Kafa Mikrotik, isar da kuma rdp FTP tashar jiragen ruwa. Yadda yi tashar jiragen ruwa isar a Mikrotik?

Ga alama magudanar Mikrotik tashar jiragen ruwa isar ake bukata don yin sau da yawa. Duk da haka, domin cibiyar sadarwa ma'aikata, da kuma zuwa ga untrained mai amfani da warware wannan matsalar, shi ne sau da yawa quite wuya. Wadannan ne taƙaitaccen wa'azi, wadannan wanda shi ne mai yiwuwa a gudanar da duk wani aiki na da irin wannan sauƙi, duk da haka, suna da wani bit wahala.

Kafa Mikrotik da tashar jiragen ruwa isar. Me yi da shi?

Kafin yunƙurin kafa da na'ura mai ba da hanya tsakanin hanyoyin sadarwa, ya zama kadan a kan ka'idodin isar da tashoshin jiragen ruwa, da kuma a kan gaskiyar cewa ga duk wadannan amfani.

Kafa Mikrotik, shigar da tsoho, irin wannan cewa kwakwalwa a ciki ko waje cibiyar sadarwa, IP adiresoshin sanya wa sauran tashoshi, ba zai iya ganin. Yana yana amfani da abin da ake kira mulkin na dodo, a lokacin da na'ura mai ba da hanya tsakanin hanyoyin sadarwa da kanta lokacin da ka karɓi request don maye gurbin adireshin da na'ura, wanda ya tsara nasa waje da IP, ko da yake shi ya buɗe da ake buƙata tashar jiragen ruwa. Sai dai itace cewa duk na'urorin da alaka da cibiyar sadarwa, duba kawai na'ura mai ba da hanya tsakanin hanyoyin sadarwa, da kuma tsakanin kansu kasance ganuwa.

A wannan batun, a wani yanayi, don Mikrotik na'urorin tashar jiragen ruwa isar da shi ya zama tilas. Mafi na kowa lokuta hada da wadannan:

• Organization of m samun na'urorin a kan hanyar sadarwa a kan tushen da RDP fasahar.
• wata caca ko FTP-uwar garke.
• kungiyar na tsara don sa'a networks kuma saita daidai aiki na torrent abokan ciniki.
• damar yin amfani da kyamarori da bidiyo kula da tsarin daga waje via da Internet.

Damar yin amfani da yanar gizo ke dubawa

Yanzu kana shirye. Mikrotik magudanar isar da tashoshin jiragen ruwa (na RDP, da FTP, da dai sauransu) ta fara da ƙofar na'urar management system kira Web dubawa. Kuma idan masu rinjaye na magudanar da aka sani da misali adireshin amfani da hanyar hada 192,168 kawo karshen tare da ko dai 0.1 ko 1.1, inda wannan zabin ba wuce.

Don samun damar yanar gizo browser (mafi kyau don amfani da misali Internet Explorer) a cikin address bar An wajabta mai hade da 192.168.88.1, a cikin login filin ku shigar da admin, da kuma kalmar sirri kirtani ne yawanci bar blank. A cikin taron cewa samun saboda wasu dalilai ana katange (da na'ura mai ba da hanya tsakanin hanyoyin sadarwa ba ya yarda da login) bukatar a yi wani factory sake saiti ta latsa maballin ko juya kashe da na'urar daga ikon for 10-15 seconds.

Janar saituna kuma zabin

Login samar a cikin dubawa. Yanzu abu mafi muhimmanci a Mikrotik tashar jiragen ruwa isar dogara ne a kan halittar da ake kira ware ga dokoki ga dodo aiki (wannan dodo spoofing IP-adiresoshin, wanda aka ambata a sama).

A Gaba Saituna Firewall / NAT sashe za ka iya ganin cewa daya mulkin riga akwai. An kafa a matsayin ma'aikata default saituna. Port isar da shi ne kullum kunshi ƙara wani sabon mulkin ta danna icon da da button, to, shi zai zama wajibi a cika a wasu muhimman filayen saituna.

Misalai na mai amfani da tashoshin jiragen ruwa

Yanzu bari mu duba wasu daga cikin yiwu misalai na yin amfani da tashoshin jiragen ruwa. Dangane da manufa ga abin da shi za su yi amfani da kowane bude tashar jiragen ruwa dabi'u iya zama:

• Torrent: TCP / 51413.
• SSH: TCP / 22.
• SQL Server: TCP / 1433.
• WEB Server: TCP / 80.
• Telnet: TCP / 23;
• RDP: TCP / 3389.
• snmp: udp / 161, da dai sauransu

Wadannan dabi'u ne kawai da za a yi amfani da isar da kowanne daga cikin wadannan tashoshin jiragen ruwa.

Samar da dokoki da zabi na mataki

Yanzu haifar da wani sabon mulkin da kuma ci gaba da cika a cikin saituna filin. Ga ka bukatar ka yi hankali da kuma ci gaba daga abin da irin damar wajibi ne a gudanar da wani (daga cikin da waje, ko mataimakin versa).

Saituna ya kamata:

• Sarkar: srcnat amfani don samun damar gida cibiyar sadarwa, saboda haka yin magana, to waje duniya, dstnat - don samun damar da na gida sadarwa daga waje (zabi tafiye-tafiye na biyu version).
• Src filin adiresoshin. kuma Dst. bar komai.
• wani yarjejeniya filin zabi ko dai TCP, ko udp (yawanci saita zuwa 6 (TCP).
• Src. Port bar blank, watau, fita tashar jiragen ruwa na waje sadarwa ne ba da muhimmanci;
• Dst. Port (tashar jiragen ruwa na makõma): ne tashar jiragen ruwa na sama misalai (misali 51413 for Raƙuman ruwa, 3389 for RDP, da dai sauransu).
• Duk wani Port za a iya bar blank, amma idan ka saka lamba, daya tashar jiragen ruwa za su iya amfani da wani mai shigowa da kuma mai fita.
• A. Interface: daidai da tashar jiragen ruwa na na'ura mai ba da hanya tsakanin hanyoyin sadarwa (yawanci ether1-ƙofa).
• Out. Interface: nuna fita dubawa (iya zama tsalle).

Lura: idan da tashar jiragen ruwa isar ga m dangane waje (RDP) a src filin. Address nuna IP da m kwamfuta, daga abin da shi ne ya kamata don samun damar. A misali RDP-connection tashar jiragen ruwa 3389. Duk da haka, mafi masana aikata irin waɗannan abubuwa ba da shawarar, a matsayin shi ne mafi aminci mai yawa da kuma sauki a daidaita a kan VPN na'ura mai ba da hanya tsakanin hanyoyin sadarwa.

Bugu da ari, na'ura mai ba da hanya tsakanin hanyoyin sadarwa Mikrotik tashar jiragen ruwa isar ya shafi zabi ayyuka (Action). A gaskiya, akwai isa ya saka duka uku sigogi:

• Action: yarda (da sauki Hanyar), amma samun waje kayyade dst-NAT (za ka iya saka karin ci-gaba saituna netmap).
• Don Adiresoshin: shige da ciki adireshin da na'ura a abin da ya kamata tura za su faru.
• Don Tashoshin Jiragen Ruwa: a general, da darajar an saita zuwa 80, amma ga daidai aiki na wannan torrent nuna 51413.

Kafa Mikrotik: FTP tashar jiragen ruwa isar

A karshe, 'yan kalmomi game da abin da saitunan da ake bukata domin FTP. Da farko, kana bukatar ka saita kanta FTP-uwar garke, misali, a kan tushen da FileZilla, amma yana da wani labarin daban-daban. A wannan yanayin, muna sun fi sha'awar a isar da FTP Mikrotik tashoshin jiragen ruwa, maimakon uwar garke-gefen sanyi.

An yi ĩmãni, FTP-uwar garke, ko da yake bukatar wani fanni na tashoshin jiragen ruwa, amma quite kullum aiki a kula da tashar jiragen ruwa 21. Wajibi ne a yi amfani da.

Kamar yadda a cikin general hali, dole ne ka farko haifar da wani sabon mulkin, amma a cikin wannan halin da ake ciki, za a yi biyu: don sarrafa tashar jiragen ruwa da kuma ga dukan kewayon mashigai.

Domin tashar jiragen ruwa 21 sigogi dole ne:

• Sarkar: dst-NAT.
• Dst. Address: waje adireshin da na'ura mai ba da hanya tsakanin hanyoyin sadarwa (misali, 1.1.1.28).
• Layinhantsaki: 6 (TCP).
• Dst. Port: 21
• A. Interface: ether1-ƙofa.

Ga Action tab, kafa da wadannan dabi'u:

• Action: dst-NAT.
• Dst. Address: da m adireshin na sa FTP-uwar garke.
• Don Tashoshin Jiragen Ruwa: 21.

Domin wani fanni (msl, 50000-50050) duk da zažužžukan su ne irin wannan, sai a biyu sigogi:

• in general saituna don Dst. Port ƙayyade da cikakken kewayon mashigai.
• lokacin da ka zaži guda kewayon mataki ya yi daidai cikin filin da tashoshin jiragen ruwa.

Ka lura cewa idan ka kafa isar ga FTP bukatar bi takardun na na'ura mai ba da hanya tsakanin hanyoyin sadarwa, da kuma shi ya ce shi ba da shawarar a yi amfani da lokacin da na fara dokin da tashar jiragen ruwa da kewayon kasa da darajar 1024. Wannan lokaci, kuma, shi ne ya cancanci a duba.

A ka'ida, za ka iya har yanzu amfani da aiki Hairpin NAT Mikrotik, amma shi wajibi ne kawai a lokuta inda ake bukata shigar ga wani waje IP daga LAN. A general, ba ka bukatar ka kunna ta.