MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS...
Transcript of MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS...
![Page 1: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/1.jpg)
Citraweb Solusi Teknologi, Indonesia
www.mikrotik.co.id
MikroTik RouterOS Switch Feature
![Page 2: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/2.jpg)
![Page 3: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/3.jpg)
Perkenalan
www.mikrotik.co.id
• Pujo Déwobroto • Citraweb Solusi Teknologi
– Mikrotik distributor, training partner (mikrotik.co.id)
– ISP (citra.net.id) – Web developer
(citra.web.id)
• TR0132
![Page 4: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/4.jpg)
www.mikrotik.co.id 4
![Page 5: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/5.jpg)
Router != Switch
Router Switch
OSI Layer 3 OSI Layer 2
IP ADDRESS MAC ADDRESS
PAKET FRAME
www.mikrotik.co.id 5
![Page 6: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/6.jpg)
Bridge !== Switch
Bridge Switch
Software Hardware
Semua ROS (RB & PC)
Routerboard tertentu
Lambat Cepat
www.mikrotik.co.id 6
![Page 7: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/7.jpg)
Bridge !== Switch (2)
www.mikrotik.co.id 7
BRIDGE
BRIDGE SWITCH
![Page 8: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/8.jpg)
Logika Switch Chip
www.mikrotik.co.id 8
2
1
4
3
6
5
8
7
10
9
12
11
14
13
16
15
18
17
20
19
22
21
24
23
18
17
20
19
22
21
24
23
2
1
4
3
6
5
8
7
10
9
12
11
14
13
16
15
ether2-ether16 diset masterport=ether1
1
X
CPU Controlled Bridging, Routing, Firewall, dll
CPU Controlled Bridging, Routing, Firewall, dll
Switch Chip Controlled Switching, VLAN, ACL, dll
X = Switch - CPU Port = masterport 1
![Page 9: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/9.jpg)
Master Port - CPU Port • Master port merupakan penghubung antara
interface pada RouterOS dengan interface virtual "Switch-CPU Port" pada switch
• Pada CRS, support multiple "master-port" untuk membentuk banyak switch group dan setiap interface hanya bisa berada dalam 1 switch group. Tetapi fitur Switching tidak akan maximal.
• Rekomendasi hanya menggunakan 1 master-port untuk semua interface
www.mikrotik.co.id 9
![Page 10: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/10.jpg)
Fitur MikroTik Switch CRS125series* • Forwarding
– Full non-blocking Wirespeed switching • Mirroring
– Port, VLAN, MAC based mirroring • VLAN
– Support 802.1Q & 802.1ad – Flexible ( Port, Protocol, MAC based VLAN)
• Port Isolation & leakage • Trunking
– Support Link Aggregation Group – Hardware automatic failover & loadbalance
• QoS, Shaping & Scheduling • Access Control List*
www.mikrotik.co.id 10 *Tergantung tipe switch chip
![Page 11: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/11.jpg)
Contoh 1 - Simple Switch
www.mikrotik.co.id 11
192.168.1.2/24
192.168.1.2/24
192.168.1.3/24
PC to PC Full wire Speed PC to internet slower
![Page 12: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/12.jpg)
Contoh 1 - Simple Switch
www.mikrotik.co.id 12
/interface ethernet set ether3 master-port=ether2 set ether5 master-port=ether2 set ether7 master-port=ether2 /ip address add address=192.168.1.1/24 interface=ether2 DHCP server, Hotspot server dsb bisa diterapkan di Ether2
192.168.1.2/24
192.168.1.2/24
192.168.1.3/24
![Page 13: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/13.jpg)
untag vlan1
untag vlan2
untag vlan1
Contoh 2 - Port Based VLAN (1)
www.mikrotik.co.id 13
R1
192.168.1.2/24
172.16.2.2/24
192.168.1.3/24
tagged vlan1 tagged vlan2
![Page 14: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/14.jpg)
untag vlan2
untag vlan1
Contoh 2 - Port Based VLAN (2)
www.mikrotik.co.id 14
R1
R1 /interface vlan add interface=ether2 name=vlan1 vlan-id=1 add interface=ether2 name=vlan2 vlan-id=2 /ip address add address=192.168.1.1/24 interface=vlan1 add address=172.16.2.1/24 interface=vlan2
192.168.1.2/24
172.16.2.2/24
192.168.1.3/24 untag vlan1
tagged vlan1 tagged vlan2
![Page 15: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/15.jpg)
• Ether1 CRS berfungsi sebagai trunk port / tagged port
• Ether3 dan Ether7 CRS berfungsi sebagai access port / untagged port dari vlan-id=1
• Ether5 CRS berfungsi sebagai access port / untagged port dari vlan-id=2
• Perangkat dengan vlan-id=1 sudah berbeda broadcast domain dengan perangkat vlan-id=2
www.mikrotik.co.id 15
Contoh 2 - Port Based VLAN (3)
![Page 16: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/16.jpg)
www.mikrotik.co.id 16
Contoh 2 - Port Based VLAN (4)
Definisikan membership vlan di masing-masing port
![Page 17: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/17.jpg)
www.mikrotik.co.id 17
Contoh 2 - Port Based VLAN (5) Egress-vlan-tag untuk
mendefinisikan egress port yang butuh menggunakan vlan tag Jika "tagged-port" tidak cocok maka vlan tag akan diremove
![Page 18: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/18.jpg)
www.mikrotik.co.id 18
Contoh 2 - Port Based VLAN (6)
Ingress-Vlan-translation, digunakan untuk memodifikasi frame yang masuk ke Switch dari sebuah port
![Page 19: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/19.jpg)
www.mikrotik.co.id 19
Contoh 2 - Port Based VLAN (7)
Disable forward-invalid-vlan untuk memblok semua frame yang tidak kita definisikan di vlan table (security purpose) Lakukan ini setelah yakin semua vlan sudah berjalan!!
![Page 20: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/20.jpg)
Switch LOGIC
www.mikrotik.co.id 20
DST MAC
6
SRC MAC
6
ETH TYPE
2
DATA PAYLOAD 46-1500
FCS 4
DST MAC
6
SRC MAC
6
ETH TYPE
2
DATA PAYLOAD 42-1500
FCS 4
802.1Q 4
access port / untagged port
trunk port / tagged port
![Page 21: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/21.jpg)
Logika CRS (1)
www.mikrotik.co.id 21
Ingress-vlan-trans
VLAN
Table
Egress-vlan-trans
Egress-vlan-tag
INGRESS
EGRESS
PORT
PORT
![Page 22: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/22.jpg)
Logika CRS (2)
www.mikrotik.co.id 22
Ingress-vlan-trans
VLAN
Table
Egress-vlan-trans
Egress-vlan-tag
INGRESS
EGRESS
ETH1
PORT
R1 tagged to PC untagged vid=1
DA SA L3 DATA ID 1
![Page 23: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/23.jpg)
Logika CRS (3)
www.mikrotik.co.id 23
Ingress-vlan-trans
VLAN
Table
Egress-vlan-trans
Egress-vlan-tag
INGRESS
EGRESS
ETH1
PORT
R1 tagged to PC untagged vid=1
DA SA L3 DATA ID 1
![Page 24: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/24.jpg)
Logika CRS (4)
www.mikrotik.co.id 24
Ingress-vlan-trans
VLAN
Table
Egress-vlan-trans
Egress-vlan-tag
INGRESS
EGRESS
ETH1
PORT
R1 tagged to PC untagged vid=1
DA SA L3 DATA ID 1
diteruskan ke egress port
![Page 25: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/25.jpg)
Logika CRS (5)
www.mikrotik.co.id 25
Ingress-vlan-trans
VLAN
Table
Egress-vlan-trans
Egress-vlan-tag
INGRESS
EGRESS
ETH1
ETH3
R1 tagged to PC untagged vid=1
DA SA L3 DATA ID 1
diteruskan ke egress port
![Page 26: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/26.jpg)
Logika CRS (6)
www.mikrotik.co.id 26
Ingress-vlan-trans
VLAN
Table
Egress-vlan-trans
Egress-vlan-tag
INGRESS
EGRESS
ETH1
ETH3
R1 tagged to PC untagged vid=1
DA SA L3 DATA ID 1
vlan tag dihapus
![Page 27: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/27.jpg)
Logika CRS (7)
www.mikrotik.co.id 27
Ingress-vlan-trans
VLAN
Table
Egress-vlan-trans
Egress-vlan-tag
INGRESS
EGRESS
ETH1
ETH3
R1 tagged to PC untagged vid=1
DA SA L3 DATA
![Page 28: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/28.jpg)
Logika CRS (8)
www.mikrotik.co.id 28
Ingress-vlan-trans
VLAN
Table
Egress-vlan-trans
Egress-vlan-tag
INGRESS
EGRESS
ETH1
ETH3
R1 tagged to PC untagged vid=1
DA SA L3 DATA
![Page 29: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/29.jpg)
Logika CRS (9)
www.mikrotik.co.id 29
Ingress-vlan-trans
VLAN
Table
Egress-vlan-trans
Egress-vlan-tag
INGRESS
EGRESS
ETH1
ETH3
R1 tagged to PC untagged vid=1
DA SA L3 DATA
![Page 30: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/30.jpg)
Logika CRS (10)
www.mikrotik.co.id 30
Ingress-vlan-trans
VLAN
Table
Egress-vlan-trans
Egress-vlan-tag
INGRESS
EGRESS
ETH3
PORT
Untagged PC ke R1 tagged vid=1
DA SA L3 DATA
![Page 31: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/31.jpg)
Logika CRS (11)
www.mikrotik.co.id 31
Ingress-vlan-trans
VLAN
Table
Egress-vlan-trans
Egress-vlan-tag
INGRESS
EGRESS
ETH3
PORT
Untagged PC ke R1 tagged vid=1
DA SA L3 DATA
VLAN tag ditambahkan
![Page 32: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/32.jpg)
Logika CRS (12)
www.mikrotik.co.id 32
Ingress-vlan-trans
VLAN
Table
Egress-vlan-trans
Egress-vlan-tag
INGRESS
EGRESS
ETH3
PORT
Untagged PC ke R1 tagged vid=1
VLAN tag ditambahkan
DA SA L3 DATA ID 1
![Page 33: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/33.jpg)
Logika CRS (13)
www.mikrotik.co.id 33
Ingress-vlan-trans
VLAN
Table
Egress-vlan-trans
Egress-vlan-tag
INGRESS
EGRESS
ETH3
PORT
Untagged PC ke R1 tagged vid=1
DA SA L3 DATA ID 1
![Page 34: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/34.jpg)
Logika CRS (14)
www.mikrotik.co.id 34
Ingress-vlan-trans
VLAN
Table
Egress-vlan-trans
Egress-vlan-tag
INGRESS
EGRESS
ETH3
ETH1
Untagged PC ke R1 tagged vid=1
DA SA L3 DATA ID 1
Di forward ke ETH1
![Page 35: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/35.jpg)
Logika CRS (15)
www.mikrotik.co.id 35
Ingress-vlan-trans
VLAN
Table
Egress-vlan-trans
Egress-vlan-tag
INGRESS
EGRESS
ETH3
ETH1
Untagged PC ke R1 tagged vid=1
DA SA L3 DATA ID 1
vlan id tetap ada
![Page 36: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/36.jpg)
Logika CRS (16)
www.mikrotik.co.id 36
Ingress-vlan-trans
VLAN
Table
Egress-vlan-trans
Egress-vlan-tag
INGRESS
EGRESS
ETH3
ETH1
Untagged PC ke R1 tagged vid=1
DA SA L3 DATA ID 1
![Page 37: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/37.jpg)
Logika CRS (17)
www.mikrotik.co.id 37
Ingress-vlan-trans
VLAN
Table
Egress-vlan-trans
Egress-vlan-tag
INGRESS
EGRESS
ETH3
ETH1
Untagged PC ke R1 tagged vid=1
DA SA L3 DATA ID 1
![Page 38: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/38.jpg)
untag vlan2
untag vlan1
untag vlan1
Contoh 3 - Komunikasi Switch (1)
www.mikrotik.co.id 38
R1
192.168.1.2/24
172.16.2.2/24
192.168.1.3/24
- Untuk management port - CRS hanya boleh diremote
langsung dari vlan2 - Perangkat dari VLAN1 jika
remote CRS melalui R1 (inter vlan routing)
- CRS bisa memberikan service ke perangkat di vlan2 (DHCP server, hotspot server dll)
- CRS bisa ke internet melalui R1
tagged vlan1 tagged vlan2
![Page 39: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/39.jpg)
untag vlan2
untag vlan1
untag vlan1
Contoh 3 - Komunikasi Switch (2)
www.mikrotik.co.id 39
R1
192.168.1.2/24
172.16.2.2/24
192.168.1.3/24
tagged vlan1 tagged vlan2
![Page 40: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/40.jpg)
Contoh 3 - Komunikasi Switch (3)
www.mikrotik.co.id 40
![Page 41: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/41.jpg)
Contoh 3 - Komunikasi Switch (4)
www.mikrotik.co.id 41
![Page 42: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/42.jpg)
tagged vlan1 tagged vlan2
untag vlan2
untag vlan1
untag vlan1
Contoh 4 - Port Isolation (1)
www.mikrotik.co.id 42
R1
192.168.1.2/24
172.16.2.2/24
192.168.1.3/24
- Port Isolation bisa kita gunakan untuk menambah security di dalam broadcast domain yang sama.
![Page 43: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/43.jpg)
Isolation Port
• Pada CRS, kita bisa menerapkan isolation berdasarkan profile di masing-masing port sesuai kebutuhan misalnya – Promiscuous Port (profile 0), digunakan pada
Trunk port agar frame dari trunk port bisa ke semua port
– Isolated Port (profile 1), digunakan untuk port yang hanya bisa akses ke trunk port
– Community port (profile 2-31), digunakan untuk membentuk custom group
www.mikrotik.co.id 43
![Page 44: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/44.jpg)
Contoh 4 - Port Isolation (2)
www.mikrotik.co.id 44
![Page 45: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/45.jpg)
Contoh 4 - Port Isolation (3)
www.mikrotik.co.id 45
TRUNK
Isolated
![Page 46: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/46.jpg)
Contoh 4 - Port Isolation (4)
www.mikrotik.co.id 46
![Page 47: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/47.jpg)
untag vlan1
R2
Contoh 5 - Hybrid Port (1)
www.mikrotik.co.id 47
R1
192.168.1.2/24
- Hybrid port, jika didalam port tersebut terkoneksi ke perangkat yang menggunakan tagged serta untagged frame
- Biasa digunakan untuk memisahkan trafik VirtualAP pada wireless
VAP1 vlan100
VAP2 vlan200 untag vlan2 tagged vlan100 tagged vlan200
tagged vlan1 tagged vlan2 tagged vlan100 tagged vlan200
![Page 48: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/48.jpg)
Contoh 5 - Hybrid Port (2)
www.mikrotik.co.id 48
R1
R2
![Page 49: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/49.jpg)
Contoh 5 - Hybrid Port (2)
www.mikrotik.co.id 49
CRS
![Page 50: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/50.jpg)
Contoh 6 - Loop Protection (1)
www.mikrotik.co.id 50
- Mulai v6.38rc2, CRS bisa menggunakan fitur RSTP yang ada di bridge untuk mencegah looping
![Page 51: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/51.jpg)
Contoh 6 - Loop Protection (2)
www.mikrotik.co.id 51
![Page 52: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/52.jpg)
Contoh 6 - Loop Protection (3)
www.mikrotik.co.id 52
Cukup masterport yang dimasukkan ke dalam bridge port, otomatis slave-port akan ditambahkan
![Page 53: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/53.jpg)
v6.40rc36 ???
www.mikrotik.co.id 53
![Page 54: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/54.jpg)
HW-Offloading
• Mulai versi 6.40rc36, Interface bridge pada RouterOS akan menghandle L2 Forwarding dan bisa menggunakan switch-chip (Hw-offloading) jika kondisi memungkinkan
• Tidak ada lagi pengaturan masterport pada interface
• Hati-hati jika sudah diupgrade ke versi baru, jika di downgrade tidak akan otomatis menggunakan setting masterport
www.mikrotik.co.id 54
![Page 55: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/55.jpg)
Fitur HW-Offload Switch
Routeroard Switch Menu
Bridge R/STP
Bridge MSTP
Bridge IGMP Snoop
Bridge VLAN
Filtering Bonding
CRS3xx Y Y Y Y Y N
CRS1xx Y Y N Y N N
CRS2xx Y Y N N N N
QCA8377 Y Y N N N N
AR8327 Y Y N N N N
AR8227 Y Y N N N N
AR8316 Y Y N N N N
AR7240 Y Y N N N N
MT7621 Y N N N N N
RTL8367 Y N N N N N
ICPlus175D Y N N N N N
www.mikrotik.co.id 55
![Page 56: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/56.jpg)
Contoh 7 - Bridge VLAN (1)
www.mikrotik.co.id 56
untag vlan1
R2
R1
192.168.1.2/24
VAP1 vlan100
VAP2 vlan200 untag vlan2 tagged vlan100 tagged vlan200
- Trunk port untuk R1 - Access port untuk PC - Hybrid Port untuk perangkat
R2 - Management port untuk akses
CRS vlan 1
tagged vlan1 tagged vlan2 tagged vlan100 tagged vlan200
![Page 57: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/57.jpg)
Contoh 7 - Bridge VLAN (2)
www.mikrotik.co.id 57
![Page 58: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/58.jpg)
Contoh 7 - Bridge VLAN (3)
www.mikrotik.co.id 58
![Page 59: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/59.jpg)
Contoh 7 - Bridge VLAN (4)
www.mikrotik.co.id 59 PVID digunakan untagged frame
![Page 60: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/60.jpg)
Contoh 7 - Bridge VLAN (5)
www.mikrotik.co.id 60
di menu bridge-vlan, kita tentukan vlan membership dari masing-masing port
![Page 61: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/61.jpg)
Contoh 7 - Bridge VLAN (6)
www.mikrotik.co.id 61
![Page 62: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/62.jpg)
Contoh 7 - Bridge VLAN (7)
www.mikrotik.co.id 62
![Page 63: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/63.jpg)
Contoh 7 - Bridge VLAN (8)
www.mikrotik.co.id 63
• VLAN filtering diaktifkan sesudah semua vlan dibuat • Berfungsi supaya bridge mengenali vlan dan bisa memodifikasi frame
![Page 64: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/64.jpg)
Tips • Meskipun di Bridge juga terdapat fitur VLAN, fitur
Switch saat ini juga masih bisa digunakan • Biasakan untuk menyisakan 1 port yang tidak
masuk bridge / switch • Biasakan menggunakan ROS versi sama • Jika melakukan pengubahan konfigurasi switch
dan tidak berjalan, Flush table FDB switch • Pada versi ini, fungsi VLAN pada bridge masih
belum bisa menggunakan HW-Offload, gunakan menu switch pada CRS1xx series
• Gunakan CRS untuk switch J
www.mikrotik.co.id 64
![Page 65: MikroTik RouterOS Switch Feature - MUM · Citraweb Solusi Teknologi, Indonesia MikroTik RouterOS Switch Feature](https://reader031.fdocuments.in/reader031/viewer/2022013102/5c85b7e109d3f2700a8b5320/html5/thumbnails/65.jpg)
www.mikrotik.co.id 65
Thank You! Diijinkan menggunakan sebagian atau seluruh materi pada modul ini, baik berupa ide, foto, tulisan, konfigurasi dan diagram selama untuk kepentingan pengajaran, dan memberikan kredit kepada penulis serta link ke www.mikrotik.co.id