Ntuziaka onye ọrụ rawụta MikroTik Cloud kwadoro

Budata foto MikroTik CHR: Nweta onyonyo CHR site na MikroTik gọọmentị websaịtị ma ọ bụ ebe nchekwa.
Nyefee CHR na gburugburu igwe ojii gị: Soro ntuziaka akọwapụtara maka ikpo okwu ka ibunye CHR na nhazi igwe ojii gị.

Nhazi izizi: Hazie ntọala ntọala dị ka oghere netwọkụ na adreesị IP mgbe ebufere ya.
Nhazi dị elu (Nhọrọ): Hazie ntọala CHR dabere na ihe netwọk chọrọ yana atumatu njikwa.

Nlekọta na nlekota oru: Jiri ngwa MikroTik jikwaa, nyochaa, na mezie nsogbu ihe atụ CHR gị.
Nlekọta oge niile: Mee ọrụ mmezi oge niile iji hụ na arụmọrụ na nchekwa kacha mma.

Ebumnuche: MikroTik CHR bụ igwe ojii mebere rawụta emebere iji nye ọrụ ntụgharị netwọkụ na gburugburu mebere. Ọ na-enye gị ohere itinye atụmatụ MikroTik's RouterOS n'ime akụrụngwa igwe ojii, na-eme ka ọ dị mma maka njikwa netwọkụ, ọrụ VPN, nchekwa ọkụ, yana njikwa bandwidth na ntọala nke ọma ma ọ bụ igwe ojii.

Jiri Okwu

Netwọk nkeonwe Virtual (VPN): Enwere ike iji CHR jikwaa ma na-ebugharị okporo ụzọ VPN, na-eme ka njikọ dị nchebe na nke ọma n'etiti ebe ndị dịpụrụ adịpụ.

Njikwa netwọk: Ọ dị mma maka ijikwa gburugburu netwọkụ gbagwojuru anya, gụnyere ntụgharị, mgbanwe na nhazi okporo ụzọ.
Firewall na nchekwa: Na-enye ike firewall siri ike iji chekwaa okporo ụzọ netwọkụ ma chebe pụọ na ịnweta enweghị ikike.

Njikwa bandwit: Ọ bara uru maka nlekota na ịchịkwa ojiji bandwit iji kwalite arụmọrụ netwọk.

Ntuziaka nwụnye

Kwadebe gburugburu gị:
Gbaa mbọ hụ na ị nwere gburugburu igwe ojii ma ọ bụ ikpo okwu mebere ebe ị nwere ike ibuga CHR. nyiwe akwadoro gụnyere AWS, Azure, Google Cloud, VMware, Hyper-V, na ndị ọzọ.

Budata foto MikroTik CHR:
Gaa leta onye ọrụ MikroTik websaịtị ma ọ bụ MikroTik.com ka ibudata onyonyo CHR kwesịrị ekwesị. Họrọ n'etiti ụdị dị iche iche dabere na mkpa gị (dịka ọmụmaatụ, kwụsiri ike ma ọ bụ nnwale).
Nyefee CHR na gburugburu igwe ojii gị:
- AWS: Mepụta ihe atụ ọhụrụ wee bulite onyonyo CHR. Jiri akụrụngwa dabara adaba hazie ihe atụ (CPU, RAM, nchekwa).
- Azure: Jiri Ebe Azụmahịa Azure ka ibunye igwe mebere MikroTik CHR.
- VMware/Hyper–V: Mepụta igwe mebere ọhụrụ wee tinye onyonyo CHR na ya.
Nhazi izizi:
- Nweta CHR: Jikọọ na ihe atụ CHR site na iji SSH ma ọ bụ njikọ njikwa.
- Isi Nhazi: Hazie oghere netwọkụ, adreesị IP, na usoro ngagharị dịka achọrọ. Rụtụ aka na akwụkwọ MikroTik maka ụfọdụ iwu na nhazi.

Nhazi dị elu (Nhọrọ):
- VPN Melite: Hazie ọwara VPN maka ịnweta ebe dịpụrụ adịpụ.
- Iwu Firewall: Tọọ iwu firewall iji chebe netwọk gị.
- Bandwit Nlekọta: Tinye iwu nhazi okporo ụzọ na njikwa bandwit.

Nlekọta na nlekota oru:
Jiri MikroTik's WinBox ma ọ bụ WebIhe atụ iji jikwaa na nyochaa ihe atụ CHR. Ngwaọrụ ndị a na-enye ihe ngosi eserese maka nhazi na nlekota oru.
Nlekọta oge niile:
Debe ihe atụ CHR gị site na mwepụta na patches kachasị ọhụrụ na ngwanrọ iji hụ na nchekwa na arụmọrụ.

Atụmatụ:

Ịnye ikike: MikroTik CHR na-arụ ọrụ n'okpuru ọkwa ikike dị iche iche. Họrọ ikike dabere na arụmọrụ gị yana ihe achọrọ.
Oke akụrụngwa: Gbaa mbọ hụ na ebe mebere gị na-enye akụrụngwa zuru oke iji gboo okporo ụzọ netwọkụ gị na mkpa ụzọ.

Akụrụngwa:

Akwụkwọ MikroTik: Akwụkwọ MikroTik CHR
Nzukọ ogbe: Soro ndị obodo MikroTik maka nkwado na ndụmọdụ ndị ọzọ.

Ederede Standart (Ogologo) maka nrụnye akpaaka

# Kpebie onye njikwa ngwugwu
ọ bụrụ na iwu -v yum &> /dev/null; wee pkg_manager=”yum”; iwu elif -v apt &> /dev/null; wee pkg_manager=”apt”; ọzọ
- Echo “Ma yum ma ọ bụ dabara adaba. akwadoghị edemede a.”; pụọ 1; fi
# Melite ngwugwu ma wụnye unzip, pwgen, na coreutils ma ọ bụrụ [“$ pkg_manager” == “yum”]; wee sudo yum -y update && sudo yum -y install unzip pwgen coreutils; elif ["$pkg_manager" == "adaba adaba"]; wee sudo apt-get -y update && sudo apt-get -y install unzip pwgen coreutils; fi
- Echo "Emelitere sistemu ahụ wee tinye ngwungwu achọrọ."
# Kpebie mgbọrọgwụ file ngwaọrụ usoro root_device = $ (df / | awk 'NR== 2 {bipụta $1}') root_device_base =$(echo $root_device | sed 's/[0-9]\+$//')
- ikwughachi “Root fileSistemu dị na ngwaọrụ: $root_device”
- kwughachi "Ụzọ ngwaọrụ: $root_device_base"
# Mepụta ma bulie akwụkwọ ndekọ nwa oge mkdir /mt_ros_tmp &&mount -t tmpfs tmpfs /mt_ros_tmp/ && cd /mt_ros_tmp
# Nweta adreesị IP na ọnụ ụzọ ámá
INTERFACE=$( ụzọ ip | ndabara grep | awk '{bipụta $5}')
ADDRESS=$(ip addr show "$INTERFACE" | grep global | cut -d'' -f 6 | isi -n 1)
GATEWAY = $ (ndepụta ụzọ ip | ndabara grep | cut -d' -f 3) kwughachi "Biko tinye ọwa (ndabara = 'stable', ma ọ bụ =' nnwale'): "gụọ ọwa

# Dabara na 'kwụsiri ike' ma ọ bụrụ na enweghị ntinye ọ bụrụ na [-z "$ ọwa"]; wee chanel=”stable” fi
Echo “Wụnye RouterOS CHR site na ọwa $ ọwa…”
# Budata URL dabere na ọwa ahọpụtara
ọ bụrụ na ["$ ọwa" == "nnwale"]; wee rss_feed=”https://download.mikrotik.com/routeros/latest-testing.rss"elserss_feed="https://download.mikrotik.com/routeros/latest-stable.rss” fi
# Budata MikroTik RouterOS kacha ọhụrụ rss_content=$(curl -s $rss_feed) latest_version=$(echo “$rss_content” | grep -oP '(?<= RouterOS )[\d\.] +rc\d+' | isi -1) ma ọ bụrụ [-z “$ latest_version”]; mgbe ahụ
- Echo "Enweghị ike iweghachite nọmba ụdị kachasị ọhụrụ." pụọ 1 fi
- kwughachi "ụdị Kacha ọhụrụ: $ latest_version" download_url="https://download.mikrotik.com/routeros/$latest-version/chr-$latest-version.img.zip“
- kwughachi "Ịbudata site na $download_url…”wget –no-check-certificate -O “chr-$ latest_version.img.zip” “$download_url"Ọ bụrụ na [$? -eq 0]; wee kwughachi"File ebudatara nke ọma: chr-$latest_version.img.zip" ọzọ
- ikwughachi"File nbudata agaghị." pụọ 1 fi
# Wepu ma dozie ihe onyonyo a gunzip -c “chr-$latest_version.img.zip” > “chr-$latest_version.img”
# Ugwu ihe onyonyo a -o loop “chr-$latest_version.img” /mnt

# Mepụta paswọọdụ enweghị usoro PASSWORD=$(pwgen 12 1)
# Dee edemede autorun iji hazie ihe atụ RouterOS
- Echo "Aha njirimara (Kullanıcı adı): admin"
- kwughachi "Paswọdu (Şifre): $PASSWORD"
- Echo "/ adreesị IP tinye adreesị = $ ADDRESS interface = [/ interface ethernet chọta ebe aha = ether1]" > /mnt/rw/autorun.scr
- echo "/ip ụzọ tinye gateway =$GATEWAY" >> /mnt/rw/autorun.scr
- Echo “/ip ọrụ gbanyụọ telnet” >> /mnt/rw/autorun.scr
- echo "/ onye ọrụ setịpụrụ 0 aha = paswọọdụ nchịkwa = $PASSWORD" >> /mnt/rw/autorun.scr
- Echo "/ip dns set server=8.8.8.8,1.1.1.1" >> /mnt/rw/autorun.scr

# Tinyegharịa ihe niile agbakwunyere fileSistemu na-emekọrịta ụdị naanị ịgụ-naanị && echo u > /proc/sysrq-trigger
# Fanye onyonyo a na diski dd ma ọ bụrụ =”chr-$latest_version.img” nke=$root_device_base bs=4M oflag=sync
# Malitegharịa ekwentị Force
- echo 1> /proc/sys/kernel/sysrq
- echo b > /proc/sysrq-trigger

SCRiPT ONE-LINER (Obere) maka nrụnye akpaaka

ọ bụrụ iwu -v yum &> /dev/null; wee pkg_manager=”yum”; iwu elif -v apt &> /dev/null; wee pkg_manager=”apt”; ọzọ kwughachi “Ma yum ma ọ bụ dabara adaba. akwadoghị edemede a.”; pụọ 1; fi && \ [“$pkg_manager” == “yum” ] && sudo yum -y update && sudo yum -y install unzip pwgen coreutils || ["$ pkg_manager" == "apt" ] && sudo apt-get -y update && sudo apt-get -y install unzip pwgen coreutils && \ root_device=$(df / | awk 'NR==2 {ebipụta $1}' ) && root_device_base=$(echo $root_device | sed 's/[0-9]\+$//') && \ echo “Root fileSistemu dị na ngwaọrụ: $ root_device” && echo “Ụzọ ngwaọrụ: $root_device_base” && \ mkdir /mt_ros_tmp && mount -t tmpfs tmpfs /mt_ros_tmp/ && cd /mt_ros_tmp && \ INTERFACE=$(ip ụzọ |{p) ebipụta $5}') && ADDRESS=$(ip addr show "$INTERFACE" | grep global | awk '{bipụta $2}' | isi -n 1) && \ GATEWAY=$(ndepụta ụzọ ip | ndabara grep | awk '{ ebipụta $3}') && \ agụ -p “Tinye ọwa (ndabara='stable', ma ọ bụ='ule'): ” ọwa; [-z “$ ọwa”] && ọwa=” kwụsiri ike”;rss_feed=”https://download.mikrotik.com/routeros/latest-$channel.rss” && rss_content=$(curl -s $rss_feed) && \ latest_version=$(nkwughachi “$rss_content” | grep -oP '(?<= RouterOS )[\d\.] +rc\d+' | isi -1) && \ [-z "$ latest_version"] && kwughachi "Enweghị ike iweghachite nọmba ụdị kachasị ọhụrụ." && ọpụpụ 1 || "Ụdị Kacha ọhụrụ: $ latest_version" && budata_url="https://download.mikrotik.com/routeros/$latest_version/chr-$latest-version.img.zip" && \ kwughachi" Nbudata site na $download_url…” && wget –no-check-certificate -O “chr-$ latest_version.img.zip” “$download_url" && [$? -eq 0] && kwughachi"File ebudatara nke ọma: chr-$ latest_version.img.zip" || ikwughachi"File nbudata agaghị." && gunzip -c “chr-$latest_version.img.zip” > “chr-$latest_version.img” && mount -o loop “chr-$latest_version.img” /mnt && \ PASSWORD=$(pwgen 12 1) && echo "Aha njirimara: admin" && kwughachi "Paswọdu: $PASSWORD" && \ echo "/ ip adreesị tinye adreesị = $ ADDRESS interface = [/ interface ethernet chọta ebe aha = ether1]" > /mnt/rw/autorun.scr && \ echo "/ ip ụzọ tinye gateway = $ GATEWAY" >> /mnt/rw /autorun.scr && echo “/ip ọrụ gbanyụọ telnet” >> /mnt/rw/autorun.scr && \ echo "/ onye ọrụ setịpụrụ 0 aha = paswọọdụ nchịkwa = $PASSWORD" >> /mnt/rw/autorun.scr && echo "/ip dns set server=8.8.8.8,1.1.1.1″ >> /mnt/rw/autorun.scr && \ mekọrịta && kwughachi u> /proc/sysrq-trigger && dd if=”chr-$latest_version.img” of=$root_device_base bs=4M oflag=sync && \ echo 1 > /proc/sys/kernel/sysrq && echo b > /proc/sysrq-trigger

Mmelite na nkọwapụta nke Scripts akpaaka

Ịwụnye ngwugwu ndị ọzọ:
- Iwu nrụnye agbakwunyere maka pwgen na coreutils na yum na ndị njikwa ngwugwu dabara adaba.
Adreesị IP na iweghachite ọnụ ụzọ ámá:
- Edemede a na-ejide adreesị IP nke sistemu yana ọnụ ụzọ site na iji IP addr na ụzọ IP.
Mwepu na ịrị elu:
- A na-ewepụ ihe onyonyo a ma tinye ya site na iji gunzip na iwu ugwu nwere nhọrọ dabara adaba.

Ịmepụta na ịtọ paswọọdụ:
- A na-emepụta paswọọdụ mkpụrụedemede 12 na-enweghị usoro site na iji pwgen wee debe ya na edemede autorun maka RouterOS.
Edemede akpaaka:
- Ederede autorun na-agụnye iwu iji hazie ihe atụ RouterOS, gụnyere ịgbakwunye adreesị IP, ịtọghe ụzọ ámá, gbanyụọ telnet, ịtọ paswọọdụ nchịkwa, na ịhazi sava DNS.
Mbugharị sistemu:
- FileA na-eme mmekọrịta sistemu tupu ịmanye sistemụ reboot site na iji SysRq trigger, na-ahụ na edere data niile na diski.

Nchọpụta ihu netwọkụ akpaaka:
- INTERFACE=$( ụzọ ip | ndabara grep | awk '{bipụta $5}'): Na-achọpụta ihu netwọkụ na-arụ ọrụ na-akpaghị aka site na ịchọta interface ụzọ ndabara.
- A na-ahazizi mgbanwe ADDRESS site na iji ngwa a achọpụtara.

FAQ

Q: Gịnị bụ isi ojiji ikpe nke MikroTik CHR?
A: A na-ejikarị MikroTik CHR maka ijikwa okporo ụzọ VPN, gburugburu netwọkụ, nchekwa ọkụ, yana njikwa bandwit na ntọlite mebere ma ọ bụ igwe ojii.

Ajụjụ: Kedu ka m ga-esi nweta nkwado maka MikroTik CHR?
A: Ị nwere ike na-ezo aka na akwụkwọ MikroTik ma ọ bụ soro na nnọkọ obodo maka nkwado na ndụmọdụ ndị ọzọ maka iji CHR.