Njani izibuko ukudlulisela in Mikrotik? Port lwala ( "Mikrotik"): inkcazelo, uqeqesho, iingcebiso

Port ukudlulisa ngomnye weyona misebenzi ibalulekileyo kweepasile NATED. Ngamafutshane, kunokwenzeka ukuba ukusebenzisa izixhobo eziliqela zidityaniswe zibe LAN enye okanye idityaniswe nge izixhobo zonxibelelwano engenazingcingo, omnye interface yangaphandle. Ukuthetha ngendlela elula, ukudlulisela izibuko "Mikrotik» (RDP) ikuvumela ukuba ukufikelela terminal ethile ikhompyutha okanye isixhobo nge loxhulumaniso lwe Internet evela ngaphandle. Ngenxa yoko, nasiphi isixhobo ungalawuleka ngokusebenzisa ufikelelo olusisiseko. Into efunekayo, - ubukho izibuko simahla kwi umzila. Okulandelayo iya kuqwalaselwa ezinye iimeko ezininzi eziqhelekileyo ezifuna okanye bayakhuthazwa ngamandla ukwenza kwizibuko phambili. "Uthathe imifuziselo Mikrotik» RB951-2n njengomzekelo. Kodwa asiyiyo loo nto ibalulekileyo. Zendlela / modem port ukudlulisela ngokusebenzisa "Mikrotik» le VPN Client yahluke kancinane imithetho eqhelekileyo. Kodwa izinto zokuqala kuqala.

Umzila Mikrotik: iimpawu ngokubanzi

Abanini Series imizila Mikrotik lucky ngokwaneleyo. Into yokuba ezi zixhobo asisininzi babe Bar I umsebenzi womnatha. Kulo ngasentla kukho imifuziselo emihlanu.

Oku kwenza kube lula ukusebenzisa kakhulu eninzi izicwangciso ezahlukeneyo, kuquka nezo meko apho kukho ababoneleli ezininzi. Uyavuma inzuzo ngokwaneleyo ezinzima. To connect ukusebenza, kwaye asebenze kakuhle, kubalulekile ukuba izibuko ukudlulisa "Mikrotik" -routera. Nje qaphela ukuba kufuneka silungise kancinane. Kodwa kumsebenzisi ekupheleni uya kufumana emininzi namathuba ukuba ukusebenzisa ubugcisa Internet mihla. Nakuba kunjalo, ukuba siyazikhohlisa, kuba phambili isicwangciso engekho ulwazi olungundoqo unokuba athandana kakhulu anzima. Kodwa musa ukunikezela. guide kuya kusinceda ukuqwalasela imizila kolu ngcelele nkqu umsebenzisi ukba. Kubalulekile ukulandela zonke izinto ziqukwe kuluhlu.

Port lwala "Mikrotik": emnyango kojongano lwe Web

Lisuke emnyango kwisixhobo nojongano kufuneka kungabikho ngxaki. Inkqubo eqhelekileyo iquka ukusetyenziswa browser Internet eqhelekileyo, nto leyo kwi bar idilesi, faka indibanisela 192.168.88.1. Qaphela ukuba le dilesi zahluke kakhulu ukusuka abaninzi kwezinye imizila data.

Njengesiqhelo ngemvume usebenzisa admin, intsimi lokugqitha kungashiywa kungenanto. Ukuba olu khetho ayikasebenzi, nje Ukuseta ngokutsha useto ngokucinezela i Hlela iqhosha okanye zokuqhawula ifowuni evela mbane imizuzwana 10-15.

inkcazo ngokubanzi parameters

Emva kokungena phambi kokwenza ukudlulisela "Mikrotik" kumazibuko, kungakuhle ukuba aqhelane ezinye izicwangciso ezibalulekileyo kunye parameters eziguqukileyo.

Ukuqala ukungena Ujongano icandelo (umba yesibini kwi menu ekhohlo), apho ziya kuboniswa kulolonke ujongano ezikhoyo okwangoku. Ibhulorho lendawo ude uhlawule ingqalelo uze ujonge Ether1 port. Siyafana kwizibuko lokuqala (isinxibelelanisi) kwi zendlela, equka USB RJ-45 Isidibanisi evela kumboneleli. Wabiza kwakhona Gateway - umnyango apho ukwazi ukufikelela kwifowuni.

Ezinye ezine amazibuko ziye zadityaniswa iswitshi yenyani. Izibuko yesibini has a kuqala Mfundisi, abanye - Slave. Le yokugqibela emithathu sikhokelwa kwizibuko yesibini, oko kukuthi, enyanisweni, ziyafana kwaye isebenza ngokusekelwe uxhulumaniso lokuqala.

Phakathi amazibuko ezinkulu kunye Internet nje uhlobo "spacer", lo usasazo inkonzo NATED Network Idilesi Translation. It ikuvumela ukuba ufake iidilesi zombini ngaphakathi nangaphandle kwiikhompyutha kwi ariya yobulali yomsebenzi womnatha enye, leyo isenokungabi njalo ekuqaleni.

Ke iqala a azenza. Ewe, wena weva ekunene, yinyaniso! Bazimilise osemqoka isebenza kumgaqo VPN okanye onegunya lokusebenzela omnye, ngokubuyisela IP lwangaphandle ye computer kwi ngomnyango kwidilesi Internet le umzila. Ngokufanayo, xa efumana impendulo inkonzo ngokuchonga IP ngaphakathi computer yakho, elithe laqalisa isicelo aze athumele impendulo kule moto. Ukuba inkonzo ayifakwanga, kuya kufuneka wenze kwicandelo ofanelekileyo ezininzi iinkqubo zokusebenza zezi.

izicwangciso Basic port

Kuxhomekeke apho inkqubo okanye inkonzo kufuneka usebenzise ethile izibuko simahla zendlela, kwaye kufuneka ukwenza uqalo ngokwenza izibuko ukudlulisa "Mikrotik".

Umzekelo, ngazo naziphi na Torrent-client, kufuneka usebenzise isibuko 51413 ukuze unxibelelaniso ngokusebenzisa lonxibelelwano RDP - 3389, ukuseka uqhagamshelwano ne ByFly - .. 55555, njl Kodwa kubalulekile ukuphawula ukuba i-phambili izibuko "Mikrotik" ngenxa VPN-client kancinane eyahlukileyo ukusuka inkqubo eqhelekileyo (emva koku niya kukuqonda kungani).

ukudala imithetho

Kodwa emva icing. Siya Firewall / NATED tab, ubone ukuba kulawula sele ikhona (ukuba ifakelwe ngokungagqibekanga).

Kufuneka ukuba ufake esitsha (oku kwenziwa ngokucinezela amaqhosha icon uphawu plus). Kukho iparameters ezininzi ezisisiseko:

• Chain - ukuseta Srcnat, ukuba ufikelelo kufuneka ngaphakathi ukuya ngaphandle, okanye Dstnat - ukusuka kwi Internet kwinethiwekhi yangaphakathi;
• Protocol - khetha TCP;
• Src. Port - akukho tshintsho;
• DST. Port - 51413 (kule meko ngenxa komlanjana);
• In. Aplikheyishini yokwenziwa kwemiYalezo - ether1-yesango;
• Out. Aplikheyishini yokwenziwa kwemiYalezo - ngaphandle naluphi na utshintsho.

Emva koko zinokutshintshela uhlobo ezandisiweyo (Advanced okanye ezongezelelweyo), kodwa ngaphandle kwemfuneko yokuba ukuze iphathwayo. Kulo mzekelo, nomdla ngakumbi kwicandelo isenzo (Action) thina.

izenzo Ukukhetha

Khetha ukusebenza eziya izingenele xa efumana iipakethi ezingenayo, kukho inala. Ukuze ukuba nzima le meko, ungabeka ixabiso Vuma. Kulo mzekelo, zonke iipakethe ziya kwamkelwa ngokuzenzekelayo.

Xa ufuna ukwenza kweepasile data ukusuka yangaphakathi kwinethiwekhi yangaphandle, ungasebenzisa iinketho DST-nat kunye netmap. Le ndlela yesibini Kukhethwa, ekubeni oluphuculiweyo inguqulelo yokuqala.

Okulandelayo Dibanisa idilesi ye email ikhankanya igama host, nto leyo eya kuthunyelwa, kwaye ngenisa idilesi uyezibuko. Cofa i Faka iqhosha - idilesi umatshini nomlinganiselo ozakuvela kuluhlu.

Unako kwakhona ukuya kwicandelo izimvo (comments) kwaye ucacise ulwazi ukuyila umthetho ukuba kwixa elizayo le nkqubo ukuba ukukhetha intshukumo. Kule ukudlulisela izibuko "Mikrotik" abaya kuthathelwa ingqalelo epheleleyo. Kodwa asingabo bonke elula kangaka.

Port lwala "Mikrotik" ukusuka kwi Internet kwi LAN: ukubiza ukudlulisela kubanikezeli ezininzi

Ukucinga ukuba uqhagamshelwano olwenziwe ngababoneleli-nkonzo eziliqela yaye umsebenzisi ngaxa lithile ufuna ukukhetha iinkonzo ukusebenzisa okanye ayisasaze koomatshini ezahlukeneyo. Le imizila "Mikrotik" kumazibuko ezimbini umboneleli ugcinwe ngaphandle iingxaki icing.

Kulo mzekelo ukhetho yemisebenzi ukuseta imo-DST-nat, kwaye ukujongana (umz; ngokuba ByFly) ikheli 10.24.3.2 (TCP 55555) iyasetyenziswa. Ukuze Ports into aziyi iphathwayo.

Apha ebizwa ngokuba Shell njengoko ungumlawuli, emisela oku kulandelayo:

• / Ip nat firewall;
• yongeza isenzo = dstnat chain = dstnat izimvo = ngumsinga DST-port = 55555 ngo-interface = \;
• ByFly protocol = TCP kwi-iidilesi = 10.24.3.2.

Phambili ukuba zibuko 3389 (RDP)

Ngoku amagama ambalwa malunga elawulwa-kude usebenzisa amazibuko kumzila free. Eneneni, le nkqubo iza efanayo.

iinketho fakelo kufuneka ube:

• Gateway: 192.168.8.1.
• Action: amukela.
• NATED (ngokuqhelekileyo kufuneka ifakwe phambi imithetho azenza).
• Chain: dstnat.
• Protocol 6 (TCP) (okwendalo).
• Destination port 3389 (inani lezibuko apho kudlulisela izibuko sithunyelwe kwi-Intanethi).
• uhlobo interface Ekhutshwayo: uHlelo-out.
• Action: DST-sibiza.
• Zithunyelwe: 192.168.0.232.

Izicwangciso protocol IPv4, kufuneka ukuba uye kuseto phambili kwaye ubonise IP izicwangciso tab, iidilesi ezongezelelweyo (njengoko kubonisiwe kumfanekiso ngasentla), ngoko ukubhalisa idilesi apho umzila ziya kusebenzisana.

Okulandelayo, khetha umboneleli kwaye ufake idatha oku kulandelayo:

Yenza umthetho umboneleli yesibini ukudibanisa iparameters bazimilise.

imibuzo elibukhali

Makhe sibone indlela umzila "Mikrotik" Izibuko ukudlulisela ngokucupha yevidiyo osebenza practice. Enyanisweni, uqwalaselo phantse iyafana naleyo kwimeko engundoqo.

Kuphela izibuko ukudlulisela "Mikrotik" for DVR sijongeka njengoku:

• Chain: dstnat.
• Protocol: 6 (TCP).
• port Isilawuli: 200.
• In. Aplikheyishini: ether1-yesango.
• Action: netmap.
• Zithunyelwe: 192.168.HHH.HHH.
• Port: 80.

Njengoko ubona, ezi zicwangciso ayahlukanga ukusuka ngentla, kodwa ukusebenzisa inani 80. Nantso zonke njengezibuko enkulu.

isiphelo

UPawulos, ukuze kuqwalaselwe ukuba phambili "Mikrotik" amazibuko - oko kunokuba nzima kwaye umsebenzisi-avareji lowo akazazi ubuncinane nolwazi ezisisiseko imizila ujongano yale ngcelele, akulindelekanga ukuba bamelane. Ngenxa le miyalelo ilapha ngasentla uya kukwazi ukufunda iinkcukacha ezibalulekileyo ngokwabo kwaye enze izibuko uqwalaselo ukudlulisela wena.

Phantse zonke iparameters kunye nohlobo neentlobo zayo ziyafana. Ahluke iindlela kuphela kwaye amanani ezibuko. Elokugqiba, xa kulungelelana kufuneka kungabikho ngxaki. Umbuzo wokuba konke oku kuyinyaniso, kuya kufuneka wenze isigqibo. Kakade ke, lo matshini lonxibelelwano kwi Internet, ingakumbi xa ukungena kwindawo womnatha okanye isitishi ethile evela ngaphandle, alusoloko lusebenza. Ngoko ke kufuneka ukuba sichithe ixesha elincinane ukwenza isicwangciso echanekileyo, nkqu ukufikelela ababoneleli ezininzi.