Manipulasi ToS ICMP dan DNS di Mikrotik

Untitled Document

Memanipulasi ToS ICMP & DNS di MikroTik

Tujuan :

  • Memperkecil delay ping dari sisi klien ke arah Internet.

  • Mempercepat resolving hostname ke ip address.

Asumsi : Klien-klien berada pada subnet 192.168.1.0/24

  1. Memanipulasi Type of Service untuk ICMP Packet :
    > ip firewall mangle add chain=prerouting src-address=192.168.1.0/24 protocol=icmp action=mark-connection new-connection-mark=ICMP-CM passthrough=yes
    > ip firewall mangle add chain=prerouting connection-mark=ICMP-CM action=mark-packet new-packet-mark=ICMP-PM passthrough=yes
    > ip firewall mangle add chain=prerouting packet-mark=ICMP-PM action=change-tos new-tos=min-delay

  2. Memanipulasi Type of Service untuk DNS Resolving :
    >ip firewall mangle add chain=prerouting src-address=192.168.1.0/24 protocol=tcp dst-port=53 action=mark-connection new-connection-mark=DNS-CM passthrough=yes
    >ip firewall mangle add chain=prerouting src-address=192.168.1.0/24 protocol=udp dst-port=53 action=mark-connection new-connection-mark=DNS-CM passthrough=yes
    >ip firewall mangle add chain=prerouting connection-mark=DNS-CM action=mark-packet new-packet-mark=DNS-PM passthrough=yes
    > ip firewall mangle add chain=prerouting packet-mark=DNS-PM action=change-tos new-tos=min-delay

  3. Menambahkan Queue Type :
    >queue type add name=”PFIFO-64″ kind=pfifo pfifo-limit=64

  4. Mengalokasikan Bandwidth untuk ICMP Packet :
    >queue tree add name=ICMP parent=INTERNET packet-mark=ICMP-PM priority=1 limit-at=8000 max-limit=16000 queue=PFIFO-64

  5. Mengalokasikan Bandwidth untuk DNS Resolving :
    >queue tree add name=DNS parent=INTERNET packet-mark=DNS-PM priority=1 limit-at=8000 max-limit=16000 queue=PFIFO-64

  6. Good Luck!!

Tinggalkan Balasan

Isikan data di bawah atau klik salah satu ikon untuk log in:

Logo WordPress.com

You are commenting using your WordPress.com account. Logout / Ubah )

Gambar Twitter

You are commenting using your Twitter account. Logout / Ubah )

Foto Facebook

You are commenting using your Facebook account. Logout / Ubah )

Foto Google+

You are commenting using your Google+ account. Logout / Ubah )

Connecting to %s