Jump to content

SMK2024-25/Materi Pelatihan Jaringan: Difference between revisions

From Wiki
Created page with " reset router mikrotik <code>system reset-configuration no-default=y</code> membuat vlan di interface ether3 (vlan 100, vlan 101, dan vlan 102) interfaces vlan <code>add vlan-id=100 interface=ether3 name=vlan100 add vlan-id=101 interface=ether3 name=vlan101 add vlan-id=102 interface=ether3 name=vlan102</code> hubungkan SSID : LAB TJKT 2 password : lab-tjkt2 Membuat password WIFI <code>wireless security-profile add name=password mode=dynamic-keys tkip=yes authenti..."
 
No edit summary
 
Line 2: Line 2:
reset router mikrotik
reset router mikrotik
   
   
  <code>system reset-configuration no-default=y</code>
  system reset-configuration no-default=y
 
membuat vlan di interface ether3 (vlan 100, vlan 101, dan vlan 102) interfaces vlan
membuat vlan di interface ether3 (vlan 100, vlan 101, dan vlan 102) interfaces vlan
  <code>add vlan-id=100 interface=ether3 name=vlan100
 
  add vlan-id=100 interface=ether3 name=vlan100
  add vlan-id=101 interface=ether3 name=vlan101
  add vlan-id=101 interface=ether3 name=vlan101
  add vlan-id=102 interface=ether3 name=vlan102</code>
  add vlan-id=102 interface=ether3 name=vlan102
 
hubungkan SSID : LAB TJKT 2 password : lab-tjkt2
hubungkan SSID : LAB TJKT 2 password : lab-tjkt2


Membuat password WIFI
Membuat password WIFI
  <code>wireless security-profile add name=password mode=dynamic-keys tkip=yes authenti=wpa2-psk
  wireless security-profile add name=password mode=dynamic-keys tkip=yes authenti=wpa2-psk
  wpa2-psk=lab-tjkt2</code>
  wpa2-psk=lab-tjkt2
 
menghubungkan wlan1 ke wifi LAB TJKT 2
menghubungkan wlan1 ke wifi LAB TJKT 2
  <code>wireless wireless-interface wlan1 set=enable (klik) scan (klik) start (pilih)
  wireless wireless-interface wlan1 set=enable (klik) scan (klik) start (pilih)
  LAB TJKT2 (klik) connect.</code>
  LAB TJKT2 (klik) connect.
 
security-profile=password apply OK.


<code>security-profile=password apply OK.</code>
membuat dhcp-client untuk internet di mikrotik di <code>wlan1</code>
membuat dhcp-client untuk internet di mikrotik di <code>wlan1</code>
  <code>ip dhcp-client add interfaces=wlan1 disabled=no</code>
  ip dhcp-client add interfaces=wlan1 disabled=no
 
membuat ip untuk interface dan vlan
membuat ip untuk interface dan vlan
  <code>ip address
  ip address
  add addr=192.168.20.1/24 interface=ether2
  add addr=192.168.20.1/24 interface=ether2
  add add=192.168.30.1/24 interface=ether3
  add add=192.168.30.1/24 interface=ether3
  add add=10.10.10.1/24 interface=vlan10
  add add=10.10.10.1/24 interface=vlan10
  add add=10.10.20.1/24 interface=vlan20
  add add=10.10.20.1/24 interface=vlan20
  add add=10.10.30.1/24 interface=vlan30</code>
  add add=10.10.30.1/24 interface=vlan30
 
membuat NAT
membuat NAT
  <code>ip firewall nat add chain=srcnat action=masquerade</code>
  ip firewall nat add chain=srcnat action=masquerade
 
membuat DHCP-SERVER
membuat DHCP-SERVER
  <code>ip pool
  ip pool
  add name=pool-ether3 ranges=192.168.30.2-192.168.30.254
  add name=pool-ether3 ranges=192.168.30.2-192.168.30.254
  add name=pool-vlan10 ranges=10.10.10.2-10.10.10.254
  add name=pool-vlan10 ranges=10.10.10.2-10.10.10.254
  add name=pool-vlan20 ranges=10.10.20.2-10.10.20.254
  add name=pool-vlan20 ranges=10.10.20.2-10.10.20.254
  add name=pool-vlan30 ranges=10.10.30.2-10.10.30.254</code>
  add name=pool-vlan30 ranges=10.10.30.2-10.10.30.254


  <code>ip dhcp-server
  ip dhcp-server
  add name=dhcp-ether3 interface=ether3 address-pool=pool-ether3 disabled=no
  add name=dhcp-ether3 interface=ether3 address-pool=pool-ether3 disabled=no
  add name=dhcp-vlan10 interface=vlan10 address-pool=pool-vlan10 disabled=no
  add name=dhcp-vlan10 interface=vlan10 address-pool=pool-vlan10 disabled=no
  add name=dhcp-vlan20 interface=vlan20 address-pool=pool-vlan20 disabled=no
  add name=dhcp-vlan20 interface=vlan20 address-pool=pool-vlan20 disabled=no
  add name=dhcp-vlan30 interface=vlan30 address-pool=pool-vlan30 disabled=no</code>
  add name=dhcp-vlan30 interface=vlan30 address-pool=pool-vlan30 disabled=no


  <code>ip dhcp-server network
  ip dhcp-server network
  add gateway=192.168.30.1 dns-server=8.8.8.8 address=192.168.30.0/24
  add gateway=192.168.30.1 dns-server=8.8.8.8 address=192.168.30.0/24
  add gateway=10.10.10.1 dns-server=8.8.8.8 address=10.10.10.0/24
  add gateway=10.10.10.1 dns-server=8.8.8.8 address=10.10.10.0/24
  add gateway=10.10.20.1 dns-server=8.8.8.8 address=10.10.20.0/24
  add gateway=10.10.20.1 dns-server=8.8.8.8 address=10.10.20.0/24
  add gateway=10.10.30.1 dns-server=8.8.8.8 address=10.10.30.0/24</code>
  add gateway=10.10.30.1 dns-server=8.8.8.8 address=10.10.30.0/24
 
== KONFIGURASI VLAN DI Mikrotik ==


= KONFIGURASI VLAN DI Mikrotik =
membuat bridge untuk ether3, vlan100, vlan101, vlan102
membuat bridge untuk ether3, vlan100, vlan101, vlan102
  <code>bridge
  bridge
  add name=br-ether3
  add name=br-ether3
  add name=br-vlan100
  add name=br-vlan100
  add name=br-vlan101
  add name=br-vlan101
  add name=br-vlan102</code>
  add name=br-vlan102
 
membuat vlan100, vlan101, vlan102 di ether1
membuat vlan100, vlan101, vlan102 di ether1
  <code>interfaces vlan
  interfaces vlan
  add vlan-id=100 interface=ether1 name=vlan100
  add vlan-id=100 interface=ether1 name=vlan100
  add vlan-id=101 interface=ether1 name=vlan101
  add vlan-id=101 interface=ether1 name=vlan101
  add vlan-id=102 interface=ether1 name=vlan102</code>
  add vlan-id=102 interface=ether1 name=vlan102
 
mengelompokkan vlan100 dan interfaces
mengelompokkan vlan100 dan interfaces
  <code>bridge port
  bridge port
  add interface=ether2 bridge=br-vlan100
  add interface=ether2 bridge=br-vlan100
  add inteface=vlan100 bridge=br-vlan100
  add inteface=vlan100 bridge=br-vlan100
Line 66: Line 77:
  add inteface=vlan101 bridge=br-vlan101
  add inteface=vlan101 bridge=br-vlan101
  add interface=ether4 bridge=br-vlan102
  add interface=ether4 bridge=br-vlan102
  add inteface=vlan102 bridge=br-vlan102</code>
  add inteface=vlan102 bridge=br-vlan102


= KONFIGURASI SWITCH CISCO =
== KONFIGURASI SWITCH CISCO ==
membuat vlan 10,20,30
membuat vlan 10,20,30
  <code>vlan 10
  vlan 10
  vlan 20
  vlan 20
  vlan 30</code>
  vlan 30
 
mengkonfigurasi akses vlan 10,20,30
mengkonfigurasi akses vlan 10,20,30
  <code>interfaces e0/1
  interfaces e0/1
  switchport mode access
  switchport mode access
  switchport access vlan 10</code>
  switchport access vlan 10


  <code>interfaces e0/2
  interfaces e0/2
  switchport mode access
  switchport mode access
  switchport access vlan 20</code>
  switchport access vlan 20


  <code>interfaces e0/3
  interfaces e0/3
  switchport mode access
  switchport mode access
  switchport access vlan 30</code>
  switchport access vlan 30
mengkonfigurasi akses trunk di port e0/0
mengkonfigurasi akses trunk di port e0/0
  <code>interfaces e0/0
  interfaces e0/0
  switchport trunk encapsulation dot1q
  switchport trunk encapsulation dot1q
  switchport mode trunk</code>
  switchport mode trunk

Latest revision as of 07:24, 27 February 2025

reset router mikrotik

system reset-configuration no-default=y

membuat vlan di interface ether3 (vlan 100, vlan 101, dan vlan 102) interfaces vlan

add vlan-id=100 interface=ether3 name=vlan100
add vlan-id=101 interface=ether3 name=vlan101
add vlan-id=102 interface=ether3 name=vlan102

hubungkan SSID : LAB TJKT 2 password : lab-tjkt2

Membuat password WIFI

wireless security-profile add name=password mode=dynamic-keys tkip=yes authenti=wpa2-psk
wpa2-psk=lab-tjkt2

menghubungkan wlan1 ke wifi LAB TJKT 2

wireless wireless-interface wlan1 set=enable (klik) scan (klik) start (pilih)
LAB TJKT2 (klik) connect.
security-profile=password apply OK.

membuat dhcp-client untuk internet di mikrotik di wlan1

ip dhcp-client add interfaces=wlan1 disabled=no

membuat ip untuk interface dan vlan

ip address
add addr=192.168.20.1/24 interface=ether2
add add=192.168.30.1/24 interface=ether3
add add=10.10.10.1/24 interface=vlan10
add add=10.10.20.1/24 interface=vlan20
add add=10.10.30.1/24 interface=vlan30

membuat NAT

ip firewall nat add chain=srcnat action=masquerade

membuat DHCP-SERVER

ip pool
add name=pool-ether3 ranges=192.168.30.2-192.168.30.254
add name=pool-vlan10 ranges=10.10.10.2-10.10.10.254
add name=pool-vlan20 ranges=10.10.20.2-10.10.20.254
add name=pool-vlan30 ranges=10.10.30.2-10.10.30.254
ip dhcp-server
add name=dhcp-ether3 interface=ether3 address-pool=pool-ether3 disabled=no
add name=dhcp-vlan10 interface=vlan10 address-pool=pool-vlan10 disabled=no
add name=dhcp-vlan20 interface=vlan20 address-pool=pool-vlan20 disabled=no
add name=dhcp-vlan30 interface=vlan30 address-pool=pool-vlan30 disabled=no
ip dhcp-server network
add gateway=192.168.30.1 dns-server=8.8.8.8 address=192.168.30.0/24
add gateway=10.10.10.1 dns-server=8.8.8.8 address=10.10.10.0/24
add gateway=10.10.20.1 dns-server=8.8.8.8 address=10.10.20.0/24
add gateway=10.10.30.1 dns-server=8.8.8.8 address=10.10.30.0/24

KONFIGURASI VLAN DI Mikrotik

membuat bridge untuk ether3, vlan100, vlan101, vlan102

bridge
add name=br-ether3
add name=br-vlan100
add name=br-vlan101
add name=br-vlan102

membuat vlan100, vlan101, vlan102 di ether1

interfaces vlan
add vlan-id=100 interface=ether1 name=vlan100
add vlan-id=101 interface=ether1 name=vlan101
add vlan-id=102 interface=ether1 name=vlan102

mengelompokkan vlan100 dan interfaces

bridge port
add interface=ether2 bridge=br-vlan100
add inteface=vlan100 bridge=br-vlan100
add interface=ether3 bridge=br-vlan101
add inteface=vlan101 bridge=br-vlan101
add interface=ether4 bridge=br-vlan102
add inteface=vlan102 bridge=br-vlan102

KONFIGURASI SWITCH CISCO

membuat vlan 10,20,30

vlan 10
vlan 20
vlan 30

mengkonfigurasi akses vlan 10,20,30

interfaces e0/1
switchport mode access
switchport access vlan 10
interfaces e0/2
switchport mode access
switchport access vlan 20
interfaces e0/3
switchport mode access
switchport access vlan 30

mengkonfigurasi akses trunk di port e0/0

interfaces e0/0
switchport trunk encapsulation dot1q
switchport mode trunk