#. Konfig Trunk dan Access Port di non swich chip,
Contoh perangkat : Mikrotik CCR 1007
Topologi :
1. Buat Vlan
/interface vlan
add interface=combo1 name=vlan-vpn-344 vlan-id=344
add interface=combo1 name=vlan-metro-230 vlan-id=230
2. Buat bridge vlan, dan masukkan port tagged(interface sebagai trunk) dan untagged(access)
/interface bridge vlan
add bridge=trunk-to-isp comment=port-access-metro tagged=combo1 untagged=ether1,ether2,ether4 vlan-ids=230
add bridge=trunk-to-isp comment=port-access-vpn tagged=combo1 untagged=ether3 vlan-ids=344
3. Tambahkan interface ke bridge beserta pvidnya
/interface bridge port
add bridge=trunk-to-isp interface=combo1
add bridge=trunk-to-isp interface=ether1 pvid=230
add bridge=trunk-to-isp interface=ether2 pvid=230
add bridge=trunk-to-isp interface=ether3 pvid=344
# Allow Vlan di Mikrotik Router dengan Switch Chip
Contoh perangkat : Mikrotik RB2011
1. Buat Bridgenya
/interface bridge
add name=Trunk-To-ISP protocol-mode=none
/interface bridge port
add bridge=Trunk-To-ISP interface=ether2
add bridge=Trunk-To-ISP interface=ether3
add bridge=Trunk-To-ISP interface=ether4
/interface ethernet switch vlan
add independent-learning=yes ports=ether1,ether2,ether4,switch1-cpu switch=switch1 vlan-id=230
add independent-learning=yes ports=ether1,ether3.switch1-cpu switch=switch1 vlan-id=344
/interface ethernet switch port
set ether1 vlan-header=add-if-missing vlan-mode=secure
set ether2 default-vlan-id=175 vlan-header=always-strip vlan-mode=secure
set ether3 default-vlan-id=175 vlan-header=always-strip vlan-mode=secure
set ether4 default-vlan-id=175 vlan-header=always-strip vlan-mode=secure
set 11 vlan-mode=secure
Contoh perangkat : Mikrotik CCR 1007
Topologi :
1. Buat Vlan
/interface vlan
add interface=combo1 name=vlan-vpn-344 vlan-id=344
add interface=combo1 name=vlan-metro-230 vlan-id=230
2. Buat bridge vlan, dan masukkan port tagged(interface sebagai trunk) dan untagged(access)
/interface bridge vlan
add bridge=trunk-to-isp comment=port-access-metro tagged=combo1 untagged=ether1,ether2,ether4 vlan-ids=230
add bridge=trunk-to-isp comment=port-access-vpn tagged=combo1 untagged=ether3 vlan-ids=344
3. Tambahkan interface ke bridge beserta pvidnya
/interface bridge port
add bridge=trunk-to-isp interface=combo1
add bridge=trunk-to-isp interface=ether1 pvid=230
add bridge=trunk-to-isp interface=ether2 pvid=230
add bridge=trunk-to-isp interface=ether3 pvid=344
# Allow Vlan di Mikrotik Router dengan Switch Chip
Contoh perangkat : Mikrotik RB2011
1. Buat Bridgenya
/interface bridge
add name=Trunk-To-ISP protocol-mode=none
/interface bridge port
add bridge=Trunk-To-ISP interface=ether2
add bridge=Trunk-To-ISP interface=ether3
add bridge=Trunk-To-ISP interface=ether4
/interface ethernet switch vlan
add independent-learning=yes ports=ether1,ether2,ether4,switch1-cpu switch=switch1 vlan-id=230
add independent-learning=yes ports=ether1,ether3.switch1-cpu switch=switch1 vlan-id=344
/interface ethernet switch port
set ether1 vlan-header=add-if-missing vlan-mode=secure
set ether2 default-vlan-id=175 vlan-header=always-strip vlan-mode=secure
set ether3 default-vlan-id=175 vlan-header=always-strip vlan-mode=secure
set ether4 default-vlan-id=175 vlan-header=always-strip vlan-mode=secure
set 11 vlan-mode=secure
loading...
Comments
Post a Comment