Menandai Paket-Paket Download Pada Mikrotik Dengan Layer7
Hallo
gan ketemu gw lagi haha.. oh iya gw mau jelasin tentang “Menandai Paket-Paket Download Pada Mikrotik Dengan Layer7” maksud dari Menandai Paket-Paket Download Pada
Mikrotik Dengan Layer7 yaitu untuk mengatur tinggi rendahnya kecepatan bandwith
di Layer7 Protokol, jadi koneksi internet di bagi- bagi secara rata gan supaya
tidak terganggu yang sedang brosing gan.
Mari
di simak gan langkah langkah nya :
1.
Buka winbox (lihat konfigurasi)
2.
Buka Interfaces (Lihat bagian ether berapa yang akan kita konfigurasi)
3.
Buka "New Terminal" trus pastekan scrib --> "/ip firewall layer7-protocol add
name="http-video" regexp="http/(0\\.9|1\\.0|1\\.1)[\\x09-\\x0d
][1-5][0-9][0-9][\\x09-\\x0d -~]*(content-type: video)" di
"New Terminal" {Pastikan Jangan ada yang error di terminal jika ada
masukan secara manual}
4. Untuk mengeceknya, Buka
IP --> Firewall --> Buka tab "Layer 7 Protocol"
5. Nah terus Buka "New
Terminal"again copy scrib di bawah lalu pastekan di "NewTerminal"
/ip firewall layer7-protocol add name="file-msi" regexp="\\.(msi)
/ip firewall layer7-protocol add name="file-exe" regexp="\\.(exe)
/ip firewall layer7-protocol add name="file-rar" regexp="\\.(rar)
/ip firewall layer7-protocol add name="file-zip" regexp="\\.(zip)
/ip firewall layer7-protocol add name="file-7z" regexp="\\.(7z)
/ip firewall layer7-protocol add name="file-msi" regexp="\\.(msi)
/ip firewall layer7-protocol add name="file-exe" regexp="\\.(exe)
/ip firewall layer7-protocol add name="file-rar" regexp="\\.(rar)
/ip firewall layer7-protocol add name="file-zip" regexp="\\.(zip)
/ip firewall layer7-protocol add name="file-7z" regexp="\\.(7z)
6. Pastikan Jangan sampe ada yangn error
7. Mengeceknya, Buka IP --> Firewall --> Buka tab "Layer 7 Protocol"
7. Mengeceknya, Buka IP --> Firewall --> Buka tab "Layer 7 Protocol"
8. Buka "New Terminal" copy scrib di bawah lalu pastekan di "New Terminal"
/ip firewall address-list add address=192.168.2.1/24 list=client disabled=no
(address=192.168.2.1/24 adalah ip lokal, Tentukan dengan IP Lan Lokal anda)
9.
Untuk Mengeceknya buka IP --> Firewall --> buka tab "address
list"
10. Buka "New Terminal" copy scrib di bawah lalu pastekan di "New Terminal"
/ip firewall mangle add chain=forward protocol=tcp layer7-protocol=http-video dst-address-list=client action=mark-packet new-packet-mark=download passthrough=no
11.
Untuk Mengeceknya buka IP --> Firewall --> buka tab "Mangel"
12. Buka "New Terminal" copy
scrib di bawah lalu pastekan di "New Terminal"
/ip firewall mangle add chain=forward protocol=tcp layer7-protocol=file-msi dst-address-list=client action=mark-packet new-packet-mark=download passthrough=no
/ip firewall mangle add chain=forward protocol=tcp layer7-protocol=file-exe dst-address-list=client action=mark-packet new-packet-mark=download passthrough=no
/ip firewall mangle add chain=forward protocol=tcp layer7-protocol=file-rar dst-address-list=client action=mark-packet new-packet-mark=download passthrough=no
/ip firewall mangle add chain=forward protocol=tcp layer7-protocol=file-zip dst-address-list=client action=mark-packet new-packet-mark=download passthrough=no
/ip firewall mangle add chain=forward protocol=tcp layer7-protocol=file-7z dst-address-list=client action=mark-packet new-packet-mark=download passthrough=no
/ip firewall mangle add chain=forward protocol=tcp layer7-protocol=file-msi dst-address-list=client action=mark-packet new-packet-mark=download passthrough=no
/ip firewall mangle add chain=forward protocol=tcp layer7-protocol=file-exe dst-address-list=client action=mark-packet new-packet-mark=download passthrough=no
/ip firewall mangle add chain=forward protocol=tcp layer7-protocol=file-rar dst-address-list=client action=mark-packet new-packet-mark=download passthrough=no
/ip firewall mangle add chain=forward protocol=tcp layer7-protocol=file-zip dst-address-list=client action=mark-packet new-packet-mark=download passthrough=no
/ip firewall mangle add chain=forward protocol=tcp layer7-protocol=file-7z dst-address-list=client action=mark-packet new-packet-mark=download passthrough=no
13. Untuk Mengeceknya buka
IP --> Firewall --> buka tab "Mangel"
14. Buat PCQ : Buka "New Terminal" copy scrib di bawah lalu pastekan di "New Terminal"
/queue type add kind=pcq
name=pcq-download pcq-classifier=dst-address
15. untuk mengecek, Buka
"Queues" --> pada tab "Queue Type" --> klick
"pcq-download" --> jika benar limit "50" total limit
"2000"
16. Buat Quee Tree : Buka "New
Terminal" copy scrib di bawah lalu pastekan di "New Terminal"
/queue tree add name="total-download" parent=ether3-Lan packet-mark=download limit-at=128k queue=pcq-download priority=8 max-limit=384k burst-limit=0 burst-threshold=0 burst-time=0s
/queue tree add name="total-download" parent=ether3-Lan packet-mark=download limit-at=128k queue=pcq-download priority=8 max-limit=384k burst-limit=0 burst-threshold=0 burst-time=0s
17. Sekarang test download
filetype ".exe" (speed turun sekitar 40Kbps dan naik hanya 60Kbps)
18.
Cek queue Tree berhasil : Buka "Queues" --> Queue Tree (Jika
Trafik berwarna merah maka berhasil)
19. sekarang coba di
disable "total-downnya" dengan klick "X" warna merah (Maka
kecepatan download akan mencapai maksimal)
gimana gan? kalo ada ke sulitan tinggal komentar aja gan jangan
lupa follow blog gue gan hehe :D tanks
Recent Comments