Wireless networks are highly vulnerable to security threats, particularly unauthorized access. PT Borneo Cakrawala Media currently relies on the WPA2-PSK security mechanism, which has certain limitations. This study aims to implement MAC Address Filtering as an additional security mechanism for a wireless network. The research methodology includes the design, configuration, and testing of MAC Address Filtering using a Mikrotik RB750GR3 router and a Ruijie RG-720L access point. The tests were conducted on registered and unregistered device access, device addition and removal, false positive and false negative cases, MAC Address Spoofing handling, and network performance evaluation using Quality of Service (QoS) parameters based on the TIPHON standard. The results indicate that MAC Address Filtering is capable of accurately verifying registered devices and rejecting unauthorized devices, managing MAC Address addition and removal, and handling false positive and false negative cases with a 100% success rate without significantly degrading network performance. Furthermore, the MAC Address Spoofing tests demonstrate that the system can distinguish devices even when identical or similar MAC Addresses are used. It can be concluded that MAC Address Filtering is effective as an additional security mechanism for protecting wireless networks.
Keywords: Network Security, Wireless Network, MAC Address Filtering, MAC Address spoofing, Quality of Service.
Abstrak
Jaringan wireless memiliki risiko keamanan yang tinggi terhadap akses tidak sah. PT Borneo Cakrawala Media masih menggunakan sistem keamanan WPA2-PSK yang memiliki keterbatasan. Penelitian ini bertujuan menerapkan MAC Address Filtering sebagai sistem keamanan tambahan pada jaringan wireless. Metode penelitian meliputi perancangan, konfigurasi, dan pengujian MAC Address Filtering menggunakan router Mikrotik RB750GR3 dan access point Ruijie RG-720L. Pengujian dilakukan terhadap akses perangkat terdaftar/tidak terdaftar,penambahan dan penghapusan perangkat, kasus false positive dan negative, penanganan MAC Address Spoofing, serta evaluasi performansi jaringan menggunakan parameter Quality of Service (QoS) berdasarkan standar TIPHON. Hasil penelitian menunjukkan bahwa MAC Address Filtering mampu memverifikasi perangkat terdaftar atau menolak perangkat tidak sah, penambahan atau penghapusan MAC Address, kasus false positive dan negative dengan tingkat keberhasilan 100% tanpa menurunkan performansi jaringan secara signifikan dan juga hasil dari pengujian MAC Address Spoofing mampu membedakan perangkat walaupun MAC Addressnya sama atau mirip. Dapat disimpulkan bahwa MAC Address Filtering efektif digunakan sebagai sistem keamanan tambahan untuk melindungi jaringan wireless.
Kata Kunci: Keamanan Jaringan, Jaringan Wireless, MAC Address Filtering, MAC Address Spoofing, Quality of Service.
References
[1] L. D. Samsumar and S. Hadi, “Pengembangan Jaringan Komputer Jaringan Komputer Nirkabel (WiFi) Menggunakan Mikrotik Router (Studi Kasus Pada SMA PGRI Aikmel),” vol. 4, no. 1, pp. 1–9, 2018.
[2] A. N. Bayu, “Analisis Keamanan Jaringan Pada Fasilitas Internet (WiFi) Terhadap Serangan Packet Sniffing,” 2012.
[3] D. Era GInanti, A. Christian, and T. Hidayat, “Analisa Dan Implementasi Jaringan Wireless MAC Address Menggunakan Filtering Pada PT.Faya Kuntura Agung Konsultindo,” vol. 16, no. 2, pp. 79–84, 2022.
[4] Irsan, “Keamanan Jaringan Wireless Lan Dengan Metode MAC Address Filtering Di SDN Kunciran 8,” vol. 1, no. 6, pp. 1536–1540, 2023.
[5] R. A. Purnama, “Optimalisasi Keamanan Jaringan Wireless Menggunakan Firewall Filtering MAC Address,” vol. 8, no. 4, 2019.
[6] Firmansyah, R. A. Purnama, and R. D. Astuti, “Optimalisasi Keamanan Wireless Menggunakan,” vol. 15, no. 1, pp. 25–33, 2021.
[7] A. S. Hidayat, U. Nuha, and Y. Nuryamin, “Quality Of Service Filtering Dengan Metode Filtering MAC Address Jaringan Wireless,” vol. 7, no. 1, pp. 52–59, 2021.
[8] P. R. Kumar, P. H. Raj, and P. Jelciana, “ScienceDirect Procedia Computer Science Exploring Data Security Issues and Solutions in Cloud Computing,” Procedia Comput. Sci., vol. 125, no. 2009, pp. 691–697, 2018, doi: 10.1016/j.procs.2017.12.089.
[9] P. Pratama Putra, “Pengembangan Sistem Keamanan Jaringan Menggunakan Rumusan Snort Rule (Hids) untuk Mendeteksi Serangan Nmap,” vol. 2, no. 1, 2016.
[10] J. Dwi Santoso, “Keamanan Jaringan Nirkabel Menggunakan Wireless Instrusion Joko Dwi Santoso Abstraksi Keywords : Pendahuluan,” vol. 1, no. 3.
[11] Febriayandi, “Perancangan Sistem Keamanan Jaringan Dengan Metode MAC Address Filtering Dan Penerapan Fitut Hotspot Di Mikrotik RB-941 hAP Lite Pada Kantor Konsultan Pajak Edi Kurniawan,” 2022.
[12] K. Anugrah, “Pengenalan Osi Layer Kata Kunci : Pengenalan Osi Layer,” pp. 1–5, 1980.
[13] W. Stallings, Data Dan Computer.
[14] Rico, “Analisis Kelemahan Celah Lapisan Keamanan Pada Jaringan Nirkabel,” vol. 9, no. 1, pp. 6–13, 2014.
[15] A. Maulana, M. Kom, A. Fauzi, and M. Kom, “Jaringan komputer”.
[16] A. M. Candra, S. Samsugi, and Jupriyadi, “Percangan Dan Implementasi Controller Access Point System Manager (CAPSMAN) Mikrotik Menggunakan Aplikasi Winbox,” vol. 2, no. 2, pp. 26–32, 2021.
[17] M. Adias Sabara and A. Prayogi, “Konfigurasi Manajemen Bandwidth Menggunakan Router Mikrotik RB2011UiAS-RM Untuk Mengontrol Penggunakan Internet di PT.Rekan Usaha Mikro Anda Tegal,” vol. 9, no. 2, pp. 43–46, 2020.
[18] M. Iqbal, “Perancangan Sistem Informasi Pengontrolan Access Point Jaringan Pada UIN Mahmud Yunus Batu Sangkar Berbasis Web,” 2022.
[19] H. Anom, S. Aji, and A. C. Prasetyo, “Evaluasi Kinerja Jaringan WiFi Mahasiswa : Analisis Throughput , Delay , Jitter , dan Packet loss,” vol. 8, no. 1, pp. 23–27, 2024.