BRIDGE. Divisi Training Departemen Teknik PT UFOAKSES SUKSES LUARBIASA Jakarta

Ukuran: px

Mulai penontonan dengan halaman:

Download "BRIDGE. Divisi Training Departemen Teknik PT UFOAKSES SUKSES LUARBIASA Jakarta"

Sri Sudjarwadi
7 tahun lalu
Tontonan:

1 BRIDGE Divisi Training Departemen Teknik PT UFOAKSES SUKSES LUARBIASA Jakarta

2 Bridge Mengabungkan 2 atau lebih interface Mengaktifkan bridge pada 2 buah interface akan menonaktifkan fungsi routing di antara kedua interface tersebut. Proses pada layer data link Sebagian diimplementasikan pada wireless network karena : Lebih mudah dibuat Perangkat wireless umumnya tidak mendukung routing

3 System Bridge

4 Bridge Interface Berikut interface yang dapat di dibridge : Ethernet ( ) VLAN Merupakan bagian dari ethernet atau wiriless int. Jangan melakukan bridge sebuah vlan dengan interface induknya Wireless AP WDS EoIP Untuk Wireless client harus pake WDS

5 Perhatian Kita tidak harus memasang ip address pada sebuah bridge Jika kita tidak menonaktifkan bridge pada ip address yang terpasang pada bridge akan invalid Beban trafik pada setiap perangkat akan berat karena terjadi akumulasi trafik.

6 Membuat Bridge Membuat interface bridge Memasukkan interface ethernet ke interface bridge Pastikan ip address berada dalam satu segmen

7 Bridge di Winbox

8 Assigning Ports to the Bridge

9 Port yang dibridge

10 Interface sebelum dibridge

11 Interface setelah dibridge

12 Bridge Monitoring

13 Bridge Loop Jika terdapat dua atau lebih jalur yang berada dalam sebuah network bridge hati2x terjadi bridge loop Untuk itu dipakai STP ( spanning Tree Protokol )

14 Spanning Tree Protocol The Spanning Tree Protocol (STP) Is defined by IEEE Standard 802.1D Provides a loop free topology for any bridged LAN Discovers an optimal spanning tree within the mesh network and disables the links that are not part of the tree, thus eliminating bridging loops

15 STP Action

16 STP Root Bridge Lowest priority Lowest ID (MAC address) Central point of the topology Each bridge calculates shortest path to the Root Bridge

17 Spanning Tree

18 Set STP

19 Rapid Spanning Tree Protocol Rapid Spanning Tree Protocol (RSTP) is an evolution of the STP provides for faster spanning tree convergence after a topology change than STP rstp-bridge-test package is required for the RSTP feature to be available in RouterOS

20 RSTP Bridge Port Roles Lowest priority for looped ports Root port a path to the root bridge Alternative port backup root port Designated port forwarding port Backup port backup designated port

21 Routed Networks vs Bridging Routers do not forward broadcast frames Communication loops and their resultant broadcast storms are no longer a design issue in routed networks Redundant media and meshed topologies can offer traffic load sharing and more robust fault tolerance than bridged network topologies

22 Bridge Firewall The bridge firewall implements packet filtering and thereby provides security functions that are used to manage data flow to, from and through bridge Elements of bridge firewall are: Bridge Filter Bridge Network Address Translation (NAT) Bridge Broute

23 Bridge Filter Bridge filter has three predefined chains, input, forward, and output Example application is filtering broadcast traffic

24 Bridge NAT Memungkinkan kita untuk melakukan pengubahan mac address untuk trafik yang melalui bridge,baik mac address asal maupun tujuan Bridge NAT menggunakan ARP Ada 2 buah chain Src-nat : mengubah mac address asal Dst-nat : mengubah mac address tujuan

25 Bridge Broute Bridge Broute makes bridge a brouter - router that performs routing on some of the packets, and bridging on others has one predefined chain, brouting, which is traversed right after a packet enters an enslaved interface before "Bridging Decision For example, IP can be routed, and everything else bridged (IPX)

26 Blok Icmp pada bridge

27 Bridge filter di winbox

29 Workshop

30 Konfigurasi Pada Router 1 bikin bridge, dan masukkan semua interface ke dalam bridge Wireless client tidak bisa di bridge gunakan WDS Pada Router 2 aktifkan web proxy Trafik http dialihkan melalui proxy Pada Router 2 laukan redirecting sehingga port 80 dialihkan ke port 8080

31 Setting bridge nat Chain : dstnat Interface ether3 Mac protokol = ip /ip/dst address= /0 dst-port=80 protocol=tcp Action =dst-nat To mac-address=00:89:00

32 Testing Apakah ada data yang lewat pada web-proxy? Apakah ada trafik pada ether3 di router 1?

33 Bridge Wireless WDS feature Using EoIP

34 Bridge di Wireless

35 Create a bridge interface on AP and add ether1 interface to the bridge in WinBox

37 Do the same on the Station, and add ether1, wlan1 interfaces to the bridge in Winbox

38 Make sure you have communication between MikroTik routers, i.e., one router is configured as server (AP), the other one as client (station). Configure wireless interface wlan1 on AP in WinBox

39 Do the same configuration on Client wireless interface (wlan1) in Winbox

40 Create wds interface on AP and add the interface to the bridge in WinBox

41 Check whether the WDS link is established in WinBox

42 Add IP address on AP in WinBox

43 ip address add address= /24 interface=wds-bridge ip address add address= /24 interface=wds-bridge

44 NOTE: If not using NAT/MANGLE nor anything doing with conntrack, remember to turn of it at both link ends. In the console: ip firewall connection tracking set enabled=no This will help you get the full bandwidth the wireless link can achive freeing the CPU load.

dokumen-dokumen yang mirip

Certified Network Associate ( MTCNA ) Modul 6

Certified Network Associate ( MTCNA ) Modul 6 Firewall Firewall Sebuah layanan keamanan jaringan yang melindungi jaringan Internal dari jaringan Eksternal. Contoh : Internet Berposisi ditengah tengah antara