[root@cachak-dev ~]# yum install phpMyAdmin
Loaded plugins: fastestmirror
Repository epel is listed more than once in the configuration
Determining fastest mirrors
epel                                                      | 2.1 kB     00:00
primary.sqlite.bz2                                        | 2.6 MB     00:27
myindo                                                    |  951 B     00:00
primary.xml.gz                                            | 3.4 kB     00:00
myindo                                                         2/2
base                                                      | 1.1 kB     00:00
primary.xml.gz                                            | 878 kB     00:13
base                                                           2508/2508
updates                                                   |  951 B     00:00
primary.xml.gz                                            | 185 kB     00:02
updates                                                        287/287
Setting up Install Process
Parsing package install arguments
Resolving Dependencies
--> Running transaction check
---> Package phpMyAdmin.noarch 0:2.11.9.5-1.el5 set to be updated
--> Processing Dependency: php-mysql >= 4.1.0 for package: phpMyAdmin
--> Processing Dependency: php >= 4.1.0 for package: phpMyAdmin
--> Processing Dependency: php-mbstring >= 4.1.0 for package: phpMyAdmin
--> Processing Dependency: webserver for package: phpMyAdmin
--> Running transaction check
---> Package php-mbstring.i386 0:5.1.6-23.2.el5_3 set to be updated
--> Processing Dependency: php-common = 5.1.6-23.2.el5_3 for package: php-mbstring
---> Package php-mysql.i386 0:5.1.6-23.2.el5_3 set to be updated
--> Processing Dependency: php-pdo for package: php-mysql
---> Package php.i386 0:5.1.6-23.2.el5_3 set to be updated
--> Processing Dependency: php-cli = 5.1.6-23.2.el5_3 for package: php
--> Processing Dependency: libcurl.so.3 for package: php
--> Processing Dependency: libaspell.so.15 for package: php
--> Processing Dependency: libgmp.so.3 for package: php
--> Processing Dependency: libidn.so.11 for package: php
--> Processing Dependency: libpspell.so.15 for package: php
---> Package httpd.i386 0:2.2.3-22.el5.centos.1 set to be updated
filelists.sqlite.bz2                                      | 4.0 MB     00:43
filelists.xml.gz                                          | 1.4 kB     00:00
filelists.xml.gz                                          | 2.8 MB     00:29
filelists.xml.gz                                          | 1.3 MB     00:13
--> Processing Dependency: libaprutil-1.so.0 for package: httpd
--> Processing Dependency: libapr-1.so.0 for package: httpd
--> Processing Dependency: /etc/mime.types for package: httpd
--> Running transaction check
---> Package libidn.i386 0:0.6.5-1.1 set to be updated
---> Package php-pdo.i386 0:5.1.6-23.2.el5_3 set to be updated
---> Package curl.i386 0:7.15.5-2.1.el5_3.4 set to be updated
---> Package apr-util.i386 0:1.2.7-7.el5_3.1 set to be updated
---> Package mailcap.noarch 0:2.1.23-1.fc6 set to be updated
---> Package php-cli.i386 0:5.1.6-23.2.el5_3 set to be updated
---> Package php-common.i386 0:5.1.6-23.2.el5_3 set to be updated
---> Package apr.i386 0:1.2.7-11 set to be updated
---> Package gmp.i386 0:4.1.4-10.el5 set to be updated
---> Package aspell.i386 12:0.60.3-7.1 set to be updated
--> Processing Dependency: aspell-en for package: aspell
--> Running transaction check
---> Package aspell-en.i386 50:6.0-2.1 set to be updated
--> Finished Dependency Resolution

Dependencies Resolved

=================================================================================
 Package            Arch         Version                     Repository     Size
=================================================================================
Installing:
 phpMyAdmin         noarch       2.11.9.5-1.el5              epel          4.2 M
Installing for dependencies:
 apr                i386         1.2.7-11                    base          122 k
 apr-util           i386         1.2.7-7.el5_3.1             updates        76 k
 aspell             i386         12:0.60.3-7.1               base          936 k
 aspell-en          i386         50:6.0-2.1                  base          1.6 M
 curl               i386         7.15.5-2.1.el5_3.4          updates       232 k
 gmp                i386         4.1.4-10.el5                base          664 k
 httpd              i386         2.2.3-22.el5.centos.1       updates       1.2 M
 libidn             i386         0.6.5-1.1                   base          194 k
 mailcap            noarch       2.1.23-1.fc6                base           14 k
 php                i386         5.1.6-23.2.el5_3            updates       1.1 M
 php-cli            i386         5.1.6-23.2.el5_3            updates       2.1 M
 php-common         i386         5.1.6-23.2.el5_3            updates       151 k
 php-mbstring       i386         5.1.6-23.2.el5_3            updates       994 k
 php-mysql          i386         5.1.6-23.2.el5_3            updates        85 k
 php-pdo            i386         5.1.6-23.2.el5_3            updates        64 k

Transaction Summary
=================================================================================
Install     16 Package(s)
Update       0 Package(s)
Remove       0 Package(s)         

Total download size: 14 M
Is this ok [y/N]: y
Downloading Packages:
(1/16): mailcap-2.1.23-1.fc6.noarch.rpm                   |  14 kB     00:00
(2/16): php-pdo-5.1.6-23.2.el5_3.i386.rpm                 |  64 kB     00:00
(3/16): apr-util-1.2.7-7.el5_3.1.i386.rpm                 |  76 kB     00:00
(4/16): php-mysql-5.1.6-23.2.el5_3.i386.rpm               |  85 kB     00:00
(5/16): apr-1.2.7-11.i386.rpm                             | 122 kB     00:04
(6/16): php-common-5.1.6-23.2.el5_3.i386.rpm              | 151 kB     00:01
(7/16): libidn-0.6.5-1.1.i386.rpm                         | 194 kB     00:01
(8/16): curl-7.15.5-2.1.el5_3.4.i386.rpm                  | 232 kB     00:02
(9/16): gmp-4.1.4-10.el5.i386.rpm                         | 664 kB     00:09
(10/16): aspell-0.60.3-7.1.i386.rpm                       | 936 kB     00:10
(11/16): php-mbstring-5.1.6-23.2.el5_3.i386.rpm           | 994 kB     00:11
(12/16): php-5.1.6-23.2.el5_3.i386.rpm                    | 1.1 MB     00:13
(13/16): httpd-2.2.3-22.el5.centos.1.i386.rpm             | 1.2 MB     00:14
(14/16): aspell-en-6.0-2.1.i386.rpm                       | 1.6 MB     00:16
(15/16): php-cli-5.1.6-23.2.el5_3.i386.rpm                | 2.1 MB     00:29
(16/16): phpMyAdmin-2.11.9.5-1.el5.noarch.rpm             | 4.2 MB     00:57
---------------------------------------------------------------------------------
Total                                             78 kB/s |  14 MB     02:58
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
  Installing     : mailcap                                         [ 1/16]
  Installing     : php-common                                      [ 2/16]
  Installing     : libidn                                          [ 3/16]
  Installing     : curl                                            [ 4/16]
  Installing     : apr                                             [ 5/16]
  Installing     : gmp                                             [ 6/16]
  Installing     : apr-util                                        [ 7/16]
  Installing     : httpd                                           [ 8/16]
  Installing     : php-mbstring                                    [ 9/16]
  Installing     : php-pdo                                         [10/16]
  Installing     : php-mysql                                       [11/16]
  Installing     : aspell-en                                       [12/16]
  Installing     : aspell                                          [13/16]
  Installing     : php-cli                                         [14/16]
  Installing     : php                                             [15/16]
  Installing     : phpMyAdmin                                      [16/16] 

Installed: phpMyAdmin.noarch 0:2.11.9.5-1.el5
Dependency Installed: apr.i386 0:1.2.7-11 apr-util.i386 0:1.2.7-7.el5_3.1 aspell.i386 12:0.60.3-7.1 aspell-en.i386 50:6.0-2.1 curl.i386 0:7.15.5-2.1.el5_3.4 gmp.i386 0:4.1.4-10.el5 httpd.i386 0:2.2.3-22.el5.centos.1 libidn.i386 0:0.6.5-1.1 mailcap.noarch 0:2.1.23-1.fc6 php.i386 0:5.1.6-23.2.el5_3 php-cli.i386 0:5.1.6-23.2.el5_3 php-common.i386 0:5.1.6-23.2.el5_3 php-mbstring.i386 0:5.1.6-23.2.el5_3 php-mysql.i386 0:5.1.6-23.2.el5_3 php-pdo.i386 0:5.1.6-23.2.el5_3
Complete!
[root@cachak-dev ~]#

diatas sebenarnya banyak yang harusnya gak ikut keinstall apabila sudah ke install, misalnya httpd
setelah itu jangan lupa install php-mcrypt

[root@cachak-dev ~]# yum install php-mcrypt
Loaded plugins: fastestmirror
Repository epel is listed more than once in the configuration
Loading mirror speeds from cached hostfile
Setting up Install Process
Parsing package install arguments
Resolving Dependencies
--> Running transaction check
---> Package php-mcrypt.i386 0:5.1.6-5.el5 set to be updated
--> Processing Dependency: libmcrypt.so.4 for package: php-mcrypt
--> Running transaction check
---> Package libmcrypt.i386 0:2.5.7-5.el5 set to be updated
--> Finished Dependency Resolution

Dependencies Resolved

=================================================================================
 Package              Arch           Version                Repository      Size
=================================================================================
Installing:
 php-mcrypt           i386           5.1.6-5.el5            epel            16 k
Installing for dependencies:
 libmcrypt            i386           2.5.7-5.el5            epel           124 k

Transaction Summary
=================================================================================
Install      2 Package(s)
Update       0 Package(s)
Remove       0 Package(s)         

Total download size: 140 k
Is this ok [y/N]: y
Downloading Packages:
(1/2): php-mcrypt-5.1.6-5.el5.i386.rpm                    |  16 kB     00:00
(2/2): libmcrypt-2.5.7-5.el5.i386.rpm                     | 124 kB     00:01
---------------------------------------------------------------------------------
Total                                             62 kB/s | 140 kB     00:02
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
  Installing     : libmcrypt                                         [1/2]
  Installing     : php-mcrypt                                        [2/2] 

Installed: php-mcrypt.i386 0:5.1.6-5.el5
Dependency Installed: libmcrypt.i386 0:2.5.7-5.el5
Complete!
[root@cachak-dev ~]#

2.Konfigurasi phpMyAdmin
Lakukan edit file /etc/httpd/conf.d/phpMyAdmin.conf
dari :

# phpMyAdmin - Web based MySQL browser written in php
#
# Allows only localhost by default
#
# But allowing phpMyAdmin to anyone other than localhost should be considered
# dangerous unless properly secured by SSL

Alias /phpMyAdmin /usr/share/phpMyAdmin
Alias /phpmyadmin /usr/share/phpMyAdmin

   order deny,allow
   deny from all
   allow from 127.0.0.1

# This directory does not require access over HTTP - taken from the original
# phpMyAdmin upstream tarball
#

    Order Deny,Allow
    Deny from All
    Allow from None


# This configuration prevents mod_security at phpMyAdmin directories from
# filtering SQL etc.  This may break your mod_security implementation.
#
#
#    
#        SecRuleInheritance Off
#    
#

Menjadi

[root@cachak-dev ~]# cat /etc/httpd/conf.d/phpMyAdmin.conf
# phpMyAdmin - Web based MySQL browser written in php
#
# Allows only localhost by default
#
# But allowing phpMyAdmin to anyone other than localhost should be considered
# dangerous unless properly secured by SSL

Alias /phpMyAdmin /usr/share/phpMyAdmin
Alias /phpmyadmin /usr/share/phpMyAdmin

   order deny,allow
   #deny from all
   #allow from 127.0.0.1

# This directory does not require access over HTTP - taken from the original
# phpMyAdmin upstream tarball
#

    Order Deny,Allow
    Deny from All
    Allow from None


# This configuration prevents mod_security at phpMyAdmin directories from
# filtering SQL etc.  This may break your mod_security implementation.
#
#
#    
#        SecRuleInheritance Off
#    
#
[root@cachak-dev ~]#

disini saya hanya ngedit bagian
#deny from all
#allow from 127.0.0.1
artinya diallowed dari semua ip, untuk allowed dari ip tertentu, misalnya ip 202.xxx.xxx.10 maka menjadi
deny from all
allow from 202.xxx.xxx.10
setelah itu restart httpd

[root@cachak-dev ~]# /etc/init.d/httpd restart
Stopping httpd:                                            [  OK  ]
Starting httpd:                                            [  OK  ]
[root@cachak-dev ~]#

setelah itu setting phpMyAdmin.conf di /etc/phpMyAdmin/config.inc.php
dibawah $i = 0 tambahkan $cfg['blowfish_secret'] = ‘H1PvIjBDbw’; sehingga menjadi :
$i = 0;
$cfg['blowfish_secret'] = 'H1PvIjBDbw';
terus rubah
$cfg['Servers'][$i]['auth_type'] = 'http';
menjadi :
$cfg['Servers'][$i]['auth_type'] = 'cookie';
setelah itu save
setelah itu tinggal http://host/phpMyAdmin

ya sekarang tinggal membuat management nya deh

port : 3128 8080 3127 (tiga port)
space : 3 G (3072M)
alokasi di : /home/cache/squid
network yang diallowed untuk mengakses proxy : 172.17.3.0/24 dan 192.168.0.0/24

configurasi dari root:
1.cd /etc/squid
2.backup configurasi squidnya :

[root@cachak squid]#cp squid.conf squid.conf.org
[root@cachak squid]#cd

3.buat folder /home/cache/squid setelah itu ownernya digantikan ke user squid

[root@cachak ~]#mkdir -p /home/cache/squid
[root@cachak ~]#chown -R squid:squid /home/cache/squid

4.buat folder cache_dir

[root@cachak ~]#mkdir /home/cache/squid/spool
[root@cachak ~]#chown -R squid:squid /home/cache/squid

5.selanjutnya adalah mengconfigurasi squid.conf dan bagian2 yang perlu di edit dari squid.conf adalah
a. edit http_portnya yaitu bagian

# http_port 3128 

menjadi

http_port 3128 8080 3127

b. edit access.lognya

# cache_access_log /var/log/squid/access.log

menjadi

cache_access_log /home/cache/squid/access.log

c. edit cache lognya

# cache_log /var/log/squid/cache.log

menjadi

cache_log /home/cache/squid/cache.log

d. edit cache_store_log

# cache_store_log /var/log/squid/store.log

menjadi

cache_store_log /home/cache/squid/store.log

e. edit memori yang dialokasikan buat menjalankan squidnya, sesuaikan dengan kemampuan squid servernya

# cache_mem 8 MB

menjadi

cache_mem 16 MB

f.edit cache dir nya, arahkan sesuai dengan langkah no 5 dan juga space alokasinya yaitu 3072 M

# cache_dir ufs /var/spool/squid 100 16 256

menjadi

cache_dir ufs /home/cache/squid/spool 3072 16 256

g.nah sekarang tinggal nambahin network yang mau di allowed untuk access proxy servernya
cari bagian :

#Recommended minimum configuration:
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp

acl Safe_ports port 443 563     # https, snews
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT

dibawah acl localhost src 127.0.0.1/255.255.255.255, tambahkan network yang akan di allowed

acl net1 src 172.17.3.0/255.255.255.0
acl net2 src 192.168.0.0/255.255.255.0

setelah itu supaya net1 dan net2 td bisa mengakses squid maka tambahkan http_access allow
cari baris :

# And finally deny all other access to this proxy
http_access allow localhost
http_access deny all

diantar http_access allow localhost dan http_access deny all tambahkan :

http_access allow net1
http_access allow net2

baris ini bisa ditarok di atas http_access allow localhost atau dibawah http_access allow localhost yang penting diatas http_access deny all

6.setelah itu simpen. lalu start squid nya

[root@cachak ~]#/etc/init.d/squid start

7.setelah itu gunakan testing squidnya menggunakan browser sambil di lihat acess log nya

[root@cachak ~]#tail -f /home/cache/squid/access.log

8.Sekian dulu ya tutorial nya kalau ada yang kurang aku minta maaf atau ada yang salah mohon dikasih tau, nanti yang seri 2 aku coba setting squid dengan squid authentifikasi segingga untuk menggunakan squid harus memasukkan username dan password.

console1# /etc/init.d/mysqld stop

3. nyalakan service mysql dengan option –skip-grant-table, perintah ini harus dijalankan sebagai user mysql

console2# su mysql
console2# /usr/libexec/mysqld --skip-grant-table

4. jalankan mysql client

 console1# mysql

5. pilih database mysql

mysql> use mysql;

6. ubah password root di dalam tabel user

mysql> update user set Password=password('password_baruku')
where ((User like 'root') and (Host like 'localhost'));

7. flush privileges

mysql> flush privileges;

8. matikan service mysql

console1# killall mysqld

9. jalankan kembali service mysql

console1# /etc/init.d/mysqld start

Sumber : CVS Om Dheche

[root@cachak ~]# sestatus | grep httpd
allow_httpd_anon_write            inactive
allow_httpd_sys_script_anon_write inactive
httpd_builtin_scripting           active
httpd_can_network_connect         inactive
httpd_disable_trans               inactive
httpd_enable_cgi                  active
httpd_enable_homedirs             active
httpd_ssi_exec                    active
httpd_suexec_disable_trans        inactive
httpd_tty_comm                    inactive
httpd_unified                     active
[root@cachak ~]# sestatus | grep postgr
postgresql_disable_trans          inactive
[root@cachak ~]# sestatus | grep sql
mysqld_disable_trans              inactive
postgresql_disable_trans          inactive
[root@cachak ~]#

nah disitu kelihat bahwa :
httpd_can_network_connect inactive

yang aku lakukan adalah :

[root@cachak ~]# rpm -q -l php | restorecon -R -v -f -
[root@cachak ~]# rpm -q -l php-pgsql | restorecon -R -v -f -
[root@cachak ~]# rpm -q -l postgresql | restorecon -R -v -f -
[root@cachak ~]# rpm -q -l postgresql-server | restorecon -R -v -f -
[root@cachak ~]# rpm -q -l httpd | restorecon -R -v -f -
[root@cachak ~]# rpm -q -l postgresql-libs | restorecon -R -v -f -
[root@cachak ~]# setsebool httpd_can_network_connect=1
[root@cachak ~]# sestatus | grep httpd_can_network_connect
httpd_can_network_connect         active
[root@cachak ~]#
[root@cachak ~]# /etc/init.d/httpd restart
Stopping httpd:                                            [  OK  ]
Starting httpd:                                            [  OK  ]
[root@cachak ~]# /etc/init.d/postgresql restart
Stopping postgresql service:                               [  OK  ]
Starting postgresql service:                               [  OK  ]
[root@cachak ~]#

selesai sudah

[cachak@cachak ~]$ ip -6 r
2001:d30:f:1003::/64 dev eth0  proto kernel  metric 256  expires 42943sec mtu 1500 advmss 1440 metric 10 4294967295
fe80::/64 dev eth0  metric 256  mtu 1500 advmss 1440 metric 10 4294967295
ff00::/8 dev eth0  metric 256  mtu 1500 advmss 1440 metric 10 4294967295
default via fe80::20e:7fff:fe30:17a5 dev eth0  proto kernel  metric 1024  expires 1549sec mtu 1500 advmss 1440 metric 10 64
unreachable default dev lo  proto none  metric -1  error -101 metric 10 255
[cachak@cachak ~]$ ip a
1: lo:  mtu 16436 qdisc noqueue
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth0:  mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:11:25:45:f3:3c brd ff:ff:ff:ff:ff:ff
    inet 172.17.3.154/24 brd 172.17.3.255 scope global eth0
    inet6 2001:d30:f:1003:211:25ff:fe45:f33c/64 scope global dynamic
       valid_lft 42925sec preferred_lft 42925sec
    inet6 fe80::211:25ff:fe45:f33c/64 scope link
       valid_lft forever preferred_lft forever
3: sit0:  mtu 1480 qdisc noop
    link/sit 0.0.0.0 brd 0.0.0.0
[cachak@cachak ~]$

[cachak@cachak ~]$ cat /etc/sysconfig/network
NETWORKING=yes
HOSTNAME=cachak.myindo.net
GATEWAY=172.17.3.154
NETWORKING_IPV6="yes"
IPV6_AUTOCONF=yes
IPV6_DEFAULTGW="2001:d30:f:2000::1%eth0"
[cachak@cachak ~]$ cat /etc/sysconfig/network-scripts/ifcfg-eth0
DEVICE=eth0
BOOTPROTO=static
IPADDR=172.17.3.154
NETMASK=255.255.255.0
IPV6INIT="yes"
IPV6ADDR="2001:d30:f:1003:211:25ff:fe45:f33c/64"
ONBOOT=yes
TYPE=Ethernet

	root@love [~]# su postgres

3.setelah masuk sebagai user postgres create database test

	bash-2.05b$ createdb test
	CREATE DATABASE

4.lalu masuk ke postgresql nya dengan database yang kita create tadi yaitu test

	bash-2.05b$ psql test
	Welcome to psql 7.3.4, the PostgreSQL interactive terminal.

	Type:  copyright for distribution terms
	       h for help with SQL commands
	       ? for help on internal slash commands
	       g or terminate with semicolon to execute query
	       q to quit

5.setalah masuk ke postgresqlnya kita create user super user . misalnya user usertest dengan password passtest

	test=# create user usertest createdb createuser
	test=# password  'passtest';
	CREATE USER
	test=#

6.lalu edit /var/lib/pgsql/data/postgresql.conf dengan vi /var/lib/pgsql/data/postgresql.conf. lalu rubah tcpip_socket menjadi true

	tcpip_socket = true

7.lalu edit /var/lib/pgsql/data/pg_hba.conf dan tambahin baris di bawah ini. misalnya ip servernya 65.75.155.210 maka di tambahin :

	host all all 65.75.155.210 255.255.255.255 trust

8.sekarang download phpPgAdmin dari http://prdownloads.sourceforge.net/phppgadmin/phpPgAdmin-3.3.tar.gz?download

9. lalu extract di folder web nya

   tar zxvf phpPgAdmin-3.3.tar.gz

10.edit file configure phpPgadminnya yaitu file conf/config.inc.php
edit bagian :

   $conf['servers'][0]['host'] = '127.0.0.1';
   // Hostname or IP address for server.
   rubah 127.0.0.1 sesuai dengan ip pada langkah nomor 7

11.restart postgresql nya

	root@love [~]# /etc/init.d/postgresql restart

12.Buka web browser lalu buka http://domainmu.com/phpPgAdmin/
13.Masukkan username dan password pada langkah nomor 5
14.Setelah login lalu create super user sesuai yang diinginkan, lalu logout
15.dari command,lalu edit /var/lib/pgsql/data/pg_hba.conf dan edit :

	host all all 65.75.155.210 255.255.255.255 trust
   Menjadi :
	host all all 65.75.155.210 255.255.255.255 password

16.restart postgresql nya

	root@love [~]# /etc/init.d/postgresql restart

			    |eth0
			    |
			|-------|
			|  MGW  |
			|---|---|
 			    |
 			    |eth1
			    |
			    |
      |--------------------hub----------------------|
      |			    |			    |
      |			    |			    |
      |			    |			    |
 |---------|	       |---------|	       |---------|
 |Client 01|	       |Client 02|	       |Client 03|
 |---------|	       |---------|	       |---------|

Pertama yang harus di lakukan adalah mensetting mgw(main gateway)
supaya bisa connect ke internet
Sebelum Mensetting :
1.Minta IP public ke ISP lengkap dengan netmask,broadcast dan dns nya
misalnya :
RANGE	: 202.159.121.0/29
IP	: 202.159.121.2
GATEWAY : 202.159.121.1
Nemast	: 255.255.255.248
broadcast : 202.159.121.7
DNS1	: 202.159.0.10
DNS2	: 202.159.0.20
berarti kita mendapatkan ip 5 buah dari 202.159.121.2 - 202.159.121.6

2.Menentukan IP local yang akan kita gunakan buat client

Setting IP MGW :
1.[root@mgw cachak]$ vi /etc/sysconfig/network
lalu isi dengan :

NETWORKING=yes
HOSTNAME=mgw.domain.com
GATEWAY=202.159.121.1

lalu simpen dengan menekan :wq

2.Menconfigurasi IP eth0(default) 

[root@mgw root]$ vi /etc/sysconfig/network-scripts/ifcfg-eth0
lalu isi dengan :

DEVICE=eth0
BOOTPROTO=static
IPADDR=202.159.121.2
BROADCAST=202.159.121.7
NETMASK=255.255.255.249
ONBOOT=yes
USERCTL=no

lalu simpen dengan menekan :wq

3.Setting dns resolve

[root@mgw root]$ vi /etc/resolv.conf
lalu isi dengan nameserver dari isp kita tadi :

nameserver 202.159.0.10
nameserver 202.159.0.20

lalu simpen dengan menekan :wq

4.Setting ip_forwarding

[root@mgw cachak]$ vi /etc/sysctl.conf

rubah net.ipv4.ip_forward = 0 menjadi net.ipv4.ip_forward = 1
atau kalau gak ada net.ipv4.ip_forward = 0 tambahin net.ipv4.ip_forward = 1

simpen dengan menekan :wq

5.restart network
[root@mgw cachak]$ /etc/init.d/network restart
Shutting down interface eth0:                              [  OK  ]
Shutting down loopback interface:                          [  OK  ]
Disabling IPv4 packet forwarding:                          [  OK  ]
Setting network parameters:                                [  OK  ]
Bringing up loopback interface:                            [  OK  ]
Bringing up interface eth0:                                [  OK  ]

[root@www root]#chkconfig --level 2345 network on
[root@www root]#

6.testing dengan ngeping ke default gateway 202.159.121.1

[root@mgw cachak]$ ping 202.159.121.1
PING 202.159.121.1 (202.159.121.1) 56(84) bytes of data.
64 bytes from 202.159.121.1: icmp_seq=1 ttl=63 time=0.356 ms
64 bytes from 202.159.121.1: icmp_seq=2 ttl=63 time=0.269 ms
64 bytes from 202.159.121.1: icmp_seq=3 ttl=63 time=0.267 ms
64 bytes from 202.159.121.1: icmp_seq=4 ttl=63 time=0.268 ms

--- 202.159.121.1 ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 2997ms
rtt min/avg/max/mdev = 0.267/0.290/0.356/0.038 ms

7.testing untuk ngeping google.com untuk ngecek dns nya
kalau muncul :
PING google.com (216.239.39.99) 56(84) bytes of data.
berarti dns kita untuk mgw dah bekerja, tapi kalau muncul :
ping: unknown host google.com
berarti dns yang kita isikan di /etc/resolve.conf masih salah,
silahkan cek lagi ke ISP nya  

nah bereskan sudah setting IP untuk mgw nya 
supaya mgw ini bisa sekaligus di gunakan sebagai ns server
oleh client maka harus di install daemon bind atau
daemon nameserver yang lain
ataukalau sudah ada tinggal idupin Bind nya

[root@www root]# /etc/init.d/named restart
Stopping named:                                            [  OK  ]
Starting named:                                            [  OK  ]
[root@www root]#chkconfig --level 2345 named on
[root@www root]#

misalnya ip ke client adalah :
192.168.0.1/24
IP : 192.168.0.1
netmask : 255.255.255.0
broadcast : 192.168.0.255
RANGE IP CLIENT : 192.168.0.2-192.168.0.254

Setting ip untuk eth1 (yang ke client)
1.memberi IP 192.168.0.1 di eth1
[root@mgw cachak]$ vi /etc/sysconfig/network-scripts/ifcfg-eth1
lalu isi dengan :

DEVICE=eth1
BOOTPROTO=static
IPADDR=192.168.0.1
NETMASK=255.255.255.0
BROADCAST=192.168.0.255
ONBOOT=yes
USERCTL=no

lalu simpen dengan menekan :wq

2.Restart networknya

[root@mgw root]$ /etc/init.d/network restart
Shutting down interface eth0:                              [  OK  ]
Shutting down interface eth1:                              [  OK  ]
Shutting down loopback interface:                          [  OK  ]
Disabling IPv4 packet forwarding:                          [  OK  ]
Setting network parameters:                                [  OK  ]
Bringing up loopback interface:                            [  OK  ]
Bringing up interface eth0:                                [  OK  ]
Bringing up interface eth1:                                [  OK  ]

3.Testing dengan cara ping ip eth1
[root@mgw cachak]$ ping 192.168.0.1
PING 192.168.0.1 (192.168.0.1) 56(84) bytes of data.
64 bytes from 192.168.0.1: icmp_seq=1 ttl=63 time=0.356 ms
64 bytes from 192.168.0.1: icmp_seq=2 ttl=63 time=0.269 ms
64 bytes from 192.168.0.1: icmp_seq=3 ttl=63 time=0.267 ms
64 bytes from 192.168.0.1: icmp_seq=4 ttl=63 time=0.268 ms

--- 192.168.0.1 ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 2997ms
rtt min/avg/max/mdev = 0.267/0.290/0.356/0.038 ms

Tinggal Setting IP computer client dengan ketentuan di bawah ini :

IP		: 192.168.0.2 - 192.168.0.254
GATEWAY		: 192.168.0.1
NETMASK		: 255.255.255.0
BROADCAST	: 192.168.0.255
NAMESERVER	: 192.168.0.1

misal :

Client01
===============================
IP		: 192.168.0.2
GATEWAY		: 192.168.0.1
NETMASK		: 255.255.255.0
BROADCAST	: 192.168.0.255
NAMESERVER	: 192.168.0.1

Client02
===============================
IP		: 192.168.0.3
GATEWAY		: 192.168.0.1
NETMASK		: 255.255.255.0
BROADCAST	: 192.168.0.255
NAMESERVER	: 192.168.0.1

dan seterusnya sesuai banyaknya client,yang berubah hanya IP
untuk client windows maka setting IP
di bagian Start Menu/Setting/Control Panel/Network

setelah di setting ip client, maka coba ping ke 192.168.0.1
dari client,kalau berhasil berarti client dan MGW nya sudah tersambung.

Setting MGW supaya client bisa internat dengan menggunakan NAT

1.Matikan iptablesnya

[root@mgw root]# /etc/init.d/iptables stop
Flushing all chains:                                       [  OK  ]
Removing user defined chains:                              [  OK  ]
Resetting built-in chains to the default ACCEPT policy:    [  OK  ]
[root@mgw root]#

2.Tambahkan iptables untuk Source NAt sesuai dengan ip di eth0
[root@mgw root]# /sbin/iptables -t nat -A POSTROUTING
-o eth0 -s 192.168.0.0/24 -j SNAT --to-source 202.159.121.2
[root@mgw root]# /sbin/iptables-save > /etc/sysconfig/iptables
[root@mgw root]# /etc/init.d/iptables restart
Flushing all current rules and user defined chains:        [  OK  ]
Clearing all current rules and user defined chains:        [  OK  ]
Applying iptables firewall rules:                          [  OK  ]
[root@mgw root]# iptables-save

SNAT sudah,SNAT disini standar sekali dan gak ada proteksi
untuk mengetest nya kita browser di client lalau buka google.com,
kalau jalan berati kita sudah berhasil