MikroTik Cloud e tsamaisoang ke Router

Litlhaloso

• Lebitso la Sehlahiswa: MikroTik CHR (Router e tsamaisoang ke Cloud)
• Tlhaloso: Cloud-based virtual router bakeng sa ts'ebetso ea ho tsamaisa marang-rang
• Likaroloana: Tsamaiso ea marang-rang, lits'ebeletso tsa VPN, ts'ireletso ea firewall, taolo ea bandwidth

Litaelo tsa Tšebeliso ea Sehlahisoa

Tataiso ea ho Kena

1. Lokisa Tikoloho ea Hau: Netefatsa hore tikoloho ea hau ea leru e fihlela litlhoko tsa ho kenya CHR.
2. Khoasolla Setšoantšo sa MikroTik CHR: Fumana setšoantšo sa CHR ho MikroTik ea molao websebaka kapa polokelo.
3. Kenya CHR ho Tikoloho ea Hao ea Leru: Latela litaelo tse tobileng sethaleng ho sebelisa CHR ho seta sa hau sa maru.
4. Tlhophiso ea Pele: Lokisa litlhophiso tsa mantlha joalo ka marang-rang a marang-rang le liaterese tsa IP kamora ho romelloa.
5. Tlhophiso e tsoetseng pele (Ha ho boikhethelo): Iketsetse litlhophiso tsa CHR ho latela litlhoko tsa marang-rang le melaoana ea taolo.
6. Tsamaiso le Tlhokomelo: Sebelisa lisebelisoa tsa MikroTik ho laola, ho beha leihlo le ho rarolla bothata ba CHR ea hau.
7. Tlhokomelo ea Kamehla: Etsa mesebetsi e tloaelehileng ea ho lokisa ho netefatsa ts'ebetso e nepahetseng le ts'ireletso.

Morero: MikroTik CHR ke router e thehiloeng marung e etselitsoeng ho fana ka lits'ebetso tsa marang-rang libakeng tse fumanehang. E o lumella ho ntlafatsa likarolo tsa MikroTik's RouterOS meahong ea maru, e e etsa hore e be e loketseng taolo ea marang-rang, lits'ebeletso tsa VPN, ts'ireletso ea firewall, le taolo ea bandwidth ka mokhoa o hlophisitsoeng kapa o thehiloeng marung.

Sebelisa Maemo

1. Virtual Private Network (VPN): CHR e ka sebelisoa ho laola le ho tsamaisa sephethephethe sa VPN, ho netefatsa khokahanyo e sireletsehileng le e sebetsang lipakeng tsa libaka tse hole.
2. Taolo ea Marang-rang: E loketse ho laola maemo a marang-rang a rarahaneng, ho kenyelletsa le ho tsamaisa, ho chencha, le sebopeho sa sephethephethe.
3. Firewall le Tšireletso: E fana ka bokhoni bo matla ba li-firewall ho boloka sephethephethe sa marang-rang le ho sireletsa khahlanong le phihlello e sa lumelloeng.
4. Tsamaiso ea Bandwidth: E thusa ho beha leihlo le ho laola tšebeliso ea bandwidth ho ntlafatsa ts'ebetso ea marang-rang.

Tataiso ea ho Kena

1. Lokisa Tikoloho ea Hau:
   Netefatsa hore o na le tikoloho ea maru kapa sethala sa virtualization moo o ka tsamaisang CHR. Li-platform tse tšehetsoeng li kenyelletsa AWS, Azure, Google Cloud, VMware, Hyper-V, le tse ling.
2. Khoasolla Setšoantšo sa MikroTik CHR:
   Etela ofisiri ea MikroTik website kapa MicroTik.com ho khoasolla setšoantšo se nepahetseng sa CHR. Khetha lipakeng tsa mefuta e fapaneng ho latela litlhoko tsa hau (mohlala, e tsitsitseng kapa liteko).
3. Kenya CHR ho Tikoloho ea Hao ea Leru:
   • AWS: Theha mohlala o mocha 'me u kenye setšoantšo sa CHR. Lokisa mohlala ka lisebelisoa tse nepahetseng (CPU, RAM, polokelo).
   • Azure: Sebelisa 'Maraka oa Azure ho tsamaisa mochini o sebetsang oa MikroTik CHR.
   • VMware/Hyper–V: Theha mochine o mocha oa sebele 'me u hokele setšoantšo sa CHR ho oona.
4. Tlhophiso ea Pele:
   • Phihlello CHR: Hokela ketsahalong ea CHR u sebelisa SSH kapa khokahanyo ea khokahanyo.
   • Motheo Tlhophiso: Beha li-interface tsa marang-rang, liaterese tsa IP, le liprothokholo tsa ho tsamaisa ha ho hlokahala. Sheba litokomane tsa MikroTik bakeng sa litaelo tse khethehileng le litlhophiso.
5. Tlhophiso e tsoetseng pele (Ha ho boikhethelo):
   • VPN Tlhophiso: Lokisa lithanele tsa VPN bakeng sa phihlello e sireletsehileng ea hole.
   • Melao ea Firewall: Beha melao ea firewall ho sireletsa marang-rang a hau.
   • Bophahamo ba motlakase Tsamaiso: Kenya ts'ebetsong maano a sebopeho sa sephethephethe le taolo ea bandwidth.
6. Tsamaiso le Tlhokomelo:
   Sebelisa WinBox ea MikroTik kapa WebFig ho laola le ho beha leihlo mohlala oa CHR. Lisebelisoa tsena li fana ka sebopeho sa graphical bakeng sa tlhophiso le ho beha leihlo.
7. Tlhokomelo ea Kamehla:
   Boloka mohlala oa hau oa CHR o nchafalitsoe ka lisebelisoa tsa morao-rao tsa software le li-patches ho netefatsa ts'ireletso le ts'ebetso.

Maikutlo:

• Ho fana ka laesense: MikroTik CHR e sebetsa tlasa maemo a fapaneng a laesense. Khetha laesense ho latela ts'ebetso ea hau le litlhoko tsa likarolo.
• Kabo ea Lisebelisoa: Netefatsa hore tikoloho ea hau ea sebele e fana ka lisebelisoa tse lekaneng ho sebetsana le sephethephethe sa marang-rang le litlhoko tsa litsela.

Lisebelisoa:

• Litokomane tsa MikroTik: Litokomane tsa MikroTik CHR
• Likopano tsa Sechaba: Kopana le sechaba sa MikroTik bakeng sa tšehetso le malebela a eketsehileng.

Sengoloa sa Standart (Long) bakeng sa ho instola ka boiketsetso

• # Etsa qeto ea mookameli oa sephutheloana
  haeba taelo -v yum &> /dev/null; ebe pkg_manager=”yum”; elif taelo -v apt &> /dev/null; ebe pkg_manager="apt"; tse ling
  • echo "Ha ho yum kapa apt found. Sengoliloeng sena ha sea tšehetsoa."; ho tsoa 1; fi
• # Ntlafatsa liphutheloana 'me u kenye unzip, pwgen, le coreutils haeba ["$pkg_manager" == "yum"]; ebe sudo yum -y ntjhafatsa && sudo yum -y kenya unzip pwgen coreutils; elif [“$pkg_manager” == “apt”]; ebe sudo apt-get -y update && sudo apt-get -y kenya unzip pwgen coreutils; fi
  • echo "Sistimi e nchafalitsoe mme liphutheloana tse hlokahalang li kentsoe."
• # Fumana motso file sesebelisoa sa sistimi root_device=$(df / | awk 'NR==2 {print $1}') root_device_base=$(echo $root_device | sed 's/[0-9]\+$//')
  • pheta "Root filesistimi e sesebelisoa: $root_device”
  • echo "Tsela ea sesebelisoa: $root_device_base"
• # Theha le ho kenya bukana ea nakoana mkdir /mt_ros_tmp && mount -t tmpfs tmpfs /mt_ros_tmp/ && cd /mt_ros_tmp
• # Fumana aterese ea IP le heke
  INTERFACE=$(tsela ya ip | grep default | awk '{print $5}')
  ADDRESS=$(ip addr show “$INTERFACE” | grep global | cut -d' ' -f 6 | hlooho -n 1)
  GATEWAY=$(lenane la litsela tsa ip | grep default | cut -d' ' -f 3) echo "Ka kopo kenya mocha (default='stable', or='testing'): ” bala mocha
• # Mokhoa oa kamehla oa 'stable' haeba ho se na tlhahiso e fanoeng haeba [ -z “$channel”]; ebe kanale=”stable” fi
  echo "Ho kenya RouterOS CHR ho tsoa seteisheneng sa '$channel' ..."
• # Khoasolla URL e ipapisitse le kanale e khethiloeng
  haeba [“$channel” == “testing”]; ebe rss_feed=”https://download.mikrotik.com/routeros/latest-testing.rss"elserss_feed="https://download.mikrotik.com/routeros/latest-stable.rss” fi
• # Khoasolla mofuta oa morao-rao oa MikroTik RouterOS rss_content=$(curl -s $rss_feed) latest_version=$(echo “$rss_content” | grep -oP '(?<= RouterOS )[\d\.] +rc\d+' | hlooho -1) haeba [ -z “$latest_version”]; ebe
  • echo "Ha e khone ho fumana nomoro ea morao-rao." tsoa 1 fi
  • echo "Mofuta oa morao-rao: $latest_version" download_url=”https://download.mikrotik.com/routeros/$latest-version/chr-$latest-version.img.zip“
  • echo "Ho khoasolla ho tsoa ho $download_url…” wget -no-check-certificate -O “chr-$latest_version.img.zip” “$download_url” haeba [ $? -eq 0]; ebe echo "File e jarollotsoe ka katleho: chr-$latest_version.img.zip”
  • echo "File download e hlolehile. tsoa 1 fi
• # Unzip 'me u lokise setšoantšo sa gunzip -c "chr-$latest_version.img.zip"> "chr-$latest_version.img"
• # Kenya setšoantšo -o loop "chr-$latest_version.img" /mnt
• # Hlahisa phasewete e sa reroang PASSWORD=$(pwgen 12 1)
• # Ngola mongolo oa autorun ho hlophisa mohlala oa RouterOS
  • echo "Lebitso la mosebelisi (Kullanıcı adı): admin"
  • echo "Password (Şifre): $PASSWORD"
  • echo "/aterese ea ip eketsa aterese=$ADDRESS interface=[/interface ethernet fumana moo lebitso=ether1]” > /mnt/rw/autorun.scr
  • echo "/ip tsela eketsa heke=$GATEWAY" >> /mnt/rw/autorun.scr
  • echo "/ip service disable telnet" >> /mnt/rw/autorun.scr
  • echo "/sete ea mosebelisi 0 lebitso = password ea admin=$PASSWORD" >> /mnt/rw/autorun.scr
  • echo "/ip dns set server=8.8.8.8,1.1.1.1" >> /mnt/rw/autorun.scr
• # Khutlisa tsohle tse kentsoeng filemekhoa ea ho lumellana le mokhoa oa ho bala feela && echo u > /proc/sysrq-trigger
• # Benya setšoantšo ho disk dd haeba=”chr-$latest_version.img” of=$root_device_base bs=4M oflag=sync
• # Qobella sistimi ho qala bocha
  • echo 1 > /proc/sys/kernel/sysrq
  • echo b > /proc/sysrq-trigger

ONE-LINER (E Khutšoane) SCRiPT bakeng sa Lisebelisoa tse Ikemetseng

haeba taelo -v yum &> /dev/null; ebe pkg_manager=”yum”; elif taelo -v apt &> /dev/null; ebe pkg_manager=“apt”; Hape, "Ha ho yum kapa ho nepahala ha ho fumanoe. Sengoliloeng sena ha sea tšehetsoa."; ho tsoa 1; fi && \ [ “$ pkg_manager” == “yum” ] && sudo yum -y ntjhafatso && sudo yum -y kenya unzip pwgen coreutils || [“$pkg_manager” == “apt” ] && sudo apt-get -y ntjhafatso && sudo apt-get -y kenya unzip pwgen coreutils && \ root_device=$(df / | awk 'NR==2 {print $1}' ) && root_device_base=$(echo $root_device | sed 's/[0-9]\+$//') && \ echo “Root filesistimi e sesebelisoa: $root_device” && echo “Tsela ea sesebelisoa: $root_device_base” && \ mkdir /mt_ros_tmp && mount -t tmpfs tmpfs /mt_ros_tmp/ && cd /mt_ros_tmp && \ INTERFACE=$(p tsela ea kamehla |w hatisa $5}') && ADDRESS=$(ip addr show “$INTERFACE” | grep global | awk '{print $2}' | hlooho -n 1) && \ GATEWAY=$(lenane la litsela tsa ip | grep default | awk '{ hatisa $3}') && \ bala -p “Kena kanale (default='stable', or='testing'): ” kanale; [ -z “$channel” ] && channel="stable”;rss_feed=”https://download.mikrotik.com/routeros/latest-$channel.rss” && rss_content=$(curl -s $rss_feed) && \ latest_version=$(echo “$rss_content” | grep -oP '(?<= RouterOS )[\d\.] +rc\d+' | hlooho -1) && \ [ -z “$latest_version” ] && echo “Ha re khone ho fumana nomoro ea morao-rao.” && tsoa 1 | \ echo "Mofuta oa morao-rao: $latest_version" && download_url=”https://download.mikrotik.com/routeros/$latest_version/chr-$latest-version.img.zip” && \ echo “Ho khoasolla ho tsoa ho $download_url…” && wget –no-check-certificate -O “chr-$latest_version.img.zip” “$download_url” && \ [$? -eq 0 ] && echo "File e jarollotsoe ka katleho: chr-$latest_version.img.zip” || echo "File download e hlolehile. && \ gunzip -c “chr-$latest_version.img.zip” > “chr-$latest_version.img” && mount -o loop “chr-$latest_version.img” /mnt && \ PASSWORD=$(pwgen 12 1) && echo “\username: admin&Sword" &Sword&SWD “/aterese ea ip eketsa aterese=$ADDRESS interface=[/interface ethernet fumana moo lebitso=ether1]”> /mnt/rw/autorun.scr &&\echo “/ip route add gateway=$GATEWAY” >> /mnt/rw/autorun.scr && echo “/ip service disable \ telnet” >>/0//&torunt/ name=admin password=$PASSWORD” >> /mnt/rw/autorun.scr && echo “/ip dns set server=8.8.8.8,1.1.1.1″ >> /mnt/rw/autorun.scr &&\sync && echo u > /ifc/sysrqddist=trigger”-$&ich. ea=$root_device_base bs=4M oflag=sync &&\ echo 1 > /proc/sys/kernel/sysrq && echo b > /proc/sysrq-trigger

Lintlafatso le Litlhaloso tsa Bohlokoa tsa Lingoliloeng tsa Automation

1. Ho kenya Liphutheloana tse Eketsehileng:
   • Litaelo tse kenyellelitsoeng tsa ho kenya pwgen le coreutils ho yum le batsamaisi ba liphutheloana tse loketseng.
2. Aterese ea IP le ho Khutlisa Gateway:
   • Mongolo o hapa aterese ea IP ea sistimi le monyako o sebelisa IP adr le ip route.
3. Ho theola le ho hlongoa:
   • Setšoantšo ha se koaletsoe 'me se behoa ho sebelisoa li-gunzip le ho kenya litaelo tse nang le likhetho tse nepahetseng.
4. Ho hlahisa le ho beha phasewete:
   • Phasewete e sa reroang ea litlhaku tse 12 e hlahisoa ho sebelisoa pwgen ebe e beoa ho autorun script bakeng sa RouterOS.
5. Autorun Script:
   • Sengoloa sa autorun se kenyelletsa litaelo tsa ho hlophisa mohlala oa RouterOS, ho kenyelletsa ho eketsa aterese ea IP, ho beha heke, ho tima telnet, ho beha phasewete ea admin, le ho lokisa li-server tsa DNS.
6. Sistimi e qala hape:
   • Filesync ea sistimi e etsoa pele o qobella ho qala sistimi ho sebelisa mochini oa SysRq, ho netefatsa hore data eohle e ngoletsoe disk.
7. Ho Fumana Sehokelo sa Marang-rang:
   • INTERFACE=$(ip route | grep default | awk '{print $5}'): E lemoha ka bo eona sebopeho sa marang-rang se sebetsang ka ho fumana sebopeho sa tsela ea kamehla.
   • Phapang ea ADDRESS e ntan'o hlophisoa ho sebelisoa sebopeho sena se bonoeng.

LBH

P: Ke linyeoe life tse ka sehloohong tsa ts'ebeliso ea MikroTik CHR?
A: MikroTik CHR e sebelisoa hangata ho laola sephethephethe sa VPN, tikoloho ea marang-rang, ts'ireletso ea li-firewall, le taolo ea bandwidth ho litlhophiso tse fumanehang kapa tse thehiloeng marung.

P: Nka fumana tšehetso joang bakeng sa MikroTik CHR?
A: U ka sheba litokomane tsa MikroTik kapa ua ikopanya le liforamo tsa sechaba bakeng sa tšehetso le malebela a eketsehileng mabapi le ho sebelisa CHR.

Litokomane / Lisebelisoa

MikroTik Cloud e tsamaisoang ke Router [pdf] Bukana ea Mosebelisi Router e tsamaisoang ke Cloud, Router e tsamaisoang, Router

Litšupiso

• Bukana ea Mosebelisi