CONFIGURENYA:

conf t
do show voice port sum

dial-peer voice 1101 pots
destination-pattern 1101
port 0/0/0
ex

dial-peer voice 1102 pots
port 0/0/1
destinaton-pattern 1102
do debug voip dialpeer
ex

(config)#dial-peer voice 90 pots
destination-pattern 91..........
desc LONG LONG DISTANCE
port 0/1/0
forward-digits 11
ex

(config)# dial-peer voice 91 pot
desc LOCAL
destination-pattern 9[2-9].........
port 0/1/0
ex

(config)# voice-port 0/1/0
connection plar 1102
ex

(config)#voice-port 0/0/0
connection plar 1102

SITEA                                                                                                                                       SITE B

SITE A
=====
iproute 0.0.0.0 0.0.0.0 int s1/0
iproute 172.16.1.0 255.255.255.0 10.1.1.2
iproute 172.16.2.0 255.255.255.0 10.1.1.2
di site b juga di ip route
ip acc-list extended tositeB
permit ip 192.168.2.0 0.0.0.255
permit ip 172.168.2.0 0.0.0.255
ex

crypto isakmp policy 2
encryption 3des
authen pre-share
group 2
ex

crypto isakmp key mystubes address 172.16.1.1
crypto ipsec transform-set TSA esp-des esp-sha-hmac
ex

crypto map CNPS1 1 ipsec-isakmp
description tunnel to siteB
set peer 172.16.1.1
set transform-set TSA
match address tositeB
ex

int s1/0
crypto map CMPS1
ex

copy run start

SITE B
--------
ip acc-list extended tositeA
permit ip 172.16.2.0 0.0.0.255
permit ip 192.168.2.0 0.0.0.255
ex

crypto isakmp policy 2
encription 3des
authen pre-share
group 2
crypto isakmp key 0 mystubes address 10.1.1.1
crypto ipsec transform-set TSB esp-3des esp-sha-hmac
ex

crypto map CMPS2 1 ipsec-isakmp
description tunnel tositeA
set peer 10.1.1.1
set transform-set TSB
match add tosite A
ex

int s1/0
crypto map CMPS2
end
copy run start
cek vpn konek apa ga?

# Sh crypto isakmp sa

http://yudidjohan.wordpress.com/tutorial/

http://wiki.mikrotik.com/wiki/Bruteforce_login_prevention

http://lulukn.abatasa.com/post/detail/4793/memblokir-situs-dengan-mikrotik-pada-jam-tertentu

untuk kopy ios yang ada di router/switch

#copy flash tftp (enter

masukan source filenya

lalu ip pc yang ada tftp servernya
(lalu enter aja)

 

untuk copy ios dari tftp ke switch

# copy tftp flash

masukan sourcenya

lalu ip pc nya

 

 

 

KALAU TIDAK BISA COBA APUS HTML NYA KEMUNGKINAN PENUH

#dir flash

delete flash html/*

 

 

Download iso 2950

http://www.4shared.com/file/-kbeWTC4/c2950-i6q4l2-mz121-22EA10a.html?dirPwdVerified=f26b4d6a

setting hostpot

selesai seting hostpspot tambahkan peritah ini

/ ip hotspot profile set hsprofi use-radius-yes
/ radius add service=hotspot address 127.0.0.1 secret=1234567
/ tool user-manager customer add login="admin" password="admin123 permissions-owner
/ tool user-manager router add subscriber=admin ip-address=127.0.0.1 shared-secret=1234567


lalau buka browser ke ip gateway lan 192.168.1.254/userman

http://www.4shared.com/file/Qk6R6CjU/mangleloadbalancer.html

evon@starbuck:~$ telnet mx-corp.cbn.net.id 25

ehlo cbn.net.id

mail from: <naba@cbn.net.id>

rcpt to: <evon@cbn.co.id>
data

test email
.
250 ok:  Message 77915192 accepted

Packet Tracer 5.3 - IP telephony basic configuration

Tutorial description

This tutorial is designed to help you to configure the new voice over ip (voip) features available in Packet Tracer 5.3. It will show you the steps required to :

• Configure Call Manager Express^TM on a 2811 router,
• Use the various telephony devices
• Setup dial peers
• Connect  Cisco^TM IP phones as well as analogue phone on the network.

Network diagram

Note : Connect only IP Phone 1 at the beginning of the lab. IP Phone 2 must be disconnected.

Tasks 1 : Configure interface FastEthernet 0/0 and DHCP server on RouterA (2811 router)

#Configure the FA 0/0 interface#

RouterA>enable

RouterA#configure terminal

RouterA(config)#interface FastEthernet0/0

RouterA(config-if)#ip address 192.168.10.1 255.255.255.0

RouterA(config-if)#no shutdown

The DHCP server is needed to provide an IP adress and the TFTP server location for each IP phone connected to the network.

RouterA(config)#ip dhcp pool VOICE #Create DHCP pool named VOICE

RouterA(dhcp-config)#network 192.168.10.0 255.255.255.0 #DHCP network network 192.168.10 with /24 mask#

RouterA(dhcp-config)#default-router 192.168.10.1 #The default router IP address#

RouterA(dhcp-config)#option 150 ip 192.168.10.1 #Mandatory for voip configuration.

After the configuration, wait a moment  and check that ‘IP Phone 1’ has received an IP address by placing your cursor over the phone until a configuration summary appears.

Tasks 2 : Configure the Call Manager Express telephony service on RouterA

You must now configure the Call Manager Express telephony service on RouterA  to enable voip on your network.

RouterA(config)#telephony-service #Configuring the router for telephony services#

RouterA(config-telephony)#max-dn 5 #Define the maximum number of directory numbers#

RouterA(config-telephony)#max-ephones 5 #Define the maximum number of phones#

RouterA(config-telephony)#ip source-address 192.168.10.1 port 2000 #IP Address source#

RouterA(config-telephony)#auto assign 4 to 6 #Automatically assigning ext numbers to buttons#

RouterA(config-telephony)#auto assign 1 to 5 #Automatically assigning ext numbers to buttons#

Task 4 : Configure a voice vlan on SwitchA

Apply the following configuration on SwitchA interfaces. This configuration will separate voice and data traffic in different vlans on SwitchA. data packets will be carried on the access vlan.

SwitchA(config)#interface range fa0/1 – 5 #Configure interface range#

SwitchA(config-if-range)#switchport mode access

SwitchA(config-if-range)#switchport voice vlan 1 #Define the VLAN on which voice packets will be handled#

Task 5 : Configure the phone directory for IP Phone 1

Although ‘IP Phone 1’ is already connected to SwitchA, it needs additionnal configuration before beeing able to communicate. You need to configure RouterA CME to assign a phone number to this IP phone.

RouterA(config)#ephone-dn 1 #Defining the first directory entry#

RouterA(config-ephone-dn)#number 54001 #Assign the phone number to this entry#

Task 5 : Verify the configuration

Ensure that the IP Phone receives an IP Address and a the phone number 54001 from RouterA  (this can take a short while).

Task 6 : Configure the phone directory for IP Phone 2

Connect IP Phone 2 to SwitchA and power the phone ON using the power adapter (Physical tab).

RouterA(config)#ephone-dn 2 #Defining the first directory entry#

RouterA(config-ephone-dn)#number 54002 #Assign the phone number to this entry#

Task 7 : Verify the configuration

Ensure that the IP Phone 2 receives an IP Address and a the phone number 54002 from RouterA  (this can take a short while). Same procedure as task n°5.

Dial 54001 and check if IP phone 1 correctly receives the call.

interface Ethernet0/1
ip address 12.1.2.3 255.255.255.0
ip nat outside
!
interface Ethernet0/0
ip address 192.168.101.1 255.255.255.0
ip nat inside
!
ip nat inside source list 101 interface Ethernet0/1 overload
ip nat inside source static tcp 192.168.101.2 1723 interface Ethernet0/1 1723
!
access-list 101 permit ip any any

In the above configuration, Ethernet 0/1 is connected to the public Internet with a static address of 12.1.2.3 and Ethernet 0/0 is connected to the inside network with a static address of 192.168.101.1. NAT outside is configured on E0/1 and NAT inside is configured on E0/0. Access-list 101 works in conjunction with the "ip nat inside source list 101 interface Ethernet0/1 overload" statement to permit all inside hosts to use E0/1 to connect to the Internet sharing whatever IP address is assigned to interface Ethernet E0/1.

The "overload" statement implements PAT (Port Address Translation) which makes that possible. (PAT allows multiple internal hosts to share single address on an external interface by appending different port numbers to each connection.)

The statement "ip nat inside source static tcp 192.168.101.2 1723 interface Ethernet0/1 1723" takes incoming port 1723 (PPTP) requests on Ethernet0/1 and forwards them to the VPN server located at 192.168.101.2.

You could do something similar with a Web server by changing port 1723 to port 80 or port 443. Here's what that would look like:

interface Ethernet0/1
ip address 12.1.2.3 255.255.255.0
ip nat outside
!
interface Ethernet0/0
ip address 192.168.101.1 255.255.255.0
ip nat inside
!
ip nat inside source list 101 interface Ethernet0/1 overload
ip nat inside source static tcp 192.168.101.2 80 interface Ethernet0/1 80
!
access-list 101 permit ip any any

In this example, the web server is located at 192.168.101.2 and instead of forwarding PPTP (port 1723) traffic, we're forwarding HTTP (port 80) traffic.

Obviously, you can configure your Cisco router in a similar manner to forward nearly any type of traffic from an outside interface to an internal host.

cd /home

wget -N http://httpupdate.cpanel.net/latest

 

sh latest

 

http://www.opikdesign.com/kios/webhtb/WebHTB_V2.9.2.pdf

http://mikrotikpasswordrecovery.com/

http://wiki.mikrotik.com/wiki/Bruteforce_login_prevention

http://wiki.mikrotik.com/wiki/Advanced_Routing_Failover_without_Scripting

langkah petama untuk menconfigurasi router mikrotik agar bisa terkoneksi internet anda harus membutuhkan 

1.    IP public contoh 202.158.10.2/30 

2.    IP LAn contoh 192.168.1.1/24 (range ip 192.168.1.2-20 yang mau di sett)


3.    DNS contoh 202.158.3.7       ( ini dns isp)


4.    IP gateway public misal 202.158.10.1

5.   Setting Natnya 

6.   limit bandwidt 512 kbps local dan 256 kbps international

===============================================================================

mari kita mulai untuk terapkan langkah 1- 5 itu 

sebelumnya anda harus download program sing arane winbox buat config ke  mikrotik download disini ya ..

http://mikrotik.co.id/download.php

trus langkah buka winbox lalu scan mac address akan tampil mac address pilih mac address mikrotik anda lalu klik connect pastiin kabel utpnya dari rouer mikrotik ke pc anda terkoneksi baik gambarnya serperti ini :



ini adalah settingan dasar mikrotik sampe anda bisa konek ke internet.. untuk menyetting router mikrotik ini .. hehe



Pertama buat/set ip publik dulu ke ether 1 atau juga di sebut IP WAN dengan cara copy ini di new terminal yang berada di dalam Winbox

[sourcecode language="css"]
ip address add address=202.158.10.2/30 netmask=255.255.255.252 interface=ether1
[/sourcecode]

Lalu tinggal Set IP gateway LAN copy ini

[sourcecode language="css"]
ip address add address=192.168.1.1/24 netmask=255.255.255.0 interface=ether2
[/sourcecode]

lalu copy juga ini

[sourcecode language="css"]

/ system clock
set time-zone-name=Asia/Jakarta
/ system ntp client set primary-ntp=207.46.197.32 secondary-ntp=192.43.244.18 \ mode=unicast enabled=yes
/ ip dns set allow-remote-requests=yes primary-dns=202.158.3.7 secondary-dns=202.158.3.6
/ ip route add gateway=202.158.10.1
/ ip firewall mangle
add chain=prerouting in-interface=ether2 dst-address-list=nice action=mark-connection new-connection-mark=conn-iix passthrough=yes
add chain=prerouting in-interface=ether2 dst-address-list=!nice action=mark-connection new-connection-mark=conn-intl passthrough=yes
add chain=prerouting connection-mark=conn-iix action=mark-packet new-packet-mark=indonesia passthrough=no
add chain=output connection-mark=conn-iix action=mark-packet new-packet-mark=indonesia passthrough=no
add chain=prerouting connection-mark=conn-intl action=mark-packet new-packet-mark=overseas passthrough=no
add chain=output connection-mark=conn-intl action=mark-packet new-packet-mark=overseas passthrough=no
/ queue simple
add name="iix-2" target-addresses=192.168.1.2/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-2" target-addresses=192.168.1.2/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-3" target-addresses=192.168.1.3/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-3" target-addresses=192.168.1.3/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-4" target-addresses=192.168.1.4/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-4" target-addresses=192.168.1.4/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-5" target-addresses=192.168.1.5/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-5" target-addresses=192.168.1.5/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-6" target-addresses=192.168.1.6/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-6" target-addresses=192.168.1.6/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-7" target-addresses=192.168.1.7/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-7" target-addresses=192.168.1.7/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-8" target-addresses=192.168.1.8/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-8" target-addresses=192.168.1.8/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-9" target-addresses=192.168.1.9/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-9" target-addresses=192.168.1.9/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-10" target-addresses=192.168.1.10/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-10" target-addresses=192.168.1.10/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-11" target-addresses=192.168.1.11/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-11" target-addresses=192.168.1.11/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-12" target-addresses=192.168.1.12/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-12" target-addresses=192.168.1.12/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-13" target-addresses=192.168.1.13/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-13" target-addresses=192.168.1.13/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-14" target-addresses=192.168.1.14/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-14" target-addresses=192.168.1.14/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-15" target-addresses=192.168.1.15/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-15" target-addresses=192.168.1.15/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-16" target-addresses=192.168.1.16/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-16" target-addresses=192.168.1.16/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-17" target-addresses=192.168.1.17/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-17" target-addresses=192.168.1.17/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-18" target-addresses=192.168.1.18/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-18" target-addresses=192.168.1.18/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-19" target-addresses=192.168.1.19/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-19" target-addresses=192.168.1.19/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-20" target-addresses=192.168.1.20/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-20" target-addresses=192.168.1.20/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
/ ip firewall filter
add chain=forward in-interface=ether2 src-address=192.168.1.2 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.3 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.4 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.5 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.6 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.7 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.8 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.9 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.10 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.11 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.12 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.13 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.14 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.15 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.16 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.17 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.18 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.19 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.20 action=accept
add chain=forward in-interface=ether2 action=drop
/ ip firewall nat
add chain=srcnat src-address=192.168.1.0/24 action=src-nat \
to-addresses=202.158.10.2 to-ports=0-65535 comment="" disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6110 \
action=dst-nat to-addresses=192.168.1.2 to-ports=6110 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6111 \
action=dst-nat to-addresses=192.168.1.3 to-ports=6111 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6112 \
action=dst-nat to-addresses=192.168.1.4 to-ports=6112 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6113 \
action=dst-nat to-addresses=192.168.1.5 to-ports=6113 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6114 \
action=dst-nat to-addresses=192.168.1.6 to-ports=6114 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6115 \
action=dst-nat to-addresses=192.168.1.7 to-ports=6115 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6116 \
action=dst-nat to-addresses=192.168.1.8 to-ports=6116 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6117 \
action=dst-nat to-addresses=192.168.1.9 to-ports=6117 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6118 \
action=dst-nat to-addresses=192.168.1.10 to-ports=6118 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6119 \
action=dst-nat to-addresses=192.168.1.11 to-ports=6119 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6120 \
action=dst-nat to-addresses=192.168.1.12 to-ports=6120 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6121 \
action=dst-nat to-addresses=192.168.1.13 to-ports=6121 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6122 \
action=dst-nat to-addresses=192.168.1.14 to-ports=6122 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6123 \
action=dst-nat to-addresses=192.168.1.15 to-ports=6123 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6124 \
action=dst-nat to-addresses=192.168.1.16 to-ports=6124 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6125 \
action=dst-nat to-addresses=192.168.1.17 to-ports=6125 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6126 \
action=dst-nat to-addresses=192.168.1.18 to-ports=6126 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6127 \
action=dst-nat to-addresses=192.168.1.19 to-ports=6127 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6128 \
action=dst-nat to-addresses=192.168.1.20 to-ports=6128 comment="" \
disabled=no

[/sourcecode]

agar port 3-5 berfungsi sebagai lan buat master port diarahkan ke ether2 copy ini

[sourcecode language="css"]
/ interface ethernet set ether3 master-port=ether2
/ interface ethernet set ether4 master-port=ether2
/ interface ethernet set ether5 master-port=ether2
[/sourcecode]

Note : copy semua yang ada di atas lalu masukin di notepad lalu find and replace dengan cara Ctrl+R paling cuma ganti IP public, IP gateway publik dan IP Dns server

http://ixp.mikrotik.co.id/download/nice.rsc Ctl + A aja biar ke blok semua lalu copy lalu paste in di terminal mikrotik lalu enter gampangkan  oh yaa buat yang masih bingung terminal bukan terminal bis ya heheh  penulis coba mengajarkan sampe tingkat tk sd juga ngerti heheh ini loh terminal 

WAH WAH DI JAMIN ANDA PASTI BISSSAAAAA.....JADI TUKANG IT SEMPROTT

download

http://www.youtube.com/watch?v=j1i-eii3mac

cd /
cd opt/
wget http://www.phillip-cooper.co.uk/centos/asterisk-install.sh
chmod 777 asterisk-install.sh
./asterisk-install.sh


yum -y install freepbx

hanya mengarahkan di ip >firewall > nat di port forwading di router

SETTING UBNT SISI AP













SISI CLIENT

===========

http://www.youtube.com/watch?v=5TBUALTxrtI&feature=relmfu

cara back up file ke tftp server dan restore dari tftp server ke router

UNTUK MEMBACK UP KE TFTP SERVER

==============================

copy startup-config tftp
192.18.1.254                                    (ini IP komputer yang ada tftp servernya)
dans-config                                       (nama file)

sh version                    (untuk melihat versi ios)

 

==================

UNTUK NGOPI IOSNYA

===================

 

copy flash tftp
pt1000-mz.122--28.bin
192.168.1.254
dansIOS

 

COBA DIHAPUS CONFIGURE YANG LAMA DG

erase startup-config
reload

 

COPY FILE DARI FTTP SERVER KE ROUTER

copy tftp running-config
192.168.1.254
dans-config
enter aja

 

jangan lupa di routernya harus di kasih IP dulu yang satu network dengan tftp servernya contoh 192.168.1.1

 

 

 

 

 

langkah pertama ada harus buat mangle nya di ip >firewall>mangle



lalu setting di queue langkahnya seperti dibawah ini



setting pcq hanya cocok untuk user yang banyak tapi hanya sedikit yang sering di gunakan sehingga kalau hanya beberapa pc yang hidup limitan di router akan di bagi rata dan akan menerima bandwidth besar

 

CONTOH   SETTINGAN      QUEUE TREE



 

 

CONTOH SETTINGAN HOTSPOT MANAGEMENT



 

 

 

CONTOH YOUTUBE DI KASIH BW SENDIRI

MRTG catching

belajar membuat mrtg

Installing Cacti on CentOS 5.5 tutorial

1
2
3
4
5
6
7

/* make sure these values refect your actual database/host/user/password */
$database_type = "mysql";
$database_default = "cacti";
$database_hostname = "localhost";
$database_username = "cactiuser";
$database_password = "cactipassword";
$database_port = "3306";

Ringkasan ini tidak tersedia. Harap klik di sini untuk melihat postingan.

yang harus di setting mangle, di queue treenya,

yang harus di setting mangle, di queue treenya,

http://www.clovanzo.com/util/create_dota_mikrotik.php

Mikrotik Script Maker

Movzx ideas as the Leader of kocok jaya team he create Mikrotik script.Screenshot :















Download :
- IX
- IIX


Info :
Filename : MikrotikScriptMaker.exe
Version : 1.1.0.11
Filesize : 66.5 KB (68,096 bytes)
CRC32 : 39b3d082
MD5 : c05b4d007c495ca6cf661431b82423b9
SHA128 : 9ec6361089f19cf80d2ea830211f5f5af55dd5dc

KJTeam Partner Download

Info :
Filename : mikrotikscriptmaker.exe
Version : 1.1.0.12
Filesize : 66.5 KB (68,096 bytes)
CRC32 : 7ea7a8f6
MD5 : 8272366ae63f2bdec7e9098fada72656
SHA128 : 2914aa55f5610de4eff27b6fd34d10d50f68ff0f

Mem

http://wiki.mikrotik.com/wiki/PPtP_Server_/_VPN

Untuk memindahkan suatu situs yang ingin di akses
user sedang situs tersebut termasuk yang kita blok 
maka bisa kita alihkan dengan merubah file :
/etc/squid/errors/ERR_ACCESS_DENIED

cp /etc/squid/errors/ERR_ACCESS_DENIED /etc/squid/errors/ERR_ACCESS_DENIED.old

vi /etc/squid/errors/ERR_ACCESS_DENIED
(tukar isi file sebelumnya dengan seperti dibawah ini)

<html><head><script language="javascript">
window.location="http://eramuslim.com" </script>
</head><body></body></html>

================================================
2.
================================================
[global]
workgroup = NAUFAL-NT
netbios name = sambalado
samba server string = Samba Naufal-PDC server
security = user
hosts allow = 192.168.1. 127.

[dunia]
path = /var/share
comment = Ini share folder Data
public = no
valid users = ahmad
read only = no
browseable = yes
force user = ahmad
force group = ahmad



#mkdir /var/share
#useradd ahmad
#chown -R ahmad.ahmad /var/share
#smbpasswd -a ahmad
password:(masukan passowrd untuk ahmad)

##smbclient //sambalado/dunia -U ahmad

#rpm -qa |grep http (melihat apakah service http sudah ada/blm)
#yum install httpd  (install apache)

3 CARA MENEMPATKAN FILE DI WEB SERVER

	1. DocumentRoot/document utama biasanya/var/www/html
	2. UserDir /home/budi/html
	3. VirtualHost (bebas selain diatas misal /home/budi/web)

Konfigurasi cara 1:
   # vi /etc/httpd/conf/httpd.conf

      /DocumentRoot  (mencari letak documentRoot letak file html/php/)

      :wq
   #vi /var/www/html/index.html 
      <h1><marquee behavior=alternate loop=15>wellcome in NF Computer </marquee></h1>
      :wq

   #service httpd restart atau /etc/init.d/httpd restart   
 Cara panggil di browser:

 /var/www/html 	=> 	http://localhost
			http://192.168.1.23
                        http://nf.com 
 

==========================================================================================================
cara ke 2 UserDir:

Konfigurasi :
                 #vi /etc/httpd/conf/httpd.conf
                    
 		 /UserDir  (mencari UserDir)

			#userdir disable (dipagar #)
			userdir public_html

			<Ifmodule mod_userdir.c>
				UserDir Public_html
			</IfModule>
                   :wq
                   #useradd imi
                   #mkdir /home/imi/public_html
                   #vi /home/imi/public_html/index.html
                       <h1><marquee behavior=alternate loop=15>User Dir </marquee></h1>
                    :wq 
		   #chmod 755 /home/imi/public_html
		   kemudian restart aphacenya.

                   #/etc/init.d/httpd restart 
			
cara panggil di browser
/home/imi/public_html =>http://localhost/~imi
 			(
 User Webspace )
			http://192.168.1.23/~imi
			atau
			www.irfan.lpknf.or.id/~imi

ingat:
Kalau semua konfigurasi ok, tetapi tidak muncul coba cek firewall
#/etc/init.d/iptables stop   (untuk iptables)
#setenforce 0                 (selinux)

=============================================================================================================
VirtualHost:
konfigurasi:
#vi /etc/http/conf/httpd.conf

  :$  (pergi ke baris paling akhir)
      (kemudian tambahkan konfigurasi berikut ini)
       
            <VirtualHost 192.168.1.161:80 >
	    ServerAdmin admin@lpknf.or.id
	    DocumentRoot /home/irfan/html
	    ServerName  irfan.lpknf.or.id
	    ErrorLog /var/log/httpd/irfan-error_log
	   Custom /var/log/httpd/irfan-access_log common
           </VirtualHost>

	NameVirtualHost 192.168.1.161

	<VirtualHost 192.168.1.161>
        ServerAdmin
 admin@efrizal.biz 
	ServerName webmail.efrizal.biz
	DocumentRoot /usr/local/html
	</VirtualHost>



                        
note:
			    untuk virtual host lebih baik mengunakan /home
                            kalau yg tampil welcome.php dirubah saja namanya
 			    /etc/httpd/conf.d/welcome.php

		
Konfigurasi file /etc/httpd/conf/httpd.conf

ServerRoot "/etc/httpd"
#( direktory utama dimana file configurasi apache di letakan)

PidFile run/httpd.pid
#FILE YG DIGUNAKAN OLEH SERVER UNTUK MEREKAM NOMOR IDENTITAS PROSES (PID))

Timeout 300
#(LAMA WAKTU JEDA SEBELUM SERVER MEMBERI PESAN TIME-OUT )

KeepAlive Off
#(UNTUK MENENTUKAN APAKAH SERVER MENGIJINKAN LEBIH DARI SATU PERMINTAAN DALAM SATU KONEKSI)

MaxKeepAliveRequests 100
#JUMLAH MAXIMUM PERMINTAAN YG DIIJINKAN DALAM SATU KONEKSI/

KeepAliveTimeout 15
#JUMLAH DETIK U/ MENUNGGU PERMINTAAN BERIKUTNYA
 DARI KLIEN YG SAMA DN KONEKSI BERSAMAAN

StartServer 5
#JUMLAH SERVER YG BERJALAN SAAT DIAKTIFKAN

MaxRequestsPerChild 30
#JUMLAH PERMINTAAN MAKSIMAL U/ CHILD PROSES

port 80
#port yg digunakan oleh server

User nobody
Group nogroup
#NAMA USER DAN GROUP YG MENJALANKAN HTTPD

ServerAdmin admin@nurulfikri.com
#(MEMBERITAHU HALAMAN2 YG DIBUAT OTOMATIS OLEH SERVER SEPERTI PESAN KESALAHAN)
# ATAU ALAMAT EMAIL DARI ADMINISTRATOR.

ServerName domain.anda.com
#SETTING NAMA BISA JUGA DIGUNAKAN IP

DocumentRoot "/var/www/html"
#(LETAK FILE INDEX.HTML)

ErrorLog logs/error_log
#(LETAK FILE ERROR_LOG BIASANYA TERDAPAT PD DIREKTORY LOKAL)

LogLevel warn
#(JUMLAH PESAN KESALAHAN YG DI CATAT DLM FILE ERROR_LOG. NILAI YG DIMASUKAN
  ANTARA DEBUG, WARN,ALER,ERROR)

Melihat Modul apa yg sudah terkompilasi
#/usr/sbin/httpd -l

Melihat Modul alias
#ls
 /usr/lib/httpd/modules/ |grep alias

subdomain
======
# vi nf.ok.zone
$TTL    86400
@               IN SOA  ns.nf.ok.       root (
                                        42          ; serial (d. adams)
                                        3H              ; refresh
                                        15M             ; retry
                                        1W              ; expiry
                                        1D )            ; minimum
                IN NS           ns.nf.ok.
                IN MX  10       mail.nf.ok.
www             IN A            192.168.1.62
webmail         IN A            192.168.1.62
mail            IN A            192.168.1.62
nf.ok.          IN A            192.168.1.62
ftp             IN CNAME        nf.ok.

fery.nf.ok.  IN NS		ns.fery.nf.ok.

ns.fery.nf.ok.  IN A	
	192.168.1.63

###########################################
Kemudian buat juga domain fery.nf.ok
1. Tambahkan pada file  /etc/named.rfc1912.zones
zone "fery.nf.ok" IN {
        type master;
        file "fery.nf.ok.zone";
        allow-update { none; };
};

2. cd /var/named/chroot/var/named/
   cp localhost.zone fery.nf.ok.zone
   vi nf.ok.zone
$TTL    86400
@               IN SOA  ns.fery.nf.ok.       root (
                                        42          ; serial (d. adams)
                                        3H              ; refresh
                                        15M             ; retry
                                        1W              ; expiry
                                        1D )            ; minimum
                IN NS           ns.fery.nf.ok.
                IN MX  10       mail.fery.nf.ok.
www             IN A            192.168.1.62
webmail   
      IN A            192.168.1.62
mail            IN A            192.168.1.62
fery.nf.ok.          IN A            192.168.1.62
ftp             IN CNAME        fery.nf.ok.



#chgrp named nf.ok.zone
#vi /etc/resolv.conf
nameserver 127.0.0.1
nameserver 192.168.1.62
#service named restart
#nslookup www.fery.nf.ok atau dig www.fery.nf.ok any atau host www.fery.nf.ok




buat kembali nama domain persis seperti langkah 1 dan 2
kemudian rubah file /etc/named.caching-nameserver.conf
yaitu merubah localhost menjadi any seperti berikut:

options {
        listen-on port 53 { any; };
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";

        // Those options should be
 used carefully because they disable port
        // randomization
        // query-source    port 53;
        // query-source-v6 port 53;

        allow-query     { any; };
        allow-query-cache { any; };
};
logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};
view localhost_resolver {
        match-clients      { any; };
        match-destinations { any; };
        recursion yes;
        include "/etc/named.rfc1912.zones";
};

a==================================================================================================

subdomain dengan komputer berbeda

====================================
# vi nf.ok.zone
$TTL    86400
@               IN SOA  ns.nf.ok.       root (
                                        42          ; serial (d. adams)
                                        3H 
             ; refresh
                                        15M             ; retry
                                        1W              ; expiry
                                        1D )            ; minimum
                IN NS           ns.nf.ok.
                IN MX  10       mail.nf.ok.
www             IN A            192.168.1.62
webmail         IN A            192.168.1.62
mail            IN A            192.168.1.62
nf.ok.          IN A            192.168.1.62
ftp             IN CNAME        nf.ok.

fery.nf.ok.  IN NS		ns.fery.nf.ok.
ns.fery.nf.ok.  IN A		192.168.1.16


Hidupkan komputer 192.168.1.16
buat kembali nama domain.

1. Tambahkan pada file  /etc/named.rfc1912.zones
zone "fery.nf.ok" IN {
        type master;
        file "fery.nf.ok.zone";
        allow-update { none; };
};

2. cd /var/named/chroot/var/named/
   cp localhost.zone
 fery.nf.ok.zone
   vi fery.nf.ok.zone
$TTL    86400
@               IN SOA  ns.fery.nf.ok.       root (
                                        42          ; serial (d. adams)
                                        3H              ; refresh
                                        15M             ; retry
                                        1W              ; expiry
                                        1D )            ; minimum
                IN NS           ns.fery.nf.ok.
                IN MX  10       mail.fery.nf.ok.
www             IN A            192.168.1.16
webmail         IN A            192.168.1.16
mail            IN A            192.168.1.16
fery.nf.ok.          IN A            192.168.1.16
ftp             IN CNAME        fery.nf.ok.



#chgrp named fery.nf.ok.zone
#vi /etc/resolv.conf

nameserver 192.168.1.62
#service named restart
#nslookup www.fery.nf.ok atau
 dig www.fery.nf.ok any atau host www.fery.nf.ok


kemudian rubah file /etc/named.caching-nameserver.conf
yaitu merubah localhost menjadi any seperti berikut:

options {
        listen-on port 53 { any; };
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";

        // Those options should be used carefully because they disable port
        // randomization
        // query-source    port 53;
        // query-source-v6 port 53;

        allow-query     { any; };
        allow-query-cache { any; };
};
logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};
view localhost_resolver {
       
 match-clients      { any; };
        match-destinations { any; };
        recursion yes;
        include "/etc/named.rfc1912.zones";
};