C.

Setting Hotspot

D. Setting Server

B. Koneksi ke
E. Setting VLAN

Uji VLAN 10
Uji
Uji VLAN VLAN
30

Remote
Internet Winbox Server (Optional)

ROUTER INDUK

A. Setting Awal Router

1. Reset Router
System > Reset Conf > Centang (No default) > Klik Reset Conf
2. System > Identity > RB INDUK_NAMA SISWA

B. Koneksi Ke Internet
1. IP > Address > + > Address : 192.168.50.No Absen/24
Network : 192.168.50.0
Interfaces : Ether 1 >> Apply/OK

2. IP > DNS > Server : 192.168.50.254 (IP Gateway Internet)

Centang Allow >> Apply/OK
3. IP > Routes > + > Address : 0.0.0.0/0
Gateway : 192.168.50.254 > Aplly > OK
4. Buka New Terminal : ping www.google.com

C. Setting Hotspot

1. Interfaces > Wlan1 > Enable

2. IP > Address > + > Address : 192.168.70.254/24

Network : 192.168.70.0
Interfaces : wlan1 >> Apply/OK
3. IP > Hotspot > Servers > Hotspot Setup > Hotspot Interface : Wlan1 > Next sampai selesai
4. IP pool Hotspot
IP > Pool > + > Name : Pool_Hotspot
Adresses : 192.168.70.1-192.168.70.253

5. IP > DHCP Server > DHCP > + > Name :

Interface : wlan1
Address Pool : Pool_Hotspot > Apply/OK
Network > + > Address : 192.168.70.0/24
Gateway : 192.168.70.254 > Apply/OK
6. Ip > Hotspot > Server Profile > + General > Name : hsprof1
Hotspot Address : 192.168.70.254
RADIUS > Centang Use Radius
Hilangkan centang Accounting
 NAS Port Type : ethernet
7. Ip > Hotspot > Servers
Name : hotspot1
Interfaces : wlan1
Address pool : Pool_Hotspot
Profile : hsprof1

8. RADIUS > + > Centang Hotspot dan Login

Address : 130.130.200.20 (Menyesuaikan IP Server Masing-masing)
Secret : (Password Kelas Cth: xiitkj1) > Apply/OK

9. IP > Firewall > NAT > + > Chain : srcnat

Src. Address : 192.168.70.0
Out Interfaces : ether1 (internet)
Action : masquerade >> Apply/OK

10. IP > Firewall > NAT > + > Chain : srcnat

Src. Address : 192.168.70.0
Dst. Address : ip server
Action : masquerade >> Apply/OK

D. Setting IP Server Radius

1. IP > Address > + > Address : 130.130.xxx.xxx(100+no.absen)/16 (Menyesuaikan IP Server)
Network : 130.130.0.0
Interfaces : ether3 >> Apply/OK
2. Uji Ping IP Server
 New terminal ping 130.130.xxx.xx

E. Setting VLAN
1. Memberikan Vlan ID
>> Interfaces > VLAN > + >>
1. Name : Vlan 10 Lab Admin
Vlan ID : 10
Interfaces : ether2 >> Apply/OK
2. Name : Vlan 20 Lab Jaringan
Vlan ID : 20
Interfaces : ether2 >> Apply/OK
3. Name : Vlan 30 Lab Hardware
Vlan ID : 30
Interfaces : ether2 >> Apply/OK
4. Name : Vlan 40 Lab Guru
Vlan ID : 40
Interfaces : ether2 >> Apply/OK

2. Memberikan IP Address VLAN

>> IP > Addresses > + >>
1. Address : 192.168.10.1/28
Network : 192.168.10.0
Interfaces: Vlan 10 Lab Admin >> Apply/OK
2. Address : 192.168.20.1/28
Network : 192.168.20.0
Interfaces: Vlan 20 Lab Jaringan >> Apply/OK
3. Address : 192.168.30.1/28
Network : 192.168.30.0
Interfaces: Vlan 30 Lab Hardware >> Apply/OK
4. Address : 192.168.40.1/28
Network : 192.168.40.0
Interfaces: Vlan 40 Lab Guru >> Apply/OK
1. Untuk Menghubungkan VLAN 10 ke Internet Tambah NAT (ROUTER INDUK)
IP > Firewall > NAT > + > Chain : srcnat
Src. Address : 192.168.10.0/28
Out Interfaces : ether1 (internet)
Action : masquerade >> Apply/OK

2. IP > Firewall > NAT > + > Chain : srcnat

Src. Address : 192.168.30.2 (IP Client VLAN 30)
Dst. Address : 130.130.xxx.xx (IP Server)
Action : masquerade >> Apply/OK

ROUTER 2

1. Reset Router
System > Reset Conf > Centang (No default) > Klik Reset Conf
2. System > Identity > RB INDUK_NAMA SISWA
3. Ke Menu Switch > Port >>
1. ether1 Vlan mode : secure
Vlan header : add if missing >> Apply/OK
2. ether2 vlan mode : secure
vlan header : always strip
Default vlan ID : 10 >> Apply/OK
3. ether3 vlan mode : secure
vlan header : always strip
Default vlan ID : 20 >> Apply/OK
4. ether4 vlan mode : secure
vlan header : always strip
Default vlan ID : 30 >> Apply/OK
5. ether5 vlan mode : secure
vlan header : always strip
Default vlan ID : 40 >> Apply/OK

4. Menu Switch > VLAN > + >>

1. switch1 VLAN ID : 10
Ports : ether1
ether2 >> Apply/OK
2. switch1 VLAN ID : 20
Ports : ether1
ether3 >> Apply/OK
3. switch1 VLAN ID : 30
Ports : ether1
ether4 >> Apply/OK
4. switch1 VLAN ID : 40
Ports : ether1
ether5 >> Apply/OK

5. Menu Bridge > + > Name : bridge1 >> Apply/OK

Menu Bridge > Ports > + >>
>> Interfaces : ether1
Bridge : Bridge1 >> Apply/OK
>> Interfaces : ether2
Bridge : Bridge1 >> Apply/OK
>> Interfaces : ether3
Bridge : Bridge1 >> Apply/OK
>> Interfaces : ether4
 Bridge : Bridge1 >> Apply/OK
>> Interfaces : ether5
Bridge : Bridge1 >> Apply/OK

UJI VLAN 1O (INTERNET)

2. Setting IP Address di PC Sesuai Jalur VLAN

Contoh : Vlan 10
IP : 192.168.10.2
Subnet Mask : 255.255.255.240
Gateway : 192.168.10.1
DNS Server : 192.168.10.1
Alter DNS : IP Gateway Internet

 Tes Internet di Browser

UJI VLAN 2O (winbox)

1. Setting IP Address di PC Sesuai Jalur VLAN

Vlan 20
IP : 192.168.20.2
Subnet Mask : 255.255.255.240

2. Tes Buka Winbox hanya untuk Router Induk

UJI VLAN 3O (server)

1. Setting IP Address di PC Sesuai Jalur VLAN

Vlan 30
IP : 192.168.30.2
Subnet Mask : 255.255.255.240
Gateway : 192.168.30.1
DNS Server : 192.168.30.1
Alter DNS : 130.130.xxx.No.Absen

3. Menguji Server Daloradius

> Buka Browser >> http://nama.net/daloradius
Username : Administrator
Password : radius

PENGUJIAN HOTSPOT

1. Buatlah 1 User bebas di Daloradius beserta passwordnya.

2. Uji lah Username dan password itu untuk masuk ke hotspot