MikroTik Cloud Hosted Router

Ƙayyadaddun bayanai

• Sunan samfur: MikroTik CHR (Ma'aikacin Mai Rarraba Hosted na Cloud)
• Bayani: Mai ba da hanya tsakanin hanyoyin sadarwa na tushen gajimare don ayyukan gudanar da hanyar sadarwa
• Siffofin: Gudanar da hanyar sadarwa, sabis na VPN, kariya ta bango, sarrafa bandwidth

Umarnin Amfani da samfur

Jagoran Shigarwa

1. Shirya Muhallin ku: Tabbatar cewa yanayin girgijen ku ya cika buƙatun shigarwa na CHR.
2. Zazzage Hoton MikroTik CHR: Sami hoton CHR daga MikroTik na hukuma website ko ma'aji.
3. Sanya CHR a cikin Mahalli na Gajimare: Bi takamaiman umarnin dandali don tura CHR a cikin saitin gajimare.
4. Tsarin Farko: Sanya saituna na asali kamar musaya na cibiyar sadarwa da adiresoshin IP bayan turawa.
5. Babban Kanfigareshan (Na zaɓi): Keɓance saitunan CHR dangane da buƙatun hanyar sadarwar ku da manufofin sarrafawa.
6. Gudanarwa da Kulawa: Yi amfani da kayan aikin MikroTik don sarrafawa, saka idanu, da magance matsalar misalin ku na CHR.
7. Kulawa na yau da kullun: Yi ayyukan kulawa na yau da kullun don tabbatar da ingantaccen aiki da tsaro.

Manufar: MikroTik CHR shine na'ura mai ba da hanya tsakanin hanyoyin sadarwa na tushen girgije wanda aka tsara don samar da ayyukan tafiyar da hanyar sadarwa a cikin mahalli masu inganci. Yana ba ku damar yin amfani da fasalulluka na MikroTik's RouterOS a cikin kayan aikin girgije, yana mai da shi manufa don gudanar da hanyar sadarwa, sabis na VPN, kariyar bangon wuta, da sarrafa bandwidth a cikin ingantaccen tsari ko tushen girgije.

Amfani da Cases

1. Virtual Private Network (VPN): Ana iya amfani da CHR don sarrafawa da tafiyar da zirga-zirgar VPN, tabbatar da amintaccen haɗin gwiwa mai inganci tsakanin wurare masu nisa.
2. Gudanarwar hanyar sadarwa: Mafi dacewa don sarrafa hadaddun mahallin cibiyar sadarwa, gami da zirga-zirgar ababen hawa, sauyawa, da fasalin zirga-zirga.
3. Firewall da Tsaro: Yana ba da ƙarfin wuta mai ƙarfi don amintaccen zirga-zirgar hanyar sadarwa da kariya daga shiga mara izini.
4. Gudanar da bandwidth: Mai amfani don saka idanu da sarrafa amfani da bandwidth don inganta aikin cibiyar sadarwa.

Jagoran Shigarwa

1. Shirya Muhallin ku:
   Tabbatar cewa kuna da yanayin gajimare ko dandamali na haɓakawa inda zaku iya tura CHR. Ƙungiyoyin da aka tallafa sun haɗa da AWS, Azure, Google Cloud, VMware, Hyper-V, da sauransu.
2. Zazzage Hoton MikroTik CHR:
   Ziyarci jami'in MikroTik website ko MikroTik.com don sauke hoton CHR da ya dace. Zaɓi tsakanin nau'ikan daban-daban dangane da bukatunku (misali, barga ko gwaji).
3. Sanya CHR a cikin Mahalli na Gajimare:
   • AWS: Ƙirƙiri sabon misali kuma loda hoton CHR. Sanya misalin tare da albarkatu masu dacewa (CPU, RAM, ajiya).
   • Azure: Yi amfani da Kasuwar Azure don tura na'ura mai kama da MikroTik CHR.
   • VMware/Hyper–V: Ƙirƙiri sabon injin kama-da-wane kuma haɗa hoton CHR zuwa gare ta.
4. Tsarin Farko:
   • Shiga CHRHaɗa zuwa misalin CHR ta amfani da SSH ko haɗin na'ura mai kwakwalwa.
   • Na asali Kanfigareshan: Saita musaya na cibiyar sadarwa, adiresoshin IP, da ka'idojin zirga-zirga kamar yadda ake buƙata. Koma zuwa takaddun MikroTik don takamaiman umarni da daidaitawa.
5. Babban Kanfigareshan (Na zaɓi):
   • VPN Saita: Sanya ramukan VPN don amintaccen shiga nesa.
   • Dokokin Firewall: Saita dokokin Tacewar zaɓi don kare hanyar sadarwar ku.
   • Bandwidth Gudanarwa: Aiwatar da tsarin zirga-zirga da manufofin sarrafa bandwidth.
6. Gudanarwa da Kulawa:
   Yi amfani da WinBox na MikroTik ko WebHoto don sarrafawa da saka idanu misalin CHR. Waɗannan kayan aikin suna ba da ƙirar hoto don daidaitawa da saka idanu.
7. Kulawa na yau da kullun:
   Ci gaba da sabunta misalin ku na CHR tare da sabbin fitattun software da faci don tabbatar da tsaro da aiki.

La'akari:

• Lasisi: MikroTik CHR yana aiki ƙarƙashin matakan lasisi daban-daban. Zaɓi lasisi dangane da aikin ku da buƙatun fasalin ku.
• Rarraba albarkatun: Tabbatar cewa mahallin ku yana ba da isassun albarkatu don gudanar da zirga-zirgar hanyar sadarwar ku da buƙatun tuƙi.

Albarkatu:

• Takardun MikroTik: Takardun MikroTik CHR
• Dandalin Al'umma: Haɗa tare da al'ummar MikroTik don tallafi da ƙarin shawarwari.

Rubutun Standart (Dogon) don shigarwa ta atomatik

• # Ƙayyade mai sarrafa fakitin
  idan umarni -v yum &> /dev/null; sai pkg_manager=”yum”; elif umurnin -v apt &> /dev/null; sannan pkg_manager=”apt”; wani
  • echo “Ba yum ko dace ba. Ba a tallafawa wannan rubutun.”; fita 1; fi
• # Sabunta fakiti kuma shigar da unzip, pwgen, da coreutils idan [“$ pkg_manager” == “yum”]; sai sudo yum -y update && sudo yum -y shigar unzip pwgen coreutils; elif ["$pkg_manager"== "mafi dacewa"]; sannan sudo apt-get -y update && sudo apt-get -y shigar da unzip pwgen coreutils; fi
  • echo "An sabunta tsarin kuma an shigar da fakitin da ake buƙata."
• # Ƙayyade tushen file tsarin na'urar tushen_device = $ (df / | awk 'NR== 2 {buga $1}') tushen_device_base = $ (echo $ tushen_device | sed 's / [0-9]\+$//')
  • amsawa " Tushen filetsarin yana kan na'urar: $root_device"
  • echo "Hanyar Na'ura: $root_device_base"
• # Ƙirƙiri da hawan kundin adireshi na wucin gadi mkdir /mt_ros_tmp && mount -t tmpfs tmpfs /mt_ros_tmp/ && cd /mt_ros_tmp
• # Nemo adireshin IP da ƙofa
  INTERFACE=$(hanya ip | tsohowar grep | awk '{buga $5}')
  ADDRESS=$(ip addr show "$INTERFACE" | grep duniya | yanke -d'' -f 6 | kai -n 1)
  GATEWAY = $ (jerin layin ip | tsoho grep | yanke -d' '-f 3) sake maimaita "Da fatan za a shigar da tashar (default = 'stable', ko ='gwajin'): "karanta tashar
• # Tsohuwar zuwa 'barga' idan ba a samar da shigarwar ba idan [-z "$ tashar"]; sai channel=”stable” fi
  echo "Shigar da RouterOS CHR daga tashar '$ channel'..."
• # Zazzagewa URL bisa zababben tashar
  idan ["$ tashar" == "gwaji"]; sai rss_feed=”https://download.mikrotik.com/routeros/latest-testing.rss"elserss_feed="https://download.mikrotik.com/routeros/latest-stable.rss" fi
• # Zazzage sabon sigar MikroTik RouterOS rss_content=$(curl -s $rss_feed) latest_version=$(echo "$rss_content" | grep -oP '(?<= RouterOS )[\d\.] +rc\d+' | kai -1) idan [-z “$ latest_version”]; sannan
  • echo "Ba a iya dawo da sabuwar sigar lambar ba." fita 1 fi
  • echo "Sabuwar sigar: $latest_version" zazzagewa_url=”https://download.mikrotik.com/routeros/$latest-version/chr-$latest-version.img.zip“
  • echo "Ana saukewa daga $download_url…"wget ​​-no-check-certificate -O"chr-$latest_version.img.zip" "$ zazzagewa_url"idan [$? - 0]; sannan ka amsa"File samu nasarar zazzagewa: chr-$latest_version.img.zip” da sauransu
  • amsa"File download ya kasa.” fita 1 fi
• # Cire kuma shirya hoton gunzip -c "chr-$latest_version.img.zip"> "chr-$latest_version.img"
• # Dutsen hoton -o madauki "chr-$latest_version.img" /mnt
• # Ƙirƙirar kalmar sirri bazuwar PASSWORD=$(pwgen 12 1)
• # Rubuta rubutun autorun don saita misalin RouterOS
  • echo "Username (Kullanıcı adı): admin"
  • echo "Password (Şifre): $PASSWORD"
  • echo "/ ip address add address = $ ADDRESS interface = [/ interface ethernet nemo inda sunan = ether1]"> /mnt/rw/autorun.scr
  • echo "/ ip road add gateway = $GATEWAY" >> /mnt/rw/autorun.scr
  • echo “/ip service disable telnet” >> /mnt/rw/autorun.scr
  • echo "/ mai amfani saita 0 suna = kalmar sirrin admin = $PASSWORD" >> /mnt/rw/autorun.scr
  • echo"/ip dns saita uwar garke=8.8.8.8,1.1.1.1" >> /mnt/rw/autorun.scr
• # Maimaita duk an saka filetsarin don daidaita yanayin karanta-kawai && amsa u > /proc/sysrq-trigger
• # Fina hoton zuwa faifai dd idan =”chr-$latest_version.img” na=$ tushen_na'urar_base bs=4M oflag=sync
• # Sake kunna tsarin tilastawa
  • echo 1> /proc/sys/kernel/sysrq
  • echo b > /proc/sysrq-trigger

DAYA-LINER (Gajeren) SCRiPT don Shigarwa Mai sarrafa kansa

idan umarni -v yum &> /dev/null; sai pkg_manager=”yum”; elif umurnin -v apt &> /dev/null; sannan pkg_manager=”apt”; sai kuma sake cewa “Ba yum ko dace ba. Ba a tallafawa wannan rubutun.”; fita 1; fi && \ ["$pkg_manager" == "yum"] && sudo yum -y update && sudo yum -y shigar unzip pwgen coreutils || ["$ pkg_manager" == "mafi dacewa"] && sudo apt-get -y update && sudo apt-get -y shigar unzip pwgen coreutils && root_device=$(df / | awk'NR==2 {bugu $1}' ) && root_device_base=$(echo $root_device | sed 's/[0-9]\+$//') && \ amsawa “Tushen filetsarin yana kan na'urar: $ tushen_device" && amsa"Hanyar na'ura: $root_device_base" && \ mkdir /mt_ros_tmp && mount -t tmpfs tmpfs /mt_ros_tmp/ && cd /mt_ros_tmp && \ INTERFACE=$(ip aw gre '{k buga $5}') && ADDRESS=$(ip addr show "$INTERFACE" | grep global | awk '{buga $2}' | kai -n 1) && \ GATEWAY=$(jerin layin ip | tsoho grep | awk '{ buga $3}') && \ karanta -p “Shigar da tashar (default='stable', or='gwaji'): ” tashar; [-z “$ channel”] && channel=”stable”;rss_feed=”https://download.mikrotik.com/routeros/latest-$channel.rss” && rss_content=$(curl -s $rss_feed) && \ latest_version=$(echo "$rss_content" | grep -oP'(?<= RouterOS )[\d\.] +rc\d+' | shugaban -1) && \ [-z "$ latest_version"] && amsawa "Ba a iya dawo da sabuwar sigar lambar ba." && fita 1 || \ echo "Sabuwar sigar: $latest_version" && zazzagewa_url=”https://download.mikrotik.com/routeros/$latest_version/chr-$latest-version.img.zip" && \ amsa" Ana saukewa daga $download_url…” && wget –no-check-certificate -O “chr-$latest_version.img.zip” “$ download_url"&& [$? -eq 0] && amsawa "File samu nasarar sauke: chr-$latest_version.img.zip" || amsa"File download ya kasa.” && gunzip -c “chr-$latest_version.img.zip” > “chr-$latest_version.img” && mount -o madauki “chr-$latest_version.img” /mnt && PASSWORD=$(pwgen 12 1) && echo “Username: admin” && echo “Password: $PASSWORD” && \ echo "/ ip address add address = $ ADDRESS interface = [/ Interface ethernet nemo inda sunan = ether1]" > /mnt/rw/autorun.scr && \ echo "/ ip hanyar ƙara ƙofar = $ GATEWAY" >> /mnt/rw /autorun.scr && echo “/ip service disable telnet” >> /mnt/rw/autorun.scr && \ echo "/ mai amfani saita 0 suna = kalmar sirrin admin = $PASSWORD" >> /mnt/rw/autorun.scr && echo"/ip dns saita uwar garke=8.8.8.8,1.1.1.1″ >> /mnt/rw/autorun.scr && \ sync && echo u > /proc/sysrq-trigger && dd idan = "chr-$latest_version.img" na = $ tushen_device_base bs = 4M oflag = sync && echo 1> /proc/sys/kernel/sysrq && echo b> /proc/sysrq-trigger

Sabunta Maɓallin Rubutun Automation da Bayani

1. Shigar da Ƙarin Fakiti:
   • Ƙara umarnin shigarwa don pwgen da coreutils a cikin yum da masu sarrafa fakitin da suka dace.
2. Adireshin IP da Maido da Ƙofar:
   • Rubutun yana ɗaukar adireshin IP na tsarin da ƙofar ta amfani da IP addr da hanyar IP.
3. Cire zip da Hauwa:
   • An cire hoton kuma an sanya shi ta amfani da gunzip da ɗora umarni tare da zaɓuɓɓukan da suka dace.
4. Ƙirƙirar da Saita Kalmar wucewa:
   • Ana samar da kalmar sirri mai haruffa 12 bazuwar ta amfani da pwgen sannan a saita a cikin rubutun autorun na RouterOS.
5. Rubutun Autorun:
   • Rubutun autorun ya haɗa da umarni don saita misalin RouterOS, gami da ƙara adireshin IP, saita ƙofa, kashe telnet, saita kalmar wucewa ta admin, da daidaita sabar DNS.
6. Sake kunna tsarin:
   • FileAna yin sync na tsarin kafin a tilasta sake kunna tsarin ta amfani da abin jawo SysRq, tabbatar da cewa an rubuta duk bayanai zuwa faifai.
7. Gano Fuskar Sadarwar Sadarwa ta atomatik:
   • INTERFACE=$(hanya ip | tsohowar grep | awk '{bugu $5}'): Yana gano mahallin cibiyar sadarwa ta atomatik ta hanyar nemo hanyar da ta dace.
   • Ana saita canjin ADDRESS ta amfani da wannan abin dubawa da aka gano.

FAQ

Q: Menene babban amfani lokuta na MikroTik CHR?
A: MikroTik CHR ana yawan amfani da shi don sarrafa zirga-zirgar VPN, mahallin cibiyar sadarwa, kariyar bangon wuta, da sarrafa bandwidth a cikin tsarin da aka kirkira ko tushen girgije.

Tambaya: Ta yaya zan iya samun tallafi ga MikroTik CHR?
A: Kuna iya komawa zuwa takaddun MikroTik ko shiga tare da taron jama'a don tallafi da ƙarin shawarwari kan amfani da CHR.

Takardu / Albarkatu

MikroTik Cloud Hosted Router [pdf] Jagorar mai amfani Cloud Hosted Router, Mai ba da hanya tsakanin hanyoyin sadarwa, na'ura mai ba da hanya tsakanin hanyoyin sadarwa

Magana

• Manual mai amfani