MikroTik Cloud Yakagadzirirwa Router

Zvinotsanangurwa

• Product Name: MikroTik CHR (Cloud Hosting Router)
• Tsanangudzo: Cloud-based virtual router ye network routing functionalities
• Features: Network manejimendi, VPN masevhisi, firewall kuchengetedza, bandwidth manejimendi

Mirayiridzo Yekushandiswa Kwechigadzirwa

Installation Guide

1. Gadzirira Nzvimbo Yako: Ita shuwa kuti yako gore nharaunda inosangana nezvinodiwa zvekuiswa kweCHR.
2. Dhawunirodha MikroTik CHR Mufananidzo: Tora mufananidzo weCHR kubva kune yepamutemo MikroTik webnzvimbo kana repository.
3. Shandisa CHR mune Yako Cloud Nzvimbo: Tevedza mirairo yepuratifomu yekuisa CHR mukuseta kwegore rako.
4. Kutanga Configuration: Gadzirisa zvigadziriso zvekutanga senge network interfaces uye IP kero mushure mekutumirwa.
5. Kugadziridza Kwepamusoro (Zvichida): Gadzirisa CHR marongero zvichibva pane yako network zvinodiwa uye kutonga marongero.
6. Management uye Monitoring: Shandisa MikroTik maturusi kubata, kutarisa, uye kugadzirisa yako CHR muenzaniso.
7. Regulant Maintenance: Ita mabasa ekugadzirisa maitiro kuti uve nechokwadi chekushanda kwakakwana uye kuchengeteka.

Chinangwa: MikroTik CHR igore-yakavakirwa virtual router rakagadzirirwa kupa network routing mashandiro munzvimbo dzakagadzirwa. Iyo inokutendera iwe kukwidziridza MikroTik's RouterOS maficha mune makore zvivakwa, zvichiita kuti ive yakanakira manetiweki manejimendi, VPN masevhisi, firewall dziviriro, uye bandwidth manejimendi mune yakasarudzika kana gore-yakavakirwa kuseta.

Shandisa Nyaya

1. Virtual Private Network (VPN): CHR inogona kushandiswa kubata uye kufambisa VPN traffic, kuve nechokwadi chekuchengetedza uye kunoshanda kubatana pakati penzvimbo dziri kure.
2. Network Management: Yakanakira kubata yakaoma network nharaunda, kusanganisira nzira, switching, uye traffic kuumbwa.
3. Firewall uye Chengetedzo: Inopa akasimba firewall kugona kuchengetedza network traffic uye kudzivirira kubva kusingatenderwe kupinda.
4. Bandwidth Management: Inobatsira pakutarisa uye kudzora bandwidth kushandiswa kukwirisa network kuita.

Installation Guide

1. Gadzirira Nzvimbo Yako:
   Ita shuwa kuti une gore nharaunda kana virtualization chikuva kwaunogona kuendesa iyo CHR. Mapuratifomu anotsigirwa anosanganisira AWS, Azure, Google Cloud, VMware, Hyper-V, nevamwe.
2. Dhawunirodha MikroTik CHR Mufananidzo:
   Shanyira iyo MikroTik mukuru websaiti kana MikroTik.com kudhawunirodha yakakodzera CHR mufananidzo. Sarudza pakati pemhando dzakasiyana zvichienderana nezvaunoda (semuenzaniso, kugadzikana kana kuyedzwa).
3. Shandisa CHR mune Yako Cloud Nzvimbo:
   • AWS: Gadzira chiitiko chitsva uye rodha iyo CHR mufananidzo. Gadzirisa muenzaniso nezviwanikwa zvakakodzera (CPU, RAM, kuchengetedza).
   • Azure: Shandisa iyo Azure Marketplace kuendesa MikroTik CHR chaiyo muchina.
   • VMware/Hyper–V: Gadzira muchina mutsva uye batanidza iyo CHR mufananidzo kwairi.
4. Kutanga Configuration:
   • Access CHR: Batanidza kune iyo CHR muenzaniso uchishandisa SSH kana koni yekubatanidza.
   • Basic Configuration: Gadzira network interfaces, IP kero, uye routing mapuroteni sezvinodiwa. Tarisa kuMikroTik zvinyorwa zvemirairo chaiyo uye zvigadziriso.
5. Kugadziridza Kwepamusoro (Zvichida):
   • VPN Gadzirira: Gadzirisa VPN tunnels kuti uwane yakachengeteka kure.
   • Firewall Mitemo: Gadzira mitemo ye firewall kuchengetedza network yako.
   • Bandwidth Management: Shandisa traffic shape uye bandwidth control policy.
6. Management uye Monitoring:
   Shandisa MikroTik's WinBox kana WebFig kubata uye kutarisa iyo CHR muenzaniso. Zvishandiso izvi zvinopa graphical interface yekumisikidza uye yekutarisa.
7. Regulant Maintenance:
   Chengetedza yako CHR muenzaniso yakagadziridzwa neazvino software kuburitswa uye zvigamba kuti uve nechokwadi chekuchengetedza uye kuita.

Zvinotarisirwa:

• Rezinesi: MikroTik CHR inoshanda pasi pemarezinesi akasiyana siyana. Sarudza rezinesi zvichienderana nekuita kwako uye chimiro chinodiwa.
• Resource Allocation: Ita shuwa kuti yako chaiyo nharaunda inopa zvakaringana zviwanikwa kubata yako network traffic uye routing zvinodiwa.

Zviwanikwa:

• MikroTik Zvinyorwa: MikroTik CHR Zvinyorwa
• Nharaunda Forums: Bata nenharaunda yeMikroTik kuti uwane rutsigiro uye mamwe matipi.

Standart (Yakareba) Script yekuisa otomatiki

• # Sarudza iyo package maneja
  kana kuraira -v yum &> /dev/null; ipapo pkg_manager=”yum”; elif command -v apt &> /dev/null; ipapo pkg_manager = "apt"; zvimwe
  • echo "Hapana yum kana apt yakawanikwa. Runyoro urwu harutsigirwe."; kubuda 1; fi
• # Gadziridza mapakeji uye isa unzip, pwgen, uye coreutils kana ["$pkg_manager" == "yum"]; ipapo sudo yum -y kugadzirisa && sudo yum -y kuisa unzip pwgen coreutils; elif [“$pkg_manager” == “apt”]; ipapo sudo apt-get -y update && sudo apt-get -y isa unzip pwgen coreutils; fi
  • echo "Sitimu yakagadziridzwa uye mapakeji anodiwa akaiswa."
• # Sarudza mudzi file system mudziyo root_device=$(df / | awk 'NR==2 {print $1}') root_device_base=$(echo $root_device | sed 's/[0-9]\+$//')
  • echo "Mudzi filesystem iri pamudziyo: $root_device”
  • echo "Chishandiso nzira: $root_device_base"
• # Gadzira uye isa dhairekitori kwenguva pfupi mkdir /mt_ros_tmp && mount -t tmpfs tmpfs /mt_ros_tmp/ && cd /mt_ros_tmp
• # Tora IP kero uye gedhi
  INTERFACE=$(ip nzira | grep default | awk '{print $5}')
  ADDRESS=$(ip addr show “$INTERFACE” | grep global | cut -d' ' -f 6 | musoro -n 1)
  GATEWAY=$(ip nzira runyorwa | grep default | cheka -d' ' -f 3) echo "Ndapota isa chiteshi (default='stable', or='testing'): ” verenga chiteshi
• # Default kune 'yakagadzikana' kana pasina yekupinda inopihwa kana [ -z “$ chiteshi”]; ipapo chiteshi = "yakagadzikana" fi
  echo "Kuisa RouterOS CHR kubva ku '$ chiteshi' chiteshi ..."
• # Dhawunirodha URL zvichibva pachiteshi chakasarudzwa
  kana [“$channel” == “testing”]; ipapo rss_feed=”https://download.mikrotik.com/routeros/latest-testing.rss“elserss_feed=”https://download.mikrotik.com/routeros/latest-stable.rss” fi
• # Dhawunirodha yazvino vhezheni yeMikroTik RouterOS rss_content=$(curl -s $rss_feed) latest_version=$(echo “$rss_content” | grep -oP '(?<= RouterOS )[\d\.] +rc\d+' | musoro -1) kana [ -z “$latest_version”]; zvino
  • echo "Hatina kukwanisa kutora nhamba yeshanduro yazvino." kubuda 1 fi
  • echo "Izvino vhezheni: $ yazvino_vhezheni" download_url=”https://download.mikrotik.com/routeros/$latest-version/chr-$latest-version.img.zip“
  • echo "Kurodha kubva ku $ download_url…” wget -no-check-certificate -O “chr-$latest_version.img.zip” “$download_url” kana [ $? -eq 0 ]; ipapo echo"File kudhawunirodwa zvakabudirira: chr-$latest_version.img.zip” zvimwe
  • maungira"File kudhawunirodha kwatadza.” kubuda 1 fi
• # Unzip uye gadzirira mufananidzo gunzip -c "chr-$latest_version.img.zip"> "chr-$latest_version.img"
• # Nyora mufananidzo wegomo -o loop "chr-$-latest_version.img" /mnt
• # Gadzira isina kurongeka password PASSWORD=$(pwgen 12 1)
• # Nyora autorun script kugadzirisa iyo RouterOS muenzaniso
  • echo "Zita rekushandisa (Kullanıcı adı): admin"
  • echo "Password (Şifre): $PASSWORD"
  • echo “/ip kero wedzera kero=$ADDRESS interface=[/interface ethernet tsvaga papi zita=ether1]” > /mnt/rw/autorun.scr
  • echo "/ip nzira wedzera gedhi=$GATEWAY" >> /mnt/rw/autorun.scr
  • echo "/ip sevhisi disable telnet" >> /mnt/rw/autorun.scr
  • echo "/user set 0 name=admin password=$PASSWORD" >> /mnt/rw/autorun.scr
  • echo "/ip dns set server=8.8.8.8,1.1.1.1" >> /mnt/rw/autorun.scr
• # Remount zvese zvakaiswa filemasisitimu ekuverenga-chete modhi sync && echo u > /proc/sysrq-trigger
• # Ratidza mufananidzo kudhisiki dd kana = "chr-$latest_version.img" ye=$root_device_base bs=4M oflag=sync
• # Simba system reboot
  • echo 1> /proc/sys/kernel/sysrq
  • echo b> /proc/sysrq-trigger

ONE-LINER (Ipfupi) ScriPT yeAutomated Installations

kana kuraira -v yum &> /dev/null; ipapo pkg_manager=”yum”; elif command -v apt &> /dev/null; ipapo pkg_manager = "apt"; zvimwewo maungira “Hapana yum kana apt yawanikwa. Runyoro urwu harutsigirwe."; kubuda 1; fi && \ [ “$pkg_manager” == “yum” ] && sudo yum -y update && sudo yum -y install unzip pwgen coreutils || [“$pkg_manager” == “apt”] && sudo apt-get -y update && sudo apt-get -y isa unzip pwgen coreutils && \ root_device=$(df / | awk 'NR==2 {print $1}' ) && root_device_base=$(echo $root_device | sed's/[0-9]\+$//') && \ echo “Mudzi filesystem iri pamudziyo: $root_device” && echo “Chishandiso nzira: $root_device_base” &&\ mkdir /mt_ros_tmp && mount -t tmpfs tmpfs /mt_ros_tmp/ && cd /mt_ros_tmp &&\ INTERFACE=$(ip default nzira |w dhinda $5}') && ADDRESS=$(ip addr show “$INTERFACE” | grep global | awk '{print $2}' | musoro -n 1) && \ GATEWAY=$(ip route list | grep default | awk '{ dhinda $3}') && \ read -p “Pinda chiteshi (default='stable', or='testing'): ” chiteshi; [ -z “$ chiteshi” ] && chiteshi="stable”;rss_feed=”https://download.mikrotik.com/routeros/latest-$channel.rss” && rss_content=$(curl -s $rss_feed) && \ latest_version=$(echo “$rss_content” | grep -oP '(?<= RouterOS )[\d\.] +rc\d+' | musoro -1) && \ [ -z "$latest_version" ] && echo "Hatina kukwanisa kutora nhamba yeshanduro yazvino." && exit 1 || \ echo "Izvino vhezheni: $ yazvino_vhezheni" && download_url=”https://download.mikrotik.com/routeros/$latest_version/chr-$latest-version.img.zip” && \ echo “Kurodha kubva ku$download_url...” && wget -no-check-certificate -O “chr-$latest_version.img.zip” “$download_url” && \ [ $? -eq 0 ] && echo "File kudhaunirodwa zvakanaka: chr-$latest_version.img.zip” || maungira"File kudhawunirodha kwatadza.” && \ gunzip -c “chr-$latest_version.img.zip” > “chr-$latest_version.img” && mount -o loop “chr-$latest_version.img” /mnt && \ PASSWORD=$(pwgen 12 1) && echo "Zita rekushandisa: admin" && echo "Password: $PASSWORD" &&\ echo "/ip address add address=$ADDRESS interface=[/interface ethernet tsvaga kupi zita=ether1]”> /mnt/rw/autorun.scr &&\ echo "/ip nzira wedzera gedhi=$GATEWAY" >> /mnt/rw/autorun.scr && echo "/ip service disable telnet" >> /mnt/rw/autorun.scr &&\ echo "/user set 0 name= admin password=$PASSWORD” >> /mnt/rw/autorun.scr && echo “/ip dns set server=8.8.8.8,1.1.1.1″ >> /mnt/rw/autorun.scr &&\sync && echo u> /proc/sysrq-trigger && dd if=”chr-$latest_version.img” of=$root_device_base bs=4M oflag=sync &&\echo 1 > /proc/sys/kernel/sysrq && echo b > /proc/sysrq- trigger

Automation Scripts 'Makiyi Kugadziridza uye Tsananguro

1. Kuisa Mamwe Mapackage:
   • Yakawedzerwa yekuisa mirairo ye pwgen uye coreutils mune ese ari maviri yum uye apt package mamaneja.
2. IP Kero uye Gedhi Retrieval:
   • Iyo script inobata iyo IP kero uye gedhi uchishandisa IP adr uye ip nzira.
3. Kusunungura uye Kuisa:
   • Mufananidzo wacho unosunungurwa uye wakaiswa uchishandisa gunzip uye gomo mirairo ine sarudzo dzakakodzera.
4. Kugadzira uye kuseta password:
   • A random 12-character password inogadzirwa uchishandisa pwgen uye yozoiswa mune autorun script yeRouterOS.
5. Autorun Script:
   • Iyo autorun script inosanganisira mirairo yekugadzirisa iyo RouterOS muenzaniso, kusanganisira kuwedzera IP kero, kuseta gedhi, kudzima telnet, kuseta admin password, uye kugadzirisa DNS maseva.
6. Reboot system:
   • Filesystem sync inoitwa isati yamanikidza system reboot uchishandisa SysRq trigger, kuve nechokwadi chekuti data rese rakanyorwa kudhisiki.
7. Automatic Network Interface Detection:
   • INTERFACE=$(ip nzira | grep default | awk '{print $5}'): Inoona otomatiki iyo inoshanda network interface nekutsvaga iyo yakasarudzika nzira.
   • Iyo ADDRESS vhezheni inozosetwa uchishandisa iyi yaonekwa.

FAQ

Mubvunzo: Ndeapi makuru ekushandisa eMikroTik CHR?
A: MikroTik CHR inowanzo shandiswa kubata VPN traffic, network nharaunda, firewall dziviriro, uye bandwidth manejimendi mune virtualized kana makore-yakavakirwa setups.

Mubvunzo: Ndingawana sei rutsigiro rweMikroTik CHR?
A: Unogona kutarisa kune zvinyorwa zveMikroTik kana kubatana nenharaunda maforamu kuti uwane rutsigiro uye mamwe matipi ekushandisa CHR.

Zvinyorwa / Zvishandiso

MikroTik Cloud Yakagadzirirwa Router [pdf] Bhuku reMushandisi Cloud Yakagadzirirwa Router, Yakagadzirirwa Router, Router

References

• User Manual