![Page 1: Erfin Susanto Spectrum Indonesia - mum.mikrotik.commum.mikrotik.com/presentations/ID11/id-erfin.pdf · Bekerja di Spectrum Indonesia ... via Local ISP Static IP (10.10.10.1) VPN Connection](https://reader031.vdocuments.mx/reader031/viewer/2022011808/5c85bf8d09d3f2b2468c9791/html5/thumbnails/1.jpg)
Erfin Susanto Spectrum Indonesia
www.spectrumindo.com
![Page 2: Erfin Susanto Spectrum Indonesia - mum.mikrotik.commum.mikrotik.com/presentations/ID11/id-erfin.pdf · Bekerja di Spectrum Indonesia ... via Local ISP Static IP (10.10.10.1) VPN Connection](https://reader031.vdocuments.mx/reader031/viewer/2022011808/5c85bf8d09d3f2b2468c9791/html5/thumbnails/2.jpg)
Tentang Saya
Erfin Susanto Bekerja di Spectrum Indonesia
Technical & Operational Supervisor MikroTik Certified Trainer
MTCTCE – Traffic Control Engineer MTCUME – User Management Engineer MTCWE – Wireless Engineer
www.spectrumindo.com
![Page 3: Erfin Susanto Spectrum Indonesia - mum.mikrotik.commum.mikrotik.com/presentations/ID11/id-erfin.pdf · Bekerja di Spectrum Indonesia ... via Local ISP Static IP (10.10.10.1) VPN Connection](https://reader031.vdocuments.mx/reader031/viewer/2022011808/5c85bf8d09d3f2b2468c9791/html5/thumbnails/3.jpg)
Spectrum Indonesia
Spectrum Indonesia – 2006 D~Net Surabaya divisi Wireless - 2002
MikroTik Master Reseller – 2006 MikroTik Certified Training Partner –
2007 MTCNA,MTCTCE, MTCUME, MTCRE,
MTCWE BootCamp Training Combo Training ( 2 Sertifikat ) 5 Trainers with specific skill
www.spectrumindo.com
![Page 4: Erfin Susanto Spectrum Indonesia - mum.mikrotik.commum.mikrotik.com/presentations/ID11/id-erfin.pdf · Bekerja di Spectrum Indonesia ... via Local ISP Static IP (10.10.10.1) VPN Connection](https://reader031.vdocuments.mx/reader031/viewer/2022011808/5c85bf8d09d3f2b2468c9791/html5/thumbnails/4.jpg)
www.spectrumindo.com
![Page 5: Erfin Susanto Spectrum Indonesia - mum.mikrotik.commum.mikrotik.com/presentations/ID11/id-erfin.pdf · Bekerja di Spectrum Indonesia ... via Local ISP Static IP (10.10.10.1) VPN Connection](https://reader031.vdocuments.mx/reader031/viewer/2022011808/5c85bf8d09d3f2b2468c9791/html5/thumbnails/5.jpg)
Security VS Simplicity
www.spectrumindo.com
![Page 6: Erfin Susanto Spectrum Indonesia - mum.mikrotik.commum.mikrotik.com/presentations/ID11/id-erfin.pdf · Bekerja di Spectrum Indonesia ... via Local ISP Static IP (10.10.10.1) VPN Connection](https://reader031.vdocuments.mx/reader031/viewer/2022011808/5c85bf8d09d3f2b2468c9791/html5/thumbnails/6.jpg)
MikroTik RouterOS Mengubah PC menjadi Router yang
tangguh Router dengan banyak fitur dan
performa tinggi tetapi murah Routing (static or dynamic) Firewall VPN dan Tunnel Quality of Service (bandwidth management) Fitur User Management ○ Torch, DHCP, Hotspot, RADIUS, etc
www.spectrumindo.com
![Page 7: Erfin Susanto Spectrum Indonesia - mum.mikrotik.commum.mikrotik.com/presentations/ID11/id-erfin.pdf · Bekerja di Spectrum Indonesia ... via Local ISP Static IP (10.10.10.1) VPN Connection](https://reader031.vdocuments.mx/reader031/viewer/2022011808/5c85bf8d09d3f2b2468c9791/html5/thumbnails/7.jpg)
Bagaimana Mikrotik mengamankan Jaringan anda? Fitur yang ada :
HTTPS, SSH dan encripsi koneksi Port Scan Detect
Use custom-made IDS ICMP type limitation Limit connection rates Port Knocking
www.spectrumindo.com
![Page 8: Erfin Susanto Spectrum Indonesia - mum.mikrotik.commum.mikrotik.com/presentations/ID11/id-erfin.pdf · Bekerja di Spectrum Indonesia ... via Local ISP Static IP (10.10.10.1) VPN Connection](https://reader031.vdocuments.mx/reader031/viewer/2022011808/5c85bf8d09d3f2b2468c9791/html5/thumbnails/8.jpg)
MikroTik Administration
www.spectrumindo.com
![Page 9: Erfin Susanto Spectrum Indonesia - mum.mikrotik.commum.mikrotik.com/presentations/ID11/id-erfin.pdf · Bekerja di Spectrum Indonesia ... via Local ISP Static IP (10.10.10.1) VPN Connection](https://reader031.vdocuments.mx/reader031/viewer/2022011808/5c85bf8d09d3f2b2468c9791/html5/thumbnails/9.jpg)
Static IP
Dedicated Connection via Local ISP Static IP (10.10.10.1)
VPN Connection
ALLOW VPN connection
from Office IP (10.10.10.1)
www.spectrumindo.com
![Page 10: Erfin Susanto Spectrum Indonesia - mum.mikrotik.commum.mikrotik.com/presentations/ID11/id-erfin.pdf · Bekerja di Spectrum Indonesia ... via Local ISP Static IP (10.10.10.1) VPN Connection](https://reader031.vdocuments.mx/reader031/viewer/2022011808/5c85bf8d09d3f2b2468c9791/html5/thumbnails/10.jpg)
Dynamic IP
VPN Connection
ALLOW VPN connection
from Office IP (?.?.?.?)
Broadband Connection Dynamic IP (?.?.?.?)
www.spectrumindo.com
![Page 11: Erfin Susanto Spectrum Indonesia - mum.mikrotik.commum.mikrotik.com/presentations/ID11/id-erfin.pdf · Bekerja di Spectrum Indonesia ... via Local ISP Static IP (10.10.10.1) VPN Connection](https://reader031.vdocuments.mx/reader031/viewer/2022011808/5c85bf8d09d3f2b2468c9791/html5/thumbnails/11.jpg)
Port Knocking
Secara default, semua IP dan Port Tertutup
Menggunakan kombinasi Port dan Protocol
Jika Urutanya benar, maka knocker-IP akan diperbolehkan mengakses. Gunakan Proses sebaliknya untuk menutup
koneksi Tentukan lama IP boleh mengakses
www.spectrumindo.com
![Page 12: Erfin Susanto Spectrum Indonesia - mum.mikrotik.commum.mikrotik.com/presentations/ID11/id-erfin.pdf · Bekerja di Spectrum Indonesia ... via Local ISP Static IP (10.10.10.1) VPN Connection](https://reader031.vdocuments.mx/reader031/viewer/2022011808/5c85bf8d09d3f2b2468c9791/html5/thumbnails/12.jpg)
Port Knocking (illustrasi)
www.spectrumindo.com
![Page 13: Erfin Susanto Spectrum Indonesia - mum.mikrotik.commum.mikrotik.com/presentations/ID11/id-erfin.pdf · Bekerja di Spectrum Indonesia ... via Local ISP Static IP (10.10.10.1) VPN Connection](https://reader031.vdocuments.mx/reader031/viewer/2022011808/5c85bf8d09d3f2b2468c9791/html5/thumbnails/13.jpg)
Port Knocking di MikroTik
Knocking Port TCP 1234 TCP 4321
1. Kirim koneksi ke TCP-1234
2. Router menyimpan IP yang masuk selama 10 detik
3. Kirim koneksi ke TCP-4321
4. Router akan mengecek apakah IP nya sama dari sebelumnya (TCP-1234)
5. Jika Ipnya sama dan waktunya kurang dari 10 detik, maka IP tersebut akan diperbolehkan mengakses Router
www.spectrumindo.com
![Page 14: Erfin Susanto Spectrum Indonesia - mum.mikrotik.commum.mikrotik.com/presentations/ID11/id-erfin.pdf · Bekerja di Spectrum Indonesia ... via Local ISP Static IP (10.10.10.1) VPN Connection](https://reader031.vdocuments.mx/reader031/viewer/2022011808/5c85bf8d09d3f2b2468c9791/html5/thumbnails/14.jpg)
Port Knocking in MikroTik #1 Buat Rule untuk menangkap permintaan Protocol/
Port dan menyimpan IP peminta kedaftar sementara dengan nama TEMPORARY selama 10 detik
www.spectrumindo.com
![Page 15: Erfin Susanto Spectrum Indonesia - mum.mikrotik.commum.mikrotik.com/presentations/ID11/id-erfin.pdf · Bekerja di Spectrum Indonesia ... via Local ISP Static IP (10.10.10.1) VPN Connection](https://reader031.vdocuments.mx/reader031/viewer/2022011808/5c85bf8d09d3f2b2468c9791/html5/thumbnails/15.jpg)
Port Knocking in MikroTik #2 Tangkap permintaan Protocol/Port kedua dan cek
apakah IP peminta sudah ada di TEMPORARY kalau ada masukan IP ke list dengan nama SECURE
www.spectrumindo.com
![Page 16: Erfin Susanto Spectrum Indonesia - mum.mikrotik.commum.mikrotik.com/presentations/ID11/id-erfin.pdf · Bekerja di Spectrum Indonesia ... via Local ISP Static IP (10.10.10.1) VPN Connection](https://reader031.vdocuments.mx/reader031/viewer/2022011808/5c85bf8d09d3f2b2468c9791/html5/thumbnails/16.jpg)
Port Knocking di MikroTik #3 Mengijinkan IP yang ada di daftar SECURE untuk
mengakses Router (atau melakukan hal yang lain)
www.spectrumindo.com
![Page 17: Erfin Susanto Spectrum Indonesia - mum.mikrotik.commum.mikrotik.com/presentations/ID11/id-erfin.pdf · Bekerja di Spectrum Indonesia ... via Local ISP Static IP (10.10.10.1) VPN Connection](https://reader031.vdocuments.mx/reader031/viewer/2022011808/5c85bf8d09d3f2b2468c9791/html5/thumbnails/17.jpg)
Port Knocking di MikroTik #4
Secara default, BLOCK semua koneksi
www.spectrumindo.com
![Page 18: Erfin Susanto Spectrum Indonesia - mum.mikrotik.commum.mikrotik.com/presentations/ID11/id-erfin.pdf · Bekerja di Spectrum Indonesia ... via Local ISP Static IP (10.10.10.1) VPN Connection](https://reader031.vdocuments.mx/reader031/viewer/2022011808/5c85bf8d09d3f2b2468c9791/html5/thumbnails/18.jpg)
Port Knocking di MikroTik
Cara kerjanya
www.spectrumindo.com
![Page 19: Erfin Susanto Spectrum Indonesia - mum.mikrotik.commum.mikrotik.com/presentations/ID11/id-erfin.pdf · Bekerja di Spectrum Indonesia ... via Local ISP Static IP (10.10.10.1) VPN Connection](https://reader031.vdocuments.mx/reader031/viewer/2022011808/5c85bf8d09d3f2b2468c9791/html5/thumbnails/19.jpg)
Port Knocking Implementasi
Filter pertama sebelum Autentikasi Diikuti oleh enkripsi dari VPN Optional
Spesifikasikan urutan yang berbeda untuk membuka port/service yang tidak sama
Berikan urutan kunci yang berbeda untuk tiap orang/IP
www.spectrumindo.com
![Page 20: Erfin Susanto Spectrum Indonesia - mum.mikrotik.commum.mikrotik.com/presentations/ID11/id-erfin.pdf · Bekerja di Spectrum Indonesia ... via Local ISP Static IP (10.10.10.1) VPN Connection](https://reader031.vdocuments.mx/reader031/viewer/2022011808/5c85bf8d09d3f2b2468c9791/html5/thumbnails/20.jpg)
Implementasi
VPN Connection
ALLOW VPN connection from
Authorized knocker’s IP
Broadband Connection Dynamic IP (?.?.?.?)
KNOCK
www.spectrumindo.com