Hotspot Menggunakan Manajemen Bandwidth Queue Tree

Hotspot Menggunakan Manajemen Bandwidth Queue Tree

Simple vs Tree

Simple ●

Aturan uruta sangat ketat. diproses dari teratas sampai terbawah.

●

Mengatur aliran paket secara bidirectional (dua arah).

●

Mampu membatasi trafik by IP.

●

Satu antrian mampu membatasi trafik upld & dnld sekaligus

●

Diproses lbh dulu jika ada simpl dan tree.

●

Mendukung penggunaan PCQ ( bagi bw scr merata).

●

Bisa menerapkan antrian yang by mangle.

●

Mampu membagi bandwidth secara fixed.

●

pengaturannya sangat sederhana dan cenderung statis,

●

sangat cocok untuk admin yang tidak mau ribet dengan traffic control di /firewall mangle.

Tree ●

Tidak memiliki urutan, setiap antrian diproses bersama-sama.

●

Mengatur aliran paket secara directional (satu arah)

●

●

●

Membutuhkan mangle untuk membatasi trafik per IP, dan membedakan trafik download upload. Dinomorduakan setelah Queue Simple. Mendukung penggunaan PCQ sehingga mampu membagi bandwidth secara adil dan merata.

●

Pengaturan antrian murni melalui paket yang ditandai di /firewall mangle.

●

Mampu membagi bandwidth secara fixed.

●

Lebih fleksibel dan butuh pemahaman yang baik di /firewall mangle khususnya tentang traffic control.

Hotspot QOS ●

●

Built-in limiter –

menggunakan parameer rate-limit di server-profile

–

otomatis dan mudah tetapi tidak memungkinkan implementasi HTB.

Custom limitation –

Memanfaatkan parameter Incoming-packet-mark dan outgoing-packet-mark pada user-profile.

–

bisa implementasi HTB dan melakukan limitasi berdasarkan kriteria koneksi yang lebih beragam

Jaringan Hotspot ●

Asumsi –

Ether1 / Wan = 192.168.88.5

–

Ether2 / Lan = 192.168.90.9/29

–

Jaringan lan 192.168.90.8/29 (6 host: 1 ap 5 client)

–

Bandwidth = 512kbps

SETTING INTERFACE ●

/interface ethernet

●

set 0 name=wan

●

set 1 name=lan

SETTING IP ADDRESS ●

/ip address

●

add address=192.168.88.5/24 interface=wan

●

add address=192.168.90.9/29 interface=lan

SETTING GATEWAY ●

/ip route

●

add distance=1 gateway=192.168.88.1

MASQUERADING ● ●

/ip firewall nat add action=masquerade chain=srcnat ininterface=lan

SETUP DNS ● ●

/ip dns set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4

IIX Addresses ● ●

●

/system script add name=nice-import policy=read,write,test,sniff source="/tool fetch address=ixp.mikrotik.co.id srcpath=/download/nice.rsc mode=http" import nice.rsc

SETUP HOTSPOT ●

ip hotspot setup

●

hotspot interface: ether2

●

local address of network: 192.168.90.9

●

masquerade network: yes

●

address pool of network: 192.168.90.10 – 192.168.10.14

●

select certificate: none

●

ip address of smtp server: 0.0.0.0

●

dns servers: 8.8.8.8,8.8.4.4

●

dns name:hotline

●

Username: admin

●

Password: admin

Hotspot User Profile ● ●

/ip hotspot user profile add address-pool=hs-pool-2 idle-timeout=none incoming-packet-mark=group1-in keepalivetimeout=2m name=photline outgoing-packetmark=group1-out

HOTSPOT USER ● ●

● ●

●

/ip hotspot user add name=amad password=amad profile=photline add name=eri password=eri profile=photline add name=yasin password=yasin profile=photline add name=nugi password=nugraha profile=photline

SETTING MANGLE

HOTSPOT JUMP ● ●

●

/ip firewall mangle add action=jump chain=prerouting comment=jumping jump-target=hotspot add action=jump chain=postrouting jumptarget=hotspot

HOTSPOT MARKING ●

●

●

●

●

/ip firewal mangle add action=mark-connection chain=prerouting newconnection-mark=conn-group1 packet-mark=group1-in add action=mark-connection chain=postrouting newconnection-mark=conn-group1 packet-mark=group1-out add action=mark-packet chain=prerouting connectionmark=conn-group1 new-packet-mark=packet-group1 passthrough=no add action=mark-packet chain=postrouting connectionmark=conn-group1 new-packet-mark=packet-group1 passthrough=no

IIX & INT Marking ●

●

●

●

●

●

●

/ip firewall mangle add action=mark-connection chain=prerouting comment="iix ix differ" dstaddress-list=nice new-connection-mark=conn-group1-iix packetmark=group1-in add action=mark-packet chain=prerouting connection-mark=conn-group1-iix new-packet-mark=packet-group1-in passthrough=no add action=mark-connection chain=prerouting dst-address-list=!nice newconnection-mark=conn-group1-int packet-mark=group1-in add action=mark-packet chain=prerouting connection-mark=conn-group1-int new-packet-mark=packet-group1-int passthrough=no add action=mark-packet chain=postrouting connection-mark=conn-group1iix new-packet-mark=packet-group1-iix passthrough=no add action=mark-packet chain=postrouting connection-mark=conn-group1int new-packet-mark=packet-group1-int passthrough=no

HOTSPOT UNAUTH MARKING Unauth = have bypass access ●

●

●

●

/ip firewall mangle add action=mark-connection chain=prerouting comment=hotspot-unauth hotspot=!auth in-interface=lan new-connection-mark=conn-unauth add action=mark-packet chain=prerouting connectionmark=conn-unauth new-packet-mark=packet-unauth passthrough=no add action=mark-packet chain=postrouting connectionmark=conn-unauth new-packet-mark=packet-unauth passthrough=no

Limitation Queue

Parent & Hotspot Group ●

●

●

●

●

/queue tree add max-limit=512k name=0-Hotspot1-Total-Upload parent=wan add max-limit=512k name=0-Hotspot1-Total-Download parent=lan add limit-at=128k max-limit=256k name=Group1-TotalUpload packet-mark=packet-group1 parent=0-Hotspot1Total-Upload add limit-at=128k max-limit=256k name=Group1-Totaldownload packet-mark=packet-group1 parent=0-Hotspot1Total-Download

IIX & INT; Up & Down ●

●

●

●

●

/queue tree add limit-at=64k max-limit=256k name=Group1-Total-IIXDownload packet-mark=packet-group1-iix parent=Group1-Totaldownload priority=4 add limit-at=64k max-limit=256k name=Group1-Total-INTDownload packet-mark=packet-group1-int parent=Group1Total-download priority=3 add limit-at=64k max-limit=256k name=Group1-Total-IIXUpload packet-mark=packet-group1-iix parent=Group1-TotalUpload priority=4 add limit-at=64k max-limit=256k name=Group1-Total-INTUpload packet-mark=packet-group1-int parent=Group1-TotalUpload priority=4

Hotspot unauth ● ●

●

/queue tree add limit-at=16k max-limit=64k name=Hotspot1-Unauth-Download packetmark=packet-unauth parent=0-Hotspot1-TotalDownload add limit-at=8k max-limit=64k name=Hotspot1Unauth-Upload packet-mark=packet-unauth parent=0-Hotspot1-Total-Upload

SCREEN SHOTS!

HOTSPOT USER PROFILE

MANGLE

QUEUE TREE

kAMSIa

Limitation Queue ●

/queue tree

●

add name="Hotspot-total-Up" parent=Wan packet-mark="" max-limit=512k

●

add name="Hotspot-total-Down" parent=Lan packet-mark="" max-limit=512k

●

●

add name=”Group-total-Download" parent=Hotspot-total-Down packetmark=packet-down limit-at=256k max-limit512 add name="Group-total-Upload" parent=Hotspot-total-Up packetmark=packet-up limit-at=256k max-limit=512k

Gambar pendukung