tutorial... cara buat ISP yang gampang dan cepat pake Mikrotik + Squid box

Cara Buat ISP Yang Gampang dan Cepat Pake Mikrotik + Squid box

topologi jaringan adalah sebagai berikut :

inet -- cisco --hub -- Squid (slackware) -- mikrotik (bw managr) -- client......................|......................|......................|-- server lain nya

IP ADDRESS SESUAIKAN DENGAN YANG DI MILIKI

blok ip yang di dapat adalah : 202.152.100.0/24

syarat dasar pemahaman :1. ip subnetting2. perintah dasar linux3. perintah dasar mikrotik

Langkah2...

1. Liat ip address cisco nya (asumsi menggunakan FO) ip address cisco s0/0 202.152.30.1 netmask 255.255.255.252gateway 202.152.30.2

(biasanya di dapat dari ISP yang di atas isp kita)

2. Memecah blok ip address yang kita dapat :

sebelum blok ip address yang kita miliki kita gunakan ada baik nya di pecah dulu. pada contoh berikut akan saya berikan untuk di bagi menjadi 2. BLOK IP SERVER dan blok ip CLIENT.

BLOK IP SERVER2 :network : 202.152.100.0/28 ip yang dapat di gunakan :202.152.100.1 - 202.152.100.14broadcast : 202.152.100.15

BLOK IP CLIENT :selain yang di atas adalah ip yang dapat di gunakan untuk client.

3. SET IP ETHERNET CISCOset ip cisco ethernet0/0

ip address : 202.152.100.1netmask 255.255.255.240

4. setting Proxy server + TUNE UP :Linux yang di gunakan adalah SLACKWARE 9 dapat di download di :http://mirror.vip.net.id/pub/slackware/yang di gunakan adalah :komputer P4HARD DISK 40 G seagate baracuda 7200 rpm 3 keping dengan RAM 2 Gkeping hardisk pertama di mount ke /keping hardisk ke 2 di mount ke /cache1keping hard disk ke 3 di mount ke /cache2

setelah di install isikan ip address berikut :

interface eth0ip address : 202.152.100.2netmask 255.255.255.240gateway 202.152.100.1

Interface eth1ip address : 202.152.100.17netmask 255.255.255.252

setelah itu ...

buka file : type.hroot@proxy:~# vi /usr/include/bits/types.hedit bagian ini :

#define __FD_SETSIZE 1024

jadi seperti ini

#define __FD_SETSIZE 8192

==> kemudian keluar dari VI EDITOR

kemudian ketik perintah ini :

root@proxy:~# ulimit -HSn 8192

kemudian download squid 2.5.STABLE9 dari sini :

wget http://202.154.183.7/squid-2.5.STABLE9.tar.gz

simpan di direktori /usr/local/src

ekstrak dengan perintah :

tar -zxvf squid-2.5.STABLE9.tar.gz

masuk kedirektori squid ketik perintah berikut ini :

./configure \--prefix=/opt/squid \--exec-prefix=/opt/squid \--enable-gnuregex \--enable-async-io=30 \--with-aufs-threads=30 \--with-pthreads \--with-aio \--with-dl \--enable-storeio=aufs \--enable-removal-policies=heap \--enable-icmp \--disable-wccp \--enable-snmp \--enable-cache-digests \--enable-default-err-languages=English \--enable-err-languages=English \--enable-linux-netfilter \--disable-ident-lookups \--disable-hostname-checks \--enable-underscores

karena udah ada mikrotik untuk bw management tidak di perlukan lagi delay pool. Konfigurasi ini adalah untuk komputer dengan spek seperti berikut :

HARDISK 3 keping 40 G seagate baracuda 7200 rpm, RAM 2 G

2 keping hard disk untuk cache, 1 keping untuk system. apabila menggunakan hard disk scsi --enable-async-io=30 --with-aufs-threads=30 bisa di naekkan jadi 32.

==> selesai install squid. semua file squid akan terletak di direktori /opt/squid

setelah itu gunakan squid.conf di bawah ini :

Code:

http_port 8080

acl youtube dstdomain .youtube.comno_cache allow youtubehierarchy_stoplist cgi-bin ? localhost .js .jsp .friendster.comacl QUERY urlpath_regex cgi-bin \? localhost .friendster.comno_cache deny QUERYcache_replacement_policy heap LFUDAmemory_replacement_policy heap GDSFcache_mem 6 MBcache_dir aufs /cache1 8000 13 256cache_dir aufs /cache2 8000 13 256cache_swap_low 98cache_swap_high 99cache_access_log /cache1/access.logcache_log /dev/nullcache_store_log nonemime_table /opt/squid/etc/mime.confpid_filename /var/run/squid.pidclient_netmask 255.255.255.0refresh_pattern ^ftp: 10080 95% 241920 reload-into-ims override-lastmodrefresh_pattern . 180 95% 120960 reload-into-ims override-lastmodredirect_rewrites_host_header offacl all src 0.0.0.0/0.0.0.0acl manager proto cache_objectacl localnet src 202.152.100.0/255.255.255.0acl localhost src 127.0.0.1/255.255.255.255acl SSL_ports port 443 8443 563 777acl Safe_ports port 25 80 81 110 443 563 6667 7000 777 210 119 70 21 1025-65535acl Safe_ports port 280 6668 6669acl Safe_ports port 488acl Safe_ports port 591acl Safe_ports port 777acl lewat dst_as 4622 4761 4787 4795 4796 4855 4800 7587 7597 7713 9326 9340 9448 9657 9791 9794 9875 9905 9228 9251 10114 10137 10208 10217 17440 17450 17451 17538 17658 17671 17670 17725 17727 17769 4832 4833 17817 17884 17907 17910 17922 17800 10220 17974 17826 17885 18052 18056 18059 7632 4821 18103 17996 18004 18153 18156 18189 18237 18251 18347 3583 3382 4382 4434 18364 18365 18379 9341 9785 18393 17995 23651 23666 23671 23679 23691 23756 23945 24052 24057 24194always_direct allow lewatalways_direct deny all#header_access Accept-Encoding deny allacl CONNECT method CONNECThttp_access allow manager localhosthttp_access deny managerhttp_access allow localnethttp_access allow localhosthttp_access deny !Safe_portshttp_access deny CONNECT !SSL_portshttp_access deny CONNECThttpd_accel_host virtualhttpd_accel_port 80httpd_accel_with_proxy onhttpd_accel_uses_host_header on

http_access deny allmaximum_object_size 128 MBmaximum_object_size_in_memory 8 KBipcache_size 4096ipcache_low 98ipcache_high 99quick_abort_min 0quick_abort_max 0quick_abort_pct 75fqdncache_size 4096shutdown_lifetime 10 secondscache_mgr hendraarif@yahoo.comcache_effective_user squidcache_effective_group squidmemory_pools offbuffered_logs offlog_icp_queries offlogfile_rotate 1log_fqdn offforwarded_for officp_hit_stale onquery_icmp onreload_into_ims onemulate_httpd_log offnegative_ttl 2 minutespipeline_prefetch onvary_ignore_expire onhalf_closed_clients offhigh_page_fault_warning 2visible_hostname proxy@dodol.orgnonhierarchical_direct onprefer_direct off

perhatikan ip address yang di izinkan. sesuaikan dengan ip yang di gunakan.perhatikan juga penggunaan cache direktori. maksimal untuk 1 keping adalah 18 Giga.

setelah itu tambahkan user squid di linux :

root@proxy:~# useradd squid

tambahkan juga group squid

root@proxy:~# groupadd squid

bentuk direktori cache di squid :

root@proxy:~# /opt/squid/sbin/squid -z

ketik perintah ini sekali lagi :

root@proxy:~# ulimit -HSn 8192

kemudian jalankan squid dengan perintah :

root@proxy:~# /opt/squid/sbin/squid -DY &

================================================== ==============

okeee.. kita lanjut :

5. Setting mikrotik :

masukin ip address ether 1 :/ip address add address=202.152.100.18/30 interface=ether1

karena seluruh ip yang di gunakan adalah ip public maka perlu subnetting di pisah-pisah :masukin ip address untuk pasangan ip client :misalkan ip client adalah 202.152.100.22 maka yang di masukkan di mikrotik ethr2 adalah 202.152.100.21/30

demikian pula untuk pasangan ip client2 yang lain.

/ip address add address=202.152.100.21/30 interface=ether2

untuk lebih jelasnya dapat di liat pada tablel berikut :Code:

network first avail last avail broadcast202.152.100.20 202.152.100.21 202.152.100.22 202.152.100.23202.152.100.24 202.152.100.25 202.152.100.26 202.152.100.27202.152.100.28 202.152.100.29 202.152.100.30 202.152.100.31202.152.100.32 202.152.100.33 202.152.100.34 202.152.100.35202.152.100.36 202.152.100.37 202.152.100.38 202.152.100.39202.152.100.40 202.152.100.41 202.152.100.42 202.152.100.43202.152.100.44 202.152.100.45 202.152.100.46 202.152.100.47202.152.100.48 202.152.100.49 202.152.100.50 202.152.100.51202.152.100.52 202.152.100.53 202.152.100.54 202.152.100.55202.152.100.56 202.152.100.57 202.152.100.58 202.152.100.59202.152.100.60 202.152.100.61 202.152.100.62 202.152.100.63202.152.100.64 202.152.100.65 202.152.100.66 202.152.100.67202.152.100.68 202.152.100.69 202.152.100.70 202.152.100.71202.152.100.72 202.152.100.73 202.152.100.74 202.152.100.75202.152.100.76 202.152.100.77 202.152.100.78 202.152.100.79202.152.100.80 202.152.100.81 202.152.100.82 202.152.100.83202.152.100.84 202.152.100.85 202.152.100.86 202.152.100.87202.152.100.88 202.152.100.89 202.152.100.90 202.152.100.91202.152.100.92 202.152.100.93 202.152.100.94 202.152.100.95202.152.100.96 202.152.100.97 202.152.100.98 202.152.100.99

202.152.100.100202.152.100.101202.152.100.102202.152.100.103202.152.100.104202.152.100.105202.152.100.106202.152.100.107202.152.100.108202.152.100.109202.152.100.110202.152.100.111202.152.100.112202.152.100.113202.152.100.114202.152.100.115202.152.100.116202.152.100.117202.152.100.118202.152.100.119202.152.100.120202.152.100.121202.152.100.122202.152.100.123202.152.100.124202.152.100.125202.152.100.126202.152.100.127202.152.100.128202.152.100.129202.152.100.130202.152.100.131202.152.100.132202.152.100.133202.152.100.134202.152.100.135202.152.100.136202.152.100.137202.152.100.138202.152.100.139202.152.100.140202.152.100.141202.152.100.142202.152.100.143202.152.100.144202.152.100.145202.152.100.146202.152.100.147202.152.100.148202.152.100.149202.152.100.150202.152.100.151202.152.100.152202.152.100.153202.152.100.154202.152.100.155202.152.100.156202.152.100.157202.152.100.158202.152.100.159202.152.100.160202.152.100.161202.152.100.162202.152.100.163202.152.100.164202.152.100.165202.152.100.166202.152.100.167202.152.100.168202.152.100.169202.152.100.170202.152.100.171202.152.100.172202.152.100.173202.152.100.174202.152.100.175202.152.100.176202.152.100.177202.152.100.178202.152.100.179202.152.100.180202.152.100.181202.152.100.182202.152.100.183202.152.100.184202.152.100.185202.152.100.186202.152.100.187202.152.100.188202.152.100.189202.152.100.190202.152.100.191202.152.100.192202.152.100.193202.152.100.194202.152.100.195202.152.100.196202.152.100.197202.152.100.198202.152.100.199202.152.100.200202.152.100.201202.152.100.202202.152.100.203202.152.100.204202.152.100.205202.152.100.206202.152.100.207202.152.100.208202.152.100.209202.152.100.210202.152.100.211202.152.100.212202.152.100.213202.152.100.214202.152.100.215202.152.100.216202.152.100.217202.152.100.218202.152.100.219202.152.100.220202.152.100.221202.152.100.222202.152.100.223202.152.100.224202.152.100.225202.152.100.226202.152.100.227202.152.100.228202.152.100.229202.152.100.230202.152.100.231202.152.100.232202.152.100.233202.152.100.234202.152.100.235202.152.100.236202.152.100.237202.152.100.238202.152.100.239202.152.100.240202.152.100.241202.152.100.242202.152.100.243202.152.100.244202.152.100.245202.152.100.246202.152.100.247202.152.100.248202.152.100.249202.152.100.250202.152.100.251202.152.100.252202.152.100.253202.152.100.254202.152.100.255

kemudian masukan gateway nya ke arah proxy :

/route add gateway=202.152.100.17

atur route di proxy agar mengizinkan network end mikrotik dapat lewat :

route add -net 202.152.100.20/30 gateway 202.152.100.18

selesai urusan ip address...

6. dapat di uji coba client menggunakan ip address :

202.152.100.22netmask 255.255.255.252gateway 202.152.100.21

karena menggunakan subnetting selain ip address 22 tidak akan dapat melewati router mikrotik yang di buat

7. iptables di proxy semua traffic harus di paksa lewat proxy server yang kita buat dengan perintah :

Code:

iptables -A PREROUTING -t nat -p tcp -s 202.152.100.0/24 -i eth2 -d \! 202.152.100.0/24 --dport 80 -j REDIRECT --to 8080

9. DNS SERVER jalankan dns server yang telah ada secara defaul di slackware dengan perintah :

root@proxy:~# named -d1

tinggal masukin di /etc/resolv.conf

nameserver 127.0.0.1

dan seluruh client pake dns ip 202.152.100.17

TANPA NAT/MASQUERADE .................. ip public terdistribusi ke client

jadi deeeehhhhhh gampang dan cepat kan ?