ab-intermedia.com

Tips Manipulasi TOS ICMP dan DNS Resolving

Tujuan :

• Memperkecil delay ping dari sisi klien ke arah Internet.
• Mempercepat resolving hostname ke ip address.

Asumsi : Klien-klien berada pada subnet 192.168.1.0/24

1. Memanipulasi Type of Service untuk ICMP Packet :
   - ip firewall mangle add chain=prerouting src-address=192.168.1.0/24 protocol=icmp action=mark-connection new-connection-mark=ICMP-CM passthrough=yes
   -ip firewall mangle add chain=prerouting connection-mark=ICMP-CM action=mark-packet new-packet-mark=ICMP-PM passthrough=yes
   - ip firewall mangle add chain=prerouting packet-mark=ICMP-PM action=change-tos new-tos=min-delay
2. Memanipulasi Type of Service untuk DNS Resolving :
   - ip firewall mangle add chain=prerouting src-address=192.168.1.0/24 protocol=tcp dst-port=53 action=mark-connection new-connection-mark=DNS-CM passthrough=yes
   - ip firewall mangle add chain=prerouting src-address=192.168.1.0/24 protocol=udp dst-port=53 action=mark-connection new-connection-mark=DNS-CM passthrough=yes
   - ip firewall mangle add chain=prerouting connection-mark=DNS-CM action=mark-packet new-packet-mark=DNS-PM passthrough=yes
   - ip firewall mangle add chain=prerouting packet-mark=DNS-PM action=change-tos new-tos=min-delay
3. Menambahkan Queue Type :
   - queue type add name=”PFIFO-64″ kind=pfifo pfifo-limit=64
4. Mengalokasikan Bandwidth untuk ICMP Packet :
   - queue tree add name=ICMP parent=INTERNET packet-mark=ICMP-PM priority=1 limit-at=8000 max-limit=16000 queue=PFIFO-64
5. Mengalokasikan Bandwidth untuk DNS Resolving :
   - queue tree add name=DNS parent=INTERNET packet-mark=DNS-PM priority=1 limit-at=8000 max-limit=16000 queue=PFIFO-64

Tips Manipulasi Ping dari Client ke internet Secepat dari Lokal (buat lucu2)

pakai WinBox -> Ip -> Firewall -> NAT
klik [+]
isikan chain : dstnat
protocol : 1 (icmp)
in interface : ether1(lokal)
-> di menu action
action : redirect
to ports : 1(kalo versi 2.9.27 gunakan 16) veris diatasnya Default aja
klik Apllay dan Lanjut OK

Selamat mencoba… Good Luck…

Sumber dari http://www.forummikrotik.com/wireless-networking/