Automatic by pass proxy mikrotik


Hal ini diperlukan apabila nantinya proxy di dalam jaringan kita mengalami gangguan (mati), sehingga client-client akan secara otomatis dapat ter bypass dari proxy dan terkoneksi langsung dengan menggunakan router.

Langkah ini digunakan apabila di dalam jaringan kita terintegerasi Proxy dan  dengan topologi sbb :

proxy-external-mikrotik

ISP : 117.74.120.242/30

Mikrotik :

Ether1 (ke ISP) : 117.74.120.242/30

Ether2 (ke Proxy) : 192.168.77.1/24

Ether3 (ke LAN) : 192.168.10.1/24

Proxy : 192.168.77.1/24

LAN : 192.168.10.0/24 (255.255.255.0)

Lansung aja ke scriptnya (untuk alamat network yang berbeda harap disesuaikan)

/ ip firewall nat

add chain=srcnat action=masquerade out-interface=”To ISP” \
src-address-list=local comment=”ISP to lokal nat” disabled=no

add chain=srcnat action=masquerade out-interface=”To ISP” \
src-address=192.168.77.1 comment=”proxy to ISP nat” disabled=no

add chain=dstnat action=dst-nat to-addresses=192.168.77.1 to-ports=3128 \
in-interface=”To LAN” dst-port=80 protocol=tcp src-address-list=local \
comment=”client force to proxy” disabled=no

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s