TUTORIAL UKK 2017 PAKET 2

Interface-> ether1 ganti =ether1-internet

Interface-> ether2 ganti =ether2-lokal
Interface-> ether3 ganti =ether3-lab
Interface-> wlan1 centang

Ip DHCP Client “+” interface= ether1

Ip address “+” address=192.168.10.1/24 interface= ether2-lokal

Ip address “+” address=192.168.20.1/24 interface= ether3-lab
Ip address “+” address=192.168.50.1/24 interface= wlan1

IP DNS-> Server 8.8.8.8, 192.168.1.254 centang allow remote requests

Ip Firewall-> NAT -> Chain=srcnat, Out Interface= ether1, Action=masquerade

IP Routes-> Gateway= 192.168.1.1

Setting Ip Address Komputer = 192.168.10.2

SubNet mask = 255.255.255.0
Gateway = 192.168.10.1
DNS Server = 192.168.1.254
DNS = 8.8.8.8

Wireless-> Wireless Tables-> Security Profile “+” Name= password,

Unicast Ciphers centang aes ccm, centang tkip
Group Ciphers centang aes ccm, centang tkip
WPA Pre-Shared Key 12345678
WPA2 Pre-Shared Key 12345678

Interface-> mode= ap bridge, SSID= nama_siswa@proxy, Security profile= password

Ip DHCP Server-> DHCP Setup-> DHCP Server Interface= wlan1 -> DHCP Address Space= 192.168.50.0/24
-> Gateway DHCP Network= 192.168.50.1 -> Address Give out= 192.168.50.2-192.168.50.100 -> DNS
Server 8.8.8.8, 192.168.1.254 -> Select lease time =10menit

Ip Web proxy-> centang enable, Max. Chace Size= Unlimited, cache Administrator=
nama_siswa@smkeyzzulmoslem.sch.id , Centang Cache On Disk,
Access “+” DST. Host= www.linux.or.id , Action= Deny
Access “+” Path= *.mp3* , Action= Deny
Access “+” Path= *.mkv* , Action= Deny

Ip Firewall-> NAT “+” Chain= dstnat, In Interface= wlan1, Protocol= tcp, DST port= 80, Action= redirect,
to port= 8080
 TUTORIAL UKK 2017 PAKET 3

Interface-> ether1 ganti =ether1-internet

Interface-> ether2 ganti =ether2-lokal
Interface-> ether3 ganti =ether3-lab
Interface-> wlan1 centang

Ip DHCP Client “+” interface= ether1

Ip address “+” address=192.168.10.1/24 interface= ether2-lokal

Ip address “+” address=192.168.20.1/24 interface= ether3-lab
Ip address “+” address=192.168.50.1/24 interface= wlan1

IP DNS-> Server 8.8.8.8, 192.168.1.254 centang allow remote requests

Ip Firewall-> NAT -> Chain=srcnat, Out Interface= ether1, Action=masquerade
IP Routes-> Gateway= 192.168.1.1

Setting Ip Address Komputer = 192.168.10.2

SubNet mask = 255.255.255.0
Gateway = 192.168.10.1
DNS Server = 192.168.1.254
DNS = 8.8.8.8

Klik wireless -> interfaces-> klik 2x wlan1 -> wireless -> mode = ap bridge, SSID= nama anda

KONFIGURASI HOTSPOT
Ip -> Hotspot -> Hotspot Setup -> Hotspot Interface = Wlan1 -> Local Address = 192.168.50.1/24 ->
Address Pool= 192.168.50.10-192.168.50.100 -> Ip Address Of SMTP -> 0.0.0.0 -> DNS Server =8.8.8.8
192.168.1.254 -> DNS Name= smkeyzzulmoslem.sch.id ->
Name of Local Hotspot= admin, Password = (kosong) -> Next

BUAT USER PROFIL

IP-> Hotspot -> User Profil -> + -> Name= guru, Address Pol= hs-pool-**, Rate Limit= 512k/512k->OK
IP-> Hotspot -> User Profil -> + -> Name= siswa, Address Pol= hs-pool-**, Rate Limit= 256k/256->OK

BUAT USER HOTSPOT

IP-> Hotspot -> User -> Server=hotspot1, Name= ali, Pasword=123 -> Profil=siswa ->Apply-> OK
IP-> Hotspot -> User -> Server=hotspot1, Name= nova, Pasword=123 -> Profil=guru Apply-> OK

BYPASS WEBSITE
IP-> Hotspot -> Walled Garden-> Action=allow, Dst. Host= bsnp-indonesia.org -> Apply-> OK

BLOK WEBSITE
IP-> Firewall-> Layer 7 Protocols-> + -> Name= youtube.com, Regexp= ^.+(youtube.com).*$ -> OK
IP-> Firewall -> Filter Rules-> + -> General -> Chain=forward, Src Address=192.168.50.1/24,
(“192.168.50.10 – 192.168.50.100”) Protocol= 6(tcp), Layer 7 Protocol= youtube.com -> Action= Drop ->
Apply-> OK

EDIT HALAMAN LOGIN HOTSPOT

ftp://192.168.1.xxx ( lihat IP address ether1 di winbox ) -> Log On -> UserName= admin -> Log On
klik folder hotspot-> login.html (dicopy difolder D), edit pakai notepad++, cari tulisan “latviski”
diganti SMK EYZZUL MOSLEM, lalu simpan login.html yang ada di folder D dicopy, dipaste di
ftp://192.168.1.xxx folder hotspot -> yes to All