ARTIKEL PEMULA: mikrotik

mikrotik

Tampilkan postingan dengan label mikrotik. Tampilkan semua postingan

Manual book Mikrotik CLI

ryo 00.11 Add Comment

ryo

Daftar Isi:

✅ Interface ✅ PPP / VPN ✅ Queue

✅ Wireless ✅ IP ✅ Tools

✅ Bridge ✅ System

_____Kategori Interface_____

✅ Interface:

Ubah nama

interface set 2 name=ether2-lokal

Tambah catatan khusus

interface set 2 comment="sw lokal user:admin pass:admin321"

Disable / enable interface

interface set 2 disabled=yes

interface set 2 disabled=no

✅ Interface list:

Buat list baru

interface list add name=lokal

Pengkategori interface

interface list member add list=lokal interface=ether3

interface list member add list=lokal interface=ether4

✅ Ethernet:

Ubah rate interface

interface ethernet set 2 speed=100Mbps

Ubah checklist auto negosiasi

interface ethernet set 2 auto-negotiation=no

✅ EOIP:

Tambah EOIP

interface eoip add name="to-server18" remote-address="172.30.20.17" tunnel-id=18 disabled=no

✅ Vlan:

Tambah Vlan

interface vlan add name=wifi-umum20 vlan-id=20 interface=ether3

_____Kategori Wireless_____

✅ Wireless sebagai AP

interface wireless set 0 disabled=no mode=ap-bridge channel-width=20mhz band=5ghz-a/n frequency-mode=superchannel country=no_country_set frequency=5750 ssid="AP-tes" wireless-protocol=any

✅ Wireless sebagai ST

interface wireless set 0 mode=station-bridge channel-width=20mhz band=5ghz-a/n ssid="AP-tes" scan-list=5750,5760,5770,5780,5790,5800 frequency-mode=superchannel country=no_country_set wireless-protocol=any disabled=no

✅ Virtual AP

interface wireless add master-interface=wlan1 ssid="AP-umum2" mode=ap-bridge disabled=no

✅ Access list Jika mode radio AP

interface wireless access-list add mac-address=74:4D:28:XX:XX:XX interface=wlan1 signal-range=-75..120 authentication=yes forwarding=yes disabled=no

✅ Connect list Jika mode radio ST

interface wireless connect-list add interface=wlan1 mac-address=74:3A:18:XX:XX:XX signal-range=-75..120 disabled=no

_____Kategori Bridge_____

✅ Bridge

interface bridge add name=Bridge-lokal protocol-mode=rstp disabled=no

✅ Bridge Port

interface bridge port add bridge=bridge-lokal interface=ether3 disabled=no

_____Kategori PPP / VPN_____

✅ PPTP:

Server enable

interface pptp-server server set enabled=yes

Secret
ppp secret add name=tes password=tes321 service=pptp local-address=192.168.10.1 remote-address=192.168.10.20 disabled=no

✅ L2TP:

Server enable

interface l2tp-server server set enabled=yes use-ipsec=yes ipsec-secret="123Tamu"

Secret
ppp secret add name=tes password=tes321 service=l2tp local-address=192.168.10.1 remote-address=192.168.10.31 disabled=no

✅ SSTP:

Server enable

interface sstp-server server set enabled=yes

Secret
ppp secret add name=tes password=tes321 service=sstp local-address=192.168.10.1 remote-address=192.168.10.41 disabled=no

✅ OVPN:

Server enable

interface ovpn-server server set enabled=yes port=10100

_____Kategori IP_____

✅ IP Address:

ip address add address=192.168.10.1/24 interface=ether1

✅ IP DHCP-Client:

ip dhcp-client add interface=ether1 disabled=no default-route-distance=2 add-default-route=yes use-peer-dns=yes use-peer-ntp=yes comment="WAN"

✅ IP DHCP-Relay:

ip dhcp-relay add name="Relay-1" interface=ether3 dhcp-server=192.168.10.1 local-address=192.16.1.1

✅ IP DHCP-Server:

ip dhcp-server setup

Select interface to run DHCP server on

dhcp server interface: wlan1

Select network for DHCP addresses

dhcp address space: 192.168.10.0/24

Select gateway for given network

gateway for dhcp network: 192.168.10.1

If this is remote network, enter address of DHCP relay

There is no such IP network on selected interface

dhcp relay: 192.168.10.1

Select pool of ip addresses given out by DHCP server

addresses to give out: 192.168.10.2-192.168.10.254

Select DNS servers

dns servers: 8.8.8.8

Select lease time

lease time: 10m

✅ IP DNS:

ip dns set servers=8.8.8.8,1.1.1.1

atau

ip dns set servers=8.8.8.8,1.1.1.1 allow-remote-requests=yes

ip dns set servers=8.8.8.8,1.1.1.1 allow-remote-requests=no

✅ IP firewall:

Filter:

Blokir:

ip firewall filter add chain=forward protocol=icmp dst-address=172.20.1.12 src-address=!192.168.10.0/29 action=drop

NAT:

Internet:

ip firewall nat add chain=srcnat out-interface=ether1 action=masquerade

atau

ip firewall nat add chain=srcnat out-interface=ether1 action=src-nat to-addresses=172.20.1.2

atau spesifik ip

ip firewall nat add chain=srcnat src-address=192.168.10.0/29 out-interface=ether1 action=masquerade

Forwarding:

ip firewall nat add chain=dstnat dst-address=172.20.1.2 protocol=tcp dst-port=8087 action=dst-nat to-addresses=192.168.10.10 port=80

Mangle:

ip firewall mangle add chain=prerouting dst-address-list="sosmed_IP" action=mark-connection new-connection-mark="koneksi_sosmed" passthrough=yes

ip firewall mangle add chain=prerouting connection-mark="koneksi_sosmed" action=mark-packet new-packet-mark="paket-sosmed" passthrough=no

ip firewall mangle add chain=prerouting dst-address-list="IP-server-pusat" action=mark-routing new-routing-mark="route-ispA" passthrough=no

RAW:

/ip firewall raw

add action=add-dst-to-address-list address-list=Instagram address-list-timeout=none-dynamic chain=prerouting comment=Block_IG content=.cdninstagram.com protocol=tcp tls-host=*.cdninstagram.com

add action=add-dst-to-address-list address-list=Instagram address-list-timeout=1d chain=prerouting comment=Block_IG content=.instagram.com protocol=tcp time=0s-1d,sun,mon,tue,wed,thu,fri,sat tls-host=*.instagram.com

Address List:

ip firewall address-list add list="IP_server-pusat" address=172.200.10.1

Layer7 Protocol:

/ip firewall layer7-protocol

✅ IP Hotspot:

User Profile

ip hotspot user profile add name="guru-profile" shared-users=20 rate-limit=10M/10M mac-cookie-timeout="7d 00:00:00"

User

ip hotspot user add name=userA password=userA123 profile="guru-profile"

Hotspot Profile

ip hotspot profile add name=hotspot-umum hotspot-address=192.168.10.1 dns-name=ujicoba.ac.id html-directory=hotspot login-by=cookie,http-chap,http-pap,https,trial trial-uptime-limit="00:10:00" trial-uptime-reset="1d 00:00:00" trial-user-profile="user-trial"

Hotspot server

ip hotspot add name="hotspot-umum" interface="wlan1" address-pool="pool-umum" profile="hotspot-umum"

✅ IP Neighbor:

Disable

ip neighbor discovery set 0,1,2 discover=no

Enable

ip neighbor discovery set 0,1,2 discover=yes

✅ IP Pool:

ip pool add name="pool-umum" ranges="192.168.10.2-192.168.10.254"

✅ IP Route:

Internet

ip route add gateway=172.20.2.1

atau

ip route add dst-address=0.0.0.0/0 gateway=172.20.2.1

Internet multi UPlink

ip route add dst-address=0.0.0.0/0 gateway=172.20.2.1 distance=1 check-gateway=ping

ip route add dst-address=0.0.0.0/0 gateway=172.30.1.1 distance=2

Statik route

ip route add dst-address=192.168.200.0/24 gateway=192.168.10.24

jika sama, semakin kecil rentang ip tujuan maka akan di prioritaskan

ip route add dst-address=192.168.200.0/29 gateway=192.168.10.24

Jika antar ip private tidak bisa komunikasi karena firewall

ip route rule add dst-address=192.168.10.0/24 table=main

ip route rule add dst-address=192.168.20.0/24 table=main

ip route rule add dst-address=192.168.30.0/24 table=main

✅ IP smb Sharing folder:

Enable

ip smb set enabled=yes interfaces=wlan1 allow-guests=no

Users

ip smb users add name=guru password=guru321 read-only=no disabled=no

Shares

ip smb shares add name=guru directory=flash disabled=no

✅ IP SNMP:

Enable

snmp set enabled=yes contact=guru321@guru.ac.id location=indonesia-jawa-timur trap-community=server trap-version=1

Community

snmp community add name=server addresses=172.30.20.17

✅ IP Services:

Cek list

ip service print

Disable service

ip service set 0,1,2,3,4,5,7,8 disabled=yes

Ubah akses

ip service set 6 port=3284 address=192.168.10.0/24

✅ Trafik flow:

Enable

ip traffic-flow set enabled=yes interfaces=wlan1 cache-entries=128k

Add Target

ip traffic-flow target add dst-address=172.20.30.17 port=2057 version=9

✅ IP Proxy:

Enable

ip proxy set enabled=yes

Edit port

ip proxy set port=8050

_____Kategori System_____

✅ Set Clock:

system clock set time="12:14:00" date="sep/15/2023" time-zone-autodetect=yes

✅ Cek power dan suhu sistem:

system health print

✅ Ubah nama perangkat:

system identity set name="Router-utama"

✅ Cek update OS (Wajib tersambung internet):

system package update check-for-updates

✅ Reboot:

system reboot

✅ Reset:

system reset-configuration no-defaults=yes

✅ Cek resource (uptime, sisa penyimpanan):

system resource print

✅ Cek versi firmware dan OS:

system routerboard print

✅ Setting ntp client:

system ntp client set enabled=yes primary-ntp=172.30.20.1 secondary-ntp=172.30.20.18

✅ Script:

Contoh script disabled limit blokir koneksi sosmed

system script add name=limit-sosmed-On source="/ip firewall filter set 0,1,2,3,4 disabled=no"

Contoh script enabled limit blokir koneksi sosmed

system script add name=limit-sosmed-Off source="/ip firewall filter set 0,1,2,3,4 disabled=yes"

✅ Schedule:

Contoh schedule disabled limit blokir koneksi sosmed

system scheduler add name=jadwal-aktif-sosmed start-date=sep/15/2023 start-time=17:00:00 interval="1d 00:00:00" on-event="limit-sosmed-Off"

Contoh script enabled limit blokir koneksi sosmed

system scheduler add name=jadwal-pasif-sosmed start-date=sep/16/2023 start-time=08:00:00 interval="1d 00:00:00" on-event="limit-sosmed-On"

✅ Modify User:

Add user

user add name=guru password=guru123 group=full address=192.168.10.10,172.30.20.12 disabled=no

Atau

user add name=guru password=guru123 group=full disabled=no

Remove

user remove guru

Modify

user set guru disabled=yes

user set 0,1,2,3 disabled=yes

user set guru address=172.20.30.12

user set guru group=write

✅ Backup konfigurasi .rsc (hasil backup bisa di pahami human):

export file="backup15923"

✅ Backup konfigurasi .backup (hasil backup hanya bisa di pahami sistem):

system backup save dont-encrypt=yes name="backup15923"

_____Kategori Queue_____

✅ Simple Queue:

Simple Queue standart

queue simple add name="lokal" target=192.168.10.0/24 max-limit=5M/5M disabled=no

Simple Queue berdasarkan waktu dan hari

queue simple add name="lokal" target=192.168.10.0/24 max-limit=5M/5M time=8h-17h,mon,tue,wed,thu,fri disabled=no

Simple Queue Burst time

queue simple add name=PCku target=192.168.10.23/32 max-limit=5M/5M burst-limit=7M/7M burst-threshold=1100K/1100K burst-time=32/32

Rumus: burst-limit / burst-time = burst-threshold

7 / 32 = 219 Kbps, 14/32 = 438 Kbps, 21/32 = 656 Kbps, 28/32 = 875 Kbps, 35/32 = 1094 Kbps

Lama durasi burst: burst-threshold = burst-limit x ?

1094 = ((7 x 5) / 32 = 35 / 32)

Simple Queue Token Bucket

queue simple add name=PCku target=192.168.10.23/32 max-limit=5M/5M bucket-size=8/8 parent=lokal

Rumus: max-limit x bucket-size = kuota yang di berikan sementara

5 x 8 = 40 Mbps (maksimal kuota yang di berikan sementara)

Note: Jika spesifikasi router midle>low, bisa menerapkan simple queue token bucket.

✅ Queue Tree:

Mangle

Rule paket download user

ip firewall mangle add comment="Download" chain=forward dst-address-list="IP-lokal" action=mark-packet new-packet-mark="Download-user" passthrough=no disabled=no

Rule paket upload user

ip firewall mangle add comment="Upload" chain=forward src-address-list="IP-lokal" action=mark-packet new-packet-mark="Upload-user" passthrough=no disabled=no

Simple Queue, Queue Type

PCQ Upload

queue type add name="PCQ-upload" kind=pcq pcq-classifier=src-address,src-port

PCQ Download

queue type add name="PCQ-download" kind=pcq pcq-classifier=dst-address,dst-port

Rule Queue Tree

Download

Parent Download

queue tree add name="Download" parent="Bridge-lokal" max-limit=10M

Child Download

queue tree add name="user-download" parent="Download" packet-mark="Download-user" queue=PCQ-download limit-at=1M max-limit=10M

Upload

Parent Upload

queue tree add name="Upload" parent="Ether1-WAN" max-limit=10M

Child Upload

queue tree add name="user-upload" parent="Upload" packet-mark="Upload-user" queue=PCQ-upload limit-at=1M max-limit=10M

_____Kategori Tools_____

✅ Bandwidth test server:

Enable

tool bandwidth-server set enabled=yes authenticate=yes max-sessions=10

✅ Bandwidth test:

Test upload - pengetesan dari Pemancar

tool bandwidth-test address=192.168.10.17 protocol=tcp direction=receive user=admin password=admin123 duration=10s

Test download - pengetesan dari Pemancar

tool bandwidth-test address=192.168.10.17 protocol=tcp direction=send user=admin password=admin123 duration=10s

Test upload dan download - pengetesan dari Pemancar

tool bandwidth-test address=192.168.10.17 protocol=tcp direction=both user=admin password=admin123 duration=10s

✅ IP-Scan:

tool ip-scan interface="Bridge-lokal" duration=60s

tool ip-scan interface="Bridge-lokal" address-range="192.168.10.0/24" duration=60s

✅ Mac server:

Mac telnet server

tool mac-server set allowed-interface-list=all

Mac winbox server

tool mac-server mac-winbox set allowed-interface-list=all

Mac ping server

tool mac-server ping set enabled=yes

✅ Netwatch:

Contoh rule disabled / enabled tabel routing berdasarkan kondisi

/tool netwatch

add down-script="/ip route disable [/ip route find comment=remote-main];/ip route enable [/ip route find comment=remote-backup];:log info \"remote main down\";" host=192.168.10.1 interval=20s timeout=4s up-script=":delay 19;/ip route disable [/ip route find comment=remote-backup]; /ip route enable [/ip route find comment=remote-main];:log info \"remote main up\";"

✅ Ping:

ping 172.30.20.17 count=100 size=1500

✅ Profile:

tool profile duration=60s

✅ Romon:

tool romon set enabled=yes

Atau

tool romon set enabled=yes id=10 secrets=admin123

✅ Service Telnet:

system telnet address=172.30.20.17 port=238

system telnet address=172.30.20.17

✅ Service ssh:

system ssh address=172.30.20.17 user=admin

system ssh address=172.30.20.17 port=228 user=admin

✅ Service MAC-Telnet:

tool mac-telnet C4:AD:3X:XX:XX:XX

✅ Torch:

tool torch interface="Bridge-lokal" ip-protocol=any port=any src-address=0.0.0.0/0 dst-address=0.0.0.0/0 duration=60s

Note: entry-timeout bisa di besarkan supaya list yang terdaftar tidak cepat hilang

✅ Traceroute:

tool traceroute address=172.30.20.17 use-dns=yes duration=60s

Manual script Mikrotik

ryo 17.42 Add Comment

ryo

1. Script Mikrotik add queue otomatis dari DHCP-Server:

:local queueName "Client- $leaseActMAC";:if ($leaseBound = "1") do={/queue simple add name=$queueName target=($leaseActIP . "/32") limit-at=1024k/1024k max-limit=5M/5M parent="none" comment=[/ip dhcp-server lease get [find where active-mac-address=$leaseActMAC && active-address=$leaseActIP] host-name];log info [/ip dhcp lease get [find where active-mac-address="$leaseActMAC"] host-name;]} else={/queue simple remove $queueName}

2. Script backup konfigurasi otomatis ke server ftp:

/system script

add comment=auto-backup-config-intinet dont-require-permissions=no name=Eko owner=indomie policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive source="/system\

\_backup save name=(\"BACKUP\" . \"-\" . [/system identity get name] . \"-\" . \\\r\

\n[:pick [/system clock get date] 4 6] . [:pick [/system clock get date] 0 3] . [:pick [/system clock get date] 7 11]);\r\

\n/export file=(\"BACKUP\" . \"-\" . [/system identity get name] . \"-\" . \\\r\

\n[:pick [/system clock get date] 4 6] . [:pick [/system clock get date] 0 3] . [:pick [/system clock get date] 7 11]);\r\

\n:delay 10; \r\

\n:global backupname (\"BACKUP\" . \"-\" . [/system identity get name] . \"-\" . \\\r\

\n[:pick [/system clock get date] 4 6] . [:pick [/system clock get date] 0 3] . [:pick [/system clock get date] 7 11] . \".backup\");\r\

\n:global backuprsc (\"BACKUP\" . \"-\" . [/system identity get name] . \"-\" . \\\r\

\n[:pick [/system clock get date] 4 6] . [:pick [/system clock get date] 0 3] . [:pick [/system clock get date] 7 11] . \".rsc\");\r\

\n/tool fetch address=192.168.10.1 port=21 mode=ftp user=tes password=tes src-path=\$backupname dst-path=\"/home/tes/saya/\$backupname\" upload=yes\r\

\n/tool fetch address=192.168.10.1 port=21 mode=ftp user=tes password=tes src-path=\$backupname dst-path=\"/home/tes/saya/\$backuprsc\" upload=yes\r\

\n:delay 20; \r\

\n/file rem \$backupname \r\

\n/file rem \$backuprsc"

/system scheduler

add comment=auto-backup-config-ruter- interval=4w2d name=schedule1 on-event=tes policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=may/01/2023 start-time=06:45:00

3. Buat limit queue banyak dengan cepat

:for x from=2 to=254 do={/queue simple add name="client-$x" target="192.168.10.$x" max-limit=1M/1M }

4. Otomatis fitur netwatch

/tool netwatch

add down-script="/interface ovpn-client set profile=default [/interface ovpn-client find comment=main];/interface ovpn-client set profile=profile1 [/interface ovpn-client find comment=remote];:log info \"main-link Down\";" host=192.168.8.1 interval=20s timeout=10s up-script=":delay 19;/interface ovpn-client set profile=default [/interface ovpn-client find comment=remote];/interface ovpn-client set profile=profile1 [/interface ovpn-client find comment=main];:log info \"main-link UP\";"

5. Blok sosmed di Firewall

/ip firewall layer7-protocol

/ip firewall raw

add action=add-dst-to-address-list address-list=blokir-youtube address-list-timeout=1d chain=prerouting comment=YOUTUBE content=.youtube.com dst-address-list=!allow \

protocol=tcp time=0s-1d,sun,mon,tue,wed,thu,fri,sat tls-host=*.youtube.com

add action=add-dst-to-address-list address-list=blokir-youtube address-list-timeout=1d chain=prerouting comment="GOOGLE VIDEO" content=.googlevideo.com dst-address-list=\

!allow protocol=tcp time=0s-1d,sun,mon,tue,wed,thu,fri,sat tls-host=*.googlevideo.com

add action=add-dst-to-address-list address-list=blokir-youtube address-list-timeout=1d chain=prerouting comment=INSTAGRAM content=.instagram.com dst-address-list=!allow \

protocol=tcp time=0s-1d,sun,mon,tue,wed,thu,fri,sat tls-host=*.instagram.com

add action=add-dst-to-address-list address-list=blokir-youtube address-list-timeout=1d chain=prerouting comment=FACEBOOK content=.facebook. dst-address-list=!allow \

protocol=tcp time=0s-1d,sun,mon,tue,wed,thu,fri,sat

add action=add-dst-to-address-list address-list=blokir-youtube address-list-timeout=1d chain=prerouting comment=TWITTER content=.twitter. dst-address-list=!allow \

protocol=tcp time=0s-1d,sun,mon,tue,wed,thu,fri,sat tls-host=*.twitter.com

add action=add-dst-to-address-list address-list=blokir-tiktok address-list-timeout=1d chain=prerouting comment=TIKTOK content=tiktok dst-address-list=!allow protocol=tcp \

time=0s-1d,sun,mon,tue,wed,thu,fri,sat

add action=add-dst-to-address-list address-list=blokir-tiktok address-list-timeout=1w chain=prerouting comment=TIKTOK content=.musical.ly protocol=tcp time=\

0s-1d,sun,mon,tue,wed,thu,fri,sat

add action=add-dst-to-address-list address-list=blokir-tiktok address-list-timeout=1d chain=prerouting comment=TIKTOK dst-address-list=!allow protocol=tcp time=\

0s-1d,sun,mon,tue,wed,thu,fri,sat tls-host=*.tiktokcdn.com

/ip firewall filter

add action=drop chain=forward comment=Youtube dst-address-list=blokir-youtube src-address-list=!White-List time=8h-16h,mon,tue,wed,thu,fri

add action=drop chain=forward comment=Sosmed layer7-protocol=all-sosmed src-address-list=!White-List time=8h-16h,mon,tue,wed,thu,fri

add action=drop chain=forward comment=Titktok dst-address-list=blokir-tiktok src-address-list=!White-List time=8h-16h,mon,tue,wed,thu,fri

add action=drop chain=forward comment=Browsec dst-address-list="IP Browsec" src-address-list=!White-List time=8h-16h,mon,tue,wed,thu,fri

Tips Memastikan koneksi wireless PTP mikrotik normal

mikrotik tips tunning wireless

ryo 15.37 Add Comment

ryo

Kali ini saya akan membagikan tips dalam melakukan pengecekan koneksi wireless. Contoh tampilan sebagai berikut:

gambar 0.1

#Beberapa kendala yang sering terjadi:

1. koneksi lambat

2. koneksi putus nyambung

3. interfrensi

#Penyelesaian:

1. Lakukan test ping ip ptp radio untuk analisa kendala

2. pastikan tx/rx signal sejajar / tidak timpang lebih dari 5, dan nilai dibawah -70

3. pastikan tx/rx CCQ memiliki nilai minimal di atas 60%

4. lakukan test koneksi (bandwidt test), sambil monitor ping

apabila ketika bandwidth tes sudah mendapatkan hasil yang di inginkan. dan ping time tidak melar, maka bisa dipastikan koneksi normal.

gambar 0.2

Script Blokir Instagram

blokir instagram mikrotik script

ryo 21.08 Add Comment

ryo

Script Blokir Instagram

gambar 0.1

/ip firewall filter

add action=drop chain=forward comment="Blokir Instagram" dst-address-list=Instagram

/ip firewall raw

add action=add-dst-to-address-list address-list=Instagram address-list-timeout=none-dynamic chain=prerouting comment="Blokir Instagram" content=.cdninstagram.com protocol=tcp tls-host=*.cdninstagram.com

add action=add-dst-to-address-list address-list=Instagram address-list-timeout=none-dynamic chain=prerouting comment="Blokir Instagram" content=.instagram.com protocol=tcp tls-host=*.instagram.com

___ Sekian, Semoga bermanfaat___

LIMIT KONEKSI YOUTUBE

limit-youtube mikrotik script youtube

ryo 17.37 Add Comment

ryo

1. Tambahkan layer 7 protocol youtube

gambar 0.1

2. Tambahkan rule mangle

gambar 0.2

3. Tambahkan limit simple queue

gambar 0.3

___Sekian semoga bermanfaat___

Schedule limit bandwidth

bandwidth mikrotik queuesimple schedule script

ryo 01.24 Add Comment

ryo

📌 Study kasus

Setiap hari jam 7 pagi hingga jam 5 sore koneksi internet kantor akan di limit. Kemudian pada jam 5 sore hingga jam 7 pagi koneksi internet tidak di limit/loss. dengan ketentuan sebagai berikut:

pc spv 5 Mbps

pc karyawan 512 Kbps

Topologi yang akan kita gunakan seperti berikut:

gambar 0

1. Buat limit bandwidth untuk setiap perangkat

gambar 1

2. Buat Script disable dan enable simple queue limit caranya:

Masuk menu System>Script> (+)

Disable : queue simple set 0,1,2,3,4 disabled=yes (simpan dengan nama "koneksi-loss")

Disable banyak : :for p from=0 to=4 do={/queue simple set numbers="$p" disabled=yes}

gambar 2

Enable : queue simple set 0,1,2,3,4 disable=no (simpan dengan nama "koneksi-terlimit")

Enable banyak : :for p from=0 to=4 do={/queue simple set numbers="$p" disabled=no}

gambar 3

3. Buat jadwal untuk menjalankan script yang sudah dibuat, caranya:

Masuk menu System>Schedule> (+)

Disable Script On Event: koneksi-loss (simpan dengan nama "off-limit")

gambar 4

Enable Script On Event: koneksi-terlimit (simpan dengan nama "On-limit")

gambar 5

4. Pengetesan

Tes enable limit : Masuk menu System>Clock Atur waktu mendekati jam schedule dan tanggal sesuai dengan Schedule

before-limit

after-limit

Tes disable limit : Masuk menu System>Clock Atur waktu mendekati jam schedule dan tanggal sesuai dengan Schedule

before-loss

after-loss

*Note: Jika berhasil maka di menu System>Schedule nilai angka pada kolom "run count" akan bertambah, dan pada menu simple queue juga bisa kita lihat perubahannya

5. Jika sudah berhasil, kembalikan waktu perangkat mikrotik sesuai realtime dilokasi masing2