Untuk mengetahui cara kerja bandwidth control di MikroTik, akan dipelajari contoh yang sudah jalan di bawah ini. Tampaknya ada keterkaitan antara konfigurasi di Mangle dan di Queue. Dalam contoh ini telah dilakukan pemisahan bandwidth lokal IIX dengan bandwidth Internasional (non IIX). Bandwidth lokal IIX dikenali dari kumpulan IP Address yang ada di IIX. Jika mengakses IP-IP yang ada dalam kumpulan IP di IIX, maka dianggap bandwidth lokal IIX. Kumpulan IP yang ada di IIX dikenal dengan NICE. Nice selalu di-update oleh MikroTik. Saya belum tahu bagaimana cara mendapatkan nice dan memasukkannya ke dalam MikroTik.
Contoh Mangle :
[admin@MikroTik] > ip firewall mangle print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; Conn_IIX
chain=forward action=mark-connection new-connection-mark=Conn_IIX passthrough=yes
src-address-list=nice in-interface=2-Internet
1 ;;; Paket_IIX
chain=forward action=mark-packet new-packet-mark=Paket_IIX passthrough=no connection-mark=Conn_IIX
2 ;;; Conn_Warintek
chain=forward action=mark-connection new-connection-mark=Conn_Warintek passthrough=yes src-address-list=!nice in-interface=2-Internet out-interface=3-Warintek
3 ;;; Paket_Warintek
chain=forward action=mark-packet new-packet-mark=Paket_Warintek passthrough=yes connection-mark=Conn_Warintek
4 ;;; Conn_PPIN
chain=forward action=mark-connection new-connection-mark=Conn_PPIN passthrough=yes
src-address-list=!nice in-interface=2-Internet out-interface=4-PPIN
5 ;;; Paket_PPIN
chain=forward action=mark-packet new-packet-mark=Paket_PPIN passthrough=yes connection-mark=Conn_PPIN
6 ;;; Conn_SJK
chain=forward action=mark-connection new-connection-mark=Conn_SJK passthrough=yes
src-address-list=!nice in-interface=2-Internet out-interface=5-PKTN
7 ;;; Paket_SJK
chain=forward action=mark-packet new-packet-mark=Paket_SJK passthrough=yes connection-mark=Conn_SJK
8
chain=output action=mark-connection new-connection-mark=Proxy_Warintek passthrough=yes protocol=tcp src-address=192.168.23.1 src-port=8080
9
chain=output action=mark-packet new-packet-mark=Paket_Proxy_Warintek passthrough=yes connection-mark=Proxy_Warintek
10
chain=output action=mark-connection new-connection-mark=Proxy_PPIN passthrough=yes protocol=tcp src-address=192.168.11.1 src-port=8080
11
chain=output action=mark-packet new-packet-mark=Paket Proxy_PPIN passthrough=yes connection-mark=Proxy_PPIN
12
chain=output action=mark-connection new-connection-mark=Proxy_SJK passthrough=yes protocol=tcp src-address=192.168.21.1 src-port=8080
13
chain=output action=mark-packet new-packet-mark=Paket_Proxy_SJK passthrough=yes connection-mark=Proxy_SJK
14 ;;; Upload_Int
chain=prerouting action=mark-connection new-connection-mark=Upload_Int passthrough=yes dst-address-list=!nice
15 ;;; Paket_Upload_Int
chain=prerouting action=mark-packet new-packet-mark=Paket_Upload_Int passthrough=no
connection-mark=Upload_Int
16 ;;; Upload_IIX
chain=prerouting action=mark-connection new-connection-mark=Upload_IIX passthrough=yes dst-address-list=nice
17 ;;; Paket_Upload_IIX
chain=prerouting action=mark-packet new-packet-mark=Paket_Upload_IIX passthrough=no
connection-mark=Upload_IIX
18
chain=output action=mark-connection new-connection-mark=Proxy_PPIN passthrough=yes protocol=tcp src-address=192.168.17.1 src-port=8080
[admin@MikroTik] >
Contoh Queue Tree :
[admin@MikroTik] > queue tree print
Flags: X - disabled, I - invalid
0 name="Q Warintek" parent=global-out packet-mark=Paket_Warintek limit-at=0 queue=pcq-dl priority=8 max-limit=256000 burst-limit=0 burst-threshold=0 burst-time=0s
1 name="Q PPIN" parent=global-out packet-mark=Paket_PPIN limit-at=0 queue=pcq-dl priority=8 max-limit=1024000 burst-limit=2048000 burst-threshold=0 burst-time=90s
2 name="Q PKTN" parent=global-out packet-mark=Paket_PKTN limit-at=0 queue=default priority=8 max-limit=256000 burst-limit=1024000 burst-threshold=0 burst-time=90s
3 name="Q IIX" parent=global-out packet-mark=Paket_IIX limit-at=0 queue=pcq-dl priority=8 max-limit=4096000 burst-limit=0 burst-threshold=0 burst-time=0s
4 name="Q Upload Int" parent=global-in packet-mark=Paket_Upload_Int limit-at=0 queue=pcq-ul priority=8 max-limit=512000 burst-limit=0 burst-threshold=0 burst-time=0s
5 name="Q Upload IIX" parent=global-in packet-mark=Paket_Upload_IIX limit-at=0 queue=pcq-ul priority=8 max-limit=2048000 burst-limit=0 burst-threshold=0 burst-time=0s
[admin@MikroTik]>
Lihat juga :
http://www.mikrotik.co.id/artikel_lihat.php?id=21
No comments:
Post a Comment