goodnight.
The following is a simple and probably correct settings for the machine configuration mikrotik simple and squid as a proxy.
topology as follows: Internet – Mikrotik – Squid – Client
where the SQUID is used as bandwidth management
required
1. Mikrotik box with 3 ethernet cards will be used to
ether1 as public,
ether2 as Ian, and
ether3 as proxy (to the squid).
2. Squid box
initial configuration:
1. Mikrotik Box:
* Public ip 192.168.1.2/30 with gateway 192 .. 168.1.1, (ip modem)
* Proxy ip 192.168.0.1/30,
* Lan ip 192.168.10.1/24,
2. Squid Box:
* Set the ip 192.168.0.2/30
* Port 8080
steps:
1. Setting mikrotik WebProxy on:
- Quote :
- [kevin @ MARS]> / ip web-proxy print
enabled: no
src-address: 0.0.0.0
port: 3128
hostname: "proxy"
transparent-proxy: no
parent-proxy: 0.0.0.0:0
cache-administrator: "webmaster"
max-object-size: 4096KiB
cache-drive: system
max-cache-size: none
max-ram-cache-size: unlimited
status: stopped
reserved-for-cache: 0KiB
reserved-for-ram-cache: 29696KiB
- Quote :
- [kevin @ MARS]> / ip web-proxy set enabled = yes hostname = "proxy" transparent-proxy = yes parent-proxy = 192.168.0.2:8080 cache-administrator = "meonkz" max-ram-cache-size = none enabled = yes
- Quote :
- [kevin @ MARS]> / ip web-proxy print
enabled: yes
src-address: 0.0.0.0
port: 3128
hostname: "proxy"
transparent-proxy: yes
parent-proxy: 192.168.0.2:8080
cache-administrator: "meonkz"
max-object-size: 4096KiB
cache-drive: system
max-cache-size: none
max-ram-cache-size: none
status: running
reserved-for-cache: 0KiB
reserved-for-ram-cache: 29696KiB
2. NAT settings where the port 80 will be redirected to webproxy.
- Quote :
- [kevin @ MARS]> / ip firewall nat add action = redirect chain = dstnat src-address = 192.168.10.0/24 protocol = tcp dst-port = 80 to-ports = 3128 in-interface = lan
3. completed. hehehehhe … simple right ..
may be useful.
thanks.