[{"data":1,"prerenderedAt":1166},["ShallowReactive",2],{"navigation":3,"\u002Fkeamanan-jaringan\u002Fzerotier-mikrotik-dst-nat":113,"\u002Fkeamanan-jaringan\u002Fzerotier-mikrotik-dst-nat-surround":1161},[4,8,54,71,92],{"title":5,"path":6,"stem":7},"Pendahuluan & Panduan LMS","\u002Fintroduction","0.introduction",{"title":9,"path":10,"stem":11,"children":12,"page":53},"Administrasi Server Jaringan","\u002Fadministrasi-server-jaringan","1.administrasi-server-jaringan",[13,17,21,25,29,33,37,41,45,49],{"title":14,"path":15,"stem":16},"Pengantar Administrasi Server Jaringan","\u002Fadministrasi-server-jaringan\u002Fintroduction","1.administrasi-server-jaringan\u002F1.introduction",{"title":18,"path":19,"stem":20},"Pengenalan & Instalasi Debian Server","\u002Fadministrasi-server-jaringan\u002Fpengenalan-dan-instalasi-debian","1.administrasi-server-jaringan\u002F2.pengenalan-dan-instalasi-debian",{"title":22,"path":23,"stem":24},"Pengenalan & Instalasi Ubuntu Server","\u002Fadministrasi-server-jaringan\u002Fpengenalan-dan-instalasi-ubuntu","1.administrasi-server-jaringan\u002F3.pengenalan-dan-instalasi-ubuntu",{"title":26,"path":27,"stem":28},"Konfigurasi IP Address (Debian & Ubuntu)","\u002Fadministrasi-server-jaringan\u002Fkonfigurasi-ip-address","1.administrasi-server-jaringan\u002F4.konfigurasi-ip-address",{"title":30,"path":31,"stem":32},"Perintah Dasar Linux CLI (Debian\u002FUbuntu)","\u002Fadministrasi-server-jaringan\u002Fperintah-dasar-linux","1.administrasi-server-jaringan\u002F5.perintah-dasar-linux",{"title":34,"path":35,"stem":36},"Remote Server Management (OpenSSH)","\u002Fadministrasi-server-jaringan\u002Fremote-server-management","1.administrasi-server-jaringan\u002F6.remote-server-management",{"title":38,"path":39,"stem":40},"DHCP Server (Kea DHCP & ISC-DHCP)","\u002Fadministrasi-server-jaringan\u002Fdhcp-server","1.administrasi-server-jaringan\u002F7.dhcp-server",{"title":42,"path":43,"stem":44},"DHCP Server Modern (Kea DHCPv4)","\u002Fadministrasi-server-jaringan\u002Fdhcp-server-kea","1.administrasi-server-jaringan\u002F7.dhcp-server-kea",{"title":46,"path":47,"stem":48},"DHCP Server Classic (ISC-DHCP)","\u002Fadministrasi-server-jaringan\u002Fdhcp-server-isc","1.administrasi-server-jaringan\u002F8.dhcp-server-isc",{"title":50,"path":51,"stem":52},"DNS Server (BIND9)","\u002Fadministrasi-server-jaringan\u002Fdns-server","1.administrasi-server-jaringan\u002F9.dns-server",false,{"title":55,"path":56,"stem":57,"children":58,"page":53},"Keamanan Jaringan","\u002Fkeamanan-jaringan","2.keamanan-jaringan",[59,63,67],{"title":60,"path":61,"stem":62},"Pengantar Keamanan Jaringan","\u002Fkeamanan-jaringan\u002Fintroduction","2.keamanan-jaringan\u002F1.introduction",{"title":64,"path":65,"stem":66},"MikroTik Firewall & NAT","\u002Fkeamanan-jaringan\u002Fmikrotik-firewall-nat","2.keamanan-jaringan\u002F2.mikrotik-firewall-nat",{"title":68,"path":69,"stem":70},"ZeroTier + MikroTik dst-nat","\u002Fkeamanan-jaringan\u002Fzerotier-mikrotik-dst-nat","2.keamanan-jaringan\u002F3.zerotier-mikrotik-dst-nat",{"title":72,"path":73,"stem":74,"children":75,"page":53},"Mata Pelajaran Pilihan","\u002Fmata-pelajaran-pilihan","3.mata-pelajaran-pilihan",[76,80,84,88],{"title":77,"path":78,"stem":79},"Pengantar Mata Pelajaran Pilihan & Materi Tambahan","\u002Fmata-pelajaran-pilihan\u002Fintroduction","3.mata-pelajaran-pilihan\u002F1.introduction",{"title":81,"path":82,"stem":83},"Docker Container Management","\u002Fmata-pelajaran-pilihan\u002Fdocker-management","3.mata-pelajaran-pilihan\u002F2.docker-management",{"title":85,"path":86,"stem":87},"Proxmox VE Setup","\u002Fmata-pelajaran-pilihan\u002Fproxmox-setup","3.mata-pelajaran-pilihan\u002F3.proxmox-setup",{"title":89,"path":90,"stem":91},"XCP-NG Setup","\u002Fmata-pelajaran-pilihan\u002Fxcpng-setup","3.mata-pelajaran-pilihan\u002F4.xcpng-setup",{"title":93,"path":94,"stem":95,"children":96,"page":53},"Uji Kompetensi","\u002Fuji-kompetensi","4.uji-kompetensi",[97,101,105,109],{"title":98,"path":99,"stem":100},"Uji Kompetensi Keahlian (UKK) Kelas 12","\u002Fuji-kompetensi\u002Fintroduction","4.uji-kompetensi\u002F1.introduction",{"title":102,"path":103,"stem":104},"UKK Paket 1 - Rancang Bangun Jaringan & Server","\u002Fuji-kompetensi\u002Fpaket-1-rancang-bangun-jaringan","4.uji-kompetensi\u002F2.paket-1-rancang-bangun-jaringan",{"title":106,"path":107,"stem":108},"UKK Paket 2 - Server & Keamanan Jaringan","\u002Fuji-kompetensi\u002Fpaket-2-server-dan-keamanan-jaringan","4.uji-kompetensi\u002F3.paket-2-server-dan-keamanan-jaringan",{"title":110,"path":111,"stem":112},"Checklist Verifikasi & Lembar Penilaian UKK","\u002Fuji-kompetensi\u002Fchecklist-dan-lembar-penilaian","4.uji-kompetensi\u002F4.checklist-dan-lembar-penilaian",{"id":114,"title":68,"body":115,"description":1155,"extension":1156,"links":1157,"meta":1158,"navigation":318,"path":69,"seo":1159,"stem":70,"__hash__":1160},"docs\u002F2.keamanan-jaringan\u002F3.zerotier-mikrotik-dst-nat.md",{"type":116,"value":117,"toc":1123},"minimark",[118,122,126,131,142,146,149,178,182,203,207,212,245,249,252,275,279,283,338,345,349,406,410,440,444,447,451,549,553,634,638,717,721,801,805,847,851,855,871,875,892,946,950,970,974,978,1017,1021,1024,1041,1062,1066,1069,1092,1096,1119],[119,120,68],"h1",{"id":121},"zerotier-mikrotik-dst-nat",[123,124,125],"p",{},"Panduan ini menjelaskan cara membangun remote access ke seluruh layanan internal (Proxmox, XCP-NG, Web Server, Modem ONT) secara aman menggunakan ZeroTier sebagai encrypted overlay network, dikombinasikan dengan MikroTik dst-nat untuk manajemen port per service.",[127,128,130],"h2",{"id":129},"arsitektur","Arsitektur",[132,133,138],"pre",{"className":134,"code":136,"language":137},[135],"language-text","Internet\n    │\n    ▼\n[ZeroTier Network - 10.x.x.x] ← Encrypted Tunnel\n    │\n    ▼\n[MikroTik Router]\n    │\n    ├── dst-nat :80   → Web Server\n    ├── dst-nat :8006 → Proxmox VE\n    ├── dst-nat :8080 → XCP-NG\n    └── dst-nat :8090 → Modem ONT\n","text",[139,140,136],"code",{"__ignoreMap":141},"",[127,143,145],{"id":144},"mengapa-zerotier-mikrotik","Mengapa ZeroTier + MikroTik?",[123,147,148],{},"Dibanding port forwarding konvensional ke IP publik, kombinasi ini memberikan:",[150,151,152,160,166,172],"ul",{},[153,154,155,159],"li",{},[156,157,158],"strong",{},"Zero public port exposure"," — tidak ada port yang terbuka ke internet",[153,161,162,165],{},[156,163,164],{},"Encrypted tunnel"," — semua traffic terenkripsi end-to-end",[153,167,168,171],{},[156,169,170],{},"Attack surface minimal"," — hanya device yang join ZeroTier network yang bisa akses",[153,173,174,177],{},[156,175,176],{},"Fleksibel"," — bisa manage banyak service dari satu IP ZeroTier",[127,179,181],{"id":180},"prerequisites","Prerequisites",[150,183,184,187,197,200],{},[153,185,186],{},"MikroTik Router dengan RouterOS v7+",[153,188,189,190],{},"Akun ZeroTier di ",[191,192,196],"a",{"href":193,"rel":194},"https:\u002F\u002Fmy.zerotier.com",[195],"nofollow","my.zerotier.com",[153,198,199],{},"Server\u002Fdevice yang ingin diakses sudah berjalan",[153,201,202],{},"Akses ke Winbox atau SSH ke MikroTik",[127,204,206],{"id":205},"step-1-setup-zerotier-network","Step 1 — Setup ZeroTier Network",[208,209,211],"h3",{"id":210},"_11-buat-network-baru","1.1 Buat Network Baru",[213,214,215,221,227,238],"ol",{},[153,216,217,218],{},"Login ke ",[191,219,196],{"href":193,"rel":220},[195],[153,222,223,224],{},"Klik ",[156,225,226],{},"Create A Network",[153,228,229,230,233,234,237],{},"Catat ",[156,231,232],{},"Network ID"," yang digenerate (contoh: ",[139,235,236],{},"a1b2c3d4e5f6g7h8",")",[153,239,240,241,244],{},"Di bagian ",[156,242,243],{},"Advanced > Managed Routes",", tambahkan route ke subnet internal kamu",[208,246,248],{"id":247},"_12-setting-network","1.2 Setting Network",[123,250,251],{},"Di dashboard ZeroTier, pastikan:",[150,253,254,260,266],{},[153,255,256,259],{},[156,257,258],{},"Access Control",": Private (hanya member yang di-authorize bisa join)",[153,261,262,265],{},[156,263,264],{},"IP Assignment",": Auto-assign IPv4 aktif",[153,267,268,271,272],{},[156,269,270],{},"Subnet",": misalnya ",[139,273,274],{},"10.147.17.0\u002F24",[127,276,278],{"id":277},"step-2-install-zerotier-di-mikrotik","Step 2 — Install ZeroTier di MikroTik",[208,280,282],{"id":281},"_21-download-package-zerotier","2.1 Download Package ZeroTier",[132,284,288],{"className":285,"code":286,"language":287,"meta":141,"style":141},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","# Cek versi RouterOS kamu dulu\n\u002Fsystem resource print\n\n# Download package zerotier sesuai arsitektur\n# Untuk ARM: zerotier-X.X.X-arm.npk\n# Untuk x86: zerotier-X.X.X-x86.npk\n","bash",[139,289,290,299,313,320,326,332],{"__ignoreMap":141},[291,292,295],"span",{"class":293,"line":294},"line",1,[291,296,298],{"class":297},"sHwdD","# Cek versi RouterOS kamu dulu\n",[291,300,302,306,310],{"class":293,"line":301},2,[291,303,305],{"class":304},"sBMFI","\u002Fsystem",[291,307,309],{"class":308},"sfazB"," resource",[291,311,312],{"class":308}," print\n",[291,314,316],{"class":293,"line":315},3,[291,317,319],{"emptyLinePlaceholder":318},true,"\n",[291,321,323],{"class":293,"line":322},4,[291,324,325],{"class":297},"# Download package zerotier sesuai arsitektur\n",[291,327,329],{"class":293,"line":328},5,[291,330,331],{"class":297},"# Untuk ARM: zerotier-X.X.X-arm.npk\n",[291,333,335],{"class":293,"line":334},6,[291,336,337],{"class":297},"# Untuk x86: zerotier-X.X.X-x86.npk\n",[123,339,340,341,344],{},"Upload file ",[139,342,343],{},".npk"," via Winbox → Files, lalu reboot MikroTik.",[208,346,348],{"id":347},"_22-enable-zerotier","2.2 Enable ZeroTier",[132,350,352],{"className":285,"code":351,"language":287,"meta":141,"style":141},"# Aktifkan ZeroTier\n\u002Fzerotier enable\n\n# Tambahkan network\n\u002Fzerotier add network=a1b2c3d4e5f6g7h8 name=zt-home\n\n# Cek status\n\u002Fzerotier print\n",[139,353,354,359,367,371,376,389,393,399],{"__ignoreMap":141},[291,355,356],{"class":293,"line":294},[291,357,358],{"class":297},"# Aktifkan ZeroTier\n",[291,360,361,364],{"class":293,"line":301},[291,362,363],{"class":304},"\u002Fzerotier",[291,365,366],{"class":308}," enable\n",[291,368,369],{"class":293,"line":315},[291,370,319],{"emptyLinePlaceholder":318},[291,372,373],{"class":293,"line":322},[291,374,375],{"class":297},"# Tambahkan network\n",[291,377,378,380,383,386],{"class":293,"line":328},[291,379,363],{"class":304},[291,381,382],{"class":308}," add",[291,384,385],{"class":308}," network=a1b2c3d4e5f6g7h8",[291,387,388],{"class":308}," name=zt-home\n",[291,390,391],{"class":293,"line":334},[291,392,319],{"emptyLinePlaceholder":318},[291,394,396],{"class":293,"line":395},7,[291,397,398],{"class":297},"# Cek status\n",[291,400,402,404],{"class":293,"line":401},8,[291,403,363],{"class":304},[291,405,312],{"class":308},[208,407,409],{"id":408},"_23-authorize-mikrotik-di-dashboard","2.3 Authorize MikroTik di Dashboard",[213,411,412,418,424,431],{},[153,413,414,415],{},"Buka ",[191,416,196],{"href":193,"rel":417},[195],[153,419,420,421],{},"Di halaman network kamu, scroll ke ",[156,422,423],{},"Members",[153,425,426,427,430],{},"Centang ",[156,428,429],{},"Auth"," pada device MikroTik yang muncul",[153,432,229,433,436,437,237],{},[156,434,435],{},"IP ZeroTier"," yang diberikan ke MikroTik (contoh: ",[139,438,439],{},"10.147.17.1",[127,441,443],{"id":442},"step-3-konfigurasi-dst-nat-di-mikrotik","Step 3 — Konfigurasi dst-nat di MikroTik",[123,445,446],{},"Setelah ZeroTier terkoneksi, buat rule dst-nat untuk setiap service yang ingin diakses.",[208,448,450],{"id":449},"_31-dst-nat-ke-proxmox-port-8006","3.1 dst-nat ke Proxmox (port 8006)",[132,452,454],{"className":285,"code":453,"language":287,"meta":141,"style":141},"\u002Fip firewall nat add \\\n  chain=dstnat \\\n  dst-address=10.147.17.1 \\\n  dst-port=8006 \\\n  protocol=tcp \\\n  action=dst-nat \\\n  to-addresses=192.168.1.10 \\\n  to-ports=8006 \\\n  comment=\"Proxmox VE\"\n",[139,455,456,473,480,490,500,507,514,524,533],{"__ignoreMap":141},[291,457,458,461,464,467,469],{"class":293,"line":294},[291,459,460],{"class":304},"\u002Fip",[291,462,463],{"class":308}," firewall",[291,465,466],{"class":308}," nat",[291,468,382],{"class":308},[291,470,472],{"class":471},"sTEyZ"," \\\n",[291,474,475,478],{"class":293,"line":301},[291,476,477],{"class":308},"  chain=dstnat",[291,479,472],{"class":471},[291,481,482,485,488],{"class":293,"line":315},[291,483,484],{"class":308},"  dst-address=",[291,486,439],{"class":487},"sbssI",[291,489,472],{"class":471},[291,491,492,495,498],{"class":293,"line":322},[291,493,494],{"class":308},"  dst-port=",[291,496,497],{"class":487},"8006",[291,499,472],{"class":471},[291,501,502,505],{"class":293,"line":328},[291,503,504],{"class":308},"  protocol=tcp",[291,506,472],{"class":471},[291,508,509,512],{"class":293,"line":334},[291,510,511],{"class":308},"  action=dst-nat",[291,513,472],{"class":471},[291,515,516,519,522],{"class":293,"line":395},[291,517,518],{"class":308},"  to-addresses=",[291,520,521],{"class":487},"192.168.1.10",[291,523,472],{"class":471},[291,525,526,529,531],{"class":293,"line":401},[291,527,528],{"class":308},"  to-ports=",[291,530,497],{"class":487},[291,532,472],{"class":471},[291,534,536,539,543,546],{"class":293,"line":535},9,[291,537,538],{"class":308},"  comment=",[291,540,542],{"class":541},"sMK4o","\"",[291,544,545],{"class":308},"Proxmox VE",[291,547,548],{"class":541},"\"\n",[208,550,552],{"id":551},"_32-dst-nat-ke-xcp-ng-port-8080","3.2 dst-nat ke XCP-NG (port 8080)",[132,554,556],{"className":285,"code":555,"language":287,"meta":141,"style":141},"\u002Fip firewall nat add \\\n  chain=dstnat \\\n  dst-address=10.147.17.1 \\\n  dst-port=8080 \\\n  protocol=tcp \\\n  action=dst-nat \\\n  to-addresses=192.168.1.11 \\\n  to-ports=80 \\\n  comment=\"XCP-NG Xen Orchestra\"\n",[139,557,558,570,576,584,593,599,605,614,623],{"__ignoreMap":141},[291,559,560,562,564,566,568],{"class":293,"line":294},[291,561,460],{"class":304},[291,563,463],{"class":308},[291,565,466],{"class":308},[291,567,382],{"class":308},[291,569,472],{"class":471},[291,571,572,574],{"class":293,"line":301},[291,573,477],{"class":308},[291,575,472],{"class":471},[291,577,578,580,582],{"class":293,"line":315},[291,579,484],{"class":308},[291,581,439],{"class":487},[291,583,472],{"class":471},[291,585,586,588,591],{"class":293,"line":322},[291,587,494],{"class":308},[291,589,590],{"class":487},"8080",[291,592,472],{"class":471},[291,594,595,597],{"class":293,"line":328},[291,596,504],{"class":308},[291,598,472],{"class":471},[291,600,601,603],{"class":293,"line":334},[291,602,511],{"class":308},[291,604,472],{"class":471},[291,606,607,609,612],{"class":293,"line":395},[291,608,518],{"class":308},[291,610,611],{"class":487},"192.168.1.11",[291,613,472],{"class":471},[291,615,616,618,621],{"class":293,"line":401},[291,617,528],{"class":308},[291,619,620],{"class":487},"80",[291,622,472],{"class":471},[291,624,625,627,629,632],{"class":293,"line":535},[291,626,538],{"class":308},[291,628,542],{"class":541},[291,630,631],{"class":308},"XCP-NG Xen Orchestra",[291,633,548],{"class":541},[208,635,637],{"id":636},"_33-dst-nat-ke-web-server-port-80","3.3 dst-nat ke Web Server (port 80)",[132,639,641],{"className":285,"code":640,"language":287,"meta":141,"style":141},"\u002Fip firewall nat add \\\n  chain=dstnat \\\n  dst-address=10.147.17.1 \\\n  dst-port=80 \\\n  protocol=tcp \\\n  action=dst-nat \\\n  to-addresses=192.168.1.20 \\\n  to-ports=80 \\\n  comment=\"Web Server\"\n",[139,642,643,655,661,669,677,683,689,698,706],{"__ignoreMap":141},[291,644,645,647,649,651,653],{"class":293,"line":294},[291,646,460],{"class":304},[291,648,463],{"class":308},[291,650,466],{"class":308},[291,652,382],{"class":308},[291,654,472],{"class":471},[291,656,657,659],{"class":293,"line":301},[291,658,477],{"class":308},[291,660,472],{"class":471},[291,662,663,665,667],{"class":293,"line":315},[291,664,484],{"class":308},[291,666,439],{"class":487},[291,668,472],{"class":471},[291,670,671,673,675],{"class":293,"line":322},[291,672,494],{"class":308},[291,674,620],{"class":487},[291,676,472],{"class":471},[291,678,679,681],{"class":293,"line":328},[291,680,504],{"class":308},[291,682,472],{"class":471},[291,684,685,687],{"class":293,"line":334},[291,686,511],{"class":308},[291,688,472],{"class":471},[291,690,691,693,696],{"class":293,"line":395},[291,692,518],{"class":308},[291,694,695],{"class":487},"192.168.1.20",[291,697,472],{"class":471},[291,699,700,702,704],{"class":293,"line":401},[291,701,528],{"class":308},[291,703,620],{"class":487},[291,705,472],{"class":471},[291,707,708,710,712,715],{"class":293,"line":535},[291,709,538],{"class":308},[291,711,542],{"class":541},[291,713,714],{"class":308},"Web Server",[291,716,548],{"class":541},[208,718,720],{"id":719},"_34-dst-nat-ke-modem-ont-port-8090","3.4 dst-nat ke Modem ONT (port 8090)",[132,722,724],{"className":285,"code":723,"language":287,"meta":141,"style":141},"\u002Fip firewall nat add \\\n  chain=dstnat \\\n  dst-address=10.147.17.1 \\\n  dst-port=8090 \\\n  protocol=tcp \\\n  action=dst-nat \\\n  to-addresses=192.168.1.1 \\\n  to-ports=80 \\\n  comment=\"Modem ONT\"\n",[139,725,726,738,744,752,761,767,773,782,790],{"__ignoreMap":141},[291,727,728,730,732,734,736],{"class":293,"line":294},[291,729,460],{"class":304},[291,731,463],{"class":308},[291,733,466],{"class":308},[291,735,382],{"class":308},[291,737,472],{"class":471},[291,739,740,742],{"class":293,"line":301},[291,741,477],{"class":308},[291,743,472],{"class":471},[291,745,746,748,750],{"class":293,"line":315},[291,747,484],{"class":308},[291,749,439],{"class":487},[291,751,472],{"class":471},[291,753,754,756,759],{"class":293,"line":322},[291,755,494],{"class":308},[291,757,758],{"class":487},"8090",[291,760,472],{"class":471},[291,762,763,765],{"class":293,"line":328},[291,764,504],{"class":308},[291,766,472],{"class":471},[291,768,769,771],{"class":293,"line":334},[291,770,511],{"class":308},[291,772,472],{"class":471},[291,774,775,777,780],{"class":293,"line":395},[291,776,518],{"class":308},[291,778,779],{"class":487},"192.168.1.1",[291,781,472],{"class":471},[291,783,784,786,788],{"class":293,"line":401},[291,785,528],{"class":308},[291,787,620],{"class":487},[291,789,472],{"class":471},[291,791,792,794,796,799],{"class":293,"line":535},[291,793,538],{"class":308},[291,795,542],{"class":541},[291,797,798],{"class":308},"Modem ONT",[291,800,548],{"class":541},[208,802,804],{"id":803},"_35-tambahkan-masquerade-jika-belum-ada","3.5 Tambahkan Masquerade (jika belum ada)",[132,806,808],{"className":285,"code":807,"language":287,"meta":141,"style":141},"\u002Fip firewall nat add \\\n  chain=srcnat \\\n  action=masquerade \\\n  comment=\"Masquerade\"\n",[139,809,810,822,829,836],{"__ignoreMap":141},[291,811,812,814,816,818,820],{"class":293,"line":294},[291,813,460],{"class":304},[291,815,463],{"class":308},[291,817,466],{"class":308},[291,819,382],{"class":308},[291,821,472],{"class":471},[291,823,824,827],{"class":293,"line":301},[291,825,826],{"class":308},"  chain=srcnat",[291,828,472],{"class":471},[291,830,831,834],{"class":293,"line":315},[291,832,833],{"class":308},"  action=masquerade",[291,835,472],{"class":471},[291,837,838,840,842,845],{"class":293,"line":322},[291,839,538],{"class":308},[291,841,542],{"class":541},[291,843,844],{"class":308},"Masquerade",[291,846,548],{"class":541},[127,848,850],{"id":849},"step-4-verifikasi-koneksi","Step 4 — Verifikasi Koneksi",[208,852,854],{"id":853},"_41-cek-zerotier-status-di-mikrotik","4.1 Cek ZeroTier Status di MikroTik",[132,856,858],{"className":285,"code":857,"language":287,"meta":141,"style":141},"\u002Fzerotier print\n# Pastikan status: OK dan ada IP yang terassign\n",[139,859,860,866],{"__ignoreMap":141},[291,861,862,864],{"class":293,"line":294},[291,863,363],{"class":304},[291,865,312],{"class":308},[291,867,868],{"class":293,"line":301},[291,869,870],{"class":297},"# Pastikan status: OK dan ada IP yang terassign\n",[208,872,874],{"id":873},"_42-test-akses-dari-device-lain","4.2 Test Akses dari Device Lain",[213,876,877,880,886,889],{},[153,878,879],{},"Install ZeroTier di laptop\u002FHP kamu",[153,881,882,883],{},"Join network yang sama: ",[139,884,885],{},"zerotier-cli join a1b2c3d4e5f6g7h8",[153,887,888],{},"Authorize device kamu di dashboard ZeroTier",[153,890,891],{},"Test akses service:",[132,893,895],{"className":285,"code":894,"language":287,"meta":141,"style":141},"# Test Proxmox\ncurl -k https:\u002F\u002F10.147.17.1:8006\n\n# Test Web Server\ncurl http:\u002F\u002F10.147.17.1:80\n\n# Ping MikroTik via ZeroTier\nping 10.147.17.1\n",[139,896,897,902,913,917,922,929,933,938],{"__ignoreMap":141},[291,898,899],{"class":293,"line":294},[291,900,901],{"class":297},"# Test Proxmox\n",[291,903,904,907,910],{"class":293,"line":301},[291,905,906],{"class":304},"curl",[291,908,909],{"class":308}," -k",[291,911,912],{"class":308}," https:\u002F\u002F10.147.17.1:8006\n",[291,914,915],{"class":293,"line":315},[291,916,319],{"emptyLinePlaceholder":318},[291,918,919],{"class":293,"line":322},[291,920,921],{"class":297},"# Test Web Server\n",[291,923,924,926],{"class":293,"line":328},[291,925,906],{"class":304},[291,927,928],{"class":308}," http:\u002F\u002F10.147.17.1:80\n",[291,930,931],{"class":293,"line":334},[291,932,319],{"emptyLinePlaceholder":318},[291,934,935],{"class":293,"line":395},[291,936,937],{"class":297},"# Ping MikroTik via ZeroTier\n",[291,939,940,943],{"class":293,"line":401},[291,941,942],{"class":304},"ping",[291,944,945],{"class":487}," 10.147.17.1\n",[208,947,949],{"id":948},"_43-cek-rule-nat-di-mikrotik","4.3 Cek Rule NAT di MikroTik",[132,951,953],{"className":285,"code":952,"language":287,"meta":141,"style":141},"\u002Fip firewall nat print\n# Pastikan semua rule muncul dan tidak ada error\n",[139,954,955,965],{"__ignoreMap":141},[291,956,957,959,961,963],{"class":293,"line":294},[291,958,460],{"class":304},[291,960,463],{"class":308},[291,962,466],{"class":308},[291,964,312],{"class":308},[291,966,967],{"class":293,"line":301},[291,968,969],{"class":297},"# Pastikan semua rule muncul dan tidak ada error\n",[127,971,973],{"id":972},"troubleshooting","Troubleshooting",[208,975,977],{"id":976},"zerotier-tidak-terkoneksi","ZeroTier Tidak Terkoneksi",[132,979,981],{"className":285,"code":980,"language":287,"meta":141,"style":141},"# Cek interface ZeroTier\n\u002Finterface print\n\n# Restart ZeroTier\n\u002Fzerotier disable\n\u002Fzerotier enable\n",[139,982,983,988,995,999,1004,1011],{"__ignoreMap":141},[291,984,985],{"class":293,"line":294},[291,986,987],{"class":297},"# Cek interface ZeroTier\n",[291,989,990,993],{"class":293,"line":301},[291,991,992],{"class":304},"\u002Finterface",[291,994,312],{"class":308},[291,996,997],{"class":293,"line":315},[291,998,319],{"emptyLinePlaceholder":318},[291,1000,1001],{"class":293,"line":322},[291,1002,1003],{"class":297},"# Restart ZeroTier\n",[291,1005,1006,1008],{"class":293,"line":328},[291,1007,363],{"class":304},[291,1009,1010],{"class":308}," disable\n",[291,1012,1013,1015],{"class":293,"line":334},[291,1014,363],{"class":304},[291,1016,366],{"class":308},[208,1018,1020],{"id":1019},"dst-nat-tidak-bekerja","dst-nat Tidak Bekerja",[123,1022,1023],{},"Pastikan:",[213,1025,1026,1032,1038],{},[153,1027,1028,1029],{},"IP ZeroTier MikroTik sudah benar di rule ",[139,1030,1031],{},"dst-address",[153,1033,1034,1035],{},"IP internal server sudah benar di ",[139,1036,1037],{},"to-addresses",[153,1039,1040],{},"Service target sudah berjalan dan bisa diakses dari LAN",[132,1042,1044],{"className":285,"code":1043,"language":287,"meta":141,"style":141},"# Cek dari MikroTik apakah server internal bisa diping\n\u002Ftool ping 192.168.1.10\n",[139,1045,1046,1051],{"__ignoreMap":141},[291,1047,1048],{"class":293,"line":294},[291,1049,1050],{"class":297},"# Cek dari MikroTik apakah server internal bisa diping\n",[291,1052,1053,1056,1059],{"class":293,"line":301},[291,1054,1055],{"class":304},"\u002Ftool",[291,1057,1058],{"class":308}," ping",[291,1060,1061],{"class":487}," 192.168.1.10\n",[208,1063,1065],{"id":1064},"akses-lambat-via-zerotier","Akses Lambat via ZeroTier",[123,1067,1068],{},"ZeroTier menggunakan relay server jika peer-to-peer tidak berhasil. Untuk koneksi optimal:",[132,1070,1072],{"className":285,"code":1071,"language":287,"meta":141,"style":141},"# Cek path yang digunakan\nzerotier-cli peers\n# Jika RELAY, coba restart ZeroTier di kedua device\n",[139,1073,1074,1079,1087],{"__ignoreMap":141},[291,1075,1076],{"class":293,"line":294},[291,1077,1078],{"class":297},"# Cek path yang digunakan\n",[291,1080,1081,1084],{"class":293,"line":301},[291,1082,1083],{"class":304},"zerotier-cli",[291,1085,1086],{"class":308}," peers\n",[291,1088,1089],{"class":293,"line":315},[291,1090,1091],{"class":297},"# Jika RELAY, coba restart ZeroTier di kedua device\n",[127,1093,1095],{"id":1094},"referensi","Referensi",[150,1097,1098,1105,1112],{},[153,1099,1100],{},[191,1101,1104],{"href":1102,"rel":1103},"https:\u002F\u002Fdocs.zerotier.com",[195],"ZeroTier Documentation",[153,1106,1107],{},[191,1108,1111],{"href":1109,"rel":1110},"https:\u002F\u002Fhelp.mikrotik.com\u002Fdocs\u002Fdisplay\u002FROS\u002FNAT",[195],"MikroTik NAT Documentation",[153,1113,1114],{},[191,1115,1118],{"href":1116,"rel":1117},"https:\u002F\u002Fgithub.com\u002Fzerotier\u002Fzerotier-mikrotik",[195],"ZeroTier MikroTik Package",[1120,1121,1122],"style",{},"html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}",{"title":141,"searchDepth":294,"depth":301,"links":1124},[1125,1126,1127,1128,1132,1137,1144,1149,1154],{"id":129,"depth":301,"text":130},{"id":144,"depth":301,"text":145},{"id":180,"depth":301,"text":181},{"id":205,"depth":301,"text":206,"children":1129},[1130,1131],{"id":210,"depth":315,"text":211},{"id":247,"depth":315,"text":248},{"id":277,"depth":301,"text":278,"children":1133},[1134,1135,1136],{"id":281,"depth":315,"text":282},{"id":347,"depth":315,"text":348},{"id":408,"depth":315,"text":409},{"id":442,"depth":301,"text":443,"children":1138},[1139,1140,1141,1142,1143],{"id":449,"depth":315,"text":450},{"id":551,"depth":315,"text":552},{"id":636,"depth":315,"text":637},{"id":719,"depth":315,"text":720},{"id":803,"depth":315,"text":804},{"id":849,"depth":301,"text":850,"children":1145},[1146,1147,1148],{"id":853,"depth":315,"text":854},{"id":873,"depth":315,"text":874},{"id":948,"depth":315,"text":949},{"id":972,"depth":301,"text":973,"children":1150},[1151,1152,1153],{"id":976,"depth":315,"text":977},{"id":1019,"depth":315,"text":1020},{"id":1064,"depth":315,"text":1065},{"id":1094,"depth":301,"text":1095},"Cara mengakses seluruh layanan internal dari mana saja secara aman menggunakan ZeroTier sebagai overlay network dan MikroTik dst-nat untuk routing multi-service.","md",null,{},{"title":68,"description":1155},"31amZYFW9EILo2QCfuhcw03LjwfEP_R1TSlVndUWsZY",[1162,1164],{"title":64,"path":65,"stem":66,"description":1163,"children":-1},"Konfigurasi firewall rules dan NAT di MikroTik RouterOS untuk keamanan jaringan dan manajemen traffic.",{"title":77,"path":78,"stem":79,"description":1165,"children":-1},"Pengantar Mata Pelajaran Pilihan & Materi Tambahan TJKT (Docker, Proxmox VE, XCP-ng, & Cloud Infrastructure).",1789020725317]