ABDURROZAK
HOME ABOUT ME MICROSITE KONTAK PERSEMBAHAN HELP
ABDURROZAK.MY.ID // MIKROTIK TUTORIAL

ROUTING STATIS

RB941 hAP LITE - STATIC ROUTING LENGKAP

Panduan mendalam implementasi routing statis: konsep routing table, default route, static route, multi-router connection, recursive routing, ECMP, blackhole route, routing filter, monitoring, dan troubleshooting. Konfigurasi dual: CLI (Terminal) & WinBox (GUI).

SPESIFIKASI HARDWARE RB941-2nD

RB941 hAP lite cocok untuk routing statis skala kecil-menengah. Routing statis tidak membebani CPU seperti routing dinamis (OSPF, BGP), sehingga RB941 bisa handle ratusan static route dengan performa yang memadai.

CPU
AR9344 - 650MHz
RAM
32 MB DDR2
STORAGE
16 MB FLASH
ETHERNET
4x 10/100 Mbps
WIRELESS
2.4GHz b/g/n
STATIC ROUTES
UNLIMITED
POWER
5V DC / USB
OS
RouterOS v6 L4
DIMENSI
113 x 89 x 28mm
BERAT
160 gram
ROUTING
STATIC ONLY
CLIENT MAX
~20 DEVICE
KEUNGGULAN ROUTING STATIS: Tidak membebani CPU (tidak ada proses routing dinamis). Route tetap stabil selama link up. Cocok untuk jaringan kecil-menengah dengan topologi sederhana.
KONSEP DASAR ROUTING FUNDAMENTAL

Routing adalah proses menentukan jalur terbaik untuk mengirim packet dari sumber ke tujuan. Router menggunakan routing table (tabel routing) untuk membuat keputusan ini.

ROUTING TABLE

Routing table berisi daftar route (rute) yang diketahui router. Setiap route memiliki:

KOMPONENFUNGSICONTOH
dst-addressDestination network (tujuan)192.168.20.0/24
gatewayNext-hop (router berikutnya)10.10.10.2
distanceAdministrative distance (prioritas)1 (tertinggi)
scopeScope route30
target-scopeTarget scope10
routing-markMark untuk policy routingto-branch
JENIS-JENIS ROUTE
JENISSUMBERKETERANGAN
ConnectedOtomatisNetwork yang langsung terhubung ke interface
StaticManualRoute yang ditambahkan manual oleh admin
DynamicRouting protocolDari OSPF, BGP, RIP (tidak support di RB941)
DHCPDHCP clientDari DHCP server (ISP)
DISTANCE (PRIORITAS)

Distance menentukan prioritas route. Route dengan distance lebih kecil lebih diprioritaskan.

DISTANCEPRIORITASCONTOH PENGGUNAAN
1TERTINGGIPrimary route (link utama)
2TINGGISecondary route (backup pertama)
3-5SEDANGTertiary route (backup kedua)
10+RENDAHRoute alternatif
CARA KERJA ROUTING
1
PC di network 192.168.10.0/24 kirim packet ke 192.168.20.100
2
Packet sampai ke Router A (gateway default PC)
3
Router A cek routing table: ada route ke 192.168.20.0/24 via 10.10.10.2 (Router B)
4
Router A forward packet ke Router B via 10.10.10.2
5
Router B terima packet, cek routing table: 192.168.20.0/24 langsung connected
6
Router B forward packet ke 192.168.20.100 (tujuan akhir)
PENTING: Routing hanya menentukan jalur. Untuk packet benar-benar sampai, semua router di jalur harus punya route yang benar (routing table lengkap). Jika ada router yang tidak punya route, packet akan di-drop.
TOPOLOGI JARINGAN SCHEMA
// TOPOLOGI MULTI-ROUTER DENGAN ROUTING STATIS // [ INTERNET ] | v +-------------------+ | ROUTER A | RB941 (Gateway Utama) | ether1: WAN | IP Publik dari ISP | ether2: 10.10.10.1 | Ke Router B | ether3: 192.168.10.1 | LAN Kantor A +-------------------+ | | | | v v 192.168.10.0/24 +-------------------+ LAN Kantor A | ROUTER B | RB941 (Cabang) | ether1: 10.10.10.2 | Dari Router A | ether2: 192.168.20.1 | LAN Kantor B +-------------------+ | v 192.168.20.0/24 LAN Kantor B ROUTING TABLE: Router A: - 0.0.0.0/0 via ISP (default route) - 192.168.10.0/24 connected (ether3) - 192.168.20.0/24 via 10.10.10.2 (static route ke Router B) Router B: - 0.0.0.0/0 via 10.10.10.1 (default route ke Router A) - 192.168.20.0/24 connected (ether2) - 192.168.10.0/24 via 10.10.10.1 (static route ke Router A)
KUNCI ROUTING STATIS: Setiap router harus punya route ke semua network yang ingin diakses. Router A perlu route ke 192.168.20.0/24, Router B perlu route ke 192.168.10.0/24. Tanpa route ini, traffic tidak bisa lewat.
ANIMASI ROUTING FLOW LIVE FLOW

Visualisasi packet flow dari LAN Kantor A ke LAN Kantor B melalui routing statis. Packet melewati Router A -> Router B -> tujuan.

INTERNET ISP ROUTER A RB941 - Gateway ether1: WAN ether2: 10.10.10.1 ether3: 192.168.10.1 ROUTER B RB941 - Cabang ether1: 10.10.10.2 ether2: 192.168.20.1 10.10.10.0/30 LAN KANTOR A 192.168.10.0/24 PC: .10, .11, .12 LAN KANTOR B 192.168.20.0/24 PC: .10, .11, .12 // STATIC ROUTING FLOW // ROUTE: 192.168.20.0/24 via 10.10.10.2 (Router A) | 192.168.10.0/24 via 10.10.10.1 (Router B)
Router A (Gateway)
Router B (Cabang)
Inter-Router Link
Outgoing Packet
Return Packet
ROUTING PATH: PC di LAN A (192.168.10.x) -> Router A -> Router B -> PC di LAN B (192.168.20.x). Static route di Router A menunjuk ke Router B sebagai next-hop untuk network 192.168.20.0/24.
PERSIAPAN SEBELUM KONFIGURASI STEP 01

Pastikan Anda memiliki informasi berikut sebelum konfigurasi routing statis:

INFORMASI YANG DIPERLUKAN
ITEMKETERANGANCONTOH
Network AddressNetwork yang ingin di-route192.168.20.0/24
Next-Hop IPIP router berikutnya10.10.10.2
Out-InterfaceInterface keluar (opsional)ether2
DistancePrioritas route1 (default)
Topology MapPeta jaringanDiagram network
PENTING: Sebelum konfigurasi, pastikan Anda sudah tahu: (1) Network apa yang ingin di-route, (2) Via router mana (next-hop), (3) Via interface mana. Salah konfigurasi bisa menyebabkan routing loop atau blackhole.
RESET & AKSES ROUTER STEP 02

Reset router ke factory default jika perlu mulai dari nol.

VIA HARDWARE
1
Cabut power router
2
Tekan tombol RESET dengan pin
3
Colok power sambil tekan RESET
4
Tunggu ~5 detik sampai LED ACT berkedip
5
Lepas tombol, router reboot
VIA CLI
# Reset dengan default config [admin@MikroTik] > /system reset-configuration Do you really want to reset configuration? [y/N] y
AKSES ROUTER
VIA WINBOX
1
Colok kabel UTP dari PC ke ether2
2
Buka WinBox
3
Tab Neighbors, klik MAC address
4
Login: admin | Password: (kosong)
VIA WEBFIG
1
Buka browser
2
Ketik: http://192.168.88.1
3
Login: admin | Password: (kosong)
IDENTITY & GANTI PASSWORD STEP 03

Beri nama router dan GANTI PASSWORD ADMIN. WAJIB sebelum router terhubung ke network.

VIA CLI
# 1. Set identity [admin@MikroTik] > /system identity set name="ROUTER-A" # 2. Ganti password admin (WAJIB!) [admin@ROUTER-A] > /user set admin password="Rozak@Route2024!" # 3. Cek list user [admin@ROUTER-A] > /user print # NAME GROUP 0 admin full
VIA WINBOX
1
Menu: System -> Identity -> Name: ROUTER-A
2
Menu: System -> Users
3
Double-click admin -> tombol Password
4
Password baru (min 12 karakter)
CEK & NAMA INTERFACE STEP 04

Cek interface, beri nama yang jelas untuk memudahkan konfigurasi routing.

VIA CLI
# 1. Cek interface [admin@ROUTER-A] > /interface print # NAME TYPE MTU 0 ether1 ether 1500 1 ether2 ether 1500 2 ether3 ether 1500 3 ether4 ether 1500 # 2. Rename interface [admin@ROUTER-A] > /interface set ether1 name="WAN" [admin@ROUTER-A] > /interface set ether2 name="to-Router-B" [admin@ROUTER-A] > /interface set ether3 name="LAN-Kantor"
VIA WINBOX
1
Menu: Interfaces
2
Double-click ether1 -> Name: WAN
3
Double-click ether2 -> Name: to-Router-B
4
Double-click ether3 -> Name: LAN-Kantor
IP ADDRESS STEP 05

Setup IP address untuk setiap interface. IP ini yang akan jadi gateway untuk network yang terhubung.

VIA CLI
# 1. IP untuk WAN (dari ISP) # Jika DHCP: sudah otomatis dari DHCP client # Jika static: [admin@ROUTER-A] > /ip address add address=202.X.X.X/29 interface=WAN # 2. IP untuk link ke Router B [admin@ROUTER-A] > /ip address add address=10.10.10.1/30 interface=to-Router-B # 3. IP untuk LAN Kantor [admin@ROUTER-A] > /ip address add address=192.168.10.1/24 interface=LAN-Kantor # 4. Verifikasi [admin@ROUTER-A] > /ip address print # ADDRESS NETWORK INTERFACE 0 202.X.X.X/29 202.X.X.0 WAN 1 10.10.10.1/30 10.10.10.0 to-Router-B 2 192.168.10.1/24 192.168.10.0 LAN-Kantor
VIA WINBOX
1
Menu: IP -> Addresses
2
+ Add: Address: 10.10.10.1/30, Interface: to-Router-B
3
+ Add: Address: 192.168.10.1/24, Interface: LAN-Kantor
4
Klik OK
DEFAULT ROUTE (0.0.0.0/0) ROUTING CORE

Default route adalah route untuk semua destination yang tidak ada di routing table. Ditulis sebagai 0.0.0.0/0 (semua network). Biasanya menunjuk ke gateway ISP.

VIA CLI
# 1. Default route ke ISP [admin@ROUTER-A] > /ip route add dst-address=0.0.0.0/0 gateway=202.X.X.1 distance=1 comment="Default to ISP" # 2. Jika gateway dari DHCP, sudah otomatis # Cek routing table [admin@ROUTER-A] > /ip route print # DST-ADDRESS GATEWAY DISTANCE 0 0.0.0.0/0 202.X.X.1 1 1 10.10.10.0/30 10.10.10.1 0 (connected) 2 192.168.10.0/24 192.168.10.1 0 (connected) # Distance 0 = connected route (otomatis) # Distance 1 = static route (manual)
VIA WINBOX
1
Menu: IP -> Routes
2
+ Add
3
Dst. Address: 0.0.0.0/0
4
Gateway: 202.X.X.1 (IP ISP)
5
Distance: 1
6
Comment: Default to ISP
7
Klik OK
KAPAN DEFAULT ROUTE OTOMATIS?
DHCP CLIENT
Jika DHCP client punya add-default-route=yes, default route otomatis dibuat dari DHCP server.
PPPoE CLIENT
Jika PPPoE client punya add-default-route=yes, default route otomatis dibuat.
STATIC IP
Jika pakai IP statis, default route HARUS dibuat manual. Tidak otomatis.
CEK ROUTING TABLE
Selalu cek /ip route print untuk memastikan default route ada.
PENTING: Hanya boleh ada SATU default route aktif (distance terkecil). Jika ada multiple default route dengan distance sama, router akan load balance (ECMP).
STATIC ROUTE ROUTING CORE

Static route adalah route yang ditambahkan manual oleh admin. Digunakan untuk mengarahkan traffic ke network tertentu via gateway tertentu.

VIA CLI
# 1. Static route ke LAN Kantor B via Router B [admin@ROUTER-A] > /ip route add dst-address=192.168.20.0/24 gateway=10.10.10.2 distance=1 comment="To LAN Kantor B via Router B" # 2. Verifikasi routing table [admin@ROUTER-A] > /ip route print # DST-ADDRESS GATEWAY DISTANCE 0 0.0.0.0/0 202.X.X.1 1 1 192.168.20.0/24 10.10.10.2 1 (static) 2 10.10.10.0/30 10.10.10.1 0 (connected) 3 192.168.10.0/24 192.168.10.1 0 (connected) # 3. Test routing [admin@ROUTER-A] > /ping 192.168.20.100 HOST SIZE TTL TIME STATUS 192.168.20.100 56 64 5ms
VIA WINBOX
1
Menu: IP -> Routes
2
+ Add
3
Dst. Address: 192.168.20.0/24
4
Gateway: 10.10.10.2 (IP Router B)
5
Distance: 1
6
Comment: To LAN Kantor B
7
Klik OK
PARAMETER STATIC ROUTE
PARAMETERFUNGSICONTOH
dst-addressDestination network192.168.20.0/24
gatewayNext-hop IP address10.10.10.2
distancePrioritas (1 = tertinggi)1
scopeScope route30 (default)
target-scopeTarget scope10 (default)
commentDeskripsi route"To LAN B"
disabledEnable/disable routeno (aktif)
CONTOH KASUS
# Kasus 1: Route ke network cabang via router cabang [admin@ROUTER-A] > /ip route add dst-address=192.168.20.0/24 gateway=10.10.10.2 # Kasus 2: Route ke network cabang via interface [admin@ROUTER-A] > /ip route add dst-address=192.168.20.0/24 gateway=to-Router-B # Kasus 3: Multiple route ke network yang sama (backup) [admin@ROUTER-A] > /ip route add dst-address=192.168.20.0/24 gateway=10.10.10.2 distance=1 comment="Primary" [admin@ROUTER-A] > /ip route add dst-address=192.168.20.0/24 gateway=10.10.20.2 distance=2 comment="Backup" # Kasus 4: Route via VPN tunnel [admin@ROUTER-A] > /ip route add dst-address=192.168.30.0/24 gateway="vpn-tunnel"
PENTING: Gateway harus reachable (bisa di-ping). Jika gateway tidak reachable, route akan inactive. Cek dengan /ping [gateway-ip].
MULTI-ROUTER CONFIGURATION ADVANCED

Contoh konfigurasi routing statis untuk jaringan dengan 3 router: Router A (Gateway), Router B (Cabang 1), Router C (Cabang 2).

TOPOLOGI 3 ROUTER
// TOPOLOGI 3 ROUTER // [ INTERNET ] | v +-------------------+ | ROUTER A | Gateway Utama | WAN: 202.X.X.X | | LAN: 192.168.10.1 | +-------------------+ | | | | v v +-------------------+ +-------------------+ | ROUTER B | | ROUTER C | | 10.10.10.2 | | 10.10.20.2 | | LAN: 192.168.20.1 | | LAN: 192.168.30.1 | +-------------------+ +-------------------+ ROUTING TABLE: Router A: - 0.0.0.0/0 via ISP (default) - 192.168.10.0/24 connected - 192.168.20.0/24 via 10.10.10.2 (ke Router B) - 192.168.30.0/24 via 10.10.20.2 (ke Router C) Router B: - 0.0.0.0/0 via 10.10.10.1 (ke Router A) - 192.168.20.0/24 connected - 192.168.10.0/24 via 10.10.10.1 (ke Router A) - 192.168.30.0/24 via 10.10.10.1 (via Router A ke Router C) Router C: - 0.0.0.0/0 via 10.10.20.1 (ke Router A) - 192.168.30.0/24 connected - 192.168.10.0/24 via 10.10.20.1 (ke Router A) - 192.168.20.0/24 via 10.10.20.1 (via Router A ke Router B)
KONFIGURASI ROUTER A
# Router A - Gateway Utama # IP Addresses [admin@ROUTER-A] > /ip address add address=10.10.10.1/30 interface=to-Router-B [admin@ROUTER-A] > /ip address add address=10.10.20.1/30 interface=to-Router-C [admin@ROUTER-A] > /ip address add address=192.168.10.1/24 interface=LAN # Static Routes [admin@ROUTER-A] > /ip route add dst-address=192.168.20.0/24 gateway=10.10.10.2 [admin@ROUTER-A] > /ip route add dst-address=192.168.30.0/24 gateway=10.10.20.2
KONFIGURASI ROUTER B
# Router B - Cabang 1 # IP Addresses [admin@ROUTER-B] > /ip address add address=10.10.10.2/30 interface=to-Router-A [admin@ROUTER-B] > /ip address add address=192.168.20.1/24 interface=LAN # Default route ke Router A [admin@ROUTER-B] > /ip route add dst-address=0.0.0.0/0 gateway=10.10.10.1 # Static routes ke network lain [admin@ROUTER-B] > /ip route add dst-address=192.168.10.0/24 gateway=10.10.10.1 [admin@ROUTER-B] > /ip route add dst-address=192.168.30.0/24 gateway=10.10.10.1
KONFIGURASI ROUTER C
# Router C - Cabang 2 # IP Addresses [admin@ROUTER-C] > /ip address add address=10.10.20.2/30 interface=to-Router-A [admin@ROUTER-C] > /ip address add address=192.168.30.1/24 interface=LAN # Default route ke Router A [admin@ROUTER-C] > /ip route add dst-address=0.0.0.0/0 gateway=10.10.20.1 # Static routes ke network lain [admin@ROUTER-C] > /ip route add dst-address=192.168.10.0/24 gateway=10.10.20.1 [admin@ROUTER-C] > /ip route add dst-address=192.168.20.0/24 gateway=10.10.20.1
KUNCI: Setiap router harus punya route ke SEMUA network yang ingin diakses. Router B dan C tidak punya akses internet langsung, semua traffic internet harus lewat Router A.
RECURSIVE ROUTING ADVANCED

Recursive route adalah route yang gateway-nya bukan directly connected. Router harus resolve gateway terlebih dahulu melalui route lain.

CONTOH RECURSIVE ROUTE
// RECURSIVE ROUTING EXAMPLE // Router A punya route: 192.168.30.0/24 via 10.10.10.2 Tapi 10.10.10.2 BUKAN directly connected. Router A harus cari route ke 10.10.10.2 dulu. Router A punya route: 10.10.10.0/30 connected via to-Router-B Jadi router resolve: 192.168.30.0/24 -> via 10.10.10.2 -> via to-Router-B Ini disebut RECURSIVE ROUTING
VIA CLI
# Recursive route [admin@ROUTER-A] > /ip route add dst-address=192.168.30.0/24 gateway=10.10.10.2 # Cek routing table [admin@ROUTER-A] > /ip route print # DST-ADDRESS GATEWAY DISTANCE 0 0.0.0.0/0 202.X.X.1 1 1 192.168.30.0/24 10.10.10.2 1 (recursive) 2 10.10.10.0/30 10.10.10.1 0 (connected) # Router akan resolve recursive route otomatis # Selama gateway (10.10.10.2) reachable
VIA WINBOX
1
Menu: IP -> Routes
2
+ Add
3
Dst. Address: 192.168.30.0/24
4
Gateway: 10.10.10.2 (bukan directly connected)
5
Router akan otomatis resolve recursive
6
Klik OK
PERINGATAN: Recursive route bisa menyebabkan routing loop jika tidak dikonfigurasi dengan benar. Pastikan gateway recursive reachable dan tidak ada loop.
ECMP (EQUAL COST MULTI-PATH) ADVANCED

ECMP memungkinkan load balancing ke multiple gateway dengan distance yang sama. Traffic akan dibagi ke semua gateway yang available.

VIA CLI
# ECMP: 2 default route dengan distance sama [admin@ROUTER-A] > /ip route add dst-address=0.0.0.0/0 gateway=202.X.X.1 distance=1 comment="ISP 1" [admin@ROUTER-A] > /ip route add dst-address=0.0.0.0/0 gateway=203.X.X.1 distance=1 comment="ISP 2" # Cek routing table [admin@ROUTER-A] > /ip route print # DST-ADDRESS GATEWAY DISTANCE 0 0.0.0.0/0 202.X.X.1 1 (ECMP) 1 0.0.0.0/0 203.X.X.1 1 (ECMP) # Traffic akan di-load balance ke kedua ISP # Per-connection load balancing
VIA WINBOX
1
Menu: IP -> Routes
2
+ Add route 1: Gateway: 202.X.X.1, Distance: 1
3
+ Add route 2: Gateway: 203.X.X.1, Distance: 1
4
Kedua route akan jadi ECMP
5
Klik OK
ECMP vs FAILOVER
MODEDISTANCEBEHAVIOR
ECMPSama (1,1)Load balance ke semua gateway
FAILOVERBeda (1,2)Primary aktif, backup standby
TIPS: ECMP melakukan load balancing per-connection, bukan per-packet. Satu connection akan tetap pakai satu gateway. Untuk per-packet load balancing, butuh konfigurasi lebih kompleks.
BLACKHOLE & UNREACHABLE ROUTE ADVANCED

Blackhole route membuang semua packet ke network tertentu. Unreachable route mengirim ICMP unreachable ke pengirim.

VIA CLI
# 1. Blackhole route (drop semua packet) [admin@ROUTER-A] > /ip route add dst-address=192.168.99.0/24 type=blackhole comment="Blackhole" # 2. Unreachable route (ICMP unreachable) [admin@ROUTER-A] > /ip route add dst-address=192.168.100.0/24 type=unreachable comment="Unreachable" # 3. Prohibit route (silent drop) [admin@ROUTER-A] > /ip route add dst-address=192.168.101.0/24 type=prohibit # Cek routing table [admin@ROUTER-A] > /ip route print # DST-ADDRESS TYPE 0 192.168.99.0/24 blackhole 1 192.168.100.0/24 unreachable 2 192.168.101.0/24 prohibit
VIA WINBOX
1
Menu: IP -> Routes
2
+ Add
3
Dst. Address: 192.168.99.0/24
4
Type: blackhole (atau unreachable/prohibit)
5
Klik OK
PERBEDAAN TYPE
TYPEBEHAVIORUSE CASE
blackholeDrop packet silentlyBlock traffic tanpa notifikasi
unreachableICMP net unreachableBlock dengan notifikasi ke pengirim
prohibitICMP admin prohibitedBlock dengan pesan "admin prohibited"
TIPS: Blackhole route berguna untuk block traffic ke network tertentu. Lebih efisien daripada firewall filter karena diproses di routing level, bukan firewall level.
ROUTING FILTER ADVANCED

Routing filter digunakan untuk filter route yang diterima atau diadvertise dari routing protocol (OSPF, BGP). Tidak berlaku untuk static route.

VIA CLI
# Routing filter untuk OSPF/BGP # Tidak berlaku untuk static route # 1. Buat routing filter [admin@ROUTER-A] > /routing filter add chain="ospf-in" prefix=192.168.99.0/24 action=reject # 2. Apply filter ke OSPF instance [admin@ROUTER-A] > /routing ospf instance set [find] routing-filter="ospf-in" # Filter akan reject route 192.168.99.0/24 dari OSPF
VIA WINBOX
1
Menu: Routing -> Filters
2
+ Add
3
Chain: ospf-in
4
Prefix: 192.168.99.0/24
5
Action: reject
6
Klik OK
CATATAN: RB941 dengan RouterOS v6 tidak support OSPF/BGP penuh. Routing filter lebih berguna untuk RouterOS v7 atau router yang lebih tinggi. Untuk static route, tidak perlu routing filter.
MONITORING ROUTING MONITORING

Monitor routing table dan routing traffic untuk troubleshooting dan analisis.

VIA CLI
# 1. Cek routing table [admin@ROUTER-A] > /ip route print # DST-ADDRESS GATEWAY DISTANCE 0 0.0.0.0/0 202.X.X.1 1 1 192.168.20.0/24 10.10.10.2 1 2 10.10.10.0/30 10.10.10.1 0 # 2. Cek routing table detail [admin@ROUTER-A] > /ip route print detail # 3. Test routing ke network tertentu [admin@ROUTER-A] > /ping 192.168.20.100 # 4. Traceroute untuk lihat path [admin@ROUTER-A] > /tool traceroute 192.168.20.100 # 5. Cek routing cache [admin@ROUTER-A] > /ip route print cache # 6. Monitoring routing traffic [admin@ROUTER-A] > /tool traffic-monitor interface=to-Router-B
VIA WINBOX
1
Menu: IP -> Routes
2
Lihat semua route di list
3
Tools -> Traceroute untuk lihat path
4
Tools -> Traffic Monitor untuk monitor traffic
5
Tools -> Torch untuk detail traffic
METRIK YANG PERLU DIMONITOR
METRIKCARA CEKKETERANGAN
Routing Table/ip route printSemua route yang aktif
Route Status/ip route print detailActive/inactive/reachable
Connectivity/ping [destination]Test connectivity ke network
Path/tool traceroute [destination]Lihat path yang dilewati
Traffic/tool traffic-monitorMonitor traffic per interface
TIPS: Monitor routing table secara berkala. Jika ada route yang inactive, cek gateway reachable. Gunakan traceroute untuk debug routing path.
TROUBLESHOOTING ROUTING SUPPORT

Masalah umum routing statis dan solusinya.

ROUTE INACTIVE (TIDAK AKTIF)
KEMUNGKINAN PENYEBAB:
1. Gateway tidak reachable (tidak bisa di-ping)
2. Interface gateway down
3. Recursive route tidak bisa di-resolve
4. Route disabled
SOLUSI: Cek gateway reachable: /ping [gateway]. Cek interface up: /interface print. Cek recursive route resolve.
TIDAK BISA AKSES NETWORK TERTENTU
KEMUNGKINAN PENYEBAB:
1. Route ke network tersebut tidak ada
2. Route ada tapi inactive
3. Firewall block traffic
4. Router di tengah tidak punya route balik
SOLUSI: Cek /ip route print. Cek firewall filter. Cek router intermediate punya route balik (return route).
ROUTING LOOP
KEMUNGKINAN PENYEBAB:
1. Recursive route loop (A -> B -> A)
2. Multiple route dengan gateway yang saling menunjuk
3. Misconfiguration di multi-router setup
SOLUSI: Cek routing table dengan traceroute. Pastikan tidak ada loop. Gunakan distance yang berbeda untuk avoid loop.
TRAFFIC TIDAK LEWAT ROUTE YANG DIHARAPKAN
KEMUNGKINAN PENYEBAB:
1. Ada route lain dengan distance lebih kecil
2. ECMP aktif (multiple route distance sama)
3. Route lebih spesifik (longer prefix) menang
SOLUSI: Cek /ip route print. Cek distance. Cek prefix length. Route dengan prefix lebih panjang lebih spesifik dan lebih diprioritaskan.
GATEWAY UNREACHABLE
KEMUNGKINAN PENYEBAB:
1. Router gateway down
2. Link ke gateway down
4. IP gateway salah konfigurasi
5. Recursive route tidak bisa resolve
SOLUSI: Ping gateway. Cek interface. Cek IP address. Untuk recursive, pastikan intermediate route ada.
DIAGNOSTIC COMMANDS
# Cek routing table > /ip route print > /ip route print detail > /ip route print cache # Test connectivity > /ping [destination] > /tool traceroute [destination] # Cek interface > /interface print > /ip address print # Monitor traffic > /tool traffic-monitor interface=[interface] > /tool torch interface=[interface] # Cek gateway reachable > /ping [gateway-ip]
BEST PRACTICE ROUTING TIPS
DOCUMENT ROUTES
Selalu beri comment di setiap route. Dokumentasikan topologi network. Memudahkan troubleshooting.
USE SUMMARY ROUTES
Gunakan summary route (supernet) untuk mengurangi jumlah route. Contoh: 192.168.0.0/16 untuk semua 192.168.x.x.
TEST BEFORE APPLY
Test route dengan ping/traceroute sebelum apply ke production. Pastikan gateway reachable.
MONITOR REGULARLY
Monitor routing table secara berkala. Cek route inactive. Monitor traffic pattern.
AVOID ROUTING LOOP
Pastikan tidak ada loop. Gunakan distance berbeda. Cek dengan traceroute.
USE BACKUP ROUTES
Untuk critical network, sediakan backup route dengan distance lebih tinggi.
CHECK RETURN ROUTE
Untuk multi-router, pastikan semua router punya route balik (return route).
BACKUP CONFIG
Backup konfigurasi router sebelum perubahan routing. Jika salah, bisa restore.
USE DESCRIPTIVE NAMES
Beri nama interface dan route yang deskriptif. Memudahkan identifikasi dan troubleshooting.
VERIFY CONNECTIVITY
Setelah add route, test connectivity ke destination. Pastikan traffic lewat route yang benar.
MONITOR GATEWAY
Monitor gateway reachability. Gunakan netwatch untuk alert jika gateway down.
DOCUMENT TOPOLOGY
Dokumentasikan topologi network lengkap. Update saat ada perubahan. Penting untuk troubleshooting.
ROUTING CHEATSHEET QUICK REF
ROUTING COMMANDS
# ROUTING TABLE > /ip route print > /ip route print detail > /ip route print cache # ADD STATIC ROUTE > /ip route add dst-address=192.168.20.0/24 gateway=10.10.10.2 distance=1 # ADD DEFAULT ROUTE > /ip route add dst-address=0.0.0.0/0 gateway=202.X.X.1 distance=1 # ADD BLACKHOLE ROUTE > /ip route add dst-address=192.168.99.0/24 type=blackhole # ADD UNREACHABLE ROUTE > /ip route add dst-address=192.168.100.0/24 type=unreachable # EDIT ROUTE > /ip route set [find dst-address=192.168.20.0/24] gateway=10.10.10.3 # REMOVE ROUTE > /ip route remove [find dst-address=192.168.20.0/24] # DISABLE/ENABLE ROUTE > /ip route disable [find dst-address=192.168.20.0/24] > /ip route enable [find dst-address=192.168.20.0/24] # TEST ROUTING > /ping [destination] > /tool traceroute [destination] # MONITORING > /tool traffic-monitor interface=[interface] > /tool torch interface=[interface]
ABDURROZAK.MY.ID // JARINGAN SOSIAL