KONFIGURASI MIKROTIK CLI

KONFIGURASI MIKROTIK DENGAN MENGUNAKAN CLI

MY PROFESIONAL

system identity set name

password

interface ethernet set ether1 name=internet

interface ethernet set ether2 name=lan

ip address add address=192.168.9.30/24 interface=internet

ip address add address =192.168.100.1/24 interface=lan

ip route add gateway=192.168.9.1

ip firewall nat add chain:srcnat out-interface=internet action=masquerade

ip dns set server=8.8.8.8,8.8.4.4 allow-remote-request=yes

ip dhcp server setup

ip proxy set enable=yes cache-on-disk=yes port=8080 cache-administrator=Mohamad Yusuf@UKK.com

1.ip tidak dapat ping kerouter

ip firewall filter add chain=input src-address=192.168.100.1-192.168.100.100 dst-address=192.168.15.30 action=drop

2.ip tidak dapat ping ke client

ip firewall filter add chain=input src-address=192.168.100.1-192.168.100.100 dst-address=192.168.200.1 action=drop

3.blok content

ip firewall raw add chain=prerouting content=..... action=drop

4.bypass

ip hotspot walled-garden add dst-host=bsnp.indonesia.org.id action deny

5.blok file

ip proxy access add dst-port=80 path=*... action=deny

6.blok site

ip proxy access add dst-host=*linux.org.id action=deny

ip firewall nat add chain=dstnat protocol=tcp dst-port=80 in-interface=lan action=redirect to-port=8080

7.aktifkan wirelless

interface enable wlan1

interface set wlan1 name=wlan

ip address add address=192.168.20.1/24 interface=wlan1

ip dhcp server setup

interface wirelles set 0 mode=ap-bridge ssid=....

ip hotspot setup

ip hostpot user add name=1 pw=1

8.menambah script QR code

ip hotspot walled-garden ip add action=accept comment="mikhmon QR code scanner"disabled=no dst-host=laksa 19 github.io

(konfigurasi mikhmon hotspot>user profile>add profile>expired mode>

9.schedule eth2

system schedule add name=off interval=1d start-time=00.00.00 on-event="interface ethernet disable LAN"

system schedule add name=on interval=1d start-time=00.00.00 on-event="interface ethernet enable LAN"

10.schedule hotspot

system script add name=mati source="ip hotspot user disable[find name=siswa]"

system scheduler add anme=mati interval=1d start-time=00:00:00 start-date=sep/../2022 on-event=mati

system script add name=nyala source="ip hotspot user enable[find name=siswa]"

system scheduler add anme=nyala interval=1d start-time=00:00:00 start-date=sep/../2022 on-event=nyala

11.blok idm

ip firewall layer7-protocol add name=idm regexp="^.+(exe|rar|iso|zip|7z|fiv|mkv|avi|mp4|3gp|mp3|dat|mov|.mp4).*$"

ip firewall filter add chain=forward protocol=tcp layer7-protocol=idm out-interface=lan action=drop

12.nonaktifkan apk youtube di hp&pc 

ip firewall layer7-protocol add name=yt regexp="^.+(youtube.com|www.youtube.com|m.youtube.com|

ytimg.com|s.ytimg.com|ytimg.1.google.com|i.google.com|googlevideo.com|youtube.be).*$"

ip firewall filter add chain=forward layer7-protocol=yt action=drop

13.limit user

ip hotspot user add name=guru pass=guru

ip hotspot user profile add rate limit=unlimited

ip hotspot user add name=siswa pass=siswa

ip hotspot user profile add rate limit=512k/512k

ip hotspot user add name=bagas pass=bagas

ip hotspot user profile add rate limit=128k/128k

14.ip binding

ip binding add mac-address=....... address=....to-address=... server=hotspot type=regular

15.blok fb

ip firewall raw add chain=prerouting content=fb.com action=drop

16.vlan

interface vlan add name=vlan1 vlan-id=1 interface=lan

interface vlan add name=vlan2 vlan-id=2 interface=lan

ip address add address=10.10.100.1/24 interface=vlan1

ip address add address=10.10.200.1/24 interface=vlan2

ip dhcp server setup

17.logging

ip firewall filter add chain=forward action=accept log=yes

system loogging set 0 action=disk