Pada halaman ini kita akan konfigurasi router mikrotik sederhana. Membuat sebuah jaringan home hingga client dapat tersambung ke internet
¶ Topologi
¶ Konfigurasi
¶ Inisial Setup
/system identity set name="R1"
/system clock set time-zone-name=Asia/Jakarta
/user add name=ilyasa group=full password=admin
/user disable admin
¶ Konfigurasi Bridge interface
/interface bridge add name=bridge-WAN
/interface bridge add name=bridge-LAN
/interface bridge port
add bridge=bridge-WAN interface=ether1
/interface bridge port
add bridge=bridge-LAN interface=ether2
add bridge=bridge-LAN interface=ether3
add bridge=bridge-LAN interface=ether4
¶ Konfigurasi WAN Interface (dhcp-client)
/ip dhcp-client
remove ether1
add interface=bridge-WAN disabled=no
¶ Konfigurasi LAN interface dan DHCP Server
ip address add address=192.168.1.1/24 interface=bridge-LAN
/ip dhcp-server setup
[ilyasa@R1] > /ip dhcp-server setup
Select interface to run DHCP server on
dhcp server interface: bridge-LAN
Select network for DHCP addresses
dhcp address space: 192.168.1.0/24
Select gateway for given network
gateway for dhcp network: 192.168.1.1
If this is remote network, enter address of DHCP relay
There is no such IP network on selected interface
dhcp relay: 192.168.1.1
Select pool of ip addresses given out by DHCP server
addresses to give out: 192.168.1.2-192.168.1.254
Select DNS servers
dns servers: 192.168.195.2
Select lease time
lease time: 10m
¶ Konfigurasi Firewall NAT
/ip firewall nat add chain=srcnat out-interface=bridge-WAN action=masquerade
¶ Verify
PC1> ip dhcp
DORA IP 192.168.1.253/24 GW 192.168.1.1
PC2> ip dhcp
DORA IP 192.168.1.254/24 GW 192.168.1.1
PC1> ping google.com
google.com resolved to 142.251.175.138
84 bytes from 142.251.175.138 icmp_seq=1 ttl=127 time=27.836 ms
84 bytes from 142.251.175.138 icmp_seq=2 ttl=127 time=28.419 ms
84 bytes from 142.251.175.138 icmp_seq=3 ttl=127 time=27.924 ms
84 bytes from 142.251.175.138 icmp_seq=4 ttl=127 time=28.070 ms
84 bytes from 142.251.175.138 icmp_seq=5 ttl=127 time=28.191 ms
¶ Log
[ilyasa@R1] > ip address print
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK INTERFACE
0 D 192.168.195.133/24 192.168.195.0 bridge-WAN
1 192.168.1.1/24 192.168.1.0 bridge-LAN
[ilyasa@R1] > ip dhcp-server print
Flags: D - dynamic, X - disabled, I - invalid
# NAME INTERFACE RELAY ADDRESS-POOL LEASE-TIME ADD-ARP
0 dhcp1 bridge-LAN dhcp_pool1 10m
[ilyasa@R1] > ip dhcp-client print
Flags: X - disabled, I - invalid, D - dynamic
# INTERFACE USE ADD-DEFAULT-ROUTE STATUS ADDRESS
0 bridge-WAN yes yes bound 192.168.195.133/24
[ilyasa@R1] > interface bridge print
Flags: X - disabled, R - running
0 R name="bridge-LAN" mtu=auto actual-mtu=1500 l2mtu=65535 arp=enabled
arp-timeout=auto mac-address=50:57:BD:00:03:01 protocol-mode=rstp
fast-forward=yes igmp-snooping=no auto-mac=yes ageing-time=5m
priority=0x8000 max-message-age=20s forward-delay=15s
transmit-hold-count=6 vlan-filtering=no dhcp-snooping=no
1 R name="bridge-WAN" mtu=auto actual-mtu=1500 l2mtu=65535 arp=enabled
arp-timeout=auto mac-address=50:57:BD:00:03:00 protocol-mode=rstp
fast-forward=yes igmp-snooping=no auto-mac=yes ageing-time=5m
priority=0x8000 max-message-age=20s forward-delay=15s
transmit-hold-count=6 vlan-filtering=no dhcp-snooping=no
[ilyasa@R1] > interface bridge port print
Flags: X - disabled, I - inactive, D - dynamic, H - hw-offload
# INTERFACE BRIDGE HW PVID PR PATH-COST INTERNA... HORIZON
0 ether1 bridge-WAN yes 1 0x 10 10 none
1 ether2 bridge-LAN yes 1 0x 10 10 none
2 ether3 bridge-LAN yes 1 0x 10 10 none
3 ether4 bridge-LAN yes 1 0x 10 10 none