KONFIGURASI MIKROTIK DENGAN MENGUNAKAN CLI
MY PROFESIONAL
system identity set name
password
interface ethernet set ether1 name=internet
interface ethernet set ether2 name=lan
ip address add address=192.168.9.30/24 interface=internet
ip address add address =192.168.100.1/24 interface=lan
ip route add gateway=192.168.9.1
ip firewall nat add chain:srcnat out-interface=internet action=masquerade
ip dns set server=8.8.8.8,8.8.4.4 allow-remote-request=yes
ip dhcp server setup
ip proxy set enable=yes cache-on-disk=yes port=8080 cache-administrator=Mohamad Yusuf@UKK.com
1.ip tidak dapat ping kerouter
ip firewall filter add chain=input src-address=192.168.100.1-192.168.100.100 dst-address=192.168.15.30 action=drop
2.ip tidak dapat ping ke client
ip firewall filter add chain=input src-address=192.168.100.1-192.168.100.100 dst-address=192.168.200.1 action=drop
3.blok content
ip firewall raw add chain=prerouting content=..... action=drop
4.bypass
ip hotspot walled-garden add dst-host=bsnp.indonesia.org.id action deny
5.blok file
ip proxy access add dst-port=80 path=*... action=deny
6.blok site
ip proxy access add dst-host=*linux.org.id action=deny
ip firewall nat add chain=dstnat protocol=tcp dst-port=80 in-interface=lan action=redirect to-port=8080
7.aktifkan wirelless
interface enable wlan1
interface set wlan1 name=wlan
ip address add address=192.168.20.1/24 interface=wlan1
ip dhcp server setup
interface wirelles set 0 mode=ap-bridge ssid=....
ip hotspot setup
ip hostpot user add name=1 pw=1
8.menambah script QR code
ip hotspot walled-garden ip add action=accept comment="mikhmon QR code scanner"disabled=no dst-host=laksa 19 github.io
(konfigurasi mikhmon hotspot>user profile>add profile>expired mode>
9.schedule eth2
system schedule add name=off interval=1d start-time=00.00.00 on-event="interface ethernet disable LAN"
system schedule add name=on interval=1d start-time=00.00.00 on-event="interface ethernet enable LAN"
10.schedule hotspot
system script add name=mati source="ip hotspot user disable[find name=siswa]"
system scheduler add anme=mati interval=1d start-time=00:00:00 start-date=sep/../2022 on-event=mati
system script add name=nyala source="ip hotspot user enable[find name=siswa]"
system scheduler add anme=nyala interval=1d start-time=00:00:00 start-date=sep/../2022 on-event=nyala
11.blok idm
ip firewall layer7-protocol add name=idm regexp="^.+(exe|rar|iso|zip|7z|fiv|mkv|avi|mp4|3gp|mp3|dat|mov|.mp4).*$"
ip firewall filter add chain=forward protocol=tcp layer7-protocol=idm out-interface=lan action=drop
12.nonaktifkan apk youtube di hp&pc
ip firewall layer7-protocol add name=yt regexp="^.+(youtube.com|www.youtube.com|m.youtube.com|
ytimg.com|s.ytimg.com|ytimg.1.google.com|i.google.com|googlevideo.com|youtube.be).*$"
ip firewall filter add chain=forward layer7-protocol=yt action=drop
13.limit user
ip hotspot user add name=guru pass=guru
ip hotspot user profile add rate limit=unlimited
ip hotspot user add name=siswa pass=siswa
ip hotspot user profile add rate limit=512k/512k
ip hotspot user add name=bagas pass=bagas
ip hotspot user profile add rate limit=128k/128k
14.ip binding
ip binding add mac-address=....... address=....to-address=... server=hotspot type=regular
15.blok fb
ip firewall raw add chain=prerouting content=fb.com action=drop
16.vlan
interface vlan add name=vlan1 vlan-id=1 interface=lan
interface vlan add name=vlan2 vlan-id=2 interface=lan
ip address add address=10.10.100.1/24 interface=vlan1
ip address add address=10.10.200.1/24 interface=vlan2
ip dhcp server setup
17.logging
ip firewall filter add chain=forward action=accept log=yes
system loogging set 0 action=disk
