Detailed explanation of ros usage

Article directory

ros overview

Soft routing refers to a routing solution formed by using a desktop or server supplier to cooperate with certain software. It mainly relies on the settings of the software to realize the functions of a router. Its software
and hardware are independent. Soft routing uses an ordinary computer and a common operating system,
such as Linux or Windows, so the settings of the soft routing are actually the settings of Windows or Linux. Depending on the operating system used, it can
be divided into software routers developed based on Windows platform and based on Linux/BSD platform.

ros uses winbox to log in

Winbox as a ROS management tool:

Connect To: IP address or MAC address
Login: Administrator account
Password: Administrator password
Neighbors: View MAC address, IP address and other information

Insert image description here

ros shutdown and restart

system shutdown	#关机

system reboot	#重启

ros changes router name

system identity print				#查看ros名称
system identity set name=Gateway    #修改ros名称

Modify the identity name of system in winbox
Insert image description here

ros restore factory settings

/system> reset-configuration #Clear all configurations of the router, including the login account and password (restore to "admin" and empty password). The IP address and other configurations will be erased. The router will restart after the reset command is executed. . After RouterOS v3.x, the default ether1 interface IP address will be set to 192.168.88.1/24 after reset.

/system> reset-configuration

ros changes administrator account password and restricts login IP

Users under System
Insert image description here
use + to add a new user, or click to edit an existing user, and click [password] to modify the user login password

ros backup and restore

The configuration under winbox is directly under the files menu, backed up through backup, and restored by restore operation.

Insert image description here

ros uses pppor to dial

Interface->Use "+"->PPPoe Client
Insert image description here
to enter the broadband account password. The default configuration below or the configuration in this picture can be consistent

. The configuration is completed, but you cannot access the Internet yet and need to disguise it.

ros's nat, also called camouflage

Insert image description here
Use "+" to add a NAT rule and set the src address to your network segment. If there are multiple network segments, add multiple NAT rules for the corresponding network segment.
Of course, you can also set a single IP: such as 192.168.1.2, then only 192.168.1.2 can access the Internet.

Insert image description here

Insert image description here
High-efficiency camouflage
: Set camouflage from a certain exit, which is a more efficient camouflage (applicable to public network IP)

source address camouflage, set the IP address of the exit

Insert image description here

ros static ARP binding

In a scenario where there is no Layer 3 switch, ROS is the routing gateway. In the arp list, the D mark displayed in front of the IP is dynamic, and IP+MAC binding is not done. Use
Insert image description here
Make Static to implement IP+MAC binding, and
Remove to unbind, which
is quick and easy. Operation, select all ARP make static

You can also set the router to only respond to static ARP.
Set the LAN to only respond to static ARP requests (reply-only)

ros port mapping

After opening the winbox client and logging in, find the "ip"-"firewall" firewall settings, as shown below.
Insert image description here
Find the firewall rules, click "+" in NAT to add rules as shown below.

Set port mapping
in the general "general" menu, as shown below. Select dstnat for Chain and default protocol protocl. DST port is the target port, which is the port that needs to be mapped. The external network port is accessed. Then the entrance selects the public network interface for accessing the Internet. Then after
Insert image description here
executing the action option settings and selecting dst-nat
, the address that appears in the to address is what is needed. The IP address of the mapped server,
and then the port number (generally speaking, it corresponds to the intranet 11. If it is inconsistent, please note that this is the intranet port).
Insert image description here
After setting it up, click apply, and then you can see the settings you just set in NAT. project.

ros configure static routing

Add a static route to routes in ip in winbox, the target address is 0.0.0.0/0, Gateway represents the outgoing interface, pppoe selects the dialing option, fenliu identifies a diversion mark, which is used for subsequent policy routing to designate intranet traffic to a certain interface out.
Insert image description here

For the return route to the intranet, you generally only need to specify the target network segment and intranet interface.