Setting VLAN Paket2 UKK TKJ 2020

1. Konekkan Cable UTP ke eth 1 (ke internet)  beri koment WAN 1

2. Eth 2 akan dikoneksikan ke swicth/router2  beri komen swicth
3. Eth 3 utk konfigurasi ( IP LAN )
Ip address add address=192.168.1.1/30 interface=ether3
Buka local area connection  masukkan ip address =192.168.1.2
Subnetmask =255.255.255.252
Default gateway =192.168.1.1
4. Beri ip address di masing2 eth
Eth 1  IP address add address=192.168.30.253/24 inteface=ether1 (dari ISP)
Ip router add gateway 192.168.30.254
IP dns set servers 8.8.8.8,8.8.4.4 allow remote request yes
5. Ip firewall NAT add chain=srcnat out-interface=ether1 action=masquerade
Ping ke gateway ping 192.168.30.254
Ping ke google  ping google.com
6. Masuk ke 2 VLAN
Interface vlan add name=VLAN1-siswa vlan-id=10 interface = ether2
Interface vlan add name=VLAN2-Guru vlan-id=20 interface = ether2
7. Isikan IP di masing-masing VLAN
Ip address add address=192.168.40.1/24 interface=VLAN1-Siswa
Ip address add address=192.168.60.1/24 interface=VLAN2-Guru
8. Menambahkan IP utk interface WLAN
Ip address add address=192.168.20.1/24 interface=WLAN1
9. Aktifkan DHCP Server
Ip DHCP-SERVER setup interface =VLAN1-Siswa Address to give out =192.168.40.10-
192.168.40.50
Ip DHCP-SERVER setup interface =VLAN2-Guru Address to give out =192.168.60.10-
192.168.60.50
Ip DHCP-SERVER setup interface =WLAN1 Address to give out =192.168.20.10-
192.168.20.50
10. Aktifkan WLAN
Interface wireless enable WLAN1
Interface wireless security-profile add name= pasword mode= dynamic-keys auntentication-
types=wpa-psk,wpa2-psk wpa-pre-shared-key=12345678 wpa2-pre-shared-key=12345678
Interface wireless set mode=ap-bridge SSID=UKK_no Absen security profile=pasword
11. Mengaktifkan HOSTPOT
Ip hotspot setup
Inteface=WLAN1
Masquerade=yes/no
Select certificate=none
Dnsname= portalsmk.sch.id
Admin=admin
Dst....
 KONFIGURASI ROUTER 2 ( Sebagai Switch )

1. System identity set name=ROUTER2

2. Bridge add name= bridge1  apply  ok
3. Bridge port add interface=ether1 bridge=bridge1
4. Switch  vlan  add vlan-id = 10  ports = Ether1
Ether2
5. Switch  vlan  add vlan-id = 20  ports = Ether1
Ether3
6. Switch  Ports  ether 1  Vlan mode=secure
Vlan header=add if missing

Ports  Ether 2  Vlan mode=secure

Vlan header= always strip
Default vlan id=10

Ports  Ether 3  vlan mode=secure

Vlan header= always strip
Default vlan id=20