ARTIKEL PEMULA: queuesimple

1. Script Mikrotik add queue otomatis dari DHCP-Server:

:local queueName "Client- $leaseActMAC";:if ($leaseBound = "1") do={/queue simple add name=$queueName target=($leaseActIP . "/32") limit-at=1024k/1024k max-limit=5M/5M parent="none" comment=[/ip dhcp-server lease get [find where active-mac-address=$leaseActMAC && active-address=$leaseActIP] host-name];log info [/ip dhcp lease get [find where active-mac-address="$leaseActMAC"] host-name;]} else={/queue simple remove $queueName}

2. Script backup konfigurasi otomatis ke server ftp:

/system script

add comment=auto-backup-config-intinet dont-require-permissions=no name=Eko owner=indomie policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive source="/system\

\_backup save name=(\"BACKUP\" . \"-\" . [/system identity get name] . \"-\" . \\\r\

\n[:pick [/system clock get date] 4 6] . [:pick [/system clock get date] 0 3] . [:pick [/system clock get date] 7 11]);\r\

\n/export file=(\"BACKUP\" . \"-\" . [/system identity get name] . \"-\" . \\\r\

\n[:pick [/system clock get date] 4 6] . [:pick [/system clock get date] 0 3] . [:pick [/system clock get date] 7 11]);\r\

\n:delay 10; \r\

\n:global backupname (\"BACKUP\" . \"-\" . [/system identity get name] . \"-\" . \\\r\

\n[:pick [/system clock get date] 4 6] . [:pick [/system clock get date] 0 3] . [:pick [/system clock get date] 7 11] . \".backup\");\r\

\n:global backuprsc (\"BACKUP\" . \"-\" . [/system identity get name] . \"-\" . \\\r\

\n[:pick [/system clock get date] 4 6] . [:pick [/system clock get date] 0 3] . [:pick [/system clock get date] 7 11] . \".rsc\");\r\

\n/tool fetch address=192.168.10.1 port=21 mode=ftp user=tes password=tes src-path=\$backupname dst-path=\"/home/tes/saya/\$backupname\" upload=yes\r\

\n/tool fetch address=192.168.10.1 port=21 mode=ftp user=tes password=tes src-path=\$backupname dst-path=\"/home/tes/saya/\$backuprsc\" upload=yes\r\

\n:delay 20; \r\

\n/file rem \$backupname \r\

\n/file rem \$backuprsc"

/system scheduler

add comment=auto-backup-config-ruter- interval=4w2d name=schedule1 on-event=tes policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=may/01/2023 start-time=06:45:00

3. Buat limit queue banyak dengan cepat

:for x from=2 to=254 do={/queue simple add name="client-$x" target="192.168.10.$x" max-limit=1M/1M }

4. Otomatis fitur netwatch

/tool netwatch

add down-script="/ip route disable [/ip route find comment=remote-main];/ip route enable [/ip route find comment=remote-backup];:log info \"remote main down\";" host=192.168.10.1 interval=20s timeout=4s up-script=":delay 19;/ip route disable [/ip route find comment=remote-backup]; /ip route enable [/ip route find comment=remote-main];:log info \"remote main up\";"

add down-script="/interface ovpn-client set profile=default [/interface ovpn-client find comment=main];/interface ovpn-client set profile=profile1 [/interface ovpn-client find comment=remote];:log info \"main-link Down\";" host=192.168.8.1 interval=20s timeout=10s up-script=":delay 19;/interface ovpn-client set profile=default [/interface ovpn-client find comment=remote];/interface ovpn-client set profile=profile1 [/interface ovpn-client find comment=main];:log info \"main-link UP\";"

5. Blok sosmed di Firewall

/ip firewall layer7-protocol

/ip firewall raw

add action=add-dst-to-address-list address-list=blokir-youtube address-list-timeout=1d chain=prerouting comment=YOUTUBE content=.youtube.com dst-address-list=!allow \

protocol=tcp time=0s-1d,sun,mon,tue,wed,thu,fri,sat tls-host=*.youtube.com

add action=add-dst-to-address-list address-list=blokir-youtube address-list-timeout=1d chain=prerouting comment="GOOGLE VIDEO" content=.googlevideo.com dst-address-list=\

!allow protocol=tcp time=0s-1d,sun,mon,tue,wed,thu,fri,sat tls-host=*.googlevideo.com

add action=add-dst-to-address-list address-list=blokir-youtube address-list-timeout=1d chain=prerouting comment=INSTAGRAM content=.instagram.com dst-address-list=!allow \

protocol=tcp time=0s-1d,sun,mon,tue,wed,thu,fri,sat tls-host=*.instagram.com

add action=add-dst-to-address-list address-list=blokir-youtube address-list-timeout=1d chain=prerouting comment=FACEBOOK content=.facebook. dst-address-list=!allow \

protocol=tcp time=0s-1d,sun,mon,tue,wed,thu,fri,sat

add action=add-dst-to-address-list address-list=blokir-youtube address-list-timeout=1d chain=prerouting comment=TWITTER content=.twitter. dst-address-list=!allow \

protocol=tcp time=0s-1d,sun,mon,tue,wed,thu,fri,sat tls-host=*.twitter.com

add action=add-dst-to-address-list address-list=blokir-tiktok address-list-timeout=1d chain=prerouting comment=TIKTOK content=tiktok dst-address-list=!allow protocol=tcp \

time=0s-1d,sun,mon,tue,wed,thu,fri,sat

add action=add-dst-to-address-list address-list=blokir-tiktok address-list-timeout=1w chain=prerouting comment=TIKTOK content=.musical.ly protocol=tcp time=\

0s-1d,sun,mon,tue,wed,thu,fri,sat

add action=add-dst-to-address-list address-list=blokir-tiktok address-list-timeout=1d chain=prerouting comment=TIKTOK dst-address-list=!allow protocol=tcp time=\

0s-1d,sun,mon,tue,wed,thu,fri,sat tls-host=*.tiktokcdn.com

/ip firewall filter

add action=drop chain=forward comment=Youtube dst-address-list=blokir-youtube src-address-list=!White-List time=8h-16h,mon,tue,wed,thu,fri

add action=drop chain=forward comment=Sosmed layer7-protocol=all-sosmed src-address-list=!White-List time=8h-16h,mon,tue,wed,thu,fri

add action=drop chain=forward comment=Titktok dst-address-list=blokir-tiktok src-address-list=!White-List time=8h-16h,mon,tue,wed,thu,fri

add action=drop chain=forward comment=Browsec dst-address-list="IP Browsec" src-address-list=!White-List time=8h-16h,mon,tue,wed,thu,fri

Schedule limit bandwidth

📌 Study kasus

Setiap hari jam 7 pagi hingga jam 5 sore koneksi internet kantor akan di limit. Kemudian pada jam 5 sore hingga jam 7 pagi koneksi internet tidak di limit/loss. dengan ketentuan sebagai berikut:

pc spv 5 Mbps

pc karyawan 512 Kbps

Topologi yang akan kita gunakan seperti berikut:

gambar 0

1. Buat limit bandwidth untuk setiap perangkat

gambar 1

2. Buat Script disable dan enable simple queue limit caranya:

Masuk menu System>Script> (+)

Disable : queue simple set 0,1,2,3,4 disabled=yes (simpan dengan nama "koneksi-loss")

Disable banyak : :for p from=0 to=4 do={/queue simple set numbers="$p" disabled=yes}

gambar 2

Enable : queue simple set 0,1,2,3,4 disable=no (simpan dengan nama "koneksi-terlimit")

Enable banyak : :for p from=0 to=4 do={/queue simple set numbers="$p" disabled=no}

gambar 3

3. Buat jadwal untuk menjalankan script yang sudah dibuat, caranya:

Masuk menu System>Schedule> (+)

Disable Script On Event: koneksi-loss (simpan dengan nama "off-limit")

gambar 4

Enable Script On Event: koneksi-terlimit (simpan dengan nama "On-limit")

gambar 5

4. Pengetesan

Tes enable limit : Masuk menu System>Clock Atur waktu mendekati jam schedule dan tanggal sesuai dengan Schedule

before-limit

after-limit

Tes disable limit : Masuk menu System>Clock Atur waktu mendekati jam schedule dan tanggal sesuai dengan Schedule

before-loss

after-loss

*Note: Jika berhasil maka di menu System>Schedule nilai angka pada kolom "run count" akan bertambah, dan pada menu simple queue juga bisa kita lihat perubahannya

5. Jika sudah berhasil, kembalikan waktu perangkat mikrotik sesuai realtime dilokasi masing2

gambar 6

__Sekian semoga bermanfaat__

Limit Otomatis

✅ Limit queue instan

1. Pada contoh kali ini saya akan menggunakan class IP 192.168.1.0/24 untuk digunakan user

2. Kita buat Script dengan nama : buat-banyak-queue

Script: :for p from=2 to=254 do={/queue simple add name="client-$p" target="192.168.1.$p" max-limit="512k/512k"}

Penjelasan :

:for p from=2 to=254 ==> merupakan dasar dari rumus

do={} ==> tempat untuk menulis perintah yang akan dijalankan berupa CLI /Command Line Interface yang digunakan dan di mengerti oleh Os Mikrotik.

Nilai p merupakan variabel yang akan digunakan/dibuat dari angka 2 hingga angka 254. untuk memanggil variabel p, kita bisa sisipkan tanda "$" didepan p (variabel). seperti pada script diatas.