MIKROTIK SEBAGAI PROXY SERVER
KONFIGURASI AWAL
Konfigurasi IP address,
gateway, DNS tetap sama
seperti MikroTik sebagai Gateway.
|
|
|
|
|
[admin@mikrotik] > ip address print
Flags:
X – disable, I –
invalid, D – dynamic
# ADDRESS NETWORK BROADCAST INTERFACE
0 192.168.1.1/24 192.168.1.0 192.168.1.255 local
1 202.169.224.1/24 202.169.224.0 202.169.224.255 public
[admin@Mikrotik] > ip route print
Flags:
X – disable, I –
invalid, D – dynamic
C – connect, S – static, r – rip, b – bgp, o - ospf
# DST-ADDRESS
PREF-SRC G
GATEWAY DISTANCE INTERFACE
0 ADC 192.168.1.0/24 192.168.1.1
local
1 ADC 202.169.224.0/24 202.169.224.1
public
2 A S 0.0.0.0/0 r
202.169.224.100 public
|
|
|
|
|
[admin@Mikrotik] > ip dns print
primary-dns:
202.169.224.200
secondary-dns: 202.169.224.201
allow-remote-requests: no
cache-size: 2048KiB
cache-max-ttl: 1w
cache-used: 17KiB
[admin@Mikrotik] >
|
|
Konfigurasi Non Transparent Proxy
|
|
[admin@Mikrotik] > ip web-proxy
print
enable:
no
src-address: 0.0.0.0
port: 3128
hostname: “proxy”
transparent-proxy: no
parent-proxy: 0.0.0.0:0
cache-administrator: “webmaster”
max-object-size: 4096KiB
cache-drive: system
max-cache-size: none
max-ram-cache-size: unlimited
status: stoped
reserved-for-cache:
0KiB
reserved-for-ram-cache: 2048KiB
[admin@Mikrotik] >
|
|
Secara default, proxy dalam keadaan
tidak aktif karena status enable adalah “no”. Untuk mengaktifkannya ganti
status enable menjadi “yes”.
|
|
[admin@Mikrotik] > ip web-proxy
[admin@Mikrotik] ip web-proxy> set
enabled=yes
[admin@Mikrotik] ip web-proxy>
print
enable:
yes
src-address: 0.0.0.0
port: 3128
hostname: “proxy”
|
|
Konfigurasi Transparent Proxy
|
|
[admin@Mikrotik] > ip web-proxy
[admin@Mikrotik] ip web-proxy> set
enabled=yes
[admin@Mikrotik] ip web-proxy> set
transparent-proxy=yes
[admin@Mikrotik] ip web-proxy>
print
enable:
yes
src-address: 0.0.0.0
port: 3128
hostname: “proxy”
transparent-proxy: yes
parent-proxy: 0.0.0.0:0
cache-administrator: “webmaster”
max-object-size: 4096KiB
cache-drive: system
max-cache-size: none
max-ram-cache-size: unlimited
status: running
reserved-for-cache:
0KiB
reserved-for-ram-cache: 2048KiB
[admin@Mikrotik] >
|
|
Perintah untuk memantau proxy
|
|
[admin@Mikrotik] ip web-proxy>
monitor interval=1
status:
running
uptime: 5m58s
client: 1
request: 32
hits: 1
cache-size: 0KiB
ram-storage-size: 104KiB
received-from-servers: 5KiB
sent-to-clients: 8KiB
hits-sent-to-clients: 0KiB
-- [Q quit | D dump | C-z continue]
|
|
Jalankan perintah berikut untuk
memaksa koneksi dari client dialihkan (redirect) ke proxy server port 3128
|
|
[admin@mikrotik] ip web-proxy> /ip
firewall nat
[admin@mikrotik] ip firewall nat>
print
Flags:
X – disable, I –
invalid, D – dynamic
0 chain=srcnat
out-interface=public action=masquerade
[admin@Mikrotik] ip firewall nat>
add chain=dstnat protocol=tcp \
\... dst-port=80 action=redirect
to-port=3128
[admin@Mikrotik] ip firewall nat>
print
Flags:
X – disable, I –
invalid, D – dynamic
0
chain=srcnat out-interface=public action=masquerade
1
chain=dstnat protocol=tcp dst-port=80 action=redirect to-ports=3128
[admin@Mikrotik] ip firewall nat>
|
|
Sign up here with your email
ConversionConversion EmoticonEmoticon