Mikrotik Router Research Articles

Automation of Remote Laboratory Device Configuration File Management

This study develops a Python-based configuration file management application to automate backup and recovery of network devices in the Universitas Kristen Duta Wacana laboratory, which uses Cisco and Mikrotik devices. The goal is to understand the impact of automation on the effectiveness of backup and recovery, support for remote configuration file management, reduction of recovery time, and its impact on operational sustainability. The Waterfall method is applied with the stages of analysis, design, implementation, testing, and evaluation, using network topology data, device information, and network protocols collected through observation, interviews, documentation, and literature studies. Testing includes scenarios of full and partial backup and recovery, error handling (credentials, lost files, unresponsive devices), and FTP server and database failure conditions on a network topology consisting of four identical blocks with Mikrotik routers and switches. The test results show that the application functions as expected, with all scenarios running smoothly without significant failures, including the ability to filter data according to parameters and detect credential errors. This system is concluded to have met the test objectives and is ready to be implemented.

PKM IMPROVEMENT COMPETENCY CURRICULUM UJI KOMPETENSI KEAHLIAN (UKK) AND NETWORK AUTOMATION TO IMPROVE SOFT SKILL ASPECTS AT SMKS NUSANTARA

The implementation of Program Pengabdian kepada Masyarakat (PKM), to improve the competence of SMK TKJ Nusantara 1 Ciputat students in terms of skills and soft skills in facing the Uji Kompetensi Keahlian (UKK) through a series of structured network training and practicum activities. The methods used include theoretical training and intensive practicum implementation that focuses on 1) Network Security Design, Installation and Configuration of Dynamic Routing 2) Wired and Wireless Network Design with VLAN and Routing 3) Troubleshooting Network Services on Client Server Networks 4) Troubleshooting Network Security on WAN Networks 5) Network Automation on MikroTik routers using Paramiko and Netmiko Python. The results achieved showed a significant increase in the technical skills and soft skills of the students. The final scores of the student groups ranged from 8.05 to 9.15. These results indicate that each student is increasingly mastering the technical skills needed for the configuration and management of questions and assignments tested on the UKK. The results of this PKM activity also include the preparation of UKK modules and writing books for Network automation on MikroTik RouterOS using Python, which is intended as a reference and ongoing learning material for students and teachers in practical learning and teaching activities.

Performance Evaluation of HTTP, DHCP and DNS Protocols of Data Packets for Vulnerabilities Using the Isolation Forest Algorithm

In the contemporary digital landscape, network security is paramount to safeguard data integrity and prevent unauthorized access as data have been structured in the network through protocols. In term of data structure IPv6 protocol has extended data size due to the robust addresses of 128 bits as compare to 32 bits of IPv4. Due to the improved security data structure of IPv6, the study focuses on identifying vulnerabilities in HTTP, DHCP, and DNS packets using the Isolation Forest algorithm approach, a machine-learning technique designed for anomaly detection. By analyzing packet lengths, size, payload and addressing, the study visualizes normal and anomalous behavior, providing insights into potential security threats in IPv4 network structure. The results highlight the effectiveness of Goodput, Quality of service and risk as essential factors in the network, using Little's theorem analysis and the Isolation Forest in detecting anomalies across these different network protocols, offering valuable implications for network security structures, due to IoT in recent networks. The time response determination in this paper explained details information on the time the treats entered the network, the duration of the vulnerabilities within the network, leading to a certain threshold, and traffic delay factors due to deviation of packet length and other social engineering activities. Sensitive multipurpose security devices are involved; MikroTik routers were configured and installed in the network under evaluation. Which the normal DPI technique was unable to effectively and efficiently addressed. ADPI principles and operations where the needed security measures adopted to detect those vulnerabilities which were eventually addressed and have contributed to recent measures of network security.

Improving Network Reliability with Traffic Steering Using Two ISP Links on Mikrotik Routers

Improving Network Reliability with Traffic Steering Using Two ISP Links on Mikrotik Routers

Implementasi Backup Koneksi Jaringan Menggunakan Metode Failover MikroTik pada PT Tiga Kawan Sertifikasi

The internet plays a vital role in supporting business operations in companies or organizations by accelerating the flow of information and enabling real-time connections. According to a report by We Are Social, the number of internet users in Indonesia reached 213 million in January 2023, accounting for about 77% of the total population. However, despite the numerous ISPs in Indonesia, not all internet services are affordable or of high quality, and some areas remain inaccessible to providers using fiber optic connections. PT. Tiga Kawan Sertifikasi, a company engaged in legal services in Tangerang, faces challenges with its internet connection as it relies solely on a single provider, Orbit from Telkomsel. Issues arise when the modem signal frequently drops due to the use of SIM card media instead of fiber optic cables. The proposed solution is to add another provider as an alternative and implement a failover method on a Mikrotik router to ensure a stable connection.

Development of Network Infrastructure Monitoring System at Vocational High School Using MikroTik and Telegram Integration

This study aimed to develop a monitoring system for the computer network infrastructure at SMKN 7 Sijunjung. The system was designed to provide real-time monitoring of traffic, activity logs, and connected user devices on the MikroTik router; additionally, the application integrated notifications through the Telegram service to offer prompt information regarding network disruptions. The design methodology employed was PPDIOO (prepare, plan, design, implement, operate, and optimize). The system is implemented using a combination of hardware and software, including the utilization of the CodeIgniter framework for the user interface (UI). System testing was conducted using the BlackBox method to evaluate the functionality of the application comprehensively. The test results confirm that the application effectively monitored the network and promptly notified us of its status. However, there were certain challenges identified during testing, such as problems with online connectivity to the MikroTik router and limitations in database storage. The proposed solutions include activating the VPN on MikroTik and enhancing database storage capacity. This research contributes to the development of computer network infrastructure-monitoring systems in educational environments. These findings will lay the groundwork for other educational institutions to enhance the efficiency of network monitoring and maintenance in schools.

Optimizing Secure Communication in Distributed Corporate Networks through PPTP and IPSec VPN Protocols

In today’s industry, company’s activities are scattered in several locations and need internet for communication purposes. However, it will be dangerous if third-parties have access to their information. One of the solutions for securing information exchange is by using Virtual Private Network (VPN). The VPN protocols that will be used are Point-to-Point Tunneling Protocol (PPTP) with the help of Internet Protocol Security (IPSec). These protocols are simulated in VirtualBox that has been previously installed with two Mikrotik routers and two Windows 7 operating systems. The PPTP and IPSec protocols are configured in both routers through Winbox software. For the computers, the IP addresses are configured along with iPerf software for bandwidth analysis. In this VPN simulation, both computers can communicate with each other and have no problem in accessing the internet. In PPTP’s network, the average bandwidth is 1.293 Mbits/sec. Meanwhile, in PPTP with IPSec’s network, the average bandwidth is 0.853 Mbits/sec. There is a slight difference considering that in PPTP, the data packets are only encapsulated. On the other hand, the data packets in IPSec protocol are both encapsulated and encrypted.

Perancangan Jaringan Internet Menggunakan GNS3, Qemu, dan Virtual Box

In the modern era, information technology continues to develop in line with human needs who want efficiency, ease, speed and accuracy in obtaining information and sending information. Moreover, in an office building, facilities for accessing information require a fast and efficient internet network as facilities and infrastructure to support office activities. In general, Mikrotik routers are widely used in office buildings as a means of distributing the internet. With the use of a mikrotik router that requires a lot of design and simulation first to get good internet performance GNS3 can design a topology that will be used in 2 ways, namely using Qemu and Virtual Box. Both of these methods have their respective advantages over the design process and test results

IMPLEMENTATION OF RT / RW NET HOTSPOT NETWORK WITH MIKROTIK-BASED VOUCHER SYSTEM AT UNITEX BOGOR HOUSING

Technological developments are currently growing very rapidly, especially the use of computer networks. The use of the internet is increasing because it makes it easier for everyone to dig up existing information from the internet world, internet access has become a basic need for society. One effective way to provide internet access to the public is through the RT/RW Net network. However, there are still several obstacles in managing the RT/RW Net network in the Unitex housing complex in Bogor City, such as use that is not well controlled, many users who are not interested and do not have the right to use hotspot facilities by knowing the password for the Wi-Fi network in the housing complex. Unitex. To overcome these obstacles, the author proposes implementing an RT/RW Net network with a MikroTik-based voucher system. MikroTik is a network device that has reliable routing, switching and wireless capabilities. By utilizing MikroTik, RT/RW Net network managers can better manage and control internet access for users. By implementing the hotspot voucher login web page system provided by the Hotspot Server on the Mikrotik Router, to provide authentication features for users who will use the Hotspot/Wi-Fi network. So registered users are required to enter their username and password on the web login page provided by Mikrotik to be able to access the internet via the RT/RW Net Hotspot network. The research methods used in this research are observation, questionnaires, and literature studies, as well as the Network Development Life Cycle (NDLC) Method which is used to analyze needs in implementing the Rt/Rw Net Hotspot Network in the Unitex housing complex in the city of Bogor

PENGGUNAAN METODE PORT KNOCKING, PORT BLOKING, DAN ARP UNTUK MELAKSANAKAN KEAMANAN JARINGAN ROUTER MIKROTIK OS

Technological developments to date continue to grow. These developments have an impact on the security of the system in it. So that the Organization becomes more vulnerable to threats or network attacks or information security caused by various sources, both from internal personnel activities or hacker attacks. Therefore, this research will carry out security on the Mikrotik router by using the port knocking, port blocking and arp methods which are a special program made for the security of the Mikrotik Router OS network, in this study the aim is to make security on the Mikrotik router in a network by making 3 rules Port knocking, Port blocking, and ARP and making port knocking steps so that only clients who know the authentication code can access the port service. Based on this research, it can be concluded that the port knocking, port blocking and arp methods have succeeded in creating a network security where port services can only be accessed by specified users by carrying out several steps that have been made.

Design and Development of Computer Network and Login Page Using Mirotic Router Universitas Oriental Timor Lorosa'e

The design of the computer network at the Faculty of Engineering, Universitas Oriental Timor Lorosa'e (UNITAL), is established to support the system's design and development, including the Login page on the MikroTik Router. With the right infrastructure, the services used will be more optimal. The current conditions still face challenges with the network design used for the performance of the computer network. This will include an analysis of the network operating system's quality, proposing a network design that conforms to Cisco standards, and using a design plan based on Cisco standards. The research results provide a simulation or design proposal using Winbox software. The purpose of this study is to understand the performance of the computer network at the Faculty of Engineering, Universitas Oriental Timor Lorosa'e, which requires better analysis and network. Therefore, an analysis of the current computer network is necessary, and the design of a new quality system can be used for optimal results. By using a network topology that aligns with Cisco concepts and implementing it on Winbox software, better outcomes are achieved.

Implementation of Port Knocking with Telegram Notifications to Protect Against Scanner Vulnerabilities

The opening of the service port on the Mikrotik router provides an opening for hackers to enter the Mikrotik service to access the router illegally. This research aimed to close certain ports that are gaps for hackers and uses port knocking and telegram bots. The Telegram bot was used as a message notification to managers in real-time to provide information that occurs when the vulnerability scanning process is carried out to find and map weaknesses in the network system. Searching for weaknesses also includes looking for open router service ports such as ports 22, 23, 80, and 8291. This research used the Network Development Life Cycle method, which started from analysis design and prototype simulation to implementation. The research results after testing were able to secure local network service ports against vulnerability scanners on routers using the port knocking method, and testing attack schemes carried out from each scheme could run well on the router’s local network and obtain notifications via telegram bots in real time to administrators. This research contributes to administrators’ ability to secure networks so irresponsible people do not easily infiltrate them.

Perancangan Keamanan Jaringan Metode Authentication Login Hotspot Menggunakan Router Mikrotik di PT. Nusindo Rekatama Semesta

Nusindo Rekatama Semesta is a company located in the Sleman Regency area, Jombor Lor, Sinduadi. PT. Nusindo Semesta is a company in the corporate management industry that has been operating since February 2011. PT. Nusindo Rekatama Semesta provides wireless hotspot facilities where employees and visitors who come can take advantage of an internet connection that can be accessed via laptops, smartphones, or other devices such as those that support wireless technology. However, the implementation of hotspots needs to be corrected; for example, per-client bandwidth still needs to be focused. It aims to overcome per-client bandwidth usage and create a captive login portal as a security system so that those who do not have access rights cannot use internet access in the company. Using the hotspot login authentication system within the company. With the application of Mikrotik Router OS as a router in the company's network, it can overcome the instability of wireless network connections, and the captive portal login feature on Mikrotik can prevent users who do not have access rights from being able to use the internet access in the company.

Penerapan Kinerja Filter Rule dengan Metode Raw dan Layer 7 Protocol di Router Mikrotik

This research aims to improve the security and efficiency of network use in government environments, especially in relation to access to social media sites. This research also aims to implement a healthy internet and avoid the negative impacts that come from pornographic websites. The research method used in this research is state general problem, conduct literatur research, desain methodology, implementation,analyze data, and report result. The results of this research show that the implementation of Filter Rule Performance using the Raw Method and Layer 7 Protocol on the Mikrotik Router at the Communications and Information Service of North Sumatera Office has been successful. Filter Rules with the Raw method are used to process packets before Connection Tracking is carried out, so that they can reduce the load on the CPU. Meanwhile, Layer 7 Protocol is used to perform filtering based on the application protocol used in data packets. However, using the L7 Filter Rule also has a weakness, namely that it can consume Router resources if used for Filtering all types of Traffic.Keywords: Filter Rule, Raw Method, Layer 7 Protocol, Router Mikrotik

Perancangan Keamanan Jaringan Komputer Pada Router Dengan Metode ACL Pada PT. Aruna Sinar Jaya Jakarta

At PT. Aruna Sinar Jaya, the Internet network plays an important role in running the company's wheel. The problem is that some client computers that do not require an internet connection in their work still have access to the Internet, sometimes the Internet is overused that is not related to work. To solve the above problems, network security methods such as Access Control List (ACL) are needed to make Internet use in Aruna Sinar Jaya more controlled and efficient. In this case, the author recommends implementing ACL on Mikrotik routers using Winbox to restrict internet connections.
 Keywords: Access Control List, Microtic Router, Winbox.

Development of Microtik Router Bandwidth Management Applicatio at PLN Office Muara Labuh

Bandwidth instability is a serious problem where the need for using the internet is in the process, it is necessary to manage bandwidth so that bandwidth is properly organized but changes that will be made to bandwidth management require experts in Mikrotik routers, so an application is needed to manage this bandwidth and can be used by ordinary people so that errors in configuration will be avoided because the configuration is done automatically as desired and can certainly help bandwidth management at a lower cost. Making this application by using data collection methods by taking data at PLN Muara Labuh area, interviewing field supervisors, studying literature that supports problem solving and Unified Modeling Language (UML) for software designers along with software testing. The application is built using django.

IMPLEMENTASI MANAJEMEN BANDWIDTH MENGGUNAKAN METODE PEER CONNECTION QUEUE PADA MIKROTIK

A hotspot consists of one or more WLAN or Wireless LAN Access Points of standard 802.11a/b/g that provide a restricted area in which users can freely join Access Points with WLAN-enabled mobile devices. With advances in technology, a router is a device that is used to perform the routing process. However, since routers are expensive, there are hardware alternatives such as Mikrotik. Mikrotik RouterOS is an operating system that can turn a computer into a router, or often called a PC Router. solutions to take advantage of bandwidth management and use Mikrotik router boards as a tool to divide bandwidth evenly. Because excessive use will cause a long load when accessing the internet or limited bandwidth. To distribute the load and manage the client connection path to a service on the server, the PCQ (Peer Connection Queue) method is used. The way to do PCQ is to upload with type pcq-dpwnload-phd, set the queue size and total queue size, and check the classification list for different addresses. In addition, to implement bandwidth management with PCQ for uploads, you must create the type pcq-upload-pd, set the queue size and total queue size, and check the classifier list for the source address. For setting upload and download targets on the proxy, you must point to the network address 192.168.100.0/24, with a maximum upload speed of 10 MBPS and 30 MBPS download. The results of this study indicate that the use of a PCQ-based proxy network can be applied properly for Pizza Hut delivery in Batam City.

Implementasi Konsep Software Defined Networking (SDN) Wide Area Network (WAN) Pada Mikrotik Dengan Python 3


 Software Defined Networking (SDN) is the latest network technology to address the challenges that exist in TE. The concept of Software Defined Networking (SDN) uses a centralized and more flexible way of working, SDN can significantly cut the use of communication network resources needed for the utilization of network resources as a whole. When a company wants to expand its computer network to a wider area, including connecting branch offices in remote areas with data at the head office and other offices, it is necessary to setup tens to hundreds of Routers and switches which take a long time and are expensive, not to mention if something goes wrong. human (Human Error). Therefore, virtualization technology is needed so that configuration/setup on many Routers can be done simultaneously for this reason by adopting the working concept of Software Defined Networking (SDN) which will be applied to Network Automation technology. Later this Network Automation will be applied to Mikrotik which is combined with Linux Ubuntu Server and also uses the Python 3 language. So that in handling many Routers you don't need to have trouble configuring/setting up one by one on many Routers. The result of the analysis of the implementation of the Software Defined Networking (SDN) concept in Network Automation technology is that the Jogja and Bandung Mikrotik Routers are configured simultaneously in terms of adding IP addresses

Mikrotik Login Security with Port-Knocking and Brute Force Firewall at PT. Time Excelindo

In today's digital era, the use of MikroTik routers is increasingly common in companies, including PT Time Excelindo. However, attacks on MikroTik router logins are a frequent problem, and the company has a need to have a cheap and simple security system. This thesis aims to implement login security techniques using Port-Knocking and brute force firewalls on MikroTik routers at PT Time Excelindo, with the aim of providing solutions that are affordable and easy to implement. This study focuses on identifying the problems faced by PT Time Excelindo, namely repeated attacks against MikroTik router logins. The proposed solution involves implementing a Port- Knocking technique which will hide the login port on the router, so that only legitimate access will be allowed after a series of specific requests are made to certain ports. In addition, the firewall will also be activated to block brute force attacks by limiting the number of failed login attempts

Perancangan Dan Implementasi Pembagian Bandwidth Menggunakan Mikrotik Di PT. Satria Jaya Prima (2023)

The increasing demand and use of internet networks at PT. Satria Jaya Prima to access a website-based sales system, the more user demand for problems that occur on user devices such as unstable internet networks. Currently the use of internet network at PT. Satria Jaya Prima has not been efficient because there is no balanced bandwidth regulation, thus making the internet network capacity usage gap and making the internet network unstable. Based on these problems, research is needed that can be applied to overcome these problems, namely managing bandwidth using Mikrotik. In the network, a device is needed that can manage the existing internet network. This device is called Mikrotik RouterBoard. Routers that will be used in the internet network of PT. Satria Jaya Prima runs with Mikrotik OS for bandwidth and user management and manages the existing internet network according to the internet needs of internet network users. In this study, Mikrotik is configured using Winbox using the Simple Queue Peer Connection Queue (PCQ) method, with bandwidth management and users using the Mikrotik Router, the internet network connection will be smoother, because the existing bandwidth is allocated to each user based on the bandwidth needs needed by each internet network user