Jump to content

Проброс оборудования во внешнюю сеть , через роутер Mikrotik

Errom
 Share

Recommended Posts

Errom

Errom

Posted
Posted (edited)

Добрый день . Обо всем по порядку:

Арендую сервер (VPS) на сайте ruvds.com (не реклама) там мне был выдан IP- адрес следующего вида: ххх.ххх.хх.хх1 по нему я захожу на сам сервер (RDP) на сервере установлен билинг, который в свою очередь связывается с сервером Mikrotik x86 по постоянному IP Mikrotik x86 имеет 4 порта (локальный адрес самого сервер 10.1.0.1)

Eth0 – входящий (приходит интернет от вышестоящего провайдера)(имеется постоянный IP- адрес следующего вида: ххх.ххх.хх.хх2)

Eth1 – проводом подключен Ubiquiti Nanostation M2 (адрес устройства 10.1.0.5)

Eth2– проводом подключен Mikrotik RB411GL (адрес устройства 10.1.0.2)

Eth3- порт с подключенным роутером TP-Link WA941 (на порту eth3 весит DHCP сервер и раздает адрес в диапазоне 192.168.1.2-192.168.1.5)

Так вот в чем соль моего вопроса, захожу я на сервер с биллингом по по RDP , и хочу зайти например на Ubiquiti Nanostation M2(10.1.0.5) каким образом я могу это сделать , как прокинуть это устройство во внешнюю сеть , что бы его мониторить тоже. Буду очень рад помощи.

VPN не вариант использовать если соединение поднимается с сервером Mikrotik x86 то сервер (RDP) не доступен пока не перезагрузишь сервер.

 

 

Так как ограничение на сообщение пишу ниже

1)Зачем вам заходить с сервера? Феншуй?

ТАк удобнее , при проблеме у клиента, первым делом смотрю наличие блокировок , может баланс отрицательный, если нет , то хотелось бы зайти на точку , как минимум посмотреть уровни сигналов и прочую инф-ю.

2)На микротике белый IP, авторизация какая?

Да белый ip , авторизация от провайдера PPPoE , клиенты тоже авторизуются по PPPoE

3) Можно сделать проброс портов на микротике и заходить уже по порту.

Можно , знать бы как это сделать

4)Вы не указали, как вы хотите зайти SSH или Web??

WEB + winbox

5)Может стоит скинуть конфиг микротика?

Сейчас Ниже:

 

# feb/07/2017 17:34:00 by RouterOS 5.26# software id = W5EY-LHT9
#

/interface bridge

add l2mtu=16383 name="PPPoE Bridge"

/interface ethernet

set 0 name="WAN TTK"

set 1 arp=proxy-arp disabled=yes name="MikroBILL Service"

set 2 arp=proxy-arp disabled=yes name="MikroBILL INTERNET"

set 3 disabled=yes name="MikroBILL VPN"

set 4 name="HOME NETWORK"

set 5 arp=proxy-arp name="vPPPoE Server \B93"

set 6 auto-negotiation=no full-duplex=no name="vPPPoE Server \B91(Mik)"

set 7 name="vPPPoE Server \B92(UBNT)"

/interface pppoe-client

add add-default-route=yes disabled=no interface="WAN TTK" name="PPPoE Client" \    password=121212211 use-peer-dns=yes user=1212112121

/interface wireless security-profiles

set [ find default=yes ] supplicant-identity=MikroTik

/ip hotspot user profile

set [ find default=yes ] idle-timeout=none keepalive-timeout=2m

/ip pool

add name="HOME DHCP" ranges=192.168.1.2-192.168.1.5

add name="MikroBILL_PPPoE Pool IP" ranges=10.1.0.20-10.1.254.254

/ip dhcp-server

add add-arp=yes address-pool="HOME DHCP" disabled=no interface="HOME NETWORK" \    name="HOME DHCP SERVER"

/port

set 1 name=usb5

/queue simple

add max-limit=50M/50M name="HOME PC" priority=1 target-addresses=\    192.168.1.0/24

/queue type

add kind=pfifo name=MikroBILL_PFIFO

add kind=sfq name=MikroBILL_SFQ

add kind=pcq name=MikroBILL_PCQ_DOWN pcq-classifier=dst-address \    pcq-total-limit=600

add kind=pcq name=MikroBILL_PCQ_UP pcq-classifier=src-address \    pcq-total-limit=600

set 11 kind=sfq sfq-perturb=60

/queue simple

add burst-limit=1208320/4833280 burst-threshold=921600/3686400 burst-time=\    15s/15s comment="AIR 4\\HUPSK9JB|8" limit-at=1/1 max-limit=1024k/4096k \    name=MikroBILL_HUPSK9JB priority=7 queue=MikroBILL_SFQ/MikroBILL_SFQ \    target-addresses=10.1.0.11/32

add burst-threshold=460800/2764800 burst-time=1s/1s comment=\    "Unlimited 3\\VU7SP01K|2" limit-at=1/1 max-limit=512k/3072k name=\    MikroBILL_VU7SP01K priority=7 queue=MikroBILL_SFQ/MikroBILL_SFQ \    target-addresses=10.1.0.17/32

add burst-threshold=460800/2764800 burst-time=1s/1s comment=\    "Unlimited 3\\EHNP3NHJ|4" limit-at=1/1 max-limit=512k/3072k name=\    MikroBILL_EHNP3NHJ priority=7 queue=MikroBILL_SFQ/MikroBILL_SFQ \    target-addresses=10.1.0.9/32

add burst-limit=1208320/3624960 burst-threshold=921600/2764800 burst-time=\    15s/15s comment="AIR 3\\ZII6QC1P|5" limit-at=1/1 max-limit=1024k/3072k \    name=MikroBILL_ZII6QC1P priority=7 queue=MikroBILL_SFQ/MikroBILL_SFQ \    target-addresses=10.1.0.18/32

add burst-limit=1208320/12083200 burst-threshold=921600/9216k burst-time=\    15s/15s comment="AIR 10\\RUVL2WYR|1" limit-at=1/1 max-limit=1024k/10240k \    name=MikroBILL_RUVL2WYR priority=5 queue=MikroBILL_SFQ/MikroBILL_SFQ \    target-addresses=10.1.0.14/32

add burst-threshold=460800/1843200 burst-time=1s/1s comment=\    "Unlimited 2\\SN68745|0" limit-at=1/1 max-limit=512k/2048k name=\    MikroBILL_SN68745 priority=7 queue=MikroBILL_SFQ/MikroBILL_SFQ \    target-addresses=10.1.0.15/32

add burst-threshold=921600/4608k burst-time=1s/1s comment=\    "Unlimited 5\\TCZOBBVV|7" limit-at=1/1 max-limit=1024k/5120k name=\    MikroBILL_TCZOBBVV priority=6 queue=MikroBILL_SFQ/MikroBILL_SFQ \    target-addresses=10.1.0.16/32

add burst-limit=1382400/5529600 burst-threshold=921600/3686400 burst-time=\    35s/35s comment="AIR 4 (\C0\F0\F5\E8\E2)\\H22DJ7Y0|10" limit-at=1/1 \    max-limit=1024k/4096k name=MikroBILL_H22DJ7Y0 priority=7 queue=\    MikroBILL_SFQ/MikroBILL_SFQ target-addresses=10.1.0.20/32

add burst-threshold=460800/1843200 burst-time=1s/1s comment=\    "Unlimited 2\\HKKXZ252|3" limit-at=1/1 max-limit=512k/2048k name=\    MikroBILL_HKKXZ252 priority=7 queue=MikroBILL_SFQ/MikroBILL_SFQ \    target-addresses=10.1.0.10/32

add burst-limit=1024k/5120k burst-threshold=921600/4608k burst-time=1s/1s \    comment="Unlimited 5\\QNJM5UVF|9" limit-at=1/1 max-limit=1024k/5120k \    name=MikroBILL_QNJM5UVF priority=6 queue=MikroBILL_SFQ/MikroBILL_SFQ \    target-addresses=10.1.0.13/32

/tool user-manager customer

add backup-allowed=yes disabled=no login=admin password="" \    paypal-accept-pending=no paypal-allowed=no paypal-secure-response=no \    permissions=owner signup-allowed=no time-zone=-00:00

/interface bridge port

add bridge="PPPoE Bridge" interface="vPPPoE Server \B93"

add bridge="PPPoE Bridge" interface="vPPPoE Server \B92(UBNT)"

add bridge="PPPoE Bridge" interface="vPPPoE Server \B91(Mik)"

/interface bridge settings

set use-ip-firewall=yes use-ip-firewall-for-pppoe=yes \    use-ip-firewall-for-vlan=yes

/interface l2tp-server server

set authentication=mschap1,mschap2

/interface pppoe-server server

add disabled=no interface="PPPoE Bridge" one-session-per-host=yes \    service-name="PPPoE Server"

/interface pptp-server server

set enabled=yes

/ip address

add address=192.168.1.1/24 interface="HOME NETWORK"

add address=10.1.0.1/24 interface="PPPoE Bridge"

/ip dhcp-client

add default-route-distance=0 interface="WAN TTK"

/ip dhcp-server lease

add address=192.168.1.5 always-broadcast=yes client-id=1:f8:1a:67:c5:57:e9 \    mac-address=F8:1A:67:C5:57:E9 server="HOME DHCP SERVER"

/ip dhcp-server network

add address=192.168.1.0/24 dns-server=141.105.32.88 domain="Home Network" \    gateway=192.168.1.1 netmask=24

/ip dns

set allow-remote-requests=yes cache-size=19048KiB servers=\    141.105.32.88,141.105.32.89

/ip dns static

add address=192.168.2.3 disabled=yes name=www.skynet38.ru

add address=192.168.2.3 disabled=yes name=skynet38.ru

add address=192.168.2.3 disabled=yes name=http://skynet38.ru

add address=192.168.2.3 disabled=yes name=https://skynet38.ru

add address=192.168.2.3 disabled=yes name=https://www.skynet38.ru

/ip firewall address-list

add address=10.1.0.0/24 comment="All Drop in 10.1.0.0/24" list=\    MikroBill_All_Drop

add address=192.168.3.2 list=WEB

add address=194.54.14.129 comment=MIKROBILL_HOST_SBRF.RU list=\    "\C7\E0\E3\EB\F3\F8\EA\E0"

add address=141.105.32.89 list="\C7\E0\E3\EB\F3\F8\EA\E0"

add address=141.105.32.88 list="\C7\E0\E3\EB\F3\F8\EA\E0"

add address=192.168.3.2 list="\C7\E0\E3\EB\F3\F8\EA\E0"

add address=192.168.2.3 list="\C7\E0\E3\EB\F3\F8\EA\E0"

add address=188.168.26.231 list="\C7\E0\E3\EB\F3\F8\EA\E0"

add address=91.232.230.48 list="\C7\E0\E3\EB\F3\F8\EA\E0"

add address=194.54.14.129 comment=MIKROBILL_HOST_SBRF.RU list=\    "\C7\E0\E3\EB\F3\F8\EA\E0 2"

add address=141.105.32.89 list="\C7\E0\E3\EB\F3\F8\EA\E0 2"

add address=141.105.32.88 list="\C7\E0\E3\EB\F3\F8\EA\E0 2"

add address=192.168.3.2 list="\C7\E0\E3\EB\F3\F8\EA\E0 2"

add address=192.168.2.3 list="\C7\E0\E3\EB\F3\F8\EA\E0 2"

add address=188.168.26.231 list="\C7\E0\E3\EB\F3\F8\EA\E0 2"

add address=91.232.230.48 list="\C7\E0\E3\EB\F3\F8\EA\E0 2"

add address=194.54.14.140 comment=MIKROBILL_HOST_ACS2.SBRF.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=217.14.50.132 comment=MIKROBILL_HOST_3DS.VTB24.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=77.88.21.131 comment=MIKROBILL_HOST_AWAPS.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=93.158.134.131 comment=MIKROBILL_HOST_AWAPS.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=213.180.204.131 comment=MIKROBILL_HOST_AWAPS.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=87.250.250.131 comment=MIKROBILL_HOST_AWAPS.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=213.180.193.131 comment=MIKROBILL_HOST_AWAPS.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=178.154.131.217 comment=MIKROBILL_HOST_YANDEX.ST list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=178.154.131.216 comment=MIKROBILL_HOST_YANDEX.ST list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=178.154.131.215 comment=MIKROBILL_HOST_YANDEX.ST list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=77.88.21.21 comment=MIKROBILL_HOST_CSS.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=213.180.204.21 comment=MIKROBILL_HOST_CSS.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=213.180.204.51 comment=MIKROBILL_HOST_PASS.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=87.250.250.24 comment=MIKROBILL_HOST_PASSPORT.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=87.250.251.24 comment=MIKROBILL_HOST_PASSPORT.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=77.88.21.24 comment=MIKROBILL_HOST_PASSPORT.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=213.180.193.24 comment=MIKROBILL_HOST_PASSPORT.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=213.180.204.24 comment=MIKROBILL_HOST_PASSPORT.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=185.71.78.14 comment=MIKROBILL_HOST_MONEY.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=109.235.165.142 comment=MIKROBILL_HOST_MONEY.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=178.154.131.217 comment=MIKROBILL_HOST_YASTATIC.NET list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=178.154.131.215 comment=MIKROBILL_HOST_YASTATIC.NET list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=178.154.131.216 comment=MIKROBILL_HOST_YASTATIC.NET list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=77.88.21.14 comment=MIKROBILL_HOST_CLCK.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=87.250.250.14 comment=MIKROBILL_HOST_CLCK.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=213.180.204.14 comment=MIKROBILL_HOST_CLCK.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=213.180.193.14 comment=MIKROBILL_HOST_CLCK.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=87.250.251.14 comment=MIKROBILL_HOST_CLCK.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=87.250.250.119 comment=MIKROBILL_HOST_MC.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=93.158.134.119 comment=MIKROBILL_HOST_MC.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=87.250.251.119 comment=MIKROBILL_HOST_MC.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=213.180.193.119 comment=MIKROBILL_HOST_MC.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=192.225.158.2 comment=MIKROBILL_HOST_AA.ONLINE-METRIX.NET list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=91.232.230.48 comment=MIKROBILL_HOST_QIWI.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=91.232.230.50 comment=MIKROBILL_HOST_QIWI.COM list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=91.232.230.68 comment=MIKROBILL_HOST_W.QIWI.COM list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=194.190.172.18 comment=MIKROBILL_HOST_PAYMENTS.MTSBANK.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=82.196.67.37 comment=MIKROBILL_HOST_3DSP.VTB24.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=185.71.78.15 comment=MIKROBILL_HOST_SP-MONEY.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=109.235.165.143 comment=MIKROBILL_HOST_SP-MONEY.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=192.225.158.17 comment=MIKROBILL_HOST_S4.MONEY.YANDEX.NET list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=93.158.134.14 comment=MIKROBILL_HOST_CLCK.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=194.67.29.230 comment=MIKROBILL_HOST_SC.RS.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=91.232.230.41 comment=MIKROBILL_HOST_W.QIWI.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=176.34.247.152 comment=MIKROBILL_HOST_OCSP-SSL.CERTIFICAT2.COM \    list="\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=54.228.209.190 comment=MIKROBILL_HOST_OCSP-SSL.CERTIFICAT2.COM \    list="\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=93.190.87.221 comment=MIKROBILL_HOST_ACS1.3DS.MODIRUM.COM list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=87.98.167.129 comment=MIKROBILL_HOST_WWW.OPENTRUST.COM list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=93.190.87.221 comment=MIKROBILL_LAN_LIST list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=194.190.172.18 comment=MIKROBILL_LAN_LIST list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=82.196.67.37 comment=MIKROBILL_LAN_LIST list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=217.14.50.132 comment=MIKROBILL_LAN_LIST list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=194.67.29.230 comment=MIKROBILL_LAN_LIST list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=217.12.97.112 comment=MIKROBILL_LAN_LIST list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=91.232.230.67 comment=MIKROBILL_LAN_LIST list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=173.45.161.113 comment=MIKROBILL_LAN_LIST list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=87.250.250.201 comment=MIKROBILL_HOST_SOCIAL.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=213.180.204.201 comment=MIKROBILL_HOST_SOCIAL.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=213.180.193.201 comment=MIKROBILL_HOST_SOCIAL.YANDEX.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=109.235.163.229 comment=MIKROBILL_HOST_PAYMENTCARD.YAMONEY.RU \    list="\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=194.54.14.139 comment=MIKROBILL_HOST_ACS1.SBRF.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=194.54.14.155 comment=MIKROBILL_HOST_ACS3.SBRF.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=194.54.14.158 comment=MIKROBILL_HOST_ACS4.SBRF.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=188.168.26.231 comment=MIKROBILL_HOST_SKYNET38.RU list=\    "WEB-\E7\E0\E3\EB\F3\F8\EA\E0"

add address=188.168.26.231 comment=MIKROBILL_HOST_WWW.SKYNET38.RU list=\    "WEB-\E7\E0\E3\EB\F3\F8\EA\E0"

add address=188.168.26.231 comment=MIKROBILL_LAN_LIST list=\    "WEB-\E7\E0\E3\EB\F3\F8\EA\E0"

add address=194.176.100.120 comment=MIKROBILL_HOST_3DS.MDMBANK.RU list=\    "\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=52.222.174.215 comment=MIKROBILL_HOST_CRL-SSL.CERTIFICAT2.COM \    list="\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=52.222.174.170 comment=MIKROBILL_HOST_CRL-SSL.CERTIFICAT2.COM \    list="\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=52.222.174.200 comment=MIKROBILL_HOST_CRL-SSL.CERTIFICAT2.COM \    list="\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=52.222.174.245 comment=MIKROBILL_HOST_CRL-SSL.CERTIFICAT2.COM \    list="\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=52.222.174.113 comment=MIKROBILL_HOST_CRL-SSL.CERTIFICAT2.COM \    list="\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=52.222.174.153 comment=MIKROBILL_HOST_CRL-SSL.CERTIFICAT2.COM \    list="\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=52.222.174.201 comment=MIKROBILL_HOST_CRL-SSL.CERTIFICAT2.COM \    list="\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=52.222.174.162 comment=MIKROBILL_HOST_CRL-SSL.CERTIFICAT2.COM \    list="\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=173.194.122.254 comment=MIKROBILL_HOST_SSL.GOOGLE-ANALYTICS.COM \    list="\CF\EB\E0\F2\E5\E6\ED\FB\E5 \F1\E8\F1\F2\E5\EC\FB"

add address=10.1.0.13 comment="Unlimited 5\\QNJM5UVF|9" disabled=yes list=\    MikroBill_OFF_Users

add address=10.1.0.13 comment="Unlimited 5\\QNJM5UVF|9" list=MikroBill_Users

add address=10.1.0.13 comment=\    "MikroBill_Linked_Users__Unlimited 5\\QNJM5UVF|9" list=\    "MikroBILL_Tarif_Unlimited 5"

add address=10.1.0.12 comment="Unlimited 3\\P806439A|6" disabled=yes list=\    MikroBill_OFF_Users

add address=10.1.0.12 comment="Unlimited 3\\P806439A|6" list=MikroBill_Users

add address=10.1.0.12 comment=\    "MikroBill_Linked_Users__Unlimited 3\\P806439A|6" list=\    "MikroBILL_Tarif_Unlimited 3"

add address=10.1.0.18 comment="MikroBill_Linked_Users__AIR 3\\ZII6QC1P|5" \    list="MikroBILL_Tarif_AIR 3"

add address=10.1.0.18 comment="AIR 3\\ZII6QC1P|5" disabled=yes list=\    MikroBill_OFF_Users

add address=10.1.0.18 comment="AIR 3\\ZII6QC1P|5" list=MikroBill_Users

add address=10.1.0.15 comment=\    "MikroBill_Linked_Users__Unlimited 2\\SN68745|0" list=\    "MikroBILL_Tarif_Unlimited 2"

add address=10.1.0.15 comment="Unlimited 2\\SN68745|0" disabled=yes list=\    MikroBill_OFF_Users

add address=10.1.0.15 comment="Unlimited 2\\SN68745|0" list=MikroBill_Users

add address=10.1.0.14 comment="AIR 10\\RUVL2WYR|1" disabled=yes list=\    MikroBill_OFF_Users

add address=10.1.0.14 comment="AIR 10\\RUVL2WYR|1" list=MikroBill_Users

add address=10.1.0.9 comment=\    "MikroBill_Linked_Users__Unlimited 3\\EHNP3NHJ|4" list=\    "MikroBILL_Tarif_Unlimited 3"

add address=10.1.0.17 comment=\    "MikroBill_Linked_Users__Unlimited 3\\VU7SP01K|2" list=\    "MikroBILL_Tarif_Unlimited 3"

add address=10.1.0.9 comment="Unlimited 3\\EHNP3NHJ|4" disabled=yes list=\    MikroBill_OFF_Users

add address=10.1.0.9 comment="Unlimited 3\\EHNP3NHJ|4" list=MikroBill_Users

add address=10.1.0.17 comment="Unlimited 3\\VU7SP01K|2" disabled=yes list=\    MikroBill_OFF_Users

add address=10.1.0.17 comment="Unlimited 3\\VU7SP01K|2" list=MikroBill_Users

add address=10.1.0.10 comment=\    "MikroBill_Linked_Users__Unlimited 2\\HKKXZ252|3" list=\    "MikroBILL_Tarif_Unlimited 2"

add address=10.1.0.10 comment="Unlimited 2\\HKKXZ252|3" disabled=yes list=\    MikroBill_OFF_Users

add address=10.1.0.10 comment="Unlimited 2\\HKKXZ252|3" list=MikroBill_Users

add address=10.1.0.20 comment="AIR 4 (\C0\F0\F5\E8\E2)\\H22DJ7Y0|10" \    disabled=yes list=MikroBill_OFF_Users

add address=10.1.0.20 comment="AIR 4 (\C0\F0\F5\E8\E2)\\H22DJ7Y0|10" list=\    MikroBill_Users

add address=10.1.0.11 comment="MikroBill_Linked_Users__AIR 4\\HUPSK9JB|8" \    list="MikroBILL_Tarif_AIR 4"

add address=10.1.0.11 comment="AIR 4\\HUPSK9JB|8" disabled=yes list=\    MikroBill_OFF_Users

add address=10.1.0.11 comment="AIR 4\\HUPSK9JB|8" list=MikroBill_Users

add address=10.1.0.16 comment=\    "MikroBill_Linked_Users__Unlimited 5\\TCZOBBVV|7" list=\    "MikroBILL_Tarif_Unlimited 5"

add address=10.1.0.16 comment="Unlimited 5\\TCZOBBVV|7" disabled=yes list=\    MikroBill_OFF_Users

add address=10.1.0.16 comment="Unlimited 5\\TCZOBBVV|7" list=MikroBill_Users

add address=10.1.0.20 comment=\    "MikroBill_Linked_Users__AIR 4 (\C0\F0\F5\E8\E2)\\H22DJ7Y0|10" list=\    "MikroBILL_Tarif_AIR 4 (\C0\F0\F5\E8\E2)"

add address=10.1.0.13 comment="Unlimited 5\\QNJM5UVF|9" list=\    "MikroBill_LinkedServices_SMS-\C8\ED\F4\EE\F0\EC\E8\F0\EE\E2\E0\ED\E8\E5"

add address=10.1.0.16 comment="Unlimited 5\\TCZOBBVV|7" list=\    "MikroBill_LinkedServices_SMS-\C8\ED\F4\EE\F0\EC\E8\F0\EE\E2\E0\ED\E8\E5"

add address=10.1.0.12 comment="Unlimited 3\\P806439A|6" list=\    "MikroBill_LinkedServices_SMS-\C8\ED\F4\EE\F0\EC\E8\F0\EE\E2\E0\ED\E8\E5"

add address=10.1.0.18 comment="AIR 3\\ZII6QC1P|5" list=\    "MikroBill_LinkedServices_SMS-\C8\ED\F4\EE\F0\EC\E8\F0\EE\E2\E0\ED\E8\E5"

add address=10.1.0.9 comment="Unlimited 3\\EHNP3NHJ|4" list=\    "MikroBill_LinkedServices_SMS-\C8\ED\F4\EE\F0\EC\E8\F0\EE\E2\E0\ED\E8\E5"

add address=10.1.0.10 comment="Unlimited 2\\HKKXZ252|3" list=\    "MikroBill_LinkedServices_SMS-\C8\ED\F4\EE\F0\EC\E8\F0\EE\E2\E0\ED\E8\E5"

add address=10.1.0.17 comment="Unlimited 3\\VU7SP01K|2" list=\    "MikroBill_LinkedServices_SMS-\C8\ED\F4\EE\F0\EC\E8\F0\EE\E2\E0\ED\E8\E5"

add address=10.1.0.14 comment="MikroBill_Linked_Users__AIR 10\\RUVL2WYR|1" \    list="MikroBILL_Tarif_AIR 10"

add address=194.87.94.92 comment="All Drop in 194.87.94.92" list=\    MikroBill_All_Drop

add address=192.168.2.3 comment=SERVER list=MikroBill_Users

add address=194.87.94.92 comment=SERVER list=MikroBill_Users

add address=10.1.0.11 comment="AIR 4\\HUPSK9JB|8" list=\    "MikroBill_LinkedServices_SMS-\C8\ED\F4\EE\F0\EC\E8\F0\EE\E2\E0\ED\E8\E5"

add address=194.87.94.92 comment=MIKROBILL_HOST_SKYNET38.RU list=WhiteHosts

add address=194.87.94.92 comment=MIKROBILL_LAN_LIST list=WhiteHosts

add address=10.1.0.22 comment="AIR 8\\\C4\EB\FF \EF\F0\EE\E2\E5\F0\EA\E8 \F2\

   \E5\F1\F2 \E7\E0\E9\EC\FB|11" list=MikroBill_Users

add address=10.1.0.22 comment="AIR 8\\\C4\EB\FF \EF\F0\EE\E2\E5\F0\EA\E8 \F2\

   \E5\F1\F2 \E7\E0\E9\EC\FB|11" list=\    "MikroBill_LinkedServices_SMS-\C8\ED\F4\EE\F0\EC\E8\F0\EE\E2\E0\ED\E8\E5"

add address=10.1.0.22 comment="MikroBill_Linked_Users__AIR 8\\\C4\EB\FF \EF\F0\

   \EE\E2\E5\F0\EA\E8 \F2\E5\F1\F2 \E7\E0\E9\EC\FB|11" list=\    "MikroBILL_Tarif_AIR 8"

add address=10.1.0.22 comment="AIR 8\\\C4\EB\FF \EF\F0\EE\E2\E5\F0\EA\E8 \F2\

   \E5\F1\F2 \E7\E0\E9\EC\FB|11" disabled=yes list=MikroBill_OFF_Users

/ip firewall filter

add chain=forward comment=\    "MikroBILL_\CB\E8\F7\ED\FB\E9 \EA\E0\E1\E8\ED\E5\F2 UDP_56845247131204" \    dst-address-list=WhiteHosts protocol=udp

add chain=forward comment=\    "MikroBILL_\CB\E8\F7\ED\FB\E9 \EA\E0\E1\E8\ED\E5\F2 TCP_27181627770673" \    dst-address-list=WhiteHosts protocol=tcp src-address-list=WhiteHosts

add chain=forward comment=MikroBILL_Server2 dst-address=194.87.94.92

add chain=forward comment=MikroBILL_Users2 dst-address-list=MikroBill_Users

add action=drop chain=forward comment=MikroBILL_Flood_Killer \    src-address-list=MikroBILL_BLOCKED_FLOOD

add action=add-src-to-address-list address-list=MikroBILL_BLOCKED_FLOOD \    address-list-timeout=3m chain=forward comment=MikroBILL_Block_Flood \    connection-limit=20,32 dst-port=80 protocol=tcp src-address-list=\    MikroBill_OFF_Users

add chain=forward comment=MikroBILL_Server src-address=194.87.94.92

add chain=forward comment=MikroBILL_WhiteList dst-address-list=WhiteHosts

add chain=forward comment=MikroBILL_Users src-address-list=MikroBill_Users

add action=drop chain=forward comment=MikroBILL_Blocked_Users \    src-address-list=MikroBill_All_Drop

add action=drop chain=input comment=\    "\D3\E1\E8\F0\E0\E5\EC \F1\E5\F1\F1\E8\E8 \F1 \EE\F8\E8\E1\EA\E0\EC\E8" \    connection-state=invalid

add action=drop chain=forward comment=MikroBILL_Blocked_Users2 \    dst-address-list=MikroBill_All_Drop

/ip firewall nat

add action=netmap chain=dstnat comment="MIKROBILL 2WEB-CAP" disabled=yes \    dst-address=!192.168.2.3 dst-address-list=!WhiteHosts dst-port=80 \    protocol=tcp src-address-list=!MikroBill_Users to-addresses=192.168.2.3 \    to-ports=82

add action=masquerade chain=srcnat comment="MIKROBILL USERS NAT" \    src-address-list=MikroBill_All_Drop to-addresses=0.0.0.0

add action=masquerade chain=srcnat src-address=192.168.1.0/24

add action=masquerade chain=srcnat dst-address=!10.0.0.0/8 src-address=\    10.1.0.0/16

add action=netmap chain=dstnat comment="MIKROBILL WEB-CAP" dst-address=\    !194.87.94.92 dst-address-list=!WhiteHosts dst-port=80 protocol=tcp \    src-address-list=MikroBill_OFF_Users to-addresses=194.87.94.92 to-ports=\    81

/ip firewall service-port

set ftp disabled=yes

set tftp disabled=yes

set irc disabled=yes

set h323 disabled=yes

set sip disabled=yes

/ip neighbor discovery

set "WAN TTK" disabled=yes

set "MikroBILL Service" disabled=no

set "MikroBILL INTERNET" disabled=no

set "MikroBILL VPN" disabled=no

/ip proxy

set port=81

/ip service

set telnet disabled=yes

set ftp disabled=yes

set ssh disabled=yes

set www-ssl disabled=no

set api disabled=no

/ip traffic-flow

set active-flow-timeout=2m enabled=yes inactive-flow-timeout=30s

/ip traffic-flow target

add address=192.168.2.3 version=5

/ppp secret

add comment="Unlimited 5\\QNJM5UVF   (MikroBill)|9" local-address=10.1.0.1 \    name=QNJM5UVF password=YSM92V remote-address=10.1.0.13 service=pppoe

add comment="AIR 4\\HUPSK9JB   (MikroBill)|8" local-address=10.1.0.1 name=\    HUPSK9JB password=H8PR5LQO remote-address=10.1.0.11 service=pppoe

add comment="Unlimited 3\\EHNP3NHJ   (MikroBill)|4" local-address=10.1.0.1 \    name=EHNP3NHJ password=NAR96DO6 remote-address=10.1.0.9 service=pppoe

add comment="Unlimited 5\\TCZOBBVV   (MikroBill)|7" local-address=10.1.0.1 \    name=TCZOBBVV password=R1KF9DHD remote-address=10.1.0.16 service=pppoe

add comment="Unlimited 3\\VU7SP01K   (MikroBill)|2" local-address=10.1.0.1 \    name=VU7SP01K password=L2M8BDNV remote-address=10.1.0.17 service=pppoe

add comment="Unlimited 2\\HKKXZ252   (MikroBill)|3" local-address=10.1.0.1 \    name=HKKXZ252 password=H3TX72CB remote-address=10.1.0.10 service=pppoe

add comment="AIR 3\\ZII6QC1P   (MikroBill)|5" local-address=10.1.0.1 name=\    ZII6QC1P password=JN3T4QDJ remote-address=10.1.0.18 service=pppoe

add comment="AIR 10\\RUVL2WYR   (MikroBill)|1" local-address=10.1.0.1 name=\    RUVL2WYR password=R8Q62WEK remote-address=10.1.0.14 service=pppoe

add comment="Unlimited 3\\P806439A   (MikroBill)|6" local-address=10.1.0.1 \    name=P806439A password=I0S9EERD remote-address=10.1.0.12 service=pppoe

add comment="AIR 4 (\C0\F0\F5\E8\E2)\\H22DJ7Y0   (MikroBill)|10" \    local-address=10.1.0.1 name=H22DJ7Y0 password=07M63LZZ remote-address=\    10.1.0.20 service=pppoe

add comment="AIR 8\\\C4\EB\FF \EF\F0\EE\E2\E5\F0\EA\E8 \F2\E5\F1\F2 \E7\E0\E9\

   \EC\FB   (MikroBill)|11" local-address=10.1.0.1 name=Admin1 password=\    Admin1 remote-address=10.1.0.22 service=pppoe

add comment="Unlimited 2\\SN68745   (MikroBill)|0" local-address=10.1.0.1 \    name=SN68745 password=CaEp6WV0tv remote-address=10.1.0.15 service=pppoe

add comment=teeeeest local-address=10.1.0.1 name=spo_kirindas password=test \    remote-address=10.1.0.254 routes=10.1.0.1 service=pptp

/system clock manual

set dst-delta=+07:00 time-zone=+08:00

/system identity

set name="CCR 8G+"

/system lcd

set contrast=0 enabled=no port=parallel type=24x4

/system lcd page

set time disabled=yes display-time=5s

set resources disabled=yes display-time=5s

set uptime disabled=yes display-time=5s

set packets disabled=yes display-time=5s

set bits disabled=yes display-time=5s

set version disabled=yes display-time=5s

set identity disabled=yes display-time=5s

set "PPPoE Bridge" disabled=yes display-time=5s

set "vPPPoE Server \B92(UBNT)" disabled=yes display-time=5s

set "PPPoE Client" disabled=yes display-time=5s

set "vPPPoE Server \B91(Mik)" disabled=yes display-time=5s

set "vPPPoE Server \B93" disabled=yes display-time=5s

set "HOME NETWORK" disabled=yes display-time=5s

set "MikroBILL VPN" disabled=yes display-time=5s

set "MikroBILL INTERNET" disabled=yes display-time=5s

set "MikroBILL Service" disabled=yes display-time=5s

set "WAN TTK" disabled=yes display-time=5s

set <pppoe-ZII6QC1P> disabled=yes display-time=5s

set <pppoe-EHNP3NHJ> disabled=yes display-time=5s

set <pppoe-VU7SP01K> disabled=yes display-time=5s

set <pppoe-HKKXZ252> disabled=yes display-time=5s

set <pppoe-SN68745> disabled=yes display-time=5s

set <pppoe-QNJM5UVF> disabled=yes display-time=5s

set <pppoe-TCZOBBVV> disabled=yes display-time=5s

set <pppoe-HUPSK9JB> disabled=yes display-time=5s

set <pppoe-H22DJ7Y0> disabled=yes display-time=5s

/system ntp client

set enabled=yes primary-ntp=91.226.136.136 secondary-ntp=109.195.19.73

/system ntp server

set enabled=yes

/system scheduler

add comment="\C5\E6\E5\EC\E5\F1\E5\F7\ED\EE\E5 \F1\EE\E7\E4\E0\ED\E8\E5 \F0\E5\

   \E7\E5\F0\E2\ED\EE\E9 \EA\EE\EF\E8\E8" interval=4w2d name=BackUP \    on-event="{/system backup save name=Month}" policy=\    ftp,reboot,read,write,winbox,api start-date=may/25/2015 start-time=\    04:30:00

/system watchdog

set automatic-supout=no no-ping-delay=3m watch-address=8.8.8.8

/tool graphing interface

add interface="PPPoE Bridge"

add interface="HOME NETWORK"

add interface="MikroBILL INTERNET"

add interface="MikroBILL Service"

/tool netwatch

add comment="\CF\F0\EE\E2\E5\F0\EA\E0 \E4\EE\F1\F2\F3\EF\E0 \EA \E8\ED\F2\E5\

   \F0\ED\E5\F2\F3" disabled=yes down-script="/tool sms send usb5 \"+79641093\

   331\" message=\"MIKROTIK SkyCORE Disable\"\r\

   \n/tool sms send usb5 \"+79500630686\" message=\"MIKROTIK SkyCORE Disable\

   \"" host=8.8.8.8 interval=2m up-script="/tool sms send usb5 \"+79641093331\

   \" message=\"MIKROTIK SkyCORE Enable\"\r\

   \n/tool sms send usb5 \"+79500630686\" message=\"MIKROTIK SkyCORE Enable\"\

   "

add comment="\CF\F0\EE\E2\E5\F0\EA\E0 \E4\EE\F1\F2\F3\EF\ED\EE\F1\F2\E8 NanoSt\

   ation M2" disabled=yes down-script="/tool sms send usb5 \"+79641093331\" m\

   essage=\"NanoStation M2 Disable\"\r\

   \n/tool sms send usb5 \"+79500630686\" message=\"NanoStation M2 Disable\"" \    host=10.1.0.5 up-script="/tool sms send usb5 \"+79641093331\" message=\"Na\

   noStation M2 Enable\"\r\

   \n/tool sms send usb5 \"+79500630686\" message=\"NanoStation M2 Enable\""

add comment="\CF\F0\EE\E2\E5\F0\EA\E0 \E4\EE\F1\F2\F3\EF\ED\EE\F1\F2\E8 BS MIK\

   ROTIK RB411GL" disabled=yes down-script="/tool sms send usb5 \"+7964109333\

   1\" message=\"MIKROTIK BASE STATION Disable\"\r\

   \n/tool sms send usb5 \"+79500630686\" message=\"MIKROTIK BASE STATION Dis\

   able\"" host=10.1.0.2 interval=30s up-script="/tool sms send usb5 \"+79641\

   093331\" message=\"MIKROTIK BASE STATION Enable\"\r\

   \n/tool sms send usb5 \"+79500630686\" message=\"MIKROTIK BASE STATION Ena\

   ble\""

[skynet@CCR 8G+] >

Edited by Errom
pingz

pingz

Posted
Posted

Зачем вам заходить с сервера? Феншуй?

 

На микротике белый IP, авторизация какая?

 

Можно сделать проброс портов на микротике и заходить уже по порту.

 

Вы не указали, как вы хотите зайти SSH или Web??

 

Может стоит скинуть конфиг микротика?

 

З.Ы. ИМХО лучше использовать VPN у меня в сети отдельный микротик под это стоит(раньше совмещали пока нагрузка в офисе не увеличилась) Проблем вообще нет.

Nuts

Nuts

Posted
Posted

Самое простое - dst-nat'ить веб-интерфейс Nanostation (там ведь веб-интерфейс, верно?) на внешний IP Mikrotik x86, при этом разрешать подключения только с IP билинга.

Либо правильно настроить маршруты на стороне билинга, чтобы при подключенном VPN не терять к нему доступ. К VPS, скорее всего, можно подключиться через VNC консоль.

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
 Share
Go to topic listing
×
×
  • Create New...
На сайте используются файлы cookie и сервисы аналитики для корректной работы форума и улучшения качества обслуживания. Продолжая использовать сайт, вы соглашаетесь с использованием файлов cookie и с Политикой конфиденциальности.