ื ืืืื ืืขืืขืจ. ืืขืจ ืึทืจืืืงื ืืื ืืืขื ืคึฟืึทืจ ืื ืืืืก ืืึธืื ืึท ืคึผืืึทืฅ ืคืื ืืืงืจืึธืืืง ืืขืืืืกืขืก ืืื ืืขื ืคึผืึทืจืง, ืืื ืืืืก ืืืืื ืฆื ืืึทืื ืืึทืงืกืืืื ืืื ืึทืคืึทืงืืืฉืึทื ืึทืืื ื ืืฉื ืฆื ืคืึทืจืืื ืื ืฆื ืืขืืขืจ ืืืื ืกืขืคึผืขืจืึทืืื. ืืื ืืขื ืึทืจืืืงื, ืืื ืืืขื ืืึทืฉืจืืึทืื ืึท ืคึผืจืืืขืงื ืืืึธืก, ืืืืืขืจ, ืืื ื ืืฉื ืืขืจืืจืืืื ืงืึทืืืึทื ืื ืึธืื ืจืขืื ืฆื ืืขื ืืฉ ืกืืืืช. ืืื ืงืืจืฅ: ืืขืจ ืืื 200 ืจืึธืืืขืจืก, ืฉื ืขื ืกืขืืึทืคึผ ืืื ืฉืืขืงื ืืจืืื ืื ื, ืืื ืึทืคืึทืงืืืฉืึทื ืืืจื ืืขืื ื, ืคึฟืืืืจืืจืื ื ื ืขืืืืึธืจืงืก ืืื ืกืคึผืขืฆืืคืืฉ ืืื ืืช, ืื ืคืืืืงืืื ืฆื ืืืืื ืืืืื ืึผืืืื ืฆื ืึทืืข ืืขืืืืกืขืก, ืืึธืืื ื ืืื ืึทืงืกืขืก ืงืึธื ืืจืึธื.
ืืืึธืก ืืื ืืืกืงืจืืืื ืืื ืื ืืื ื ืืฉื ืคืึทืจืืืื ืฆื ืืืื ืึท ืคืึทืจืืืง ืคืึทื, ืึธืืขืจ ืืื ืืึธืคึฟื ืขืก ืืืขื ืืืื ื ืืฆืืง ืคึฟืึทืจ ืืืจ ืืืขื ืคึผืืึทื ืืจืื ื ืืืื ื ืขืืืืึธืจืงืก ืืื ืืื ืึทืืืืืื ื ืขืจืจืึธืจืก. ืืึธืืขืจ ืขืืืขืืข ืคืื ืงืื ืืื ืืืกืืืฉืึทื ื ืืืขื ื ืืฉื ืืืกืงืืืขื ืืึทื ืฅ ืจืืืืืง ืคึฟืึทืจ ืืืจ - ืืืื ืึทืืื, ืฉืจืืึทืื ืืื ืื ืืึทืืขืจืงืื ืืขื. ืงืจืืืืง ืืื ืืขื ืคืึทื ืืืขื ืืืื ืึท ืืขืจืคืึทืจืื ื ืืื ืึท ืคึผืจืึธืกื ืคึผืืื ืืึทื ืง. ืืขืจืืืขืจ, ืืืืขื ืขืจ, ืงืืง ืืื ืื ืืึทืืขืจืงืื ืืขื, ืืึธืืขืจ ืืขืจ ืืืืจ ืืขืืืื ืึท ืืจืึธื ืืขืืช - ืื ืงืื ืืืขื ืืขืืคื.
ืื ื ืืืขืจ ืคืื ืจืึธืืืขืจืก ืืื 200-300, ืฆืขืืืึธืจืคื ืืื ืคืึทืจืฉืืืขื ืข ืฉืืขื ืืื ืคืึทืจืฉืืืขื ืข ืงืืืึทืืืืขื ืคืื ืืื ืืขืจื ืขื ืคึฟืึทืจืืื ืืื ื. ืขืก ืืื ื ืืืืืง ืฆื ืืึทืื ืึทืืฅ ืฉืืื ืืื ืืขืจืงืืขืจื ืฆื ืืืืข ืึทืืืื ืืกืืจืึทืืึธืจืก ืืืืฃ ืึท ืฆืืืจืืืืขื ืืืขื ืืื ืึทืืฅ ืืืขื ืึทืจืืขืื.
ืึทืืื ืืื ืืืืื ืืขืืขืจ ืคึผืจืืืขืงื? ืคืื ืงืืจืก, ืืื TK.
- ืึธืจืืึทื ืืืึทืฆืืข ืคืื โโืึท ื ืขืฅ ืคึผืืึทื ืคึฟืึทืจ ืึทืืข ืฆืืืืืื ืืืื ืฆื ืงืื ื ืจืขืงืืืืจืขืืขื ืฅ, ื ืขืฅ ืกืขืืืึทื ืืืืฉืึทื (ืคืื 3 ืฆื 20 ื ืขืืืืึธืจืงืก ืืื ืฆืืืืืื, ืืืคึผืขื ืืื ื ืืืืฃ ืื ื ืืืขืจ ืคืื ืืขืืืืกืขืก).
- ืฉืืขืื ืึทืจืืืฃ ืืขืืืืกืขืก ืืื ืืขืืขืจ ืฆืืืืึทื. ืงืึธื ืืจืึธืืืจืื ื ืื ืคืึทืงืืืฉ ืืึทื ืืืืืื ืคืื ืื ืฉืคึผืืึทืืขืจ ืืื ืคืึทืจืฉืืืขื ืข ืืจืืขืื ืืืืื ืืื ืืขื.
- ืึธืจืืึทื ืืืึทืฆืืข ืคืื โโืืืื ืฉืืฅ, ืืืืืืืืกื ืงืึธื ืืจืึธื, ืึทืืืึธ-ืืืืขืงืฉืึทื ืคืื ืื ืคืืื ืืื ืึทืืืึธ-ืืืึทืงืืืกืืื ื ืคึฟืึทืจ ืึท ืืืืขืจ ืฆืืื, ืืื ืืืืืืืฉืึทื ืคืื ืื ื ืืฆื ืคืื ืคืึทืจืฉืืื ืืขืื ืืฉ ืืืืืขื ืืขื ืืฆื ืฆื ืื ืืขืจืกืขืคึผื ืงืึธื ืืจืึธื ืึทืงืกืขืก ืืื ืึธืคึผืืืืงืขื ืื ื ืคืื ืืื ืกื.
- ืึธืจืืึทื ืืืึทืฆืืข ืคืื โโืืืืขืจ ืืืคึผื ืงืึทื ืขืงืฉืึทื ื ืืื ื ืขืฅ ืคึฟืืืืจืืจืื ื ืืืื ืฆื ืงืื ื ืจืขืงืืืืจืขืืขื ืฅ. ืืื ืืื ืืกืืขืจ 3 ืืืคึผื ืงืึทื ืขืงืฉืึทื ื ืคืื ืืขืืขืจ ืฆืืืืึทื ืฆื ืื ืฆืขื ืืขืจ.
- ืืึทืืืจื ืืืืฃ ืืืืืื 1, 2. ืงืืืึทืื ืื ืืขืกืืขืจ ืืืขืื ืฆื ืืืืขื ืฉืืื-ืืึธืืขืจืึทื ื ืืืคึผื. ืื ืืื ืึทืืืฉ ืจืืืื ื ืืขืื ืึธืืึธืืืข, ืืื ืื ืจืืืืืง ืืขืจืขืฅ, ืงืขื ืขื ืืืื ืืืืกืืขืจืืืืืื ืืืจื ืื ืงืึธื ืืจืึทืงืืึธืจ.
- ืึธืจืืึทื ืืืึทืฆืืข ืคืื โโืคืึทืจืงืขืจ ืคึผืจืืืึธืจืึทืืื ืืืจื ืคึผืจืึธืืึธืงืึธืืก, ืคึผืึธืจืฅ, ืืื ืืช ืืื ืื ืืขืจืข ืกืคึผืขืฆืืคืืฉ ืืึทืืื ืื ืืก ืืืึธืก ืืขืจ ืงืื ื ื ืืฆื. (VOIP, ืืื ืืช ืืื ืืืืืืืง ืืึทืืื ืื ืืก)
- ืึธืจืืึทื ืืืึทืฆืืข ืคืื โโืืึธื ืืืึธืจืื ื ืืื ืืึธืืื ื ืคืื ืจืึทืืืขืจ ืืขืฉืขืขื ืืฉื ืคึฟืึทืจ ืื ืขื ืืคืขืจ ืคืื ืืขืื ืืฉ ืฉืืืฆื ืฉืืขืงื.
ืืื ืืืจ ืคึฟืึทืจืฉืืืื, ืืื ืขืืืขืืข ืงืึทืกืขืก, ืื TOR ืืื ืงืึทืืคึผืืืื ืคึฟืื ืื ืจืขืงืืืืจืขืืขื ืฅ. ืืื ืืื ืคืืจืืืืืจื ืื ืคืืจืืื ืืขื ืืืืื, ื ืื'ื ืืขืจื ืื ืืืืคื ืคืจืืืืขืืขื. ืขืจ ืืื ืึทืืืืืึทื ืื ืืขืืืขืืงืืื ืึทื ืขืืขืฆืขืจ ืึทื ืืขืจืฉ ืงืขื ื ืขืืขื ืื ืืืคึผืืึทืืขื ืืืืฉืึทื ืคืื ืื ืคืื ืงืื.
ืืืึธืก ืืืฉืืจืื ืืืขื ืืืื ืืขื ืืฆื ืฆื ืืงืืื ืื ืจืขืงืืืืจืขืืขื ืฅ:
- ELK ืกืืึทืง (ื ืึธื ืขืืืขืืข ืืึธื, ืขืก ืืื ืืขืืืขื ืคืืจืฉืืื ืขื ืึทื ืคืืืขื ืื ืืืึธืื ืืืื ืืขืืืืื ื ืึทื ืฉืืึธื ืคืื ืืึธืืกืืึทืฉ).
- ืึทื ืกืืืืข. ืคึฟืึทืจ ืื ืคืื ืึทืืืื ืืกืืจืึทืฆืืข ืืื ืืึทื ืืืืืื ื ืคืื ืึทืงืกืขืก, ืืืจ ืืืขืื ื ืืฆื AWX.
- GITLAB. ืขืก ืืื ื ืื ืืึทืจืคึฟื ืฆื ืืขืจืงืืขืจื ืืึธ. ืืื ืึธื ืืืขืจืกืืข ืงืึธื ืืจืึธื ืคืื ืืื ืืืขืจ ืงืึธื ืคืืืก.
- PowerShell. ืขืก ืืืขื ืืืื ืึท ืคึผืฉืื ืฉืจืืคื ืคึฟืึทืจ ืืขืจ ืขืจืฉื ืืืจ ืคืื ืื ืงืึทื ืคืืืืขืจืืืฉืึทื.
- ืืึธืงื ืืืืงื, ืคึฟืึทืจ ืฉืจืืืื ืืึทืงืืืืขื ืืืืฉืึทื ืืื ืืึทื ืืืึทืื. ืืื ืืขื ืคืึทื, ืืืจ ื ืืฆื habr.com.
- ืืึธื ืืืึธืจืื ื ืืืขื ืืืื ืืืจืืืขืงืึธืื ืืืจื Zabbix. ืขืก ืืืขื ืืืื ืืืื ืึท ืงืฉืจ ืืืึทืืจืึทืืข ืคึฟืึทืจ ืึท ืืขื ืขืจืึทื ืคืืจืฉืืื ื.
EFK ืกืขืืึทืคึผ ืคืื ืงืื
ืืืืฃ ืืขื ืขืจืฉืื ืคึผืื ืงื ืืืขื ืืื ืืึทืฉืจืืืื ืืืืื ืื ืืืืขืึธืืึธืืืข ืืืืฃ ืืืขืืืขืจ ืื ืืื ืืขืงืกืขืก ืืืขืื ืืขืืืื ืืืขืจื. ืขืก ืืื ืื ืืกืื
ืืืกืืขืฆืืืื ื ืึทืจืืืงืืขื ืืืืฃ ืืึทืฉืืขืืืงื ืืื ืจืืกืืืืื ื ืืึธืืก ืคืื ืืขืืืืกืขืก ืืื ืืืงืจืึธืืืง.
ืืื ืืืขื ืฉืืืื ืืืืฃ ืขืืืขืืข ื ืงืืืืช:
1. ืืืื ืื ืกืืขืืข, ืขืก ืืื ืืืขืจื ืงืึทื ืกืืืขืจืื ื ืจืืกืืืืื ื ืืึธืืก ืคืื ืคืึทืจืฉืืืขื ืข ืขืจืืขืจ ืืื ืืืืฃ ืคืึทืจืฉืืืขื ืข ืคึผืึธืจืฅ. ืฆื ืืึธื ืืึธืก, ืืืจ ืืืขืื ื ืืฆื ืึท ืงืืึธืฅ ืึทืืืจืขืืึทืืึธืจ. ืืืจ ืืืื ืืืืื ืฆื ืืึทืื ืื ืืืืขืจืกืึทื ืืจืึทืคืืงืก ืคึฟืึทืจ ืึทืืข ืจืึธืืืขืจืก ืืื ืื ืคืืืืงืืื ืฆื ืืืืื ืึทืงืกืขืก. ืืขืจื ืึธื ืืืจ ืืืืขื ืื ืื ืืขืงืกืื ืืื ืืืื:
ืืึธ ืืื ืึท ืฉืืืง ืคืื ืงืึทื ืคืืืืขืจืืืฉืึทื ืืื ืคืืืขื ืื elasticsearch
logstash_format ืืืช
index_name mikrotiklogs.north
logstash_prefix mikrotiklogs.north
ืคืืืฉ_ืื ืืขืจืืืึทื 10 ืก
ืืื ืืช
ืคึผืึธืจื ืงืกื ืืืงืก
ืืืื, ืืืจ ืงืขื ืขื ืคืึทืจืืื ืื ืจืึธืืืขืจืก ืืื ืึธืคึผืฉื ืื ืืืื ืืขื ืคึผืืึทื - mikrotiklogs.west, mikrotiklogs.south, mikrotiklogs.east. ืคืืจืืืืก ืืึทืื ืขืก ืึทืืื ืฉืืืขืจ? ืืืจ ืคึฟืึทืจืฉืืืื ืึทื ืืืจ ืืืขืื ืืึธืื 200 ืึธืืขืจ ืืขืจ ืืขืืืืกืขืก. ืคืืื ื ืืฉื ืืืขืก. ืืื ื ืืืขืจืกืืข 6.8 ืคืื elasticsearch, ืืืืขืจืืืื ืกืขืืืื ืืก ืืขื ืขื ืืืจืขืืืืื ืคึฟืึทืจ ืืื ืื (ืึธื ืืืืื ื ืึท ืืขืจืืืืืขื ืืฉ), ืึทืืื ืืืจ ืงืขื ืขื ืคืึทืจืฉืคึผืจืืืื ืืืืืื ื ืจืขืื ืฆืืืืฉื ืืขืื ืืฉ ืฉืืืฆื ืขืืคึผืืืืื ืึธืืขืจ ืืืืข ืกืืกืืขื ืึทืืืื ืืกืืจืึทืืึธืจืก.
ืืืฉื, ืืจืึทืคืก - ืืึธ ืืืจ ื ืึธืจ ืืึทืจืคึฟื ืฆื ืฉืืืืขื - ืึธืืขืจ ื ืืฆื ืื ืืขืืืข ืึธื ืขืก, ืึธืืขืจ ืึทืืขืืขื ืืื ืขืก ืืื ืขืก ืืืขื ืืืื ืืึทืงืืืขื ืคึฟืึทืจ ืืื.
2. ืืืจื ืืึธืืื ื. ืืืื ืืืจ ืืขืื ืงืืึธืฅ ืืื ืื ืคืืืจืืืึทื ืึผืืืื, ืืืจ ืืึทืื ืื ื ืขืืขื ืึธื ืกืคึผืืืกืึทื. ืขืก ืงืขื ืขื ืืืื ืืขืืขื ืึทื ื ืืฆื ืึท ืคึผืฉืื ืงืึทื ืคืืืืขืจืืืฉืึทื ืืื ืืืึทื, ืืืจ ืงืขื ืขื ืคืืืืขืจ ืื ืืึทืื ืืื ืืึทืื ืืึทืงืืืขื ืคึผืึทื ืึทืื. ืื ืืืื ืืื ืื ืืื ืืืื ืืืื ืจืึทืืืขืจ.
3. ืืืื ืฆื ืื ืคืึทืจื ืืืขื ืคึผืืึทืฅ ืืื ืืึธืืก. ืืื ืืืจืืฉื ืืืืขื, ืืื 1000 ืึทืจืืืงืืขื ืคึผืขืจ ืฉืขื, ืื ืืึธืืก ื ืขืืขื ืึทืจืืืฃ ืฆื 2-3 ืืขืืืืืืื ืคึผืขืจ ืืึธื, ืืืึธืก, ืืืจ ืืขื, ืืื ื ืืฉื ืึทืืื ืคืื. elasticsearch ืืืขืจืกืืข 7.5.
ANSIBLE.AWX
ืฆืื ืืืืง ืคึฟืึทืจ ืืื ืื, ืืืจ ืืึธืื ืึท ืคืึทืจืืืง ืืึธืืืืข ืคึฟืึทืจ ืจืึธืืืขืจืึธืื
ืืื ืืึธื ืึธื ืืขืืืืื ืืืขืื AWX, ืึธืืขืจ ืื ืงืึทืืึทื ืื ืืื ืื ืืขื ืขื ืืืืื ืืืขืื ืึทื ืกืืืืข ืืื ืืืื ืคึผืืืจืึทืกื ืคืึธืจืขื - ืืื ืืจืึทืืื ืคึฟืึทืจ ืื ืืืืก ืืึธืื ืืขืืจืืขื ืืื ืึทื ืกืืืืข, ืขืก ืืืขื ืืืื ืงืืื ืคืจืืืืขืืขื ืืื ืึทืืืงืก ืืืจื ืื ืืื.
ืฆื ืืืื ืขืจืืขื, ืคืจืืขืจ ืืื ืืขืงืืงื ืืื ืื ืืขืจืข ืคืืจืขืจ ืืื ืืื ืืขืืืืื ื ssh, ืืื ืึทืืขืืขื ืืื ืคืึทืจืฉืืืขื ืข ืคืจืืืืขืืขื ืืื ืขื ืืคืขืจ ืฆืืื ืืื ืึท ืคึผืืึทืฅ ืคืื ืื ืืขืจืข ืคืจืืืืขืืขื. ืืื ืืืืขืจืืืจื, ืขืก ืืื ื ืืฉื ืืึทืงืืืขื ืฆื ืื ืฉืืึทืื ๏, ื ืขืืขื ืืขื ืืื ืคึฟืึธืจืืึทืฆืืข ืืื ืึทื ืขืงืกืคึผืขืจืืืขื ื ืืืึธืก ืืื ื ืืฉื ืืืื ืืืืึทืืขืจ ืคืื ืึท ืฉืืืื ืคืื 20 ืจืึธืืืขืจืก.
ืืืจ ืืึทืจืคึฟื ืฆื ื ืืฆื ืึท ืืึทืืืืึทืื ืึธืืขืจ ืึท ืืฉืืื. ืขืก ืืื ืึทืจืืืฃ ืฆื ืืืจ ืฆื ืืึทืฉืืืกื, ืืื ืืื ืคึฟืึทืจ ืกืขืจืืืคืืงืึทืฅ. ืขืืืขืืข ืกืึทืืึทื ืคืื ื ืืืืฃ ืจืขืื. ืืื ืืขืื ืื ืจืขืื ืฆื ืฉืจืืึทืื - ืืื ืืื ืืกืืขืจ "ืืึทืฉืืขืืืง ืงืึทื ืคืืืืขืจืืืฉืึทื" ืืืขื ื ืืฉื ืึทืจืืขืื.
ืขืก ืืึธื ืืืื ืงืืื ืคืจืืืืขืืขื ืืื ืืืฉืขื ืขืจืืืืื ื, ืงืึทืคึผืืื ื ืื ืืึทืืืืึทืื ืืื ืืืคึผืึธืจืืื ื:
ืงืืจืฅ ืจืฉืืื ืคืื ืงืึทืืึทื ืืืืืืฃ ืืืื ืคึผืืกื
ssh-keygen -t RSA, ืขื ืืคึฟืขืจื ืฉืืืืช, ืจืึทืืขืืืขื ืื ืฉืืืกื.
ืงืึธืคึผื ืฆื ืืืงืจืึธืืืง:
ืืึทื ืืฆืขืจ ssh-keys ืึทืจืืึทื ืคืืจ ืฆืืืืจ-key-file=id_mtx.pub ืืึทื ืืฆืขืจ=ืึทื ืกืืืืข
ืขืจืฉืืขืจ ืืืจ ืืึทืจืคึฟื ืฆื ืฉืึทืคึฟื ืึท ืืฉืืื ืืื ืึทืืึทืงืืื ืจืขืื ืฆื ืืื.
ืงืึธื ืืจืึธืืืจืื ื ืื ืงืฉืจ ืืื ืื ืืึทืืืืึทืื
ssh -p 49475 -i /keys/mtx [ืืืืขืื ืืืฉืืฆื]
ืฉืจืืื ืืื /etc/ansible/hosts
MT01 ansible_network_os=routeros ansible_ssh_port=49475 ansible_ssh_user= ansible
MT02 ansible_network_os=routeros ansible_ssh_port=49475 ansible_ssh_user= ansible
MT03 ansible_network_os=routeros ansible_ssh_port=49475 ansible_ssh_user= ansible
MT04 ansible_network_os=routeros ansible_ssh_port=49475 ansible_ssh_user= ansible
ื ื, ืึท ืืืึทืฉืคึผืื ืคืื ืึท ืคึผืืืึทืืึธืึธืง: ื ืึธืืขื: add_work_sites
ืืื ืืช: ืืขืกืืื
ืกืืจืืึทื: 1
ืงืฉืจ: ื ืขืฅ_ืงืื
remote_user: mikrotik.west
collect_facts: ืืึธ
ืืึทืกืงืก:
ื ืึธืืขื: ืืืืื ืืืึธืจืง_ืกืืืขืก
routeros_command:
ืงืึทืืึทื ืื:
- / ืืคึผ ืคืืืจืืืึทื ืึทืืจืขืก-ืืืกื ืืืืื ืึทืืจืขืก = gov.ru ืจืฉืืื = ืึทืจืืขื_ืกืืืขืก ืืึทืืขืจืงืื ื = ืืืงืขื665436_ืึธืืฉืขื_ื ืึทืืึธ
- / ืืคึผ ืคืืืจืืืึทื ืึทืืจืขืก-ืจืฉืืื ืืืืื ืึทืืจืขืก = habr.com ืจืฉืืื = ืึทืจืืขื_ืกืืืขืก ืืึทืืขืจืงืื ื = ืคึฟืึทืจ_ืืึทืืจ
ืืื ืืืจ ืงืขื ืขื ืืขื ืคึฟืื ืื ืืืืื ืงืึทื ืคืืืืขืจืืืฉืึทื, ืงืึทืืคึผืืืืื ื ืืืื ืืืืืขื ืข ืคึผืืืึทืืึธืึธืงืก ืืื ืึท ืคึผืฉืื ืขื ืื. ืขืก ืืื ืืื ืืขื ืื ืฆื ืืขื ืงืืืงืืง ืืืงืจืึธืืืง. ืืืึทืืืฉืึทื ืึท ืกืืืืึทืฆืืข ืืื ืืืจ ืืึทืจืคึฟื ืฆื ืืึทืืืึทืืืงื ืื ืึทืืจืขืก ืจืฉืืื ืืื ืืืืขืจ ืืึทืื ืืืืฃ ืึทืืข ืจืึธืืืขืจืก, ืืขืืึธืื:
ืืขืคึฟืื ืขื ืืื ืึทืจืึธืคึผื ืขืืขื/ ืืคึผ ืคืืืจืืืึทื ืึทืืจืขืก-ืจืฉืืื ืึทืจืึธืคึผื ืขืืขื [ืืขืคึฟืื ืขื ืืื ืจืฉืืื = "gov.ru"]
ืืื ืืืืืืจืึทื ื ืืฉื ืึทืจืืึทื ืืขืจืขืื ื ืื ืืื ืฆืข ืคืืืจืืืึทื ืืืกืืื ื ืืึธ. ืขืก ืืืขื ืืืื ืืืื ืคึฟืึทืจ ืืขืืขืจ ืคึผืจืืืขืงื. ืืืขืจ ืืื ืงืขื ืืึธืื ืืืื ืืึทื ืคึฟืึทืจ ืืืืขืจ, ื ืืฆื ืืืืื ืื ืึทืืจืขืก ืจืฉืืื.
ืืืื GITLAB, ืึทืืฅ ืืื ืงืืึธืจ. ืืืืฃ ืืขื ืืึธืืขื ื ืืืขื ืืื ื ืืฉื ืึธืคึผืืึทืืื. ืึทืืฅ ืืื ืฉืืื ืืื ืืขืจืืื ืขื ืคืื ืืืื ืืึทืกืงืก, ืืขืืคึผืืึทืืขืก, ืืึทื ืืืขืจืก.
ืคึผืึธืืืขืจืฉืขืื
ืขืก ืืืขื ืืืื 3 ืืขืงืขืก. ืคืืจืืืืก ืืึทืืืฉืขื? ืื ืืขืฆืืึทื ืคึฟืึทืจ ืืืฉืขื ืขืจืืืืื ื ืงืึธื ืคืืืก ืงืขื ืขื ืืืื ืืืืกืืขืจืืืืืื ืืืจื ืืืขืจ ืขืก ืื ืืืึธืก ืืื ืืขืจ ืืึทืงืืืขื. ืืื ืืขื ืคืึทื, ืึทืืขืืขื ืืื Windows ืืืืฃ ืืืืขืจ ืคึผืืกื, ืึทืืื ืืืึธืก ืืึธื ืืึธืก ืืืืฃ ืืึทืฉ ืืืขื Powershell ืืื ืืขืจ ืืึทืงืืืขื. ืืืขืจ ืืื ืืขืจ ืืึทืงืืืขื.
ืืขืจ ืฉืจืืคื ืืื (ืคึผืฉืื ืืื ืคืึทืจืฉืืืืืง):[cmdletBinding()] ืคึผืึทืจืึทื(
[ืคึผืึทืจืึทืืขืืขืจ (ืืึทื ืืึทืืึธืจื = $ ืืืช)] [ืฉืืจืืงื] $ ืขืงืกืืขืจื ืึทืืืคึผืึทืืจืขืกืก,
[ืคึผืึทืจืึทืืขืืขืจ (ืืึทื ืืึทืืึธืจื = $ ืืืช)] [ืฉืืจืืงื] $ ืขืงืกืืขืจื ืึทืืืคึผืจืึธืืืข,
[ืคึผืึทืจืึทืืขืืขืจ(ืืึทื ืืึทืืึธืจื = $ ืืืช)] [ืฉืืจืืงื] $BWorknets,
[ืคึผืึทืจืึทืืขืืขืจ (ืืึทื ืืึทืืึธืจื = $ ืืืช)] [ืฉืืจืืงื] $ CWorknets,
[ืคึผืึทืจืึทืืขืืขืจ (ืืึทื ืืึทืืึธืจื = $ ืืืช)] [ืฉืืจืืงื] $ BVoipNets,
[ืคึผืึทืจืึทืืขืืขืจ (ืืึทื ืืึทืืึธืจื = $ ืืืช)] [ืฉืืจืืงื] $CVoipNets,
[ืคึผืึทืจืึทืืขืืขืจ(ืืึทื ืืึทืืึธืจื = $ ืืืช)] [ืฉืืจืืงื] $CClientss,
[ืคึผืึทืจืึทืืขืืขืจ (ืืึทื ืืึทืืึธืจื = $ ืืืช)] [ืฉืืจืืงื] $BVPNWORKs,
[ืคึผืึทืจืึทืืขืืขืจ (ืืึทื ืืึทืืึธืจื = $ ืืืช)] [ืฉืืจืืงื] $CVPNWORKs,
[ืคึผืึทืจืึทืืขืืขืจ (ืืึทื ืืึทืืึธืจื = $ ืืืช)] [ืฉืืจืืงื] $ BVPNCLIENTSs,
[ืคึผืึทืจืึทืืขืืขืจ (ืืึทื ืืึทืืึธืจื = $ ืืืช)] [ืฉืืจืืงื] $ cVPNCLIENTSs,
[ืคึผืึทืจืึทืืขืืขืจ(ืืึทื ืืึทืืึธืจื=$ืืจืืข)] [ืฉืืจืืงื]$NAMEROUTER,
[ืคึผืึทืจืึทืืขืืขืจ (ืืึทื ืืึทืืึธืจื = $ ืืืช)] [ืฉืืจืืงื] $ ืกืขืจืืืขืจืกืขืจืืืคืืงืึทืืขืก,
[ืคึผืึทืจืึทืืขืืขืจ (ืืึทื ืืึทืืึธืจื = $ ืืืช)] [ืฉืืจืืงื] $ ืื ืคืืืข,
[ืคึผืึทืจืึทืืขืืขืจ (ืืึทื ืืึทืืึธืจื = $ ืืืช)] [ืฉืืจืืงื] $ ืึธืื ืืขืงืข
)
ืืึทืงืืืขื-ืืื ืืึทืื $ืื ืคืืืข | ืคืึธืจืขืึทืืฉ-ืึธืืืืฉืขืงื {$_.ืจืขืคึผืืึทืกืข ("ืขืงืกืืขืจื ืืคึผ", $ ืขืงืกืืขืจื ืึทืืืคึผืึทืืจืขืกืก)} |
ืคืึธืจืขืึทืืฉ-ืึธืืืืฉืขืงื {$_.Replace("ืขืงืกืืจืืืข", $ืขืงืกืืขืจื ืึทืืืคึผืจืึธืืืข)} |
ืคืึธืจืขืึทืืฉ-ืึธืืืืฉืขืงื {$_.Replace("BWorknet", $BWorknets)} |
ืคืึธืจืขืึทืืฉ-ืึธืืืืฉืขืงื {$_.Replace("CWorknet", $CWorknets)} |
ืคืึธืจืขืึทืืฉ-ืึธืืืืฉืขืงื {$_.Replace("BVoipNet", $BVoipNets)} |
ืคืึธืจืขืึทืืฉ-ืึธืืืืฉืขืงื {$_.Replace("CVoipNet", $CVoipNets)} |
ืคืึธืจืขืึทืืฉ-ืึธืืืืฉืขืงื {$_.Replace("CClients", $CClientss)} |
ืคืึธืจืขืึทืืฉ-ืึธืืืืฉืขืงื {$_.Replace("BVPNWORK", $BVPNWORKs)} |
ืคืึธืจืขืึทืืฉ-ืึธืืืืฉืขืงื {$_.Replace("CVPNWORK", $CVPNWORKs)} |
ืคืึธืจืขืึทืืฉ-ืึธืืืืฉืขืงื {$_.Replace("BVPNCLIENTS", $BVPNCLIENTSs)} |
ืคืึธืจืขืึทืืฉ-ืึธืืืืฉืขืงื {$_.Replace("CVPNCLIENTS", $cVPNCLIENTSs)} |
ืคืึธืจืขืึทืืฉ-ืึธืืืืฉืขืงื {$_.ืจืขืคึผืืึทืกืข("ืืืื ืึทืืขืจืึธืืืขืจ", $ื ืึทืืขืจืึธืืืขืจ)} |
ืคืึธืจืขืึทืืฉ-ืึธืืืืฉืขืงื {$_.Replace("ServerCertificate", $ServerCertificates)} | ืฉืืขืื-ืืื ืืึทืื $ ืึธืืืคืืืข
ืืื ืืขื ืืื, ืืื ืงืขื ื ืืฉื ืืืืกืืืืื ืืืข ืืืืื. ืขืก ืืืขื ื ืืฉื ืืืื ืฉืืื. ืืืจ ืงืขื ืขื ืืึทืื ืื ืึผืืืื ืืื, ืืืืืื ืืืจื ืื ืืขืกืืขืจ ืคึผืจืึทืงืืืกืื.
ืคึฟืึทืจ ืืืึทืฉืคึผืื, ืืึธ ืืื ืึท ืจืฉืืื ืคืื ืืื ืงืก ืืืึธืก ืืื ืืื ืืขืืืขื ืืืืืื ืืืจื:
ืืืขืจืืึทืืึทื ืงืึทื ืืืขื ืฉืึทื ื:ืื ืคืืืืขื ืืข ื ืขืืืืึธืจืงืก ืืขื ืขื ืืขื ืืืขื ืืื ืึท ืืืึทืฉืคึผืื:
192.168.0.0/24 ืืจืืขืื ื ืขืฅ
172.22.4.0/24 ืืืึธืืคึผ ื ืขืฅ
10.0.0.0/24 ื ืขืฅ ืคึฟืึทืจ ืงืืืืึทื ืฅ ืึธื ืืึทื ืึทืงืกืขืก
192.168.255.0/24 ืืืคึผื ื ืขืฅ ืคึฟืึทืจ ืืจืืืก ืฆืืืืืื
172.19.255.0/24 ืืืคึผื ื ืขืฅ ืคึฟืึทืจ ืงืืืื
ืื ื ืขืฅ ืึทืืจืขืก ืืืฉืืืื ืคืื 4 ืืขืฆืืืึทื ื ืืืขืจื, ืจืืกืคึผืขืงืืืืืื ABCD, ืืขืจ ืคืึทืจืืืึทื ืึทืจืืขื ืืืื ืืขืจ ืืขืืืืงืขืจ ืคึผืจืื ืฆืืคึผ, ืืืื ืขืก ืคืจืขืื ื ืืื ืกืืึทืจืืึทืคึผ, ืืืจ ืืึทืจืคึฟื ืฆื ืึทืจืืึทื ืื ื ืืืขืจ 192.168.0.0 ืคึฟืึทืจ ืื ื ืขืฅ 24/0, ืืื ืคึฟืึทืจ C = 0 .
$ EXTERNALIPADDRESS - ืึทืืึทืงืืืืื ืึทืืจืขืก ืคืื ืืขืจ ืฉืคึผืืึทืืขืจ.
$ EXTERNALIPROUTE - ืคืขืืืงืืึทื ืืึทืจืฉืจืื ืฆื ื ืขืฅ 0.0.0.0/0
$BWorknets - ืืจืืขืื ื ืขืฅ, ืืื ืืื ืืืขืจ ืืืึทืฉืคึผืื ืขืก ืืืขื ืืืื 168
$CWorknets - ืึทืจืืขื ื ืขืฅ, ืืื ืืื ืืืขืจ ืืืึทืฉืคึผืื ืขืก ืืืขื ืืืื 0
$BVoipNets - ืืืึธืืคึผ ื ืขืฅ ืืื ืืื ืืืขืจ ืืืึทืฉืคึผืื ืืึธ 22
$CVoipNets - ืืืึธืืคึผ ื ืขืฅ ืืื ืืื ืืืขืจ ืืืึทืฉืคึผืื ืืึธ 4
$CClientss - ื ืขืฅ ืคึฟืึทืจ ืงืืืืึทื ืฅ - ืึทืงืกืขืก ืืืืื ืฆื ืื ืืื ืืขืจื ืขื, ืืื ืืื ืืืขืจ ืคืึทื ืืึธ 0
$BVPNWORKs - ืืืคึผื ื ืขืฅ ืคึฟืึทืจ ืืจืืืก ืฆืืืืืื, ืืื ืืื ืืืขืจ ืืืึทืฉืคึผืื 20
$CVPNWORKs - ืืืคึผื ื ืขืฅ ืคึฟืึทืจ ืืจืืืก ืฆืืืืืื, ืืื ืืื ืืืขืจ ืืืึทืฉืคึผืื 255
$BVPNCLIENTS - ืืืคึผื ื ืขืฅ ืคึฟืึทืจ ืงืืืื ืฆืืืืืื, ืืืื 19
$CVPNCLIENTS - ืืืคึผื ื ืขืฅ ืคึฟืึทืจ ืงืืืื ืฆืืืืืื, ืืืื 255
$NAMEROUTER - ืจืึธืืืขืจ ื ืึธืืขื
$ServerCertificate - ืืขืจ ื ืึธืืขื ืคืื ืื ืืึทืืืืึทืื ืึทื ืืืจ ืืขื ืขื ืืืคึผืึธืจืืื ืขืจืฉืืขืจ
$ืื ืคืืืข - ืกืคึผืขืฆืืคืืฆืืจื ืืขื ืืจื ืฆื ืืขืจ ืืขืงืข ืคึฟืื ืืืึธืก ืืืจ ืืืขืื ืืืืขื ืขื ืื ืงืึธื ืคืื, ืืืฉื D:config.txt (ืืขืกืขืจ ืขื ืืืืฉ ืืจื ืึธื ืฆืืืืจื ืืื ืกืคึผืืืกืึทื)
$outfile - ืกืคึผืขืฆืืคืืฆืืจื ืืขื ืืจื ืืื ืฆื ืจืึทืืขืืืขื, ืคึฟืึทืจ ืืืึทืฉืคึผืื D:MT-test.txt
ืืื ืืืืืืจืึทืืื ืืขืืืื ืื ืึทืืจืขืกืขืก ืืื ืื ืืืืฉืคืืื ืคึฟืึทืจ ืงืืึธืจ ืืื ืืขืจ ืืึธื ืกืืืืช.
ืืื ืืืกื ืื ืคืื ื ืืืืฃ ืืืืขืงืืื ื ืื ืคืืื ืืื ืึทื ืึทืืึทืืึทืก ื ืึทืืืจ - ืืึธืก ืคืืจืืื ื ืึท ืืึทืืื ืืขืจ ืึทืจืืืงื. ืึธืืขืจ ืขืก ืืื ืืืื ืฆื ืืืืขืจืงื ืึทื ืืื ืืขื ืงืึทืืขืืึธืจืืข ืืืจ ืงืขื ืขื ื ืืฆื ืืึธื ืืืึธืจืื ื ืืึทืื ืืืึทืืืขืก ืคืื Zabbix + ืืืืกืืขืืจืืขื ืงืขืจื ืืึทืื ืคึฟืื Elasticsearch.
ืืืึธืก ืืืืืื ืฆื ืคืึธืงืืก ืืืืฃ:
- ื ืขืฅ ืคึผืืึทื. ืขืก ืืื ืืขืกืขืจ ืฆื ืฉืจืืึทืื ืขืก ืืื ืึท ืืืื ืขืืืืืง ืคืึธืจืขื. ืขืงืกืกืขื ืืื ืืขื ืื. ืฆืื ืืึทืืืืขืจื, ืืื ืืขื ืึธืคื ืึทื ื ืขืืืืึธืจืงืก ืืขื ืขื ืฆืื ืืืคืืขืฉืืขืื ืืืื ืืขื ืคึผืจืื ืฆืืคึผ "ืึท ื ืืึท ืฆืืืืึทื ืืื ืืจืืืก, ืืึธ ืก / 24 ืคึฟืึทืจ ืืืจ." ืงืืื ืืืื ืขืจ ืืขืคืื ื ืืื ืืื ืคืืืข ืืขืืืืกืขืก ืืขื ืขื ืืขืจืืืึทืจื ืืื ืึท ืืขืืขืื ืึธืจื ืืื ืฆื ืขืก ืืืขื ืืืื ืืืืึทืืขืจ ืืืึผืงืก. ืคึฟืึทืจ ืืืึทืฉืคึผืื, ืึท ืงืืืื ืงืจืึธื ืืื ืืขืขืคื ื, ืืื ืืืึธืก ืขืก ืืื ืืืืืขืก ืงืืึธืจ ืึทื ืื ืืืื ืืืขื ืืืื ื ืื ืืขืจ ืืื 10, ืืืึธืก ืึทืืึทืงืืื / 24? ืคึฟืึทืจ ืืจืืืก ืฆืืืืืื, ืืืืฃ ืื ืคืึทืจืงืขืจื, ืืื ืึทืืึทืงืืื / 24, ืืื ืขืก ืืขื ืขื 500 ืืขืืืืกืขืก - ืืืจ ืงืขื ืขื ื ืึธืจ ืืืืื ืึท ื ืขืฅ, ืึธืืขืจ ืืืจ ืืืืื ืฆื ืืจืึทืืื ืึทืืฅ ืจืขืื ืึทืืืขืง.
- ืคึฟืืืืจืืจืื ื ืึผืืืื. ืืืื ืื ืคึผืจืืืขืงื ืึทืกืืื ืึทื ืขืก ืืืขื ืืืื ืฆืขืฉืืืืื ื ืคืื ื ืขืืืืึธืจืงืก ืืื ืืึทืงืกืืืื ืกืขืืืึทื ืืืืฉืึทื. ืืขืกืืขืจ ืคึผืจืึทืงืืืกืื ืืืืฉื ืืืืขืจ ืฆืืึทื. ืืื ืึทืืขืจ, ืืื ืฉืขืจื ืึท ืคึผืืกื ื ืขืฅ ืืื ืึท ืืจืืงืขืจ ื ืขืฅ, ืืืฆื ืขืก ืืื ืืึทื ืฅ ื ืึธืจืืึทื ื ืืฉื ืฆื ืืืืื ืื ื ืขืืืืึธืจืงืก. ืขืก ืืื ืืืขืจื ืฆื ื ืืฆื ืกืืืื ืืื ื ืืฉื ืคึผืจืึธืืืฆืืจื ืคืืืข ืกืืื ืขืฅ ืืื ืืื ืืขื ืขื ื ืืฉื ืืืจืฃ ืืื ื ืืฉื ืงืึทืืืืื ืื ื ืึทืืข ืืขืืืืกืขืก ืืื ืืืื ื ืขืฅ.
- "ืืึธืืืขื" ืกืขืืืื ืืก ืืืืฃ ืึทืืข ืจืึธืืืขืจืก. ืืขื ืข. ืืืื ืืืจ ืืึธื ืึท ืคึผืืึทื. ืขืก ืืื ืืืขืจื ืฆื ืคืึธืจืืืกืืึธืื ืึทืืฅ ืจืขืื ืึทืืืขืง ืืื ืคึผืจืืืืจื ืฆื ืืึทืื ืืืืขืจ ืึทื ืึทืืข ืกืขืืืื ืืก ืืขื ืขื ืืืืขื ืืงืึทื - ืขืก ืืขื ืขื ืืืืื ืคืึทืจืฉืืืขื ืข ืึทืืจืขืก ืจืฉืืื ืืื IP ืึทืืจืขืกืขืก. ืืื ืคืึทื ืคืื ืคึผืจืึธืืืขืืก, ืื ืฆืืื ืคึฟืึทืจ ืืืืึทืืื ื ืืืขื ืืืื ืืืืื ืืงืขืจ.
- ืึธืจืืึทื ืึทืืืืฉืึทื ืึทื ืึทืกืคึผืขืงืฅ ืืขื ืขื ื ืื ืืืืื ืืงืขืจ ืืืืืืืง ืืื ืืขืื ืืฉ. ืึธืคื, ืคืืื ืขืืคึผืืืืื ื ืึธืืืืื ืื ืจืขืงืึทืืึทื ืืืืฉืึทื ื "ืืึทื ืืืึทืื", ืึธื ื ืืฆื ืคืึทืจืืืง ืงืึทื ืคืืืืขืจืืืฉืึทื ื ืืื ืกืงืจืืคึผืก, ืืืึธืก ืืขืกืึธืฃ ืคืืจื ืฆื ืคึผืจืึธืืืขืืก ืคึฟืื ืงืจืึทืฆื.
ืืืจื ืืื ืึทืืืฉ ืจืืืื ื. OSPF ืืื ืืึธืื ืื ื ืืื ืืขื ืืฆื. ืืืขืจ ืืึธืก ืืื ืึท ืคึผืจืึธืืข ืืึทื ืง, ืืื ืงืึทืืืึทื ืื ืึธืื ืึทืืึท ืืืื ืืขื ืขื ืืขืจ ืืฉืืงืึทืืืข ืฆื ืฉืืขืื ืึทืจืืืฃ.
ืืื ืืึธืคึฟื ืึทื ืงืืื ืืืื ืขืจ ืืื ืืืขืจืงืขืจื ืึทื ืืื ืืื ื ืืฉื ืคึผืึธืกืื ืื ืงืึทื ืคืืืืขืจืืืฉืึทื ืคืื ืื ืจืึธืืืขืจืก. ืืื ืืจืึทืืื ืึทื ืืื ืงืก ืืืขื ืืืื ืืขื ืื, ืืื ืขืก ืึทืืข ืืขืคึผืขื ืืก ืืืืฃ ืื ืืืืขืจืคืขื ืืฉื. ืืื ืืึธื ืืขืกืฅ, ืืขืจ ืืขืกืฅ ืืขื ืขื ืืืจืฃ.
ืืื ืืืื ืืฉื ืึทืืขืืขื ืฆื ืคืึทืจืฉืืืื ืืืืขืจ ืคึผืจืึทืืืฉืขืงืก ืืื ืื ื ืืึท ืืึธืจ. ืืื ืืขืจ ืฆืืืจืื ืืขืืขืื ืืืื ืืื ืืืจ !!!
ืืงืืจ: www.habr.com