Tutorial Belajar menggunakan mikrotik

Beberapa waktu yang lalu saya belajar menggunakan mikrotik, tapi sebelum menggunakan mikrotik sebagai pemula seperti saya ide yang baik untuk belajar perintah-perintah dasar agar tidak tersesat ketika menggunakan mesin ini. Ada beberapa perintah dasar mikrotik.

# All commands that can function in the mikrotik can be viewed by:

[admin@Mikrotik] >?

# To see the interface Mikrotik can be viewed by:

[Admin @ MikroTik]> interface print

# To change the default password of mikrotik

[Admin @ MikroTik]> password

Then enter the initial password (typically if the initial password is empty so directly enter)

Then enter the new password

# How to change the name mikrotik in the following way:

[Admin @ MikroTik]> system identity set name = root

# How to add IP in Mikrotik

[Admin @ root]> ip address add address = 192.168.1.2
netmask = 255.255.255.0 interface = Public comment = “ether1″
[Admin @ root]> ip address add address = 192.168.0.30
255 255 255 224 netmask = interface = Local comment = “ether2″

# Setting the Gateway mikrotik

[Admin @ root]> / ip route add gateway = 192.168.1.1

# Setup Masquerading MikroTik will we use as a gateway server so that

client computer on the network can connect to the internet we need to masquerading.

[Admin @ root]> ip firewall nat add chain = scrnat out-interface = Public action = masquerade

# Setup DNS on Mikrotik Routers, for example DNS with Ip Address

Primary = 202.134.0.155, Secondary = 202.134.2.5
[Admin @ root]> ip dns set primary-dns = 202.134.0.155 remoterequests = yes allow-
[Admin @ root]> ip dns set secondary-dns = 202.134.2.5 allow-remoterequests = yes

# Add IP address pool

[Admin @ root]> / ip pool add name = dhcp-pool ranges = 192.168.0.1-192.168.0.30

# Add a DHCP Network and gateway that will be distributed to the client.

In this example networknya is 192.168.0.0/27 and gateway 122.168.0.30

[Admin @ root]> / ip dhcp-server network add address = 192.168.0.0/27 gateway = 192.168.0.30 dns-server = 192.168.0.30
comment = “”

# Add the DHCP server (in this example is applied to the interface dhcp Local)

[Admin @ root]> / ip dhcp-server add interface = local address-pool = dhcp-pool

# See the status of DHCP server

[Admin @ root]> ip dhcp-server print

# Wishful Forget made enable dhcp server first

[Admin @ root]> / ip dhcp-server enable 0

# Setting Web proxy:

- Ip proxy set enabled = yes
port = {port that will be used}
maximal-client-connections = 1000
maximal-server-connections = 1000
[Admin @ root]> / ip web-proxy
set enabled = yes src-address = 0.0.0.0 port = 8080
hostname = “proxy.routerku.co.id” transparent-proxy = yes
parent-proxy = 0.0.0.0:0 cache-administrator = “support@routerku.co.id”
max-object-size = 131072KiB cache-drive = system max-cache-size = unlimited
max-ram-cache-size = unlimited

# Setting the firewall to Transparant Proxy

Form configuration command:

ip firewall nat add chain = dstnat
protocol = tcp
dst-port = 80
action = redirect
to-ports = proxy {port}
[Admin @ root]> / ip firewall nat
add chain = dstnat protocol = tcp dst-port = 80 action = redirect to-ports = 8080
comment = “” disabled = no
add chain = dstnat protocol = tcp dst-port = 3128 action = redirect to-ports = 8080
comment = “” disabled = no
add chain = dstnat protocol = tcp dst-port = 8000 action = redirect to-ports = 8080
NOTE:
Command
[Admin @ root]> / ip web-proxy print {to see the results of a web-proxy configuration}
[Admin @ root]> / ip web-proxy monitor for monitoring the work {web-proxy}

# Method for downstream traffic

[Admin @ root]> / queue tree add name = Download parent = Local max-limit = 256k
[Admin @ root]> / queue tree add parent = Download queue = pcq-download packet-mark = users

# How and upstream traffic

[Admin @ root]> / queue tree add name = Upload parent = Public max-limit = 256k
[Admin @ root]> / queue tree add parent = Upload queue = pcq-upload packet-mark = users

# How to MRTG monitor via the Web

[Admin @ root]> / tool graphing
set store-every = 5min
[Admin @ root]> / tool graphing interface
add interface = all allow-address = 0.0.0.0 / 0 store-on-disk = yes disabled = no

# How to service and Viewing the Active Service with PortScanner

[Admin @ root]> ip service
[Admin @ root] ip service> print

Note:

when to get out of it like this:

[Admin @ root] ip service>

to return to

[Admin @ root]>

type “[admin @ root] ip service> ..”