1 of 28

KONFIGURASI FIREWALL�

ADMINISTRASI INFRA STRUKTUR JARINGAN (AIJ)

KELAS XII TKJ

2 of 28

TOPOLOGI

3 of 28

ALAT DAN BAHAN

Alat :

  • Modem/ ISP
  • RB Mikrotik
  • Kabel Stright
  • PC/ Laptop Client

Bahan:

Koneksi Interenet

4 of 28

LANGKAH KERJA KONFIGURASI

Pasang dan hubungkan alat yang ada sesuai dengan topologi.

​

Pastikan ISP memiliki koneksi Internet.

​

Jalankan Aplikasi Winbox

​

5 of 28

Jalankan Aplikasi Winbox 🡪 Neighbors 🡪 Refress hingga muncul router 🡪 Klik Mac Address 🡪 Isi Login: admin/ Password: kosong 🡪 Connect

​

6 of 28

New terminal 🡪 ketik: “system reset” 🡪 Enter 🡪tekan tombol “y” pada keyboard, Router akan tereset🡪 tunggu beberapa saat hingga indicator lampu router menyala.

​

7 of 28

Reconnect 🡪“remove configuration”

​

Reconnect 🡪 system 🡪 identity 🡪 ganti nama: misal=Kelompok-1 🡪 Apply 🡪 Ok

8 of 28

Interfaces 🡪 ubah nama interfaces

  • Ether1= ether1-internet 🡪 Apply 🡪Ok

​

9 of 28

Ether2= ether2-lan 🡪 Apply 🡪Ok

​

10 of 28

IP 🡪 DHCP Client 🡪 +

  • General :
  • Interface: ether1-internet 🡪 Apply 🡪 Ok
  • Tunggu hingga status “bound”

​

​

11 of 28

IP 🡪 Address 🡪 +

  • Address: 192.168.100.1/24
  • Interface = ether2-lan 🡪 Apply 🡪 Ok

​

12 of 28

IP 🡪 dhcp Server 🡪 DHCP Setup

  • Pilih Interface: ether2-lan 🡪 Next
  • Next sampai complete

​

13 of 28

  • Klik 2 kali dhcp1 🡪 Ganti namanya menjadi dhcp1-lan 🡪 Cheklis “Add ARP For Leases” 🡪 Apply 🡪 Ok

​

14 of 28

IP 🡪 DNS

  • Cheklist “Allow Remote Request” 🡪 Apply 🡪 Ok

​

15 of 28

IP 🡪Firewall 🡪 NAT 🡪 +

Tab General:

  • Out Interface: ether1-internet 🡪 Apply

​

16 of 28

Tab Action

  • Action: Masquerade 🡪 Apply 🡪 Ok

​

17 of 28

System 🡪 Reboot 🡪 Yes

​

18 of 28

Memblokir IP 192.168.100.2 – 192.168.100.50 melakukan ping ke Router

IP 🡪 Firewall 🡪 Filter Rules 🡪 +

Tab General:

  • Chain = input
  • Src. Address = 192.168.100.2 – 192.168.100.50
  • Dst. Address = 192.168.100.1
  • Protocol = Icmp 🡪 Apply

​

19 of 28

Memblokir IP 192.168.100.2 – 192.168.100.50 melakukan ping ke Router

Tab Action:

  • Action = drop 🡪 Apply 🡪 Ok

​

20 of 28

Memblokir IP 192.168.100.100 melakukan browsing

IP 🡪 Firewall 🡪Filter Rules 🡪 +

Tab General:

  • Chain = forward
  • Dst. Address = 192.168.100.100 🡪 Apply

​

21 of 28

Memblokir IP 192.168.100.100 melakukan browsing

Tab Action:

  • Action = drop 🡪 Apply 🡪 Ok

​

22 of 28

Memblokir IP 192.168.100.2 mengakses halaman linux.org

Cek terlebih dahulu alamat IP linux. Org dengan cara:

  • Buka Jendela Run 🡪 Ketin “ping linux.org –t” 🡪 Enter
  • Akan terlihat IP yang di gunakan oleh Linux.org, yaitu 172.67.148.63, IP inilah yang nantinya akan kita blokir.

​

23 of 28

Memblokir IP 192.168.100.2 mengakses halaman linux.org

IP 🡪 Firewall 🡪Filter Rules 🡪 +

Tab General:

  • Chain = forward
  • Dst. Address = 172.67.148.63

​

Tab Action:

  • Action = drop 🡪 Apply 🡪 Ok

​

24 of 28

Blocking Koneksi ke Port 21 dan Port 22

IP 🡪 Firewall 🡪Filter Rules 🡪 +

Tab General:

  • Chain = Input
  • Dst. Address = 192.168.100.1
  • Protocol: 6 (tcp)
  • Dst. Port: 21, 22

​

Tab Action:

  • Action = drop 🡪 Apply 🡪 Ok

25 of 28

MENGUJI HASIL KONFIGURASI FIREWALL

26 of 28

Ubah IP Komputer dengan data berikut:

  • Tes ping dari Client ke Router, buka cmd dan ketik “ping 192.168.100.1 -t”,

​

​

  • Jika ip client 192.168.100.2-192.168.100.50, maka muncul Request Time Out (RTO)

​

27 of 28

Jika Ip client 192.168.100.51-192.168.100.253, maka muncul TTL

​

28 of 28

TERIMA KASIH

ILHAM, S. Kom

SMK Negeri 4 Manokwari