Showing posts with label TKA. Show all posts
Showing posts with label TKA. Show all posts

Saturday, 15 November 2025

Set Mikrotik 2 ruang limit kecil

 /ip address add address=192.168.100.2/24 interface=ether1 comment="WAN"
/ip address add address=10.10.10.1/24 interface=ether2 comment="Ruang Komputer"
/ip address add address=10.10.20.1/24 interface=ether3 comment="Ruang Bahasa"

/ip dns set servers=8.8.8.8,1.1.1.1 allow-remote-requests=yes

/ip firewall nat
add chain=srcnat out-interface=ether1 action=masquerade comment="NAT ke internet"

/ip firewall filter
add chain=forward connection-state=established,related action=accept comment="allow established"
add chain=forward in-interface=ether2 out-interface=ether1 action=accept comment="ether2->WAN"
add chain=forward in-interface=ether3 out-interface=ether1 action=accept comment="ether3->WAN"

# DHCP Ruang Komputer
/ip pool add name=pool10 ranges=10.10.10.10-10.10.10.200
/ip dhcp-server add name=dhcp10 interface=ether2 address-pool=pool10 lease-time=1h
/ip dhcp-server network add address=10.10.10.0/24 gateway=10.10.10.1 dns-server=10.10.10.1

# DHCP Ruang Bahasa
/ip pool add name=pool20 ranges=10.10.20.10-10.10.20.200
/ip dhcp-server add name=dhcp20 interface=ether3 address-pool=pool20 lease-time=1h
/ip dhcp-server network add address=10.10.20.0/24 gateway=10.10.20.1 dns-server=10.10.20.1

/ip dhcp-server enable dhcp10
/ip dhcp-server enable dhcp20

/ip route add dst-address=0.0.0.0/0 gateway=192.168.100.1

/queue type
add name=pcq-download-fair kind=pcq pcq-classifier=dst-address
add name=pcq-upload-fair   kind=pcq pcq-classifier=src-address

/queue simple
add name="Komputer_All" target=10.10.10.0/24 max-limit=40M/10M limit-at=32M/8M queue=pcq-download-fair/pcq-upload-fair
add name="Bahasa_All"   target=10.10.20.0/24 max-limit=40M/10M limit-at=31M/8M queue=pcq-download-fair/pcq-upload-fair

Setting Mikrotik untuk TKA Online 2 Ruang

 ✅ LANGKAH 1 — Beri IP Address mikrotik ether 1 untuk WAN
/ip address add address=192.168.100.2/24 interface=ether1 comment="WAN"

✅ LANGKAH 2 — Beri IP Address untuk masing-masing ruang
/ip address
add address=10.10.10.1/24 interface=ether2 comment="Ruang Komputer"
add address=10.10.20.1/24 interface=ether3 comment="Ruang Bahasa"

✅ LANGKAH 3 — Set DNS Server pada MikroTik
/ip dns set servers=8.8.8.8,1.1.1.1 allow-remote-requests=yes

✅ LANGKAH 4 — Set NAT Masquerade (agar client bisa internet)
/ip firewall nat
add chain=srcnat out-interface=ether1 action=masquerade comment="NAT ke internet"

✅ LANGKAH 5 — Buat DHCP Server untuk ether2 dan ether3
#Ruang Komputer (10.10.10.0/24)
/ip pool add name=pool10 ranges=10.10.10.10-10.10.10.200
/ip dhcp-server add name=dhcp10 interface=ether2 address-pool=pool10 lease-time=1h
/ip dhcp-server network add address=10.10.10.0/24 gateway=10.10.10.1 dns-server=10.10.10.1

#Ruang Bahasa (10.10.20.0/24)
/ip pool add name=pool20 ranges=10.10.20.10-10.10.20.200
/ip dhcp-server add name=dhcp20 interface=ether3 address-pool=pool20 lease-time=1h
/ip dhcp-server network add address=10.10.20.0/24 gateway=10.10.20.1 dns-server=10.10.20.1

✅ LANGKAH 6 — Aktifkan DHCP Server untuk ether2 dan ether3
/ip dhcp-server enable dhcp10
/ip dhcp-server enable dhcp20

✅ LANGKAH 7 — Set default route ke IndiHome
/ip route
add dst-address=0.0.0.0/0 gateway=192.168.100.1

✅ LANGKAH 8 — Buat Queue Type PCQ (agar pembagian rata per-client)
/queue type
add name=pcq-download-fair kind=pcq pcq-classifier=dst-address pcq-rate=0
add name=pcq-upload-fair   kind=pcq pcq-classifier=src-address pcq-rate=0

tanpa pcq-rate=0 (pilih salah satu)
/queue type
add name=pcq-download-fair kind=pcq pcq-classifier=dst-address
add name=pcq-upload-fair   kind=pcq pcq-classifier=src-address

✅ LANGKAH 9 — Buat Simple Queue untuk masing-masing ruang
#Ruang Komputer (10.10.10.0/24)
/queue simple
add name="Komputer_All" target=10.10.10.0/24 \
    max-limit=40M/40M limit-at=32M/32M \
    queue=pcq-download-fair/pcq-upload-fair


#Ruang Bahasa (10.10.20.0/24)
add name="Bahasa_All" target=10.10.20.0/24 \
    max-limit=40M/40M limit-at=31M/31M \
    queue=pcq-download-fair/pcq-upload-fair

Monday, 3 November 2025

cek client lab komputer untuk tka

 $ sudo nmap -sn 10.10.10.0/24
Starting Nmap 7.94SVN ( https://nmap.org ) at 2025-11-03 09:32 WITA
Nmap scan report for _gateway (10.10.10.1)
Host is up (0.0071s latency).
MAC Address: E4:8D:8C:39:7E:6B (Routerboard.com)
Nmap scan report for 10.10.10.2
Host is up (0.0072s latency).
MAC Address: 84:16:F9:64:09:2A (TP-Link Technologies)
Nmap scan report for 10.10.10.115
Host is up (0.16s latency).
MAC Address: E8:FB:1C:5D:C6:1D (AzureWave Technology)
Nmap scan report for 10.10.10.117
Host is up (0.090s latency).
MAC Address: 14:D4:24:12:FC:73 (AzureWave Technology)
Nmap scan report for 10.10.10.118
Host is up (0.097s latency).
MAC Address: 76:58:08:B2:52:B5 (Unknown)
Nmap scan report for 10.10.10.121
Host is up (0.11s latency).
MAC Address: 68:7A:64:E4:58:36 (Intel Corporate)
Nmap scan report for 10.10.10.122
Host is up (0.10s latency).
MAC Address: 28:6B:35:3B:1E:B0 (Intel Corporate)
Nmap scan report for 10.10.10.123
Host is up (0.094s latency).
MAC Address: 94:E7:0B:E3:D8:3E (Intel Corporate)
Nmap scan report for 10.10.10.125
Host is up (0.0076s latency).
MAC Address: 50:7B:9D:33:DF:43 (LCFC(HeFei) Electronics Technology)
Nmap scan report for 10.10.10.126
Host is up (0.011s latency).
MAC Address: 68:F7:28:7C:EE:5E (LCFC(HeFei) Electronics Technology)
Nmap scan report for 10.10.10.127
Host is up (0.012s latency).
MAC Address: 68:F7:28:7C:E7:36 (LCFC(HeFei) Electronics Technology)
Nmap scan report for 10.10.10.128
Host is up (0.012s latency).
MAC Address: 50:7B:9D:33:DD:6B (LCFC(HeFei) Electronics Technology)
Nmap scan report for 10.10.10.129
Host is up (0.016s latency).
MAC Address: 68:F7:28:46:EF:D0 (LCFC(HeFei) Electronics Technology)
Nmap scan report for 10.10.10.134
Host is up (0.088s latency).
MAC Address: 00:0A:1D:08:0B:25 (Optical Communications Products)
Nmap scan report for 10.10.10.135
Host is up (0.088s latency).
MAC Address: 98:29:A6:94:E7:11 (Compal Information (Kunshan))
Nmap scan report for 10.10.10.136
Host is up (0.091s latency).
MAC Address: F4:4D:30:69:DB:1F (Elitegroup Computer Systems)
Nmap scan report for 10.10.10.139
Host is up (0.091s latency).
MAC Address: 00:04:0B:08:33:3B (3COM Europe)
Nmap scan report for 10.10.10.148
Host is up (0.091s latency).
MAC Address: 30:65:EC:C5:0A:F5 (Wistron (ChongQing))
Nmap scan report for 10.10.10.153
Host is up (0.091s latency).
MAC Address: 38:2C:4A:82:08:84 (ASUSTek Computer)
Nmap scan report for 10.10.10.154
Host is up (0.091s latency).
MAC Address: 68:F7:28:7C:F0:B5 (LCFC(HeFei) Electronics Technology)
Nmap scan report for 10.10.10.155
Host is up (0.091s latency).
MAC Address: 68:F7:28:7C:FA:9E (LCFC(HeFei) Electronics Technology)
Nmap scan report for 10.10.10.156
Host is up (0.091s latency).
MAC Address: F0:76:1C:51:EB:93 (Compal Information (Kunshan))
Nmap scan report for 10.10.10.157
Host is up (0.091s latency).
MAC Address: 68:F7:28:7C:FE:4C (LCFC(HeFei) Electronics Technology)
Nmap scan report for 10.10.10.158
Host is up (0.091s latency).
MAC Address: 9C:5A:44:87:BA:27 (Compal Information (Kunshan))
Nmap scan report for 10.10.10.167
Host is up (0.077s latency).
MAC Address: F8:75:A4:20:F8:75 (LCFC(HeFei) Electronics Technology)
Nmap scan report for 10.10.10.168
Host is up (0.099s latency).
MAC Address: 98:E7:43:11:62:5A (Dell)
Nmap scan report for 10.10.10.169
Host is up (0.085s latency).
MAC Address: 38:2C:4A:7F:D0:18 (ASUSTek Computer)
Nmap scan report for 10.10.10.172
Host is up (0.091s latency).
MAC Address: 38:2C:4A:7F:C0:DA (ASUSTek Computer)
Nmap scan report for 10.10.10.181
Host is up (0.10s latency).
MAC Address: 1C:39:47:E0:4A:97 (Compal Information (Kunshan))
Nmap scan report for 10.10.10.182
Host is up (0.10s latency).
MAC Address: 50:7B:9D:89:8E:D6 (LCFC(HeFei) Electronics Technology)
Nmap scan report for 10.10.10.183
Host is up (0.10s latency).
MAC Address: 9C:5A:44:87:C5:F8 (Compal Information (Kunshan))
Nmap scan report for 10.10.10.184
Host is up (0.13s latency).
MAC Address: 98:29:A6:94:EE:2A (Compal Information (Kunshan))
Nmap scan report for 10.10.10.186
Host is up (0.19s latency).
MAC Address: 30:65:EC:C5:0A:51 (Wistron (ChongQing))
Nmap scan report for 10.10.10.188
Host is up (0.19s latency).
MAC Address: 9C:5A:44:87:C5:2F (Compal Information (Kunshan))
Nmap scan report for 10.10.10.192
Host is up (0.19s latency).
MAC Address: 38:2C:4A:7F:C9:0A (ASUSTek Computer)
Nmap scan report for 10.10.10.195
Host is up (0.011s latency).
MAC Address: 98:29:A6:94:ED:80 (Compal Information (Kunshan))
Nmap scan report for 10.10.10.197
Host is up (0.18s latency).
MAC Address: 98:29:A6:94:EB:32 (Compal Information (Kunshan))
Nmap scan report for 10.10.10.199
Host is up (0.017s latency).
MAC Address: B8:AE:ED:2C:74:9C (Elitegroup Computer Systems)
Nmap scan report for dhwan-Aspire-A514-51K (10.10.10.120)
Host is up.
Nmap done: 256 IP addresses (39 hosts up) scanned in 49.61 seconds

Sunday, 12 October 2025

2 indihome TKA daring

 

Siap, Guru Duan. Berikut analisis per-IndiHome untuk skenario ujian online langsung ke server pusat dengan 2 router terpisah.

Ringkasan cepat

  • Asumsi performa tiap link (acuan speedtest): ≈ 88.6 Mbps down / 32.9 Mbps up.

  • Kebutuhan TKA: ≈ 0,4 Mbps per client (up & down).


A) IndiHome 162219201282 — 53 client

Komposisi: 47 LAN + 6 via AP

Kebutuhan minimum

  • Down: 53 × 0,4 = 21,2 Mbps

  • Up: 53 × 0,4 = 21,2 Mbps

Kapasitas vs kebutuhan

  • Down headroom: 88,6 / 21,2 ≈ 4,2× aman

  • Up headroom: 32,9 / 21,2 ≈ 1,55× aman → upload jadi batas terendah (tetap cukup)

Catatan teknis & saran

  1. Prioritaskan LAN (sudah 47 klien kabel, bagus). Pastikan semua port Gigabit (ONT ⇄ switch ⇄ PC).

  2. AP untuk 6 klien: 5 GHz only, 40 MHz, TX power medium (±17–18 dBm), channel berbeda dengan AP di Lab 3 (hindari co-channel).

  3. Aktifkan QoS/Smart Queue (jika ada) untuk fair-share upload saat submit massal.

  4. Blok/limit trafik non-ujian (Windows Update, OneDrive, YouTube) di jam ujian.

  5. DNS: pakai 1.1.1.1 / 8.8.8.8 jika resolusi lambat, tapi tetap pastikan domain TKA tidak diblok.

  6. Monitoring cepat:

    • Get-NetAdapter | ft Name,Status,LinkSpeed (Windows) → harus 1.0 Gbps

    • speedtest --server <ID terdekat> pagi/siang/sore untuk log performa

    • ping <host TKA> -n 50 target < 70 ms, 0% loss

Kesimpulan link A: cukup untuk 53 klien; upload pas-pas tapi masih ada margin. Jaga disiplin trafik agar spike upload tidak menyentuh 100%.


B) IndiHome 161219200007 — 30 client

Komposisi: semua via Ubiquiti UAP-AC-PRO (Wi-Fi 5 GHz)

Kebutuhan minimum

  • Down: 30 × 0,4 = 12 Mbps

  • Up: 30 × 0,4 = 12 Mbps

Kapasitas vs kebutuhan

  • Down headroom: 88,6 / 12 ≈ 7,4× aman

  • Up headroom: 32,9 / 12 ≈ 2,7× aman

Fokus utama: airtime Wi-Fi, bukan WAN.

Konfigurasi UAP-AC-PRO (penting)

  1. Band 5 GHz only, 40 MHz (jangan 80 MHz agar efisien multi-klien).

  2. Channel non-DFS (36/40/44/48); jangan sama dengan AP di link A.

  3. TX power: Medium (17–18 dBm) agar airtime efisien & klien tidak jauh-jauh.

  4. Min RSSI ≈ −75 dBm (opsional) untuk tendang klien sinyal lemah.

  5. Disable band steering saat ujian; pastikan semua tersambung ke 5 GHz.

  6. Target SNR per kursi > 25 dB (RSSI > −60 dBm ideal).

  7. Jika ruang luas/sekat tebal: tambah 1 AP kedua dan bagi 15-15 klien (SSID sama, channel berbeda). Untuk kebutuhan 12 Mbps total, 1 AP masih mencukupi bila penempatan & sinyal bagus.

Kesimpulan link B: sangat aman untuk 30 klien. Pastikan penempatan AP optimal dan hindari interferensi.


Validasi terakhir (pra-ujian, 10 menit)

  • Ping ke host TKA dari 3 PC acak per ruang (50 paket) → loss 0%, jitter rendah.

  • Speedtest singkat ke server terdekat (Banjarmasin/Surabaya/Telkom) dari 1 PC per link → pastikan upload > 25 Mbps saat idle.

  • Cek link speed di PC acak LAN → 1.0 Gbps.

  • Cek jumlah klien di dashboard UniFi/Controller → ≤ 30 di AC-PRO, RSSI rata-rata > −60 dBm.


Kesimpulan umum

  • 162219201282 (53 klien): aman; upload jadi faktor pembatas tapi masih >1,5× dari kebutuhan.

  • 161219200007 (30 klien via AC-PRO): aman; pastikan setting Wi-Fi 5 GHz optimal.

  • Dengan dua router terpisah, fault isolation bagus: jika satu link lemot, ruang lain tetap jalan.

Butuh checklist 1-halaman untuk teknisi hari-H (parameter AP, QoS, blokir update, langkah cek cepat)? Saya susunkan siap pakai.