Follow us on...
Follow us on G+ Follow us on Twitter Follow us on Facebook Watch us on YouTube
Register
Page 1 of 2 12 LastLast
Results 1 to 15 of 19
  1. #1
    Status
    Offline
    qiqin's Avatar
    Member
    Join Date
    Jun 2009
    Posts
    149
    Reviews
    Read 0 Reviews
    Downloads
    2
    Uploads
    0
    Feedback Score
    0

    Pelanggan Baru sering gagal Browsing walaupun sudah login

    Salam jumpa

    Pendahuluan :
    - Hotspot menggunakan RB 433AH + XR2 + Antenna Omni
    - Level 4 Ver 4.13
    - Server Squid Proxy
    - User manager
    - Modem Set Bridge

    Permasalahan :
    - Pelanggan Baru
    - Pelanggan baru Login di halaman login bisa (Isi user dan password OK, tidak ada masalah)
    - sesudah login, Pelanggan baru tersebut mau browsing (misal = buka face**,det**.com, kom**.com dan situs-situs lainnya) selalu gagal.
    - Tetapi bila RB433AH-nya saya reboot, pelanggan tersebut baru bisa browsing dan lancar jaya (tentu saja sesudah login kembali)

    Pertanyaan :
    - Apa yang menyebabkan hal tersebut terjadi ?
    a. Apakah settingan di RB 433AH
    b. Apakah secara Hardware RB 433AH ada yg bermasalah?

    Catatan :
    Kondisi ini hanya berlaku untuk semua pelanggan yang baru mendaftar, sedangkan pelanggan lama tidak berlaku seperti itu, termasuk pelanggan baru tadi, bila sudah di reboot RB433AH-nya, maka kapan saja dia mau login dan browsing tidak perlu lagi saya reboot RB433AH-nya.

    Terimakasih atas semua bantuannya

  2. #2
    Status
    Offline
    mahaadit's Avatar
    VIP Member
    Join Date
    Jan 2010
    Location
    Yogyakarta
    Posts
    706
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    coba settingan di gelar gan biar para master dan suhu pd tau..
    klo g di gelar mana tau solusinya.
    btw tuh RB433 nya sebagai routernya juga ya??

  3. #3
    Status
    Offline
    qiqin's Avatar
    Member
    Join Date
    Jun 2009
    Posts
    149
    Reviews
    Read 0 Reviews
    Downloads
    2
    Uploads
    0
    Feedback Score
    0
    ^^ Makasih bang Mahaedit
    ini ane gelar bang, sekalian mohon bantuannya ;

    wireless xr2 :
    Code:
    set 0 ack-timeout=dynamic adaptive-noise-immunity=none allow-sharedkey=no \
        antenna-gain=15 antenna-mode=ant-a area="" arp=enabled band=2.4ghz-b/g \
        basic-rates-a/g=6Mbps basic-rates-b=1Mbps burst-time=disabled comment="" \
        compression=no country=india default-ap-tx-limit=0 \
        default-authentication=yes default-client-tx-limit=0 default-forwarding=\
        yes dfs-mode=none disable-running-check=no disabled=no \
        disconnect-timeout=3s frame-lifetime=0 frequency=2442 frequency-mode=\
        manual-txpower frequency-offset=0 hide-ssid=no \
        hw-fragmentation-threshold=disabled hw-protection-mode=none \
        hw-protection-threshold=0 hw-retries=7 l2mtu=2290 mac-address=\
        00:FD:1D:6F:FF:32 max-station-count=2007 mode=ap-bridge mtu=1500 name=\
        hotspot1 noise-floor-threshold=default on-fail-retry-time=100ms \
        periodic-calibration=default periodic-calibration-interval=60 \
        preamble-mode=both proprietary-extensions=post-2.9.25 radio-name=\
        "XXX HOTSPOT" rate-set=default scan-list=default security-profile=\
        default ssid="XXX HOTSPOT" station-bridge-clone-mac=\
        00:00:00:00:00:00 supported-rates-a/g=\
        6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps supported-rates-b=\
        1Mbps,2Mbps,5.5Mbps,11Mbps tx-power=17 tx-power-mode=card-rates \
        update-stats-interval=disabled wds-cost-range=50-150 wds-default-bridge=\
        none wds-default-cost=100 wds-ignore-ssid=no wds-mode=disabled \
        wmm-support=disabled
    Filter :
    Code:
    add action=passthrough chain=unused-hs-chain comment=\
        "place hotspot rules here" disabled=yes
    add action=accept chain=input comment="allow NTP traffict" disabled=no \
        in-interface=pppoe-speedy protocol=udp src-port=123
    add action=accept chain=forward comment="" disabled=no dst-address=\
        10.5.50.0/26 in-interface=pppoe-speedy out-interface=hotspot1
    add action=accept chain=forward comment="" disabled=no dst-address=\
        10.7.70.0/26 in-interface=pppoe-speedy out-interface=hotspot2
    add action=accept chain=forward comment="" disabled=yes in-interface=hotspot1
    add action=reject chain=forward comment=blokc-vrirus disabled=no dst-port=\
        135-138,445 in-interface=pppoe-speedy protocol=tcp reject-with=\
        icmp-network-unreachable
    add action=reject chain=input comment=blokc-vrirus disabled=no dst-port=\
        135-138,445 in-interface=pppoe-speedy protocol=tcp reject-with=\
        icmp-network-unreachable
    add action=reject chain=input comment=blokc-vrirus connection-state=invalid \
        disabled=no protocol=tcp reject-with=icmp-network-unreachable
    add action=reject chain=forward comment="" connection-state=invalid disabled=\
        no protocol=tcp reject-with=icmp-network-unreachable
    add action=add-src-to-address-list address-list="port scanners" \
        address-list-timeout=2w chain=input comment="Port scanners to list " \
        disabled=no protocol=tcp psd=21,3s,3,1
    add action=add-src-to-address-list address-list="port scanners" \
        address-list-timeout=2w chain=input comment="NMAP FIN Stealth scan" \
        disabled=no protocol=tcp tcp-flags=fin,!syn,!rst,!psh,!ack,!urg
    add action=add-src-to-address-list address-list="port scanners" \
        address-list-timeout=2w chain=input comment="SYN/FIN scan" disabled=no \
        protocol=tcp tcp-flags=fin,syn
    add action=add-src-to-address-list address-list="port scanners" \
        address-list-timeout=2w chain=input comment="SYN/RST scan" disabled=no \
        protocol=tcp tcp-flags=syn,rst
    add action=add-src-to-address-list address-list="port scanners" \
        address-list-timeout=2w chain=input comment="FIN/PSH/URG scan" disabled=\
        no protocol=tcp tcp-flags=fin,psh,urg,!syn,!rst,!ack
    add action=add-src-to-address-list address-list="port scanners" \
        address-list-timeout=2w chain=input comment="ALL/ALL scan" disabled=no \
        protocol=tcp tcp-flags=fin,syn,rst,psh,ack,urg
    add action=add-src-to-address-list address-list="port scanners" \
        address-list-timeout=2w chain=input comment="NMAP NULL scan" disabled=no \
        protocol=tcp tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg
    add action=drop chain=input comment="dropping port scanners" disabled=no \
        src-address-list="port scanners"
    add action=accept chain=input comment=\
        "default configuration (anti netcut, defaultnya accept)" disabled=no \
        protocol=icmp
    add action=accept chain=forward comment="" disabled=yes dst-address=\
        192.168.10.2 in-interface=pppoe-speedy out-interface=proxy
    add action=accept chain=input comment="Allow Remote winbox dari Publik" \
        disabled=no dst-port=8291 in-interface=pppoe-speedy protocol=tcp
    add action=accept chain=input comment="Allow DNS Traffic" disabled=no \
        in-interface=pppoe-speedy protocol=udp src-port=53
    add action=accept chain=input comment="Allow Ping Traceroute Traffic" \
        disabled=no in-interface=pppoe-speedy protocol=icmp
    add action=add-src-to-address-list address-list-timeout=30m \
        chain=input comment="Log Ip Yang Di Tolak" connection-state=new disabled=\
        no in-interface=pppoe-speedy
    add action=drop chain=input comment="Drop Semua Akses yang tidak di ijinkan" \
        disabled=no in-interface=pppoe-speedy src-address-list=spam
    add action=drop chain=input comment=drop-SPAM disabled=no src-address-list=\
        spam
    nat
    Code:
    /ip firewall nat
    add action=passthrough chain=unused-hs-chain comment=\
        "place hotspot rules here" disabled=yes
    add action=masquerade chain=srcnat comment=NAT disabled=no out-interface=\
        pppoe-speedy
    add action=dst-nat chain=dstnat comment="KE PROXY" disabled=no dst-port=\
        80,8000,8080,3128 protocol=tcp src-address=10.5.50.0/24 to-addresses=\
        192.168.10.2 to-ports=3128
    add action=dst-nat chain=dstnat comment="" disabled=no dst-port=\
        80,81,8000,8080,3128 protocol=tcp src-address=10.7.70.0/24 to-addresses=\
        192.168.10.2 to-ports=3128
    yup bang RB433 dijadikan router juga + usermanager
    Andaikan ada yang belum ane gelar.....beritahu ane ya bang....
    mohon pencerahannya dan terimakasih sebelumnya
    Last edited by qiqin; 18-11-2010 at 11:22.

  4. #4
    Status
    Offline
    maestro_smd's Avatar
    Member
    Join Date
    Jan 2010
    Posts
    235
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Code:
    add action=accept chain=forward comment="" disabled=no dst-address=\
        10.5.50.0/26 in-interface=pppoe-speedy out-interface=hotspot1
    add action=accept chain=forward comment="" disabled=no dst-address=\
        10.7.70.0/26 in-interface=pppoe-speedy out-interface=hotspot2
    add action=accept chain=forward comment="" disabled=yes in-interface=hotspot1
    Rule ini maksudnya untuk apa ya...?

  5. #5
    Status
    Offline
    qiqin's Avatar
    Member
    Join Date
    Jun 2009
    Posts
    149
    Reviews
    Read 0 Reviews
    Downloads
    2
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by maestro_smd Click here to enlarge
    Code:
    add action=accept chain=forward comment="" disabled=no dst-address=\
        10.5.50.0/26 in-interface=pppoe-speedy out-interface=hotspot1
    add action=accept chain=forward comment="" disabled=no dst-address=\
        10.7.70.0/26 in-interface=pppoe-speedy out-interface=hotspot2
    add action=accept chain=forward comment="" disabled=yes in-interface=hotspot1
    Rule ini maksudnya untuk apa ya...?
    itu maksudnya hanya IP itu saja yang diperbolehkan selebihnya di drop.....

  6. #6
    Status
    Offline
    maestro_smd's Avatar
    Member
    Join Date
    Jan 2010
    Posts
    235
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by qiqin Click here to enlarge
    itu maksudnya hanya IP itu saja yang diperbolehkan selebihnya di drop.....
    Oke gan... thanks..., topologinya gimana gan, kalau saya boleh tahu...

    Sehingga Agan pergunakan chain forward untuk me-allow IP tsb...

  7. #7
    Status
    Offline
    kmet's Avatar
    Member
    Join Date
    Dec 2009
    Location
    mataram
    Posts
    227
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    memperhatikan mode on Click here to enlarge

  8. #8
    Status
    Offline
    qiqin's Avatar
    Member
    Join Date
    Jun 2009
    Posts
    149
    Reviews
    Read 0 Reviews
    Downloads
    2
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by maestro_smd Click here to enlarge
    Oke gan... thanks..., topologinya gimana gan, kalau saya boleh tahu...

    Sehingga Agan pergunakan chain forward untuk me-allow IP tsb...
    Topologi yang saya gunakan :

    Speedy <----> RB433AH <-----> Hotspot
    -----------------|
    -----------------|
    -----------------|
    ---------------Proxy

  9. #9
    Status
    Offline
    Art17's Avatar
    Newbie
    Join Date
    Sep 2010
    Location
    Subang
    Posts
    64
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0

    Login Ke hotspot eror

    Halo para master, saya hampir prustasi dah seting uji coba hotspot gagal terus saya pake mikrotik 3.30 dan wireless router uji cobanya TP-link TL- WR340G dan browser di laptop sebagai client pake google chorme,

    referensi setingan
    1.[kucing@mikrotik]>ip hotspot
    2.[kucing@mikrotik] ip hotspot>setup
    hotspot interface:LAN
    local address of network:xxx.xxx.xxx.xxx/xx -->ip dari inteface LAN
    masqurade network:yes
    address pool of network:xxx.xxx.xxx.xxx-xxx.xxx.xxx.xxx
    select certificate:none
    ip address of SMTP server:0.0.0.0
    DNS server:
    DNS name:
    name of local hotspot user: admin ----> user untuk masuk ke halam hotspot
    password for the user:
    3. sekarang buka web browser, ketikan ip addressnya hotspot
    4.masukan username yg telah di buat tadi
    5.walah berhasil kan......
    ini printout mikrotik saya

    interface print
    Flags: D - dynamic, X - disabled, R - running, S - slave
    # NAME TYPE MTU L2MTU
    0 R ether1 ether 1500
    1 R ether2 ether 1500
    2 R ether3 ether 1500

    ip address print
    Flags: X - disabled, I - invalid, D - dynamic
    # ADDRESS NETWORK BROADCAST INTERFACE

    0 192.168.1.2/24 192.168.1.0 192.168.1.255 ether1
    1 10.0.0.30/8 10.0.0.0 10.255.255.255 ether2 Ke hub trus ke 10 client di warnet
    2 ;;; hotspot network
    10.5.50.1/24 10.5.50.0 10.5.50.255 ether3

    ip route print
    Flags: X - disabled, A - active, D - dynamic,
    C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
    B - blackhole, U - unreachable, P - prohibit
    # DST-ADDRESS PREF-SRC GATEWAY-STATE GATEWAY DISTANCE INTERFACE
    0 A S 0.0.0.0/0 reachable 192.168.1. 1 1ether1

    1 ADC 10.0.0.0/8 10.0.0.30 0 ether2

    2 ADC 10.5.50.0/24 10.5.50.1 0 ether3

    3 ADC 192.168.1.0/24 192.168.1.2 0 ether1

    ip firewall nat print
    Flags: X - disabled, I - invalid, D - dynamic
    0 X ;;; place hotspot rules here
    chain=unused-hs-chain action=passthrough
    1 chain=srcnat action=masquerade out-interface=ether1
    2 ;;; masquerade hotspot network
    chain=srcnat action=masquerade src-address=10.5.50.0/24
    3 ;;; masquerade hotspot network
    chain=srcnat action=masquerade src-address=10.5.50.0/24
    4 ;;; masquerade hotspot network
    chain=srcnat action=masquerade src-address=10.5.50.0/24
    5 ;;; masquerade hotspot network
    chain=srcnat action=masquerade src-address=10.5.50.0/24
    6 ;;; masquerade hotspot network
    chain=srcnat action=masquerade src-address=10.5.50.0/24
    7 ;;; masquerade hotspot network
    chain=srcnat action=masquerade src-address=10.5.50.0/24
    nada eror yang tampil di browser google chorme
    Awal “ trus jadi kaya gini.

    Yang ingin saya tanyakan
    1. Kan ip address ether3 untuk wifi kan 10.5.50.1 tapi ko di wifi laptop dikenali ip addresnya 192.168.1.100(DHCP) dan dari laptop ping ke ip 10.5.50.1 time out, apa itu normal?
    2. Gateway untuk mikrotik dari modemnya kan 192.168.1.1, apa harus ditambah gateway husus untuk hotspot?
    3. Yang dibutuhkan minimal untuk membuka tampilan login hotspot di browser client harus sampe setingan yang mana?
    4. Apa ada kemunkinan file di folder hotspot mikrotiknya yang berisi login html dllnya rusak?
    5. Apa wireless tp link “TL-WR340G” nya butuh setingan lagi?

    tolong bantuannya para master, kalo ada jawaban yang maknyos ane kasih pulsa 20rb ga bohong suerClick here to enlarge....lumayan buat smsan........Click here to enlarge
    Last edited by Art17; 19-11-2010 at 12:48.

  10. #10
    Status
    Offline
    ucok_karnadi's Avatar
    ..:: Masih Bodoh ::..
    Join Date
    Jan 2009
    Location
    PATI - JAWA TENGAH
    Posts
    1,187
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    coba disable dulu rule untuk dstnat proxy. lalu coba buat user baru, cookies di browser kosongin lalu coba login. bermasalah nggak?? tolong laporannya
    ___________________________________________


  11. The Following User Says Thank You to ucok_karnadi For This Useful Post:


  12. #11
    Status
    Offline
    maestro_smd's Avatar
    Member
    Join Date
    Jan 2010
    Posts
    235
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by Art17 Click here to enlarge
    Yang ingin saya tanyakan
    1. Kan ip address ether3 untuk wifi kan 10.5.50.1 tapi ko di wifi laptop dikenali ip addresnya 192.168.1.100(DHCP) dan dari laptop ping ke ip 10.5.50.1 time out, apa itu normal?
    2. Gateway untuk mikrotik dari modemnya kan 192.168.1.1, apa harus ditambah gateway husus untuk hotspot?
    3. Yang dibutuhkan minimal untuk membuka tampilan login hotspot di browser client harus sampe setingan yang mana?
    4. Apa ada kemunkinan file di folder hotspot mikrotiknya yang berisi login html dllnya rusak?
    5. Apa wireless tp link “TL-WR340G” nya butuh setingan lagi?
    6. kan mikrotik versi 3.30 saya bajakan apa ga bisa untuk hotspot padahal dah level 6?

    tolong bantuannya para master, kalo ada jawaban yang maknyos ane kasih pulsa 20rb ga bohong suerClick here to enlarge....lumayan buat smsan........Click here to enlarge
    1. Matikan DHCP TL-WR340G
    2. Gak usah
    4. Sepertinya nggak
    5. Kalau sudah AP Mode ya udah...
    6. Hendaknya pakai yg Originil, biar enak, tenang, aman dan terkendeli 86.
    2. /ip pool
    /ip hotspot setup, ip hotspot profile, ip hotspot user (ubek aja disitu)

    Kalau melihat pesan error, si client masih belum bisa resolv tuh...
    Coba testingnya gini, masukan , di /ip hotspot walled-garden, posisi allow. Terus buka di client bisa apa enggak?

  13. The Following User Says Thank You to maestro_smd For This Useful Post:


  14. #12
    Status
    Offline
    qiqin's Avatar
    Member
    Join Date
    Jun 2009
    Posts
    149
    Reviews
    Read 0 Reviews
    Downloads
    2
    Uploads
    0
    Feedback Score
    0
    Sorry sebelumnya buat Art17....kalau masalah bajakan jangan dibahas disini
    sorry juga buat maestro_smd....Kalau bisa jangan diperpanjang pembahasan mengenai versi bajakan....Mari kita taati peraturan di FMI ini.

    Mas ucok_karnadi, saya coba dulu mas......

    Makasih atas semua perhatiannya.........
    Last edited by qiqin; 19-11-2010 at 10:55.

  15. #13
    Status
    Offline
    Art17's Avatar
    Newbie
    Join Date
    Sep 2010
    Location
    Subang
    Posts
    64
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by ucok_karnadi Click here to enlarge
    coba disable dulu rule untuk dstnat proxy. lalu coba buat user baru, cookies di browser kosongin lalu coba login. bermasalah nggak?? tolong laporannya
    ok mas ucok tak coba dulu....Click here to enlarge

    ---------- Post added at 11:54 ---------- Previous post was at 11:49 ----------

    Click here to enlarge Originally Posted by qiqin Click here to enlarge
    Sorry sebelumnya buat Art17....kalau masalah bajakan jangan dibahas disini
    sorry juga buat maestro_smd....Kalau bisa jangan diperpanjang pembahasan mengenai versi bajakan....Mari kita taati peraturan di FMI ini.

    Mas ucok_karnadi, saya coba dulu mas......

    Makasih atas semua perhatiannya.........
    untuk mas qiqin maaf ane belum sempet baca semua rule FMI, tapi postingan yang lain banyak ko ngbahas soal piracy, tapi sekali lagi minta maaf, kalo ni thread di close ga papa,sebelumnya terimakasih unutk mas ucok ma mas maestro...kalo salah satu setingannya bener ane minta no hPnya.....Click here to enlarge

  16. #14
    Status
    Offline
    Art17's Avatar
    Newbie
    Join Date
    Sep 2010
    Location
    Subang
    Posts
    64
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    boz ucok, kalo boleh saya minta alamat ym ato no hp saya perlu ngobrol banayak soalnya blum kelar juga.
    jadi permasalahannya pas saya masukan alamat ip hotspot yaitu 10.5.50.1 di laptop client, di layar browsernya ga nampil tampilan buat login, jadi bukan dah ada tampilan login trus user ga bisa konek......seoerti itu...
    mau lanjut di thread ini malu ma boz qiqin, Click here to enlargeyang punya original software...
    kalo ga keberatan boz ucok bisa sms ato miscall ke no 087828427889 ato Ym di mpie_art17, nanti saya telpon balik......
    [SOLVED]
    Last edited by Art17; 19-11-2010 at 20:49.

  17. #15
    Status
    Offline
    qiqin's Avatar
    Member
    Join Date
    Jun 2009
    Posts
    149
    Reviews
    Read 0 Reviews
    Downloads
    2
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by Art17 Click here to enlarge
    mau lanjut di thread ini malu ma boz qiqin, Click here to enlargeyang punya original software...
    Click here to enlargeClick here to enlargebisa aja loe....semua sama disini, cuman hanya saling membantu dan meringankan tugas bang momod n mimin

    Click here to enlargeClick here to enlarge

    lanjut..masalah ane gimana ni....belum bisa juga ni.....

 

 
Page 1 of 2 12 LastLast

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. [Ask] Pc sudah connect ke AP tapi tidak bisa browsing
    By sugarman in forum Wireless Networking
    Replies: 16
    Last Post: 14-12-2011, 00:54
  2. Login User Hotspot Mikrotik Gagal
    By vedgetto in forum Wireless Networking
    Replies: 7
    Last Post: 01-12-2010, 15:25
  3. [ASK] Halaman Login Hotspot Gagal muncul
    By nugraha_pratama in forum General Networking
    Replies: 6
    Last Post: 15-09-2010, 12:18
  4. Nanostation 2 Loco via wireless gagal akses login hotspot
    By bennyskom in forum Wireless Networking
    Replies: 2
    Last Post: 10-05-2010, 20:39
  5. Replies: 4
    Last Post: 08-09-2008, 10:25

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •