MikroTik Huab Hosted Router

Specifications

• Khoom npe: MikroTik CHR (Huab Hosted Router)
• Kev piav qhia: Huab-based virtual router rau network routing functionalities
• Nta: Kev tswj hwm network, kev pabcuam VPN, kev tiv thaiv firewall, kev tswj hwm bandwidth

Cov lus qhia siv khoom

Daim ntawv qhia kev teeb tsa

1. Npaj Koj Ib puag ncig: Xyuas kom koj qhov huab ib puag ncig ua tau raws li qhov yuav tsum tau ua rau CHR kev teeb tsa.
2. Download MikroTik CHR Duab: Tau txais CHR duab los ntawm MikroTik official website los yog repository.
3. Siv CHR nyob rau hauv koj qhov huab ib puag ncig: Ua raws li cov lus qhia tshwj xeeb hauv lub platform kom xa CHR hauv koj qhov teeb tsa huab.
4. Initial Configuration: Configure cov chaw yooj yim xws li network interfaces thiab IP chaw nyob tom qab xa tawm.
5. Advanced Configuration (Yeem): Customize CHR nqis raws li koj qhov kev xav tau ntawm lub network thiab tswj cov cai.
6. Kev Tswj Xyuas thiab Saib Xyuas: Siv cov cuab yeej MikroTik los tswj, saib xyuas, thiab daws teeb meem koj li CHR.
7. Tsis tu ncua: Ua cov haujlwm saib xyuas txhua hnub kom ntseeg tau tias kev ua tau zoo thiab kev nyab xeeb.

Lub hom phiaj: MikroTik CHR yog huab-raws li virtual router tsim los muab kev sib txuas ua haujlwm hauv kev ua haujlwm virtualized. Nws tso cai rau koj siv MikroTik's RouterOS nta hauv huab kev tsim kho vaj tse, ua rau nws zoo tagnrho rau kev tswj hwm network, kev pabcuam VPN, kev tiv thaiv hluav taws xob, thiab kev tswj hwm bandwidth hauv kev teeb tsa virtualized lossis huab.

Siv Cases

1. Virtual Private Network (VPN): CHR tuaj yeem siv los tswj thiab xa cov tsheb khiav VPN, ua kom muaj kev nyab xeeb thiab muaj txiaj ntsig kev sib txuas ntawm cov chaw nyob deb.
2. Network Management: Qhov zoo tshaj plaws rau kev tswj hwm qhov chaw sib txuas hauv lub network, suav nrog kev xa mus, kev hloov pauv, thiab kev hloov tsheb.
3. Firewall thiab Security: Muab lub peev xwm firewall ruaj khov rau kev ruaj ntseg network tsheb thiab tiv thaiv kev nkag mus tsis tau tso cai.
4. Bandwidth Management: Pab tau rau kev saib xyuas thiab tswj kev siv bandwidth kom ua tau zoo hauv kev ua haujlwm network.

Daim ntawv qhia kev teeb tsa

1. Npaj Koj Ib puag ncig:
   Xyuas kom koj muaj huab ib puag ncig lossis virtualization platform uas koj tuaj yeem siv CHR. Txhawb nqa platforms suav nrog AWS, Azure, Google Cloud, VMware, Hyper-V, thiab lwm yam.
2. Download MikroTik CHR Duab:
   Mus ntsib MikroTik official website lub MikroTik.com txhawm rau rub tawm cov duab tsim nyog CHR. Xaiv ntawm cov ntawv sib txawv raws li koj xav tau (piv txwv li, ruaj khov lossis kev sim).
3. Siv CHR nyob rau hauv koj qhov huab ib puag ncig:
   • AWS: Tsim ib qho piv txwv tshiab thiab xa cov duab CHR. Txhim kho qhov piv txwv nrog cov peev txheej tsim nyog (CPU, RAM, cia).
   • Azure: Siv Azure Marketplace los siv MikroTik CHR virtual tshuab.
   • VMware/Hyper-V: Tsim lub tshuab virtual tshiab thiab txuas CHR duab rau nws.
4. Initial Configuration:
   • Nkag mus CHR: Txuas mus rau CHR piv txwv siv SSH lossis console txuas.
   • Basic Kev teeb tsa: Teem lub network interfaces, IP chaw nyob, thiab routing raws tu qauv raws li xav tau. Xa mus rau MikroTik cov ntaub ntawv rau cov lus txib tshwj xeeb thiab teeb tsa.
5. Advanced Configuration (Yeem):
   • VPN Teeb tsa: Configure VPN tunnels kom ruaj ntseg nkag mus rau tej thaj chaw deb.
   • Txoj Cai Firewall: Teeb tsa firewall cov cai los tiv thaiv koj lub network.
   • Bandwidth Kev tswj hwm: Ua raws li txoj cai tswj kev tsheb khiav thiab kev tswj hwm bandwidth.
6. Kev Tswj Xyuas thiab Saib Xyuas:
   Siv MikroTik's WinBox lossis WebDaim duab los tswj thiab saib xyuas CHR piv txwv. Cov cuab yeej no muab cov graphical interface rau kev teeb tsa thiab saib xyuas.
7. Tsis tu ncua:
   Khaws koj qhov xwm txheej CHR hloov tshiab nrog cov software tshiab tshaj tawm thiab thaj ua rau thaj kom muaj kev nyab xeeb thiab ua haujlwm tau zoo.

Kev txiav txim siab:

• Daim ntawv tso cai: MikroTik CHR ua haujlwm raws li qib ntawv tso cai sib txawv. Xaiv daim ntawv tso cai raws li koj qhov kev ua tau zoo thiab cov kev xav tau tshwj xeeb.
• Kev faib nyiaj txiag: Xyuas kom koj ib puag ncig virtual muab cov peev txheej txaus los tswj koj lub network kev khiav tsheb thiab kev xav tau.

Cov peev txheej:

• Cov ntaub ntawv MikroTik: MikroTik CHR Cov Ntaub Ntawv
• Community Forums: Koom nrog MikroTik zej zog rau kev txhawb nqa thiab cov lus qhia ntxiv.

Standart (Long) Tsab ntawv rau kev teeb tsa automated

• # Txiav txim siab tus thawj tswj pob
  yog hais kom ua -v yum &> /dev/null; ces pkg_manager = "yum"; elif hais kom ua -v apt &> /dev/null; ces pkg_manager = "apt"; lwm tus
  • echo “Tsis pom yum lossis apt pom. Tsab ntawv no tsis txaus siab."; tawm 1; fi ua
• # Hloov kho pob khoom thiab nruab unzip, pwgen, thiab coreutils yog [ “$pkg_manager” == “yum” ]; ces sudo yum -y hloov tshiab && sudo yum -y nruab unzip pwgen coreutils; elif [ “$pkg_manager” == “apt” ]; ces sudo apt-get -y hloov tshiab && sudo apt-get -y nruab unzip pwgen coreutils; fi ua
  • ncha "Lub kaw lus tau hloov kho thiab xav tau cov pob khoom raug teeb tsa."
• # Txiav txim lub hauv paus file system device root_device=$(df / | awk 'NR==2 {print $1}') root_device_base=$(echo $root_device | sed 's/[0-9]\+$//')
  • echo "Root filesystem yog nyob rau hauv ntaus ntawv: $root_device"
  • ncha "Device path: $root_device_base"
• # Tsim thiab mount ib ntus directory mkdir /mt_ros_tmp && mount -t tmpfs tmpfs /mt_ros_tmp/ && cd /mt_ros_tmp
• # Tau txais IP chaw nyob thiab rooj vag
  INTERFACE=$(ip route | grep default | awk '{print $5}')
  ADDRESS=$(ip addr show “$ INTERFACE” | grep global | cut -d' ' -f 6 | head -n 1)
  GATEWAY=$(ip route list | grep default | cut -d' ' -f 3) ncho “Thov nkag mus rau channel (default='stable', or='testing'): ” nyeem channel
• # Default rau 'ruaj khov' yog tias tsis muaj kev tawm tswv yim yog [ -z “$channel” ]; ces channel = "stable" fi
  ncha "Nruab RouterOS CHR los ntawm '$ channel' channel..."
• #Download tau URL raws li xaiv channel
  yog [ “$channel” == “testing” ]; ces rss_feed =”https://download.mikrotik.com/routeros/latest-testing.rss“elerss_feed =”https://download.mikrotik.com/routeros/latest-stable.rss”fi
• # Rub tawm qhov tseeb version ntawm MikroTik RouterOS rss_content=$(curl -s $rss_feed) latest_version=$(echo “$rss_content” | grep -oP '(?<= RouterOS )[\d\.] +rc\d+' | taub hau -1) yog [ -z “$latest_version” ]; ces
  • ncha "Tsis tuaj yeem muab tus lej xov tooj tshiab kawg." ex1 ua
  • echo “Latest version: $latest_version” download_url=”https://download.mikrotik.com/routeros/$latest-version/chr-$latest-version.img.zip“
  • echo “Downloading los ntawm $download_url…” wget –no-check-certificate -O “chr-$latest_version.img.zip” “$download_url” yog [$? -eq 0]; ces echo "File ua tiav downloaded: chr-$latest_version.img.zip”lwm
  • echo "File download tsis tau." ex1 ua
• # Unzip thiab npaj cov duab gunzip -c "chr-$latest_version.img.zip" > "chr-$latest_version.img"
• # Mount cov duab mount -o voj "chr-$latest_version.img" / mnt
• # Tsim tus password random PASSWORD=$(pwgen 12 1)
• # Sau ntawv autorun los teeb tsa RouterOS piv txwv
  • ncha "Username (Kullanıcı adı): admin"
  • echo “Password (Şifre): $PASSWORD”
  • ncha "/ ip chaw ntxiv chaw nyob = $ ADDRESS interface = [/ interface ethernet nrhiav qhov twg lub npe = ether1]" > / mnt/rw/autorun.scr
  • ncha "/ ip txoj kev ntxiv rooj vag = $ GATEWAY" >> / mnt/rw/autorun.scr
  • ncha "/ ip kev pabcuam lov tes taw telnet" >> /mnt/rw/autorun.scr
  • ncha "/ neeg siv teeb 0 lub npe = admin password = $ PASSWORD" >> / mnt/rw/autorun.scr
  • ncha “/ip dns teeb server=8.8.8.8,1.1.1.1” >> /mnt/rw/autorun.scr
• # Remount tag nrho cov mounted filesystems los nyeem nkaus xwb hom sync && ncha koj > /proc/sysrq-trigger
• # Flash cov duab rau disk dd yog = "chr-$latest_version.img" of=$root_device_base bs=4M oflag=sync
• # Force reboot system
  • ncha 1 > /proc/sys/kernel/sysrq
  • ncha b> /proc/sysrq-trigger

ONE-LINER (luv luv) SCRiPT rau Automated Installations

yog hais kom ua -v yum &> /dev/null; ces pkg_manager = "yum"; elif hais kom ua -v apt &> /dev/null; ces pkg_manager = "apt"; lwm tus echo “Tsis pom yum lossis apt pom. Tsab ntawv no tsis txaus siab."; tawm 1; fi && \ [ "$pkg_manager" == "yum" ] && sudo yum -y hloov tshiab && sudo yum -y nruab unzip pwgen coreutils || [ “$pkg_manager” == “apt” ] && sudo apt-get -y hloov tshiab && sudo apt-get -y nruab unzip pwgen coreutils && \ root_device=$(df / | awk 'NR==2 {print $1}' ) && root_device_base=$(echo $root_device | sed 's/[0-9]\+$//') && \ ncho "Root filesystem is on device: $root_device" && ncha "Device path: $root_device_base" && \ mkdir /mt_ros_tmp && mount -t tmpfs tmpfs /mt_ros_tmp/ && cd /mt_ros_tmp && \ INTERFACE = $ 'default route print $5}') && ADDRESS=$(ip addr show “$ INTERFACE” | grep global | awk '{print $2}' | head -n 1) && \ GATEWAY=$(ip route list | grep default | awk '{ print $3}') && \ nyeem -p “Sau channel (default='stable', or='testing'): ”channel; [ -z “$channel” ] && channel=”stable”;rss_feed=”https://download.mikrotik.com/routeros/latest-$channel.rss&& rss_content=$(curl -s $rss_feed) && \ latest_version=$(echo “$rss_content” | grep -oP '(?<= RouterOS )[\d\.] +rc\d+' | taub hau -1) && \ [ -z “$latest_version” ] && ncha “Tsis tuaj yeem muab tus lej xov tooj tshiab kawg.” && tawm 1 || \ ncho “Ltest version: $latest_version” && download_url=”https://download.mikrotik.com/routeros/$latest_version/chr-$latest-version.img.zip” && \ ncha “Downloading los ntawm $download_url…” && wget –no-check-certificate -O “chr-$latest_version.img.zip” “$download_url” && \ [$? -eq 0] && ncho "File ua tiav downloaded: chr-$latest_version.img.zip" || echo "File download tsis tau." && \ gunzip -c "chr-$latest_version.img.zip" > "chr-$latest_version.img" && mount -o voj "chr-$latest_version.img" /mnt && \ PASSWORD=$(pwgen 12 1) && ncha "Username: admin" && ncha "Password: $PASSWORD" && \ ncha "/ ip chaw nyob ntxiv chaw nyob = $ ADDRESS interface = [/interface ethernet nrhiav qhov twg lub npe = ether1]" > /mnt/rw/autorun.scr && \ ncha "/ ip txoj kev ntxiv rooj vag = $ GATEWAY" >> / mnt/rw /autorun.scr && ncha "/ip kev pab cuam telnet" >> /mnt/rw/autorun.scr && \ ncha "/user teeb 0 name=admin password=$PASSWORD” >> /mnt/rw/autorun.scr && ncha “/ip dns set server=8.8.8.8,1.1.1.1″ >> /mnt/rw/autorun.scr && \ sync && echo u > /proc/sysrq-trigger && dd if=”chr-$latest_version.img” of=$root_device_base bs=4M oflag=sync && \echo 1 > /proc/sys/kernel/sysrq && ncha b> /proc/sysrq-trigger

Automation Scripts 'Kuj hloov tshiab thiab piav qhia

1. Txhim kho cov pob ntxiv:
   • Ntxiv cov lus txib ntxiv rau pwgen thiab coreutils hauv ob qho tib si yum thiab apt pob managers.
2. IP chaw nyob thiab rooj vag Retrieval:
   • Tsab ntawv captures lub system tus IP chaw nyob thiab lub rooj vag siv IP addr thiab ip txoj kev.
3. Unzipping thiab Mounting:
   • Cov duab yog unzipped thiab mounted siv gunzip thiab mount commands nrog cov kev xaiv tsim nyog.
4. Tsim thiab teeb tsa Password:
   • Ib tug random 12-tus cim lo lus zais yog generated siv pwgen thiab ces teem rau hauv autorun tsab ntawv rau RouterOS.
5. Autorun Script:
   • Cov ntawv sau autorun suav nrog cov lus txib kom teeb tsa RouterOS piv txwv, suav nrog ntxiv qhov chaw nyob IP, teeb tsa lub rooj vag, cuam tshuam telnet, teeb tsa tus password admin, thiab teeb tsa DNS servers.
6. System Reboot:
   • Filesystem sync yog ua ua ntej yuam lub kaw lus reboot siv lub SysRq trigger, xyuas kom meej tias tag nrho cov ntaub ntawv yog sau rau disk.
7. Automatic Network Interface Detection:
   • INTERFACE=$(ip txoj hauv kev | grep default | awk '{print $5}'): Tsis siv neeg kuaj xyuas lub network sib cuam tshuam los ntawm kev nrhiav txoj hauv kev default's interface.
   • Qhov sib txawv ntawm ADDRESS tau teeb tsa siv qhov kev kuaj pom no.

FAQ

Q: Dab tsi yog qhov kev siv tseem ceeb ntawm MikroTik CHR?
A: MikroTik CHR feem ntau yog siv rau kev tswj hwm VPN tsheb, thaj chaw hauv network, kev tiv thaiv hluav taws xob, thiab kev tswj hwm bandwidth hauv kev teeb tsa virtualized lossis huab.

Q: Kuv tuaj yeem tau txais kev txhawb nqa rau MikroTik CHR li cas?
A: Koj tuaj yeem xa mus rau MikroTik cov ntaub ntawv lossis koom nrog cov rooj sib tham hauv zej zog rau kev txhawb nqa thiab cov lus qhia ntxiv txog kev siv CHR.

Cov ntaub ntawv / Cov ntaub ntawv

MikroTik Huab Hosted Router [ua pdf] Cov neeg siv phau ntawv qhia Huab Hosted Router, Hosted Router, Router

Cov ntaub ntawv

• Cov neeg siv phau ntawv