetingan nat nya yang ga bener..minta tolong dikoreksi juragan...ini setingannya saya pake mikrotik rb 750
    toploginya gini gan

    WAN - MIKROTIK - SWITCH - CLIENT
    --------------|
    -----------PROXY

    NAT di mikrotik :
    chain=srcnat action=src-nat to-address=202.182.49.***(ip ke wan) src-address=192.168.0.0/24 (ip ke lan)

    Maaf para suhu berantakan...
    jadi ini setingan nat dan lain-lainnya dari ISP nya..saya cuma mo tambahin proxi x-ternal dngan topologi seperti diatas

    NBClick here to enlargeernah saya coba tanya ke teknisi ISP nya katanya klo mo di masquerade harus pake mikrotik lagi gan...
    jadi mikrotik dibawah mikrotik..gitu gan
    Last edited by ngacir nich; 10-05-2011 at 19:22.

  2. #2
    Status
    Offline
    lalank's Avatar
    Newbie
    Join Date
    May 2010
    Posts
    45
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    kenapa g bsa klo masquerade?

    coba dah gambarkan topologi ny yg jelas dlu...

    puyeng mata ngebaca ny...
    biar enk ngebantu ny.....Click here to enlargeClick here to enlarge

  3. #3
    Status
    Offline
    rahwana's Avatar
    Forum Guru
    Join Date
    Nov 2007
    Location
    Sidoarjo, Jawa Timur, Indonesia, Indonesia
    Posts
    1,337
    Reviews
    Read 0 Reviews
    Downloads
    2
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by ngacir nich Click here to enlarge
    LAN eth3 192.168.0.0/24
    ISP ethe2 202.182.49.141
    Proxy ethe4 192.168.1.2/24
    gateway proxy 192.168.1.1
    gateway lan 192.168.0.254
    ==IP Address===

    Flags: X - disabled, I - invalid, D - dynamic
    # ADDRESS NETWORK BROADCAST INTERFACE
    0 10.7.252.73/27 10.7.252.64 10.7.252.95 ether2
    1 192.168.0.254/24 192.168.0.0 192.168.0.255 ether3
    2 202.182.49.141/32 202.182.49.141 202.182.49.141 ether3
    3 192.168.1.1/24 192.168.1.0 192.168.1.255 ether4
    4 D 192.168.103.2/32 192.168.103.1 0.0.0.0 l2tp-out1
    5 202.182.49.141/32 202.182.49.141 202.182.49.141 ether4

    ===Routing====
    # DST-ADDRESS PREF-SRC GATEWAY DISTANCE
    0 ADS 0.0.0.0/0 192.168.103.1 1
    1 A S 10.0.0.0/8 10.7.252.65 1

    ====lan======
    0 ;;; LAN
    chain=srcnat action=src-nat to-addresses=202.182.49.141
    src-address=192.168.0.0/24

    klo misalkan ane buat masquerade lannya ga mau conect gan,coz ini setingan dari isp nya,ane dah coba tanya sama orang ispnya klo ane mo pasang proxy minta tolong diseting mikrotiknya mereka malah ga bisa katanyaClick here to enlarge
    minta tolong penjelasannya para master....
    Ada yang aneh menurut saya. yaitu :
    1. Kalau sudah ada ip public, kenapa ada l2tp-out1, pakai ip private lagi?
    2. di Routing table, default gateway tidak lari ke ip public malah lari ke l2tp-out1. Nah trus ip public itu buat apa?
    3. Kalau default gatewaynya ke l2tp-out1, maka tidak bisa kita melakukan masquerade ataupun src-nat dengan menggunakan ip public kalau nggak jelas larinya sebenarnya gimana

    Ada 2 kemungkinan :
    a. yang setting sebenarnya mengerti maunya network tapi nggak bisa 'ngomong'-nya ke router, atau
    b. yang setting ini nggak tahu maksudnya networknya jadi ngawur/ngira2 aja settingnya
    Click here to enlarge

  4. #4
    Status
    Offline
    oktama's Avatar
    Forum Guru
    Join Date
    Jul 2008
    Location
    Jayapura
    Posts
    1,929
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    sepertinya ditunnel ke lagi ke ISP anda tapi mengapa harus ditunnel lagi mengingat punya anda dah ada ip-publik?Click here to enlarge membingungkan Click here to enlarge, juga dilihat terjadi tumpang tindih antara default gateway ada 2, dan saya setuju dengan pernyataan bro rahwana, maaf gan tapi boleh tau ISP apa yang anda gunakan? media carrier-nya pake apa, FO, Wireless?

    kl dilihat dari routing table sebenarnya ngga ada fungsi IP publik dari pihak ISP karena ngga ada gateway-nya, coba ajah belokkan traffic dari lan anda langsung ke proxy

    Code:
    ip firewall nat add chain=dst-nat in-interface=(lan) protocol=tcp dst-port=80 to-address=(ip proxy) to-ports=(port proxy)
    mudah2an bisa memberikan pencerahan Click here to enlarge

  5. #5
    Status
    Offline
    adiputrolds's Avatar
    Forum Guru
    Join Date
    Oct 2008
    Posts
    1,485
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by ngacir nich Click here to enlarge
    tolong para master saya dah buntu banget...saya coba instal proxy external pi lom jalan kemungkinan disetingan nat nya yang ga bener..minta tolong dikoreksi juragan...ini setingannya saya pake mikrotik rb 750

    LAN eth3 192.168.0.0/24
    ISP ethe2 202.182.49.141
    Proxy ethe4 192.168.1.2/24
    gateway proxy 192.168.1.1
    gateway lan 192.168.0.254
    ==IP Address===

    Flags: X - disabled, I - invalid, D - dynamic
    # ADDRESS NETWORK BROADCAST INTERFACE
    0 10.7.252.73/27 10.7.252.64 10.7.252.95 ether2
    1 192.168.0.254/24 192.168.0.0 192.168.0.255 ether3
    2 202.182.49.141/32 202.182.49.141 202.182.49.141 ether3
    3 192.168.1.1/24 192.168.1.0 192.168.1.255 ether4
    4 D 192.168.103.2/32 192.168.103.1 0.0.0.0 l2tp-out1
    5 202.182.49.141/32 202.182.49.141 202.182.49.141 ether4

    ===Routing====
    # DST-ADDRESS PREF-SRC GATEWAY DISTANCE
    0 ADS 0.0.0.0/0 192.168.103.1 1
    1 A S 10.0.0.0/8 10.7.252.65 1
    2 ADC 10.7.252.64/27 10.7.252.73 ether2 0
    3 ADC 192.168.0.0/24 192.168.0.254 ether3 0
    4 ADC 192.168.1.0/24 192.168.1.1 ether4 0
    5 ADC 192.168.103.1/32 192.168.103.2 l2tp-out1 0
    6 ADC 202.182.49.141/32 202.182.49.141 ether3 0
    ether4
    ====lan======
    0 ;;; LAN
    chain=srcnat action=src-nat to-addresses=202.182.49.141
    src-address=192.168.0.0/24

    klo misalkan ane buat masquerade lannya ga mau conect gan,coz ini setingan dari isp nya,ane dah coba tanya sama orang ispnya klo ane mo pasang proxy minta tolong diseting mikrotiknya mereka malah ga bisa katanyaClick here to enlarge
    minta tolong penjelasannya para master....
    anda membuat proxy external
    tp kok yang anda masquerade hanya yang LAN

    gimana mau jalan internet nya
    request HTTP di handle squid

    squid mau keluar jadi gk bs
    anda harus menambahkan masquerade untuk proxy

    sebaiknya gunakan ini

    Code:
    0   ;;; LAN
         chain=srcnat action=masquerade src-address=192.168.0.0/24
    0   ;;; PROXY
         chain=srcnat action=masquerade src-address=192.168.1.0/24
    Click here to enlargeClick here to enlarge

  6. #6
    Status
    Offline
    cw-12's Avatar
    Member Senior
    Join Date
    Jan 2010
    Posts
    391
    Reviews
    Read 0 Reviews
    Downloads
    5
    Uploads
    2
    Feedback Score
    0
    Click here to enlarge lebih baik /sys reset conf, trus seting ulang lagi, kayaknya nyetting dari awal lebih enak deh gak Click here to enlarge

  7. #7
    Status
    Offline
    widaksono's Avatar
    Baru Gabung
    Join Date
    Dec 2010
    Posts
    5
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    ikut nyimak aja Click here to enlargeClick here to enlarge

  8. #8
    Status
    Offline
    Ajienux's Avatar
    Member Senior
    Join Date
    Aug 2009
    Location
    Bogor<>Jakarta
    Posts
    353
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0

    owww... ternyata ip nya hidup...

  9. #9
    Status
    Offline
    Yayan Saputra's Avatar
    Baru Gabung
    Join Date
    Mar 2013
    Posts
    12
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    idem gan ,,

  10. #10
    Status
    Offline
    bayo's Avatar
    Calon Member
    Join Date
    Mar 2013
    Location
    Bukittinggi
    Posts
    89
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    gan... ane juga aneh ni..... pakai RB1100ahx2 , masih setting awal.. di Nat untuk masquerade error mulu... pasdi Klok OK/ Applay langsung diskonek, padahal untuk setting yang Lain seperti Ip- Address, Ip- Routes dll bisa dan gk ada masalh, cuma acr nat - action masquerade gk bisa.. mikrotik versi 5.17
    saya coba upgrade versi mikrotik, malah saat upload muncul router has been disconected.. apa hadware mikrotiknya ya.. rusak.. padahal masih 2 hari baru dibeli Click here to enlarge Click here to enlarge Click here to enlarge Click here to enlarge
    Last edited by bayo; 02-04-2013 at 01:23.

 

 

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. ASK setingan mikrotik untuk speedy
    By addict pras in forum Beginner Basics
    Replies: 0
    Last Post: 28-02-2010, 12:39
  2. [ask]setingan
    By ujank in forum Beginner Basics
    Replies: 8
    Last Post: 15-10-2009, 15:30
  3. tanya setingan Mikrotik
    By butt in forum General Networking
    Replies: 0
    Last Post: 16-08-2009, 23:43
  4. [ask] setingan queue tree nya apa ada yang salah ?
    By botakedan in forum General Networking
    Replies: 13
    Last Post: 23-08-2008, 17:40
  5. share setingan mikrotik
    By koncop in forum General Networking
    Replies: 6
    Last Post: 29-09-2007, 20:39

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •