♣ Pengertian router
1. Router adalah suatu perngkat yang berfungsi menghubungkan suatu LAN ke suatu internetworking (WAN) dan mengelola penyaluran lalu lintas data di dalamnya.
Sumber dari : buku panduan TIK IX Wajar Semester 1
2. Router adalah perangkat komunikasi yang menghubungkan banyak computer dan mengirimkan data ke alamat yang benar di dalam jaringan, router di gunakan hamper di semua jaringan.
Sumber dari : buku panduan KKPI 3a Master
3. Router adalah menyambungkan alamat IP-IP yang berbeda agar dapat sling berhubungan.
Sumber dari : buku panduan modul TKJ
4. Router adalah sebuah alat jaringan komputer yang mengirimkan paket data melalui sebuah jaringan atau internet menuju tujuannya, melalui sebuah proses yang dikenal sebagai routing. Proses routing terjadi pada lapisan 3 (Lapisanjaringan seperti Internet Protokol)dari stack protocol tujuh lapis OSI
Sumber dari : http://bayuneuer.blogspot.com/2011/01/router.html
☂ Fungsi router
Sumber dari : buku panduan TIK IX Wajar Semester 1
1. Mengatur jalur sinyal secara efisien
2. Mengatur pesn di antara dua buah protocol
3. Mengatur pesn di antar toplogi jaringan linear bus dan bintang (star)
4. Menatur pesan melewati kabel fiber optic, kabel co-axial atau kabel twisted pair
Sumber dari : buku panduan KKPI 3a Master
1. Menghubungkan sejumalah LAn yang memiliki topologi dan protocol yang sama.
2. Menghubungkan jaringan pada suatu lokasi dengan jaringan pada lokasi lain
3. Membagi suatu jaringan berukuran besr menjdi jaringan-jaringan yang lebih kecil dan mudah dikelola
4. Memungkinkan jaringan perusahaan dihubungkan ke internet dan informasi yang tersedia dapat diakses oleh ispa saja di luar perusahaan
5. Mencari jalan terefisien untuk mengirimkan data ke tujuan
6. Melindungi jaringan dari pemakai yang ridak memilki hak denagn cara membatasi akses terhadap data
Jenis-jenis ROUTER
* Router yang umum digunakan,yaitu :
Router Broadband Router Wireless
Secara umum, router dibagi menjadi dua buah jenis, yakni:
1. Router Aplikasi
- Static router (router statis): adalah sebuah router yang memiliki tabel routing statis yang diset secara manual oleh para administrator jaringan.
- Dynamic router (router dinamis): adalah sebuah router yang memiliki dab membuat tabel routing dinamis, dengan mendengarkan lalu lintas jaringan dan juga dengan saling berhubungan dengan router lainnya.
1. Router Aplikasi
2. Router Hardware
3. Router PC
Sumber dari : http://bayuneuer.blogspot.com/2011/01/router.html
Konfigursi Ruoter di linux
rancang terlebih topologinya
harus di lakukan adalah mensetting mgw(main gateway) supaya bisa connect ke internet
Sebelum Mensetting :
1.Minta IP public ke ISP lengkap dengan netmask,broadcast dan dns nya
misalnya :
RANGE : 202.159.121.0/29
IP : 202.159.121.2
GATEWAY : 202.159.121.1
Nemast : 255.255.255.248
broadcast : 202.159.121.7
DNS1 : 202.159.0.10
DNS2 : 202.159.0.20
berarti kita mendapatkan ip 5 buah dari 202.159.121.2 – 202.159.121.6
2.Menentukan IP local yang akan kita gunakan buat client
Setting IP MGW :
1.[root@mgw cachak]$ vi /etc/sysconfig/network
lalu isi dengan :
NETWORKING=yes
HOSTNAME=mgw.domain.com
GATEWAY=202.159.121.1
lalu simpen dengan menekan :wq
2.Menconfigurasi IP eth0(default)
[root@mgw root]$ vi /etc/sysconfig/network-scripts/ifcfg-eth0
lalu isi dengan :
DEVICE=eth0
BOOTPROTO=static
IPADDR=202.159.121.2
BROADCAST=202.159.121.7
NETMASK=255.255.255.249
ONBOOT=yes
USERCTL=no
lalu simpen dengan menekan :wq
3.Setting dns resolve
[root@mgw root]$ vi /etc/resolve.conf
lalu isi dengan nameserver dari isp kita tadi :
nameserver 202.159.0.10
nameserver 202.159.0.20
lalu simpen dengan menekan :wq
4.Setting ip_forwarding
[root@mgw cachak]$ vi /etc/sysctl.conf
rubah net.ipv4.ip_forward = 0 menjadi net.ipv4.ip_forward = 1
atau kalau gak ada net.ipv4.ip_forward = 0 tambahin net.ipv4.ip_forward = 1
simpen dengan menekan :wq
5.restart network
[root@mgw cachak]$ /etc/init.d/network restart
Shutting down interface eth0: [ OK ]
Shutting down loopback interface: [ OK ]
Disabling IPv4 packet forwarding: [ OK ]
Setting network parameters: [ OK ]
Bringing up loopback interface: [ OK ]
Bringing up interface eth0: [ OK ]
[root@www root]#chkconfig –level 2345 network on
[root@www root]#
6.testing dengan ngeping ke default gateway 202.159.121.1
[root@mgw cachak]$ ping 202.159.121.1
PING 202.159.121.1 (202.159.121.1) 56(84) bytes of data.
64 bytes from 202.159.121.1: icmp_seq=1 ttl=63 time=0.356 ms
64 bytes from 202.159.121.1: icmp_seq=2 ttl=63 time=0.269 ms
64 bytes from 202.159.121.1: icmp_seq=3 ttl=63 time=0.267 ms
64 bytes from 202.159.121.1: icmp_seq=4 ttl=63 time=0.268 ms
— 202.159.121.1 ping statistics —
4 packets transmitted, 4 received, 0% packet loss, time 2997ms
rtt min/avg/max/mdev = 0.267/0.290/0.356/0.038 ms
7.testing untuk ngeping google.com untuk ngecek dns nya
kalau muncul :
PING google.com (216.239.39.99) 56(84) bytes of data.
berarti dns kita untuk mgw dah bekerja, tapi kalau muncul :
ping: unknown host google.com
berarti dns yang kita isikan di /etc/resolve.conf masih salah,silahkan cek lagi ke ISP nya
nah bereskan sudah setting IP untuk mgw nya
supaya mgw ini bisa sekaligus di gunakan sebagai ns server oleh client maka harus di install daemon bind atau daemon nameserver yang lain
ataukalau sudah ada tinggal idupin Bind nya
[root@www root]# /etc/init.d/named restart
Stopping named: [ OK ]
Starting named: [ OK ]
[root@www root]#chkconfig –level 2345 named on
[root@www root]#
misalnya ip ke client adalah :
192.168.0.1/24
IP : 192.168.0.1
netmask : 255.255.255.0
broadcast : 192.168.0.255
RANGE IP CLIENT : 192.168.0.2-192.168.0.254
Setting ip untuk eth1 (yang ke client)
1.memberi IP 192.168.0.1 di eth1
[root@mgw cachak]$ vi /etc/sysconfig/network-scripts/ifcfg-eth1
lalu isi dengan :
DEVICE=eth1
BOOTPROTO=static
IPADDR=192.168.0.1
NETMASK=255.255.255.0
BROADCAST=192.168.0.255
ONBOOT=yes
USERCTL=no
lalu simpen dengan menekan :wq
2.Restart networknya
[root@mgw root]$ /etc/init.d/network restart
Shutting down interface eth0: [ OK ]
Shutting down interface eth1: [ OK ]
Shutting down loopback interface: [ OK ]
Disabling IPv4 packet forwarding: [ OK ]
Setting network parameters: [ OK ]
Bringing up loopback interface: [ OK ]
Bringing up interface eth0: [ OK ]
Bringing up interface eth1: [ OK ]
3.Testing dengan cara ping ip eth1
[root@mgw cachak]$ ping 192.168.0.1
PING 192.168.0.1 (192.168.0.1) 56(84) bytes of data.
64 bytes from 192.168.0.1: icmp_seq=1 ttl=63 time=0.356 ms
64 bytes from 192.168.0.1: icmp_seq=2 ttl=63 time=0.269 ms
64 bytes from 192.168.0.1: icmp_seq=3 ttl=63 time=0.267 ms
64 bytes from 192.168.0.1: icmp_seq=4 ttl=63 time=0.268 ms
— 192.168.0.1 ping statistics —
4 packets transmitted, 4 received, 0% packet loss, time 2997ms
rtt min/avg/max/mdev = 0.267/0.290/0.356/0.038 ms
Tinggal Setting IP computer client dengan ketentuan di bawah ini :
IP : 192.168.0.2 – 192.168.0.254
GATEWAY : 192.168.0.1
NETMASK : 255.255.255.0
BROADCAST : 192.168.0.255
NAMESERVER : 192.168.0.1
misal :
Client01
===============================
IP : 192.168.0.2
GATEWAY : 192.168.0.1
NETMASK : 255.255.255.0
BROADCAST : 192.168.0.255
NAMESERVER : 192.168.0.1
Client02
===============================
IP : 192.168.0.3
GATEWAY : 192.168.0.1
NETMASK : 255.255.255.0
BROADCAST : 192.168.0.255
NAMESERVER : 192.168.0.1
dan seterusnya sesuai banyaknya client,yang berubah hanya IP
untuk client windows maka setting IP di bagian Start Menu/Setting/Control Panel/Network
setelah di setting ip client, maka coba ping ke 192.168.0.1 dari client,kalau berhasil berarti client dan MGW nya sudah tersambung.
Setting MGW supaya client bisa internat dengan menggunakan NAT
1.Matikan iptablesnya
[root@mgw root]# /etc/init.d/iptables stop
Flushing all chains: [ OK ]
Removing user defined chains: [ OK ]
Resetting built-in chains to the default ACCEPT policy: [ OK ]
[root@mgw root]#
2.Tambahkan iptables untuk Source NAt sesuai dengan ip di eth0
[root@mgw root]# /sbin/iptables -t nat -A POSTROUTING -o eth0 -s 192.168.0.0/24 -j SNAT –to-source 202.159.121.2
[root@mgw root]# /sbin/iptables-save > /etc/sysconfig/iptables
[root@mgw root]# /etc/init.d/iptables restart
Flushing all current rules and user defined chains: [ OK ]
Clearing all current rules and user defined chains: [ OK ]
Applying iptables firewall rules: [ OK ]
[root@mgw root]# iptables-save
sumber : http://diqie.wordpress.com/2007/05/19/setting-router-linux/
3. Setelah jendela registry editor terbuka bakalan keliatan tampilan yang kayak dibawah ni,,, terus, lakukan atau cari registry IPEnablingRouter
(HKEY_LOCAL_MACHINESYSTEM->Current_Control->Set
->Services>Tcpip->Parameters).
udah gitu terus lakukan modify seperti terlihat pada gambar sebelumnya (klik kanan pada registry, pilih modify).
4. isi 1 pada isian value data kayak yang keliat gambar diatas noh pada gambar di bawah ini. Hati-hati pada pengisian value ini, direkomendasikan untuk backup registry terlebih dahulu, buat mencegah kerusakan pada sistem.
5. udah gitu langsung dah Tutup registry editor dan restart komputer (PC Router) anda.Setelah komputer direstart, lakukan test koneksi dengan cara ping koneksi dengan koneksi sebagai berikut (anggep ajaudah pada tau,,cuman ngeping aja juga udah pada tau kan) di Command Prompt
6. Komputer klien pada area jaringan kiri bawah tuh lakuin test ke sesama komputer dalam satu jaringan, komputer berbeda jaringan, dan ke PC Router.
7. Komputer klien pada area jaringan kanan bawah lakuin test juga ke sesama komputer dalam satu jaringan, komputer berbeda jaringan, dan ke PC Router.
Konfigursi Ruoter di linux
rancang terlebih topologinya
harus di lakukan adalah mensetting mgw(main gateway) supaya bisa connect ke internet
Sebelum Mensetting :
1.Minta IP public ke ISP lengkap dengan netmask,broadcast dan dns nya
misalnya :
RANGE : 202.159.121.0/29
IP : 202.159.121.2
GATEWAY : 202.159.121.1
Nemast : 255.255.255.248
broadcast : 202.159.121.7
DNS1 : 202.159.0.10
DNS2 : 202.159.0.20
berarti kita mendapatkan ip 5 buah dari 202.159.121.2 – 202.159.121.6
2.Menentukan IP local yang akan kita gunakan buat client
Setting IP MGW :
1.[root@mgw cachak]$ vi /etc/sysconfig/network
lalu isi dengan :
NETWORKING=yes
HOSTNAME=mgw.domain.com
GATEWAY=202.159.121.1
lalu simpen dengan menekan :wq
2.Menconfigurasi IP eth0(default)
[root@mgw root]$ vi /etc/sysconfig/network-scripts/ifcfg-eth0
lalu isi dengan :
DEVICE=eth0
BOOTPROTO=static
IPADDR=202.159.121.2
BROADCAST=202.159.121.7
NETMASK=255.255.255.249
ONBOOT=yes
USERCTL=no
lalu simpen dengan menekan :wq
3.Setting dns resolve
[root@mgw root]$ vi /etc/resolve.conf
lalu isi dengan nameserver dari isp kita tadi :
nameserver 202.159.0.10
nameserver 202.159.0.20
lalu simpen dengan menekan :wq
4.Setting ip_forwarding
[root@mgw cachak]$ vi /etc/sysctl.conf
rubah net.ipv4.ip_forward = 0 menjadi net.ipv4.ip_forward = 1
atau kalau gak ada net.ipv4.ip_forward = 0 tambahin net.ipv4.ip_forward = 1
simpen dengan menekan :wq
5.restart network
[root@mgw cachak]$ /etc/init.d/network restart
Shutting down interface eth0: [ OK ]
Shutting down loopback interface: [ OK ]
Disabling IPv4 packet forwarding: [ OK ]
Setting network parameters: [ OK ]
Bringing up loopback interface: [ OK ]
Bringing up interface eth0: [ OK ]
[root@www root]#chkconfig –level 2345 network on
[root@www root]#
6.testing dengan ngeping ke default gateway 202.159.121.1
[root@mgw cachak]$ ping 202.159.121.1
PING 202.159.121.1 (202.159.121.1) 56(84) bytes of data.
64 bytes from 202.159.121.1: icmp_seq=1 ttl=63 time=0.356 ms
64 bytes from 202.159.121.1: icmp_seq=2 ttl=63 time=0.269 ms
64 bytes from 202.159.121.1: icmp_seq=3 ttl=63 time=0.267 ms
64 bytes from 202.159.121.1: icmp_seq=4 ttl=63 time=0.268 ms
— 202.159.121.1 ping statistics —
4 packets transmitted, 4 received, 0% packet loss, time 2997ms
rtt min/avg/max/mdev = 0.267/0.290/0.356/0.038 ms
7.testing untuk ngeping google.com untuk ngecek dns nya
kalau muncul :
PING google.com (216.239.39.99) 56(84) bytes of data.
berarti dns kita untuk mgw dah bekerja, tapi kalau muncul :
ping: unknown host google.com
berarti dns yang kita isikan di /etc/resolve.conf masih salah,silahkan cek lagi ke ISP nya
nah bereskan sudah setting IP untuk mgw nya
supaya mgw ini bisa sekaligus di gunakan sebagai ns server oleh client maka harus di install daemon bind atau daemon nameserver yang lain
ataukalau sudah ada tinggal idupin Bind nya
[root@www root]# /etc/init.d/named restart
Stopping named: [ OK ]
Starting named: [ OK ]
[root@www root]#chkconfig –level 2345 named on
[root@www root]#
misalnya ip ke client adalah :
192.168.0.1/24
IP : 192.168.0.1
netmask : 255.255.255.0
broadcast : 192.168.0.255
RANGE IP CLIENT : 192.168.0.2-192.168.0.254
Setting ip untuk eth1 (yang ke client)
1.memberi IP 192.168.0.1 di eth1
[root@mgw cachak]$ vi /etc/sysconfig/network-scripts/ifcfg-eth1
lalu isi dengan :
DEVICE=eth1
BOOTPROTO=static
IPADDR=192.168.0.1
NETMASK=255.255.255.0
BROADCAST=192.168.0.255
ONBOOT=yes
USERCTL=no
lalu simpen dengan menekan :wq
2.Restart networknya
[root@mgw root]$ /etc/init.d/network restart
Shutting down interface eth0: [ OK ]
Shutting down interface eth1: [ OK ]
Shutting down loopback interface: [ OK ]
Disabling IPv4 packet forwarding: [ OK ]
Setting network parameters: [ OK ]
Bringing up loopback interface: [ OK ]
Bringing up interface eth0: [ OK ]
Bringing up interface eth1: [ OK ]
3.Testing dengan cara ping ip eth1
[root@mgw cachak]$ ping 192.168.0.1
PING 192.168.0.1 (192.168.0.1) 56(84) bytes of data.
64 bytes from 192.168.0.1: icmp_seq=1 ttl=63 time=0.356 ms
64 bytes from 192.168.0.1: icmp_seq=2 ttl=63 time=0.269 ms
64 bytes from 192.168.0.1: icmp_seq=3 ttl=63 time=0.267 ms
64 bytes from 192.168.0.1: icmp_seq=4 ttl=63 time=0.268 ms
— 192.168.0.1 ping statistics —
4 packets transmitted, 4 received, 0% packet loss, time 2997ms
rtt min/avg/max/mdev = 0.267/0.290/0.356/0.038 ms
Tinggal Setting IP computer client dengan ketentuan di bawah ini :
IP : 192.168.0.2 – 192.168.0.254
GATEWAY : 192.168.0.1
NETMASK : 255.255.255.0
BROADCAST : 192.168.0.255
NAMESERVER : 192.168.0.1
misal :
Client01
===============================
IP : 192.168.0.2
GATEWAY : 192.168.0.1
NETMASK : 255.255.255.0
BROADCAST : 192.168.0.255
NAMESERVER : 192.168.0.1
Client02
===============================
IP : 192.168.0.3
GATEWAY : 192.168.0.1
NETMASK : 255.255.255.0
BROADCAST : 192.168.0.255
NAMESERVER : 192.168.0.1
dan seterusnya sesuai banyaknya client,yang berubah hanya IP
untuk client windows maka setting IP di bagian Start Menu/Setting/Control Panel/Network
setelah di setting ip client, maka coba ping ke 192.168.0.1 dari client,kalau berhasil berarti client dan MGW nya sudah tersambung.
Setting MGW supaya client bisa internat dengan menggunakan NAT
1.Matikan iptablesnya
[root@mgw root]# /etc/init.d/iptables stop
Flushing all chains: [ OK ]
Removing user defined chains: [ OK ]
Resetting built-in chains to the default ACCEPT policy: [ OK ]
[root@mgw root]#
2.Tambahkan iptables untuk Source NAt sesuai dengan ip di eth0
[root@mgw root]# /sbin/iptables -t nat -A POSTROUTING -o eth0 -s 192.168.0.0/24 -j SNAT –to-source 202.159.121.2
[root@mgw root]# /sbin/iptables-save > /etc/sysconfig/iptables
[root@mgw root]# /etc/init.d/iptables restart
Flushing all current rules and user defined chains: [ OK ]
Clearing all current rules and user defined chains: [ OK ]
Applying iptables firewall rules: [ OK ]
[root@mgw root]# iptables-save
sumber : http://diqie.wordpress.com/2007/05/19/setting-router-linux/
Konfigurasi RouterPC di OS Windows XP
1. Perhatikan gambar dibawah ini !
2. Setelah itu PC Router, kita akan melakukan enabling PC Router dengan cara menambahkan registry baru pada Sistem. Buka Run, kemudian ketikkan regedit.exe
3. Setelah jendela registry editor terbuka bakalan keliatan tampilan yang kayak dibawah ni,,, terus, lakukan atau cari registry IPEnablingRouter
(HKEY_LOCAL_MACHINESYSTEM->Current_Control->Set
->Services>Tcpip->Parameters).
udah gitu terus lakukan modify seperti terlihat pada gambar sebelumnya (klik kanan pada registry, pilih modify).
4. isi 1 pada isian value data kayak yang keliat gambar diatas noh pada gambar di bawah ini. Hati-hati pada pengisian value ini, direkomendasikan untuk backup registry terlebih dahulu, buat mencegah kerusakan pada sistem.
5. udah gitu langsung dah Tutup registry editor dan restart komputer (PC Router) anda.Setelah komputer direstart, lakukan test koneksi dengan cara ping koneksi dengan koneksi sebagai berikut (anggep ajaudah pada tau,,cuman ngeping aja juga udah pada tau kan) di Command Prompt
6. Komputer klien pada area jaringan kiri bawah tuh lakuin test ke sesama komputer dalam satu jaringan, komputer berbeda jaringan, dan ke PC Router.
7. Komputer klien pada area jaringan kanan bawah lakuin test juga ke sesama komputer dalam satu jaringan, komputer berbeda jaringan, dan ke PC Router.
langkah konfigurasi router di linux
Kemudian kita langsung mengkonfigurasi router. Saya asumsikan di sini sistem operasi yang digunakan adalah Linux dengan kernel 2.6.x. Point penting dalam membuat NAT pada linux adalah iptables untuk penerapan NAT dan Masquerading. Lalu file sysctl.conf yang digunakan untuk melakukan forwarding. Berikut konfigurasinya,
di redhat
1. Konfigurasi Gateway & Router
Adapun cara konfigurasi Gateway & Router Linux Redhat 9.0 adalah :
- Setting IP Modem ADSL = 192.168.0.1
- Setting IP eth0
# vi /etc/sysconfig/network-scripts/ifcfg-eth0 (u/ menulis/edit tekan tombol insert)
DEVICE=eth0
ONBOOT=yes
BOOTPROTO=static
NETWORK=192.168.0.0
BROADCAST=192.168.0.255
IPADDR=192.168.0.2
NETMASK=255.255.255.0
USERCTL=no
PEERDNS=no
TYPE=Ethernet
Simpan file dengan menekan tombol escape/Esc kemudian ketik :wq kemudian tekan enter
- Setting IP eth1
# vi /etc/sysconfig/network-scripts/ifcfg-eth1 (u/ menulis/edit tekan tombol insert)
DEVICE=eth1
BOOTPROTO=static
BROADCAST=192.168.1.255
IPADDR=192.168.1.1
NETMASK=255.255.255.0
NETWORK=192.168.1.0
ONBOOT=yes
USERCTL=no
PEERDNS=no
TYPE=Ethernet
Simpan file dengan menekan tombol escape/Esc kemudian ketik :wq kemudian tekan enter
- Setting IP eth2
# vi /etc/sysconfig/network-scripts/ifcfg-eth2 (u/ menulis/edit tekan tombol insert)
USERCTL=no
PEERDNS=no
TYPE=Ethernet
DEVICE=eth2
BOOTPROTO=static
ONBOOT=yes
IPADDR=10.10.10.1
NETMASK=255.255.255.0
NETWORK=10.10.10.0
BROADCAST=10.10.10.255
Simpan file dengan menekan tombol escape/Esc kemudian ketik :wq kemudian tekan enter
- Restart network
# service network restart
Shutting down interface eth0: [ OK ]
Shutting down interface eth1: [ OK ]
Shutting down interface eth2: [ OK ]
Shutting down loopback interface: [ OK ]
Disabling IPv4 packet forwarding: [ OK ]
Setting network parameters: [ OK ]
Bringing up loopback interface: [ OK ]
Bringing up interface eth0: [ OK ]
Bringing up interface eth1: [ OK ]
Bringing up interface eth2: [ OK ]
- Cek Konfigurasi Network
[root@server /]# ifconfig
eth0 Link encap:Ethernet HWaddr 00:A0:C9:0F:9D:6F
inet addr:192.168.0.2 Bcast:192.168.0.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:63 errors:0 dropped:0 overruns:0 frame:0
TX packets:89 errors:78 dropped:0 overruns:0 carrier:78
collisions:0 txqueuelen:100
RX bytes:4905 (4.7 Kb) TX bytes:15956 (15.5 Kb)
Interrupt:10 Base address:0xdcc0 Memory:fa000000-fa000038
eth1 Link encap:Ethernet HWaddr 00:C0:4F:CF:71:69
inet addr:192.168.1.1 Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1400 errors:0 dropped:0 overruns:0 frame:0
TX packets:802 errors:0 dropped:0 overruns:0 carrier:0
collisions:10 txqueuelen:100
RX bytes:180124 (175.9 Kb) TX bytes:185405 (181.0 Kb)
Interrupt:11 Base address:0xdc00
eth2 Link encap:Ethernet HWaddr 00:A0:24:6E:55:C1
inet addr:10.10.10.1 Bcast:10.10.10.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1051 errors:1036 dropped:0 overruns:0 frame:1036
TX packets:621 errors:0 dropped:0 overruns:0 carrier:9
collisions:10 txqueuelen:100
RX bytes:133281 (130.1 Kb) TX bytes:169101 (165.1 Kb)
Interrupt:5 Base address:0×220
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:73727 errors:0 dropped:0 overruns:0 frame:0
TX packets:73727 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:5037963 (4.8 Mb) TX bytes:5037963 (4.8 Mb)
[root@server /]#
- Test Ping ke Modem ADSL
[root@server /]# ping 192.168.0.1
PING 192.168.0.1 (192.168.0.1) 56(84) bytes of data.
64 bytes from 192.168.0.1: icmp_seq=1 ttl=64 time=9.75 ms
64 bytes from 192.168.0.1: icmp_seq=2 ttl=64 time=0.943 ms
64 bytes from 192.168.0.1: icmp_seq=3 ttl=64 time=0.936 ms
64 bytes from 192.168.0.1: icmp_seq=4 ttl=64 time=0.946 ms
— 192.168.0.1 ping statistics —
4 packets transmitted, 4 received, 0% packet loss, time 3029ms
rtt min/avg/max/mdev = 0.936/3.144/9.754/3.816 ms
[root@server /]#
- Test Ping eth0, eth1, eth2
[root@server /]# ping 192.168.0.2
PING 192.168.0.2 (192.168.0.2) 56(84) bytes of data.
64 bytes from 192.168.0.2: icmp_seq=1 ttl=64 time=0.259 ms
64 bytes from 192.168.0.2: icmp_seq=2 ttl=64 time=0.120 ms
64 bytes from 192.168.0.2: icmp_seq=3 ttl=64 time=0.121 ms
64 bytes from 192.168.0.2: icmp_seq=4 ttl=64 time=0.120 ms
— 192.168.0.2 ping statistics —
4 packets transmitted, 4 received, 0% packet loss, time 2997ms
rtt min/avg/max/mdev = 0.120/0.155/0.259/0.060 ms
[root@server /]# ping 192.168.1.1
PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
64 bytes from 192.168.1.1: icmp_seq=1 ttl=64 time=0.144 ms
64 bytes from 192.168.1.1: icmp_seq=2 ttl=64 time=0.114 ms
64 bytes from 192.168.1.1: icmp_seq=3 ttl=64 time=0.118 ms
— 192.168.1.1 ping statistics —
3 packets transmitted, 3 received, 0% packet loss, time 1998ms
rtt min/avg/max/mdev = 0.114/0.125/0.144/0.016 ms
[root@server /]# ping 10.10.10.1
PING 10.10.10.1 (10.10.10.1) 56(84) bytes of data.
64 bytes from 10.10.10.1: icmp_seq=1 ttl=64 time=0.171 ms
64 bytes from 10.10.10.1: icmp_seq=2 ttl=64 time=0.117 ms
64 bytes from 10.10.10.1: icmp_seq=3 ttl=64 time=0.107 ms
64 bytes from 10.10.10.1: icmp_seq=4 ttl=64 time=0.115 ms
— 10.10.10.1 ping statistics —
4 packets transmitted, 4 received, 0% packet loss, time 2997ms
rtt min/avg/max/mdev = 0.107/0.127/0.171/0.027 ms
[root@server /]#
- Setting Gateway
[root@server /]# vi /etc/sysconfig/network
NETWORKING=yes
HOSTNAME=localhost.localdomain
GATEWAY=192.168.0.1
- Setting dns (/etc/resolv.conf)
#search localdomain
search smkdmi.sch.id
nameserver 192.168.0.1
nameserver 202.134.0.155
- Aktifkan IP Forwarding
[root@server /]# vi /etc/sysctl.conf
# Kernel sysctl configuration file for Red Hat Linux
#
# For binary values, 0 is disabled, 1 is enabled. See sysctl(8) and
# sysctl.conf(5) for more details.
# Controls IP packet forwarding
net.ipv4.ip_forward = 1
# Controls source route verification
net.ipv4.conf.default.rp_filter = 1
# Controls the System Request debugging functionality of the kernel
kernel.sysrq = 0
# Controls whether core dumps will append the PID to the core filename.
# Useful for debugging multi-threaded applications.
kernel.core_uses_pid = 1
- Setting NAT
vi /etc/sysconfig/iptables
# Firewall configuration written by lokkit
# Manual customization of this file is not recommended.
# Note: ifup-post will punch the current nameservers through the
# firewall; such entries will *not* be listed here.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:RH-Lokkit-0-50-INPUT – [0:0]
-A INPUT -j RH-Lokkit-0-50-INPUT
-A FORWARD -j RH-Lokkit-0-50-INPUT
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp –dport 80 –syn -j ACCEPT
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp –dport 21 –syn -j ACCEPT
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp –dport 22 –syn -j ACCEPT
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp –dport 23 –syn -j ACCEPT
-A RH-Lokkit-0-50-INPUT -p udp -m udp -s 0/0 –sport 67:68 -d 0/0 –dport 67:68 -i eth0 -j ACCEPT
-A RH-Lokkit-0-50-INPUT -p udp -m udp -s 0/0 –sport 67:68 -d 0/0 –dport 67:68 -i eth1 -j ACCEPT
-A RH-Lokkit-0-50-INPUT -p udp -m udp -s 0/0 –sport 67:68 -d 0/0 –dport 67:68 -i eth2 -j ACCEPT
-A RH-Lokkit-0-50-INPUT -i lo -j ACCEPT
#mengaktifkan service sharing anta rip yg berbeda segmen.
-A RH-Lokkit-0-50-INPUT -i eth0 -j ACCEPT
-A RH-Lokkit-0-50-INPUT -i eth1 -j ACCEPT
-A RH-Lokkit-0-50-INPUT -i eth2 -j ACCEPT
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp –dport 0:1023 –syn -j REJECT
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp –dport 2049 –syn -j REJECT
-A RH-Lokkit-0-50-INPUT -p udp -m udp –dport 0:1023 -j REJECT
-A RH-Lokkit-0-50-INPUT -p udp -m udp –dport 2049 -j REJECT
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp –dport 6000:6009 –syn -j REJECT
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp –dport 7100 –syn -j REJECT
COMMIT
*nat
: OUTPUT ACCEPT [203:13706]
: POSTROUTING ACCEPT [198:13332]
: PREROUTING ACCEPT [5:831]
-A POSTROUTING -o eth0 -j SNAT –to-source 192.168.0.2
COMMIT
- Restart Iptables
[root@server root]# service iptables restart
Flushing all current rules and user defined chains: [ OK ]
Clearing all current rules and user defined chains: [ OK ]
Applying iptables firewall rules: [ OK ]
[root@server root]#
- Restart Network
# service network restart
Shutting down interface eth0: [ OK ]
Shutting down interface eth1: [ OK ]
Shutting down interface eth2: [ OK ]
Shutting down loopback interface: [ OK ]
Disabling IPv4 packet forwarding: [ OK ]
Setting network parameters: [ OK ]
Bringing up loopback interface: [ OK ]
Bringing up interface eth0: [ OK ]
Bringing up interface eth1: [ OK ]
Bringing up interface eth2: [ OK ]
- Test Koneksi internet
[root@server root]# ping yahoo.com
PING yahoo.com (69.147.114.224) 56(84) bytes of data.
64 bytes from b1.www.vip.re3.yahoo.com (69.147.114.224): icmp_seq=1 ttl=54 time=301 ms
64 bytes from b1.www.vip.re3.yahoo.com (69.147.114.224): icmp_seq=2 ttl=54 time=299 ms
64 bytes from b1.www.vip.re3.yahoo.com (69.147.114.224): icmp_seq=3 ttl=54 time=303 ms
64 bytes from b1.www.vip.re3.yahoo.com (69.147.114.224): icmp_seq=4 ttl=54 time=305 ms
— yahoo.com ping statistics —
87 packets transmitted, 86 received, 1% packet loss, time 86091ms
rtt min/avg/max/mdev = 288.826/298.175/306.978/5.130 ms
sumber:
http://ijaldmi.wordpress.com/2011/03/14/1-gateway-router-linux-redhat-9-0/
Kemudian kita langsung mengkonfigurasi router. Saya asumsikan di sini sistem operasi yang digunakan adalah Linux dengan kernel 2.6.x. Point penting dalam membuat NAT pada linux adalah iptables untuk penerapan NAT dan Masquerading. Lalu file sysctl.conf yang digunakan untuk melakukan forwarding. Berikut konfigurasinya,
- Pertama, tambahkan rule pada iptables. Buka file rc.local dengan perintah,
server:~# vim /etc/rc.local
- Kemudian tambahkan rule berikut ini sebelum baris exit 0. Rule ini memungkinkan NAT berjalan pada router dengan melakukan masquerading pada interface network yang mendapat aliran internet. -o adalah out interface yang berarti interface network yang mendapat aliran internet, atau interface keluar dari jaringan kita. Sesuaikan dengan layout Anda.
iptables -t NAT -A POSTROUTING -o eth0 -J MASQUERADE
- Setelah selesai, edit file sysctl.conf pada direktori etc dengan perintah,
router:~# vim /etc/sysctl.conf
- Jika belum ada, tambahkan baris berikut di dalam file tersebut. Jika sudah ada, ubah agar menjadi seperti dibawah ini. Hal ini memungkinkan kita untuk melakukan IP forwarding.
# Enable packet forwarding
net.ipv4.ip_forward = 1
- Reboot system. Selesai. :)
di redhat
1. Konfigurasi Gateway & Router
Adapun cara konfigurasi Gateway & Router Linux Redhat 9.0 adalah :
- Setting IP Modem ADSL = 192.168.0.1
- Setting IP eth0
# vi /etc/sysconfig/network-scripts/ifcfg-eth0 (u/ menulis/edit tekan tombol insert)
DEVICE=eth0
ONBOOT=yes
BOOTPROTO=static
NETWORK=192.168.0.0
BROADCAST=192.168.0.255
IPADDR=192.168.0.2
NETMASK=255.255.255.0
USERCTL=no
PEERDNS=no
TYPE=Ethernet
Simpan file dengan menekan tombol escape/Esc kemudian ketik :wq kemudian tekan enter
- Setting IP eth1
# vi /etc/sysconfig/network-scripts/ifcfg-eth1 (u/ menulis/edit tekan tombol insert)
DEVICE=eth1
BOOTPROTO=static
BROADCAST=192.168.1.255
IPADDR=192.168.1.1
NETMASK=255.255.255.0
NETWORK=192.168.1.0
ONBOOT=yes
USERCTL=no
PEERDNS=no
TYPE=Ethernet
Simpan file dengan menekan tombol escape/Esc kemudian ketik :wq kemudian tekan enter
- Setting IP eth2
# vi /etc/sysconfig/network-scripts/ifcfg-eth2 (u/ menulis/edit tekan tombol insert)
USERCTL=no
PEERDNS=no
TYPE=Ethernet
DEVICE=eth2
BOOTPROTO=static
ONBOOT=yes
IPADDR=10.10.10.1
NETMASK=255.255.255.0
NETWORK=10.10.10.0
BROADCAST=10.10.10.255
Simpan file dengan menekan tombol escape/Esc kemudian ketik :wq kemudian tekan enter
- Restart network
# service network restart
Shutting down interface eth0: [ OK ]
Shutting down interface eth1: [ OK ]
Shutting down interface eth2: [ OK ]
Shutting down loopback interface: [ OK ]
Disabling IPv4 packet forwarding: [ OK ]
Setting network parameters: [ OK ]
Bringing up loopback interface: [ OK ]
Bringing up interface eth0: [ OK ]
Bringing up interface eth1: [ OK ]
Bringing up interface eth2: [ OK ]
- Cek Konfigurasi Network
[root@server /]# ifconfig
eth0 Link encap:Ethernet HWaddr 00:A0:C9:0F:9D:6F
inet addr:192.168.0.2 Bcast:192.168.0.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:63 errors:0 dropped:0 overruns:0 frame:0
TX packets:89 errors:78 dropped:0 overruns:0 carrier:78
collisions:0 txqueuelen:100
RX bytes:4905 (4.7 Kb) TX bytes:15956 (15.5 Kb)
Interrupt:10 Base address:0xdcc0 Memory:fa000000-fa000038
eth1 Link encap:Ethernet HWaddr 00:C0:4F:CF:71:69
inet addr:192.168.1.1 Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1400 errors:0 dropped:0 overruns:0 frame:0
TX packets:802 errors:0 dropped:0 overruns:0 carrier:0
collisions:10 txqueuelen:100
RX bytes:180124 (175.9 Kb) TX bytes:185405 (181.0 Kb)
Interrupt:11 Base address:0xdc00
eth2 Link encap:Ethernet HWaddr 00:A0:24:6E:55:C1
inet addr:10.10.10.1 Bcast:10.10.10.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1051 errors:1036 dropped:0 overruns:0 frame:1036
TX packets:621 errors:0 dropped:0 overruns:0 carrier:9
collisions:10 txqueuelen:100
RX bytes:133281 (130.1 Kb) TX bytes:169101 (165.1 Kb)
Interrupt:5 Base address:0×220
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:73727 errors:0 dropped:0 overruns:0 frame:0
TX packets:73727 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:5037963 (4.8 Mb) TX bytes:5037963 (4.8 Mb)
[root@server /]#
- Test Ping ke Modem ADSL
[root@server /]# ping 192.168.0.1
PING 192.168.0.1 (192.168.0.1) 56(84) bytes of data.
64 bytes from 192.168.0.1: icmp_seq=1 ttl=64 time=9.75 ms
64 bytes from 192.168.0.1: icmp_seq=2 ttl=64 time=0.943 ms
64 bytes from 192.168.0.1: icmp_seq=3 ttl=64 time=0.936 ms
64 bytes from 192.168.0.1: icmp_seq=4 ttl=64 time=0.946 ms
— 192.168.0.1 ping statistics —
4 packets transmitted, 4 received, 0% packet loss, time 3029ms
rtt min/avg/max/mdev = 0.936/3.144/9.754/3.816 ms
[root@server /]#
- Test Ping eth0, eth1, eth2
[root@server /]# ping 192.168.0.2
PING 192.168.0.2 (192.168.0.2) 56(84) bytes of data.
64 bytes from 192.168.0.2: icmp_seq=1 ttl=64 time=0.259 ms
64 bytes from 192.168.0.2: icmp_seq=2 ttl=64 time=0.120 ms
64 bytes from 192.168.0.2: icmp_seq=3 ttl=64 time=0.121 ms
64 bytes from 192.168.0.2: icmp_seq=4 ttl=64 time=0.120 ms
— 192.168.0.2 ping statistics —
4 packets transmitted, 4 received, 0% packet loss, time 2997ms
rtt min/avg/max/mdev = 0.120/0.155/0.259/0.060 ms
[root@server /]# ping 192.168.1.1
PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
64 bytes from 192.168.1.1: icmp_seq=1 ttl=64 time=0.144 ms
64 bytes from 192.168.1.1: icmp_seq=2 ttl=64 time=0.114 ms
64 bytes from 192.168.1.1: icmp_seq=3 ttl=64 time=0.118 ms
— 192.168.1.1 ping statistics —
3 packets transmitted, 3 received, 0% packet loss, time 1998ms
rtt min/avg/max/mdev = 0.114/0.125/0.144/0.016 ms
[root@server /]# ping 10.10.10.1
PING 10.10.10.1 (10.10.10.1) 56(84) bytes of data.
64 bytes from 10.10.10.1: icmp_seq=1 ttl=64 time=0.171 ms
64 bytes from 10.10.10.1: icmp_seq=2 ttl=64 time=0.117 ms
64 bytes from 10.10.10.1: icmp_seq=3 ttl=64 time=0.107 ms
64 bytes from 10.10.10.1: icmp_seq=4 ttl=64 time=0.115 ms
— 10.10.10.1 ping statistics —
4 packets transmitted, 4 received, 0% packet loss, time 2997ms
rtt min/avg/max/mdev = 0.107/0.127/0.171/0.027 ms
[root@server /]#
- Setting Gateway
[root@server /]# vi /etc/sysconfig/network
NETWORKING=yes
HOSTNAME=localhost.localdomain
GATEWAY=192.168.0.1
- Setting dns (/etc/resolv.conf)
#search localdomain
search smkdmi.sch.id
nameserver 192.168.0.1
nameserver 202.134.0.155
- Aktifkan IP Forwarding
[root@server /]# vi /etc/sysctl.conf
# Kernel sysctl configuration file for Red Hat Linux
#
# For binary values, 0 is disabled, 1 is enabled. See sysctl(8) and
# sysctl.conf(5) for more details.
# Controls IP packet forwarding
net.ipv4.ip_forward = 1
# Controls source route verification
net.ipv4.conf.default.rp_filter = 1
# Controls the System Request debugging functionality of the kernel
kernel.sysrq = 0
# Controls whether core dumps will append the PID to the core filename.
# Useful for debugging multi-threaded applications.
kernel.core_uses_pid = 1
- Setting NAT
vi /etc/sysconfig/iptables
# Firewall configuration written by lokkit
# Manual customization of this file is not recommended.
# Note: ifup-post will punch the current nameservers through the
# firewall; such entries will *not* be listed here.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:RH-Lokkit-0-50-INPUT – [0:0]
-A INPUT -j RH-Lokkit-0-50-INPUT
-A FORWARD -j RH-Lokkit-0-50-INPUT
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp –dport 80 –syn -j ACCEPT
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp –dport 21 –syn -j ACCEPT
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp –dport 22 –syn -j ACCEPT
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp –dport 23 –syn -j ACCEPT
-A RH-Lokkit-0-50-INPUT -p udp -m udp -s 0/0 –sport 67:68 -d 0/0 –dport 67:68 -i eth0 -j ACCEPT
-A RH-Lokkit-0-50-INPUT -p udp -m udp -s 0/0 –sport 67:68 -d 0/0 –dport 67:68 -i eth1 -j ACCEPT
-A RH-Lokkit-0-50-INPUT -p udp -m udp -s 0/0 –sport 67:68 -d 0/0 –dport 67:68 -i eth2 -j ACCEPT
-A RH-Lokkit-0-50-INPUT -i lo -j ACCEPT
#mengaktifkan service sharing anta rip yg berbeda segmen.
-A RH-Lokkit-0-50-INPUT -i eth0 -j ACCEPT
-A RH-Lokkit-0-50-INPUT -i eth1 -j ACCEPT
-A RH-Lokkit-0-50-INPUT -i eth2 -j ACCEPT
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp –dport 0:1023 –syn -j REJECT
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp –dport 2049 –syn -j REJECT
-A RH-Lokkit-0-50-INPUT -p udp -m udp –dport 0:1023 -j REJECT
-A RH-Lokkit-0-50-INPUT -p udp -m udp –dport 2049 -j REJECT
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp –dport 6000:6009 –syn -j REJECT
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp –dport 7100 –syn -j REJECT
COMMIT
*nat
: OUTPUT ACCEPT [203:13706]
: POSTROUTING ACCEPT [198:13332]
: PREROUTING ACCEPT [5:831]
-A POSTROUTING -o eth0 -j SNAT –to-source 192.168.0.2
COMMIT
- Restart Iptables
[root@server root]# service iptables restart
Flushing all current rules and user defined chains: [ OK ]
Clearing all current rules and user defined chains: [ OK ]
Applying iptables firewall rules: [ OK ]
[root@server root]#
- Restart Network
# service network restart
Shutting down interface eth0: [ OK ]
Shutting down interface eth1: [ OK ]
Shutting down interface eth2: [ OK ]
Shutting down loopback interface: [ OK ]
Disabling IPv4 packet forwarding: [ OK ]
Setting network parameters: [ OK ]
Bringing up loopback interface: [ OK ]
Bringing up interface eth0: [ OK ]
Bringing up interface eth1: [ OK ]
Bringing up interface eth2: [ OK ]
- Test Koneksi internet
[root@server root]# ping yahoo.com
PING yahoo.com (69.147.114.224) 56(84) bytes of data.
64 bytes from b1.www.vip.re3.yahoo.com (69.147.114.224): icmp_seq=1 ttl=54 time=301 ms
64 bytes from b1.www.vip.re3.yahoo.com (69.147.114.224): icmp_seq=2 ttl=54 time=299 ms
64 bytes from b1.www.vip.re3.yahoo.com (69.147.114.224): icmp_seq=3 ttl=54 time=303 ms
64 bytes from b1.www.vip.re3.yahoo.com (69.147.114.224): icmp_seq=4 ttl=54 time=305 ms
— yahoo.com ping statistics —
87 packets transmitted, 86 received, 1% packet loss, time 86091ms
rtt min/avg/max/mdev = 288.826/298.175/306.978/5.130 ms
sumber:
http://ijaldmi.wordpress.com/2011/03/14/1-gateway-router-linux-redhat-9-0/
Tidak ada komentar:
Posting Komentar