Update Voucher , Tiket , Dashboard
membuat perubahan dan update
This commit is contained in:
YanDrs
@@ -0,0 +1,266 @@
|
||||
<?php
|
||||
|
||||
// /interface l2tp-client
|
||||
// add name=l2tp-out1 connect-to=tunnel.manjapro.net user=nta1cicukang password=nta1cicukang profile=default-encryption add-default-route=no disabled=no
|
||||
|
||||
// /ip firewall nat
|
||||
// add chain=dstnat dst-address-list=IP-Public protocol=tcp dst-port=8229 action=dst-nat to-addresses=172.18.1.206 to-ports=8728 comment="NTA 1 Cicukang"
|
||||
// add chain=dstnat dst-address-list=IP-Public protocol=tcp dst-port=144 action=dst-nat to-addresses=172.18.1.206 to-ports=144 comment="NTA 1 Cicukang"
|
||||
// /
|
||||
|
||||
|
||||
class CreateTunnel
|
||||
{
|
||||
public function addTunnel($Secret,$nasGroup)
|
||||
{
|
||||
// include "config/connect.php";
|
||||
// include "config/routeros_api.class.php";
|
||||
|
||||
$mikrotik = new RouterosAPI();
|
||||
$mikrotik->debug = false;
|
||||
|
||||
// Connect ke MikroTik
|
||||
if ($mikrotik->connect2('manjapro.net', 'apiapkmanjapro', 'apiapkmanjapro123321', '2887')) {
|
||||
|
||||
// Ambil semua remote-address yang sudah dipakai
|
||||
$secrets = $mikrotik->comm('/ppp/secret/print', [
|
||||
"?local-address" => "172.18.1.100"
|
||||
]);
|
||||
|
||||
$maxIp = 0;
|
||||
foreach ($secrets as $secret) {
|
||||
if (isset($secret['remote-address']) && filter_var($secret['remote-address'], FILTER_VALIDATE_IP)) {
|
||||
$ipParts = explode('.', $secret['remote-address']);
|
||||
if (count($ipParts) == 4 && $ipParts[0] == '172' && $ipParts[1] == '18' && $ipParts[2] == '1') {
|
||||
$lastOctet = (int)$ipParts[3];
|
||||
if ($lastOctet > $maxIp) {
|
||||
$maxIp = $lastOctet;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
// Hitung remote-address baru
|
||||
$nextIp = $maxIp + 1;
|
||||
$remoteAddress = "172.18.1." . $nextIp;
|
||||
|
||||
// Local address (bisa fix atau ambil dari pool)
|
||||
$localAddress = "172.18.1.100";
|
||||
|
||||
// ==============================
|
||||
// Ambil semua dst-port yang sudah digunakan
|
||||
// ==============================
|
||||
$natRules = $mikrotik->comm('/ip/firewall/nat/print');
|
||||
$usedPorts = [];
|
||||
|
||||
foreach ($natRules as $rule) {
|
||||
if (isset($rule['dst-port'])) {
|
||||
$ports = explode(',', $rule['dst-port']);
|
||||
foreach ($ports as $p) {
|
||||
$usedPorts[] = (int)$p;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
// Cari 2 port yang bebas mulai dari 2000
|
||||
$startPort = 200;
|
||||
$freePorts = [];
|
||||
while (count($freePorts) < 2) {
|
||||
if (!in_array($startPort, $usedPorts)) {
|
||||
$freePorts[] = $startPort;
|
||||
}
|
||||
$startPort++;
|
||||
if ($startPort > 9999) { // Batas port TCP
|
||||
break; // Hindari infinite loop
|
||||
}
|
||||
}
|
||||
|
||||
if (count($freePorts) < 2) {
|
||||
return [
|
||||
'status' => false,
|
||||
'message' => 'Tidak ada 2 port bebas yang tersedia'
|
||||
];
|
||||
}
|
||||
|
||||
$port1 = $freePorts[0];
|
||||
$port2 = $freePorts[1];
|
||||
|
||||
// ==============================
|
||||
// Generate user/pass
|
||||
// ==============================
|
||||
$secretUser = strtolower(preg_replace('/[^a-z0-9]/i', '', substr($Secret, 0, 12))) . "@manjapro.net";
|
||||
$secretPass = strtolower(substr(md5($secretUser), 0, 12));
|
||||
$nasSecret = substr(md5($secretUser), 0, 20);
|
||||
|
||||
// Tambahkan PPP secret
|
||||
$add = $mikrotik->comm('/ppp/secret/add', [
|
||||
"name" => $secretUser,
|
||||
"password" => $secretPass,
|
||||
"profile" => "default-encryption",
|
||||
"local-address" => $localAddress,
|
||||
"remote-address" => $remoteAddress,
|
||||
"service" => "any",
|
||||
"comment" => $Secret
|
||||
]);
|
||||
|
||||
// Tambahkan 2 firewall NAT rules
|
||||
$nat1 = $mikrotik->comm('/ip/firewall/nat/add', [
|
||||
"chain" => "dstnat",
|
||||
"dst-address-list" => "IP-Public",
|
||||
"dst-port" => $port1,
|
||||
"protocol" => "tcp",
|
||||
"action" => "dst-nat",
|
||||
"to-addresses" => $remoteAddress,
|
||||
"to-ports" => $port1,
|
||||
"comment" => $Secret
|
||||
]);
|
||||
|
||||
$nat2 = $mikrotik->comm('/ip/firewall/nat/add', [
|
||||
"chain" => "dstnat",
|
||||
"dst-address-list" => "IP-Public",
|
||||
"dst-port" => $port2,
|
||||
"protocol" => "tcp",
|
||||
"action" => "dst-nat",
|
||||
"to-addresses" => $remoteAddress,
|
||||
"to-ports" => $port2,
|
||||
"comment" => $Secret
|
||||
]);
|
||||
|
||||
$mikrotik->disconnect();
|
||||
|
||||
// Siapkan data response
|
||||
$data = [
|
||||
"name" => $secretUser,
|
||||
"password" => $secretPass,
|
||||
"profile" => "default-encryption",
|
||||
"local-address" => $localAddress,
|
||||
"remote-address" => $remoteAddress,
|
||||
"service" => "any",
|
||||
"nas_secret" => $nasSecret,
|
||||
"nasgroupname" => $nasGroup,
|
||||
"port-api" => $port1,
|
||||
"port-remote" => $port2
|
||||
];
|
||||
|
||||
return json_encode( [
|
||||
'status' => true,
|
||||
'message' => 'PPP secret dan NAT berhasil dibuat',
|
||||
'data' => $data
|
||||
] );
|
||||
} else {
|
||||
return json_encode ([
|
||||
'status' => false,
|
||||
'message' => 'Gagal terhubung ke MikroTik'
|
||||
]);
|
||||
}
|
||||
}
|
||||
|
||||
public function deleteTunnel($Data)
|
||||
{
|
||||
$data = json_decode($Data);
|
||||
|
||||
// Validasi data yang diterima
|
||||
if (!isset($data->data->{'name'}) || !isset($data->data->{'port-api'}) || !isset($data->data->{'port-remote'})) {
|
||||
http_response_code(400);
|
||||
echo json_encode([
|
||||
'success' => false,
|
||||
'message' => "Data tidak lengkap untuk menghapus tunnel"
|
||||
]);
|
||||
return;
|
||||
}
|
||||
|
||||
$name = $data->data->{'name'};
|
||||
$portApi = $data->data->{'port-api'};
|
||||
$portRemote = $data->data->{'port-remote'};
|
||||
|
||||
$mikrotik = new RouterosAPI();
|
||||
$mikrotik->debug = false;
|
||||
|
||||
// Connect ke MikroTik
|
||||
if ($mikrotik->connect2('manjapro.net', 'apiapkmanjapro', 'apiapkmanjapro123321', 2887)) {
|
||||
|
||||
try {
|
||||
// Hapus PPP Secret
|
||||
$pppSecrets = $mikrotik->comm('/ppp/secret/print', [
|
||||
"?name" => $name
|
||||
]);
|
||||
|
||||
if (!empty($pppSecrets)) {
|
||||
foreach ($pppSecrets as $secret) {
|
||||
if (isset($secret['.id'])) {
|
||||
$mikrotik->comm('/ppp/secret/remove', [
|
||||
".id" => $secret['.id']
|
||||
]);
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
// Hapus NAT untuk port-api
|
||||
$natApi = $mikrotik->comm('/ip/firewall/nat/print', [
|
||||
"?dst-port" => $portApi
|
||||
]);
|
||||
|
||||
if (!empty($natApi)) {
|
||||
foreach ($natApi as $rule) {
|
||||
if (isset($rule['.id'])) {
|
||||
$mikrotik->comm('/ip/firewall/nat/remove', [
|
||||
".id" => $rule['.id']
|
||||
]);
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
// Hapus NAT untuk port-remote
|
||||
$natRemote = $mikrotik->comm('/ip/firewall/nat/print', [
|
||||
"?dst-port" => $portRemote
|
||||
]);
|
||||
|
||||
if (!empty($natRemote)) {
|
||||
foreach ($natRemote as $rule) {
|
||||
if (isset($rule['.id'])) {
|
||||
$mikrotik->comm('/ip/firewall/nat/remove', [
|
||||
".id" => $rule['.id']
|
||||
]);
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
$mikrotik->disconnect();
|
||||
|
||||
// Kirim respon sukses
|
||||
http_response_code(200);
|
||||
echo json_encode([
|
||||
'success' => true,
|
||||
'message' => "Tunnel '$name' berhasil dihapus"
|
||||
]);
|
||||
} catch (Exception $e) {
|
||||
$mikrotik->disconnect();
|
||||
http_response_code(500);
|
||||
echo json_encode([
|
||||
'success' => false,
|
||||
'message' => "Gagal menghapus tunnel: " . $e->getMessage()
|
||||
]);
|
||||
}
|
||||
} else {
|
||||
http_response_code(500);
|
||||
echo json_encode([
|
||||
'success' => false,
|
||||
'message' => "Gagal koneksi ke MikroTik"
|
||||
]);
|
||||
}
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
|
||||
|
||||
// <===== CONTOH =====>
|
||||
|
||||
// $tunnel = new CreateTunnel();
|
||||
// $result = $tunnel->addSecret('user123', 'pass123');
|
||||
|
||||
// if ($result['status']) {
|
||||
// echo "✅ Berhasil: " . $result['remote-address'];
|
||||
// } else {
|
||||
// echo "❌ Gagal: " . $result['message'];
|
||||
// }
|
||||
Reference in New Issue
Block a user