Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection...
Transcript of Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection...
![Page 1: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/1.jpg)
MUM Indonesia, April 2011
Jakarta
Practice Managing Internet Connection
Campus Network Area (CAN)
With Firewall & Address List
MikroTik Router
© MUM 2011
By Juniar Sinaga
![Page 2: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/2.jpg)
Speaker Profile
Studied Pasca Sarjana major of MIS, STMIK Nusa
Mandiri, Jakarta.
Have been working on campus Bina Sarana
Informatika ( BSI) since 2004.
Lecturer in Computer Technic on BSI.
IT Support & Maintenance on BSI.
Using MikroTik Router OS since June 2010.
[email protected]© MUM 2011
![Page 3: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/3.jpg)
“Computer network made up of an interconnection of
local area networks (LAN's) within a limited
geographical area”.
Terdiri dari interkoneksi jaringan area lokal (LAN)
dalam wilayah geografis yang terbatas.
Pengembangan jaringan LAN yang mencakup satu
kampus yang lebih luas dan terintegrasi.
CAN (Campus Area Network) Concept
© MUM 2011
![Page 4: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/4.jpg)
CAN (Campus Network) Concept
Universitas atau kampus yang berbasis
networking dan memungkinkan untuk
menghubungkan beberapa bangunan kampus
seperti:
Departemen / fakultas akademik.
Perpustakaan ( Library).
Laboratorium (Lab).
Branch ( Cabang Kampus).
© MUM 2011
![Page 5: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/5.jpg)
Characteristics of CAN
Devices interconnected.
Sharing of resources.
Remote acces connection.
Hotspot area.
Ect.
© MUM 2011
![Page 6: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/6.jpg)
Infrastructure Of CAN
© MUM 2011
![Page 7: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/7.jpg)
Problem On Network Area Campus
Troubled for maintenance.
Free access for illegal site
(porn ,sex, ect).
Free streaming and downloading
illegal video.
Hacking the router.
© MUM 2011
![Page 8: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/8.jpg)
How to Solve ?
Manage internet connection using Firewall
for:
Drop illegal traffic.
Restrict access to the network services.
Protect local traffic.
Limit access to the router with WB.
© MUM 2011
![Page 9: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/9.jpg)
Targets
Controlling Internet Traffic:
Streaming and downloading.
Social networking.
Reducing internet bandwidth.
Increasing router performance.
“INSAN (Internet Sehat Dan Aman) Goes
To Campus”.
Supporting “Cloud Computing” technology.
© MUM 2011
![Page 10: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/10.jpg)
Which firewall will be used?
© MUM 2011
![Page 11: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/11.jpg)
MikroTik Firewall & Address List
Easy to manage system.
Just 2 Action, enjoy your rule.
Fully optimizes your network usage.
Use stateful firewall.
![Page 12: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/12.jpg)
Stateful firewall
© MUM 2011
![Page 13: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/13.jpg)
Address Lists
“Address lists was introduced to assign multiple
IP addresses/ranges to the same firewall rule, in
this way reducing the total number of firewall
rules and increasing router performance”
“Address diperkenalkan untuk menetapkan beberapa
alamat IP /range IP untuk aturan firewall yang sama,
mengurangi banyaknya rule pada firewall, sehingga
meningkatkan kinerja router”.
© MUM 2011
![Page 14: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/14.jpg)
Basic Network Topology
Proxy Server MT
Intranet Server
Switch HSP
Switch LAN
Hotspot Area
LAN Area
Internet
Modem ADSL
AP
Proxy Server MT
Switch LAN
FO Modem Central Campus
CAN (Campus Area Network)
© MUM 2011
![Page 15: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/15.jpg)
Skenario IP Address
© MUM 2011
Modem IP : (118.96.x.y)
LAN IP : 172.16.x.0/22
HSP IP : 10.10.y.0/24
![Page 16: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/16.jpg)
Drop/Block site with Firewall MT
using content.
Just 2 Action…
1. Create Mangle.
2. Drop / block with Firewall filter .
© MUM 2011
![Page 17: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/17.jpg)
Mangle create for drop YT
© MUM 2011
![Page 18: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/18.jpg)
Block With Content
![Page 19: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/19.jpg)
Action in mangle
© MUM 2011
![Page 20: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/20.jpg)
Filter rule for block YT
© MUM 2011
![Page 21: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/21.jpg)
Destination address list
© MUM 2011
![Page 22: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/22.jpg)
Action to drop youtube
© MUM 2011
![Page 23: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/23.jpg)
Output Firewall filt rule
© MUM 2011
![Page 24: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/24.jpg)
Drop/Block Acces WB With Address List
Just 2 Action…
1. Create Address list for block .
2. Drop with Firewall filter .
© MUM 2011
![Page 25: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/25.jpg)
Address List
© MUM 2011
![Page 26: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/26.jpg)
Create firewall filt for drop WB
© MUM 2011
![Page 27: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/27.jpg)
Address list “deny access winbox”
© MUM 2011
![Page 28: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/28.jpg)
Drop access WB with firewall filt
© MUM 2011
![Page 29: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/29.jpg)
Drop access WB from HSP
© MUM 2011
![Page 30: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/30.jpg)
Conclusion
Mikrotik Firewall & address list, easy setup and
configure.
MT Firewall is easy, simple, and practice to drop
/block site (Just 2 Action, enjoy your blocking ).
MT Firewall easy to protect router from ext and
int network.
Another technic to block site with MT using
WebProxy.
© MUM 2011
![Page 31: Practice Managing Internet Connection Campus Network … · Practice Managing Internet Connection Campus Network Area (CAN) ... (LAN's) within a limited ... Laboratorium (Lab).](https://reader031.fdocuments.us/reader031/viewer/2022022606/5b7fc5097f8b9a4c098c8c60/html5/thumbnails/31.jpg)
Reference
http://www.mikrotik.com/testdocs/ros/3.0/refman3.0.pdf
http://wiki.mikrotik.com/wiki/Dmitry_on_firewalling
http://en.wikipedia.org/wiki/Green_computing
http://en.wikipedia.org/wiki/Computer_network#Campus_network
© MUM 2011