《Router OS软路由》(Router OS)5.X[光盘镜像]
电驴资源
| 用户共享的电驴资源列表 | |
|---|---|
| [Router.OS软路由].mikrotik-5.1.iso | 20.50 MB |
| [Router.OS软路由].routeros-ALL-5.1.rar | 151.73 MB |
| [Router.OS软路由].mikrotik-5.2.iso | 20.51 MB |
| 192.74 MB | |
电驴资源简介
简介:

资源介绍:
MikroTik RouterOS是一种路由操作系统,并通过该软件将标准的PC电脑变成专业路由器,在软件RouterOS 软路由图的开发和应用上不断的更新和发展,软件经历了多次更新和改进,使其功能在不断增强和完善。特别在无线、认证、策略路由、带宽控制和防火墙过滤等功能上有着非常突出的功能,其极高的性价比,受到许多网络人士的青睐。
routeros简介
RouterOS在具备现有路由系统的大部分功能,能针对网吧、企业、小型ISP接入商、社区等网络设备的接入,基于标准的x86构架的PC。一台586PC机就可以实现路由功能,提高硬件性能同样也能提高网络的访问速度和吞吐量。完全是一套低成本,高性能的路由器系统。
特色功能介绍
桥接功能
RouterOS能将多张网卡组建为一个桥模式,是路由器变成一个透明的桥设备,同样也实行三层交换的作用,MAC层的以太网桥、EoIP 、Prism、Atheros和RadioLAN 等都是支持的。所有802.11b和802.11a 客户端的无线网卡(如station模式的无线)受802.11 的限制无法支持桥模式,但可以通过EoIP协议的桥接方式实现。
为防止环路出现在网络中,可以使用生成树协议(STP) ,这个协议同样使冗余线路成为可能。
包括特征如下:
l 生成树协议(STP)
l 多桥接接口功能
l 该协议能选择转发或者丢弃
l 能实时监控MAC地址
l 桥防火墙
l 多线路支持
RouterOS基于策略的路由为网络管理者提供了比传统路由协议对报文的转发和存储更强的控制能力,路由器用从路由协议派生出来的路由表,根据目的地址进行报文的转发。
在负载均衡下也可以根据带宽的比例调整两条线路的流量。RouterOS提供了多种方式的路由功能,使其路由功能更强大,更灵活。RouterOS的路由功能主要为:
l 基于源地址的路由
l 基于目标地址的路由
l 基于端口的路由
l 基于定义用户类的路由
l 基于负载均衡的路由
l 基于端口的负载均衡
l 隧道协议
RouterOS支持多种隧道协议如PPP、PPPoE、PPTP、EoIP、IPIP以及IPsec,这些隧道协议可以为远程资源访问和企业间的连接提供很好的解决方案,如:
l 通过PPTP或IPIP实现通网络资源互用
l EoIP或PPTP的远程局域网解决方案
l 支持PPPoE服务器
l Hotspot热点认证服务
热点服务认证系统是一种web的认证方式,在此种认证方式中,用户可以通过自设IP地址或DHCP获得一个地址,打开浏览器,无论输入一个什么地址,都会被强制到一个认证界面,要求用户进行认证,认证通过后,就可以访问其他站点了。主要特征:
l 用户通过时间与流量认证计费
l Cookie (存储用户的账号和密码)
带宽控制功能
l 定额控制(连接超时时间, 下载/上传传输限制)
l 实时用户状态信息显示
l 自定义认证HTML页(可以由你自己设计认证页)
l DHCP服务器分配IP地址
l 简单的RAIUS客户端配置
l RouterOS 能与PPTP隧道、IPsec以及其它的一些功能配合使用。
l 可以通过Access Point与以太网接入用户。
l 定时广播指定的URL链接
l 脚本控制
RouterOS提供了可以编写的脚本功能,脚本的加入使RouterOS在处理很多网络方案、自动检查故障和动态生成策略等,都可以通过脚本很好的解决。使得在处理很多网络问题上更加的灵活和智能化。
具体功能:
TCP/IP协议组:
l Firewall和NAT–包状态过滤;P2P协议过滤;源和目标NAT;对源MAC、IP地址、端口、IP协议、协议(ICMP、TCP、MSS等)、接口、对内部的数据包和连接作标记、ToS 字节、内容过滤、顺序优先与数据频繁和时间控制、包长度控制...
l 路由 – 静态路由;多线路平衡路由;基于策略的路由(在防火墙中分类); RIP v1 / v2, OSPF v2, BGP v4
l 数据流控制 – 能对每个IP、协议、子网、端口、防火墙标记做流量控制;支持PCQ, RED, SFQ, FIFO对列; Peer-to-Peer协议限制
l HotSpot – HotSpot认证网关支持RADIUS验证和记录;用户可用即插即用访问网络;流量控制功能;具备防火墙功能;实时信息状态显示;自定义HTML登录页;支持iPass;支持SSL安全验证;支持广告功能。
l 点对点隧道协议 – 支持PPTP, PPPoE和L2TP访问控制和客户端; 支持PAP, CHAP, MSCHAPv1和MSCHAPv2 验证协议; 支持RADIUS验证和记录;MPPE加密;PPPoE压缩;数据流控制;具备防火墙功能;支持PPPoE按需拨号。
l 简单隧道 – IPIP隧道、EoIP隧道 (Ethernet over IP)
l IPsec – 支持IP安全加密AH和ESP协议;
l Proxy – 支持FTP和HTTP缓存服务器;支持HTTPS代理;支持透明代理 ; 支持SOCKS协议; DNS static entries; 支持独立的缓存驱动器;访问控制列表;支持父系代理。
l DHCP – DHCP服务器;DHCP接力;DHCP客户端; 多DHCP网络;静态和动态DHCP租约;支持RADIUS。
l VRRP – 高效率的VRRP协议(虚拟路由冗余协议)
l UPnP – 支持即插即用
l NTP – 网络对时协议服务器和客户端;同步GPS系统
l Monitoring/Accounting – IP传输日志记录;防火墙活动记录;静态HTTP图形资源管理。
l SNMP – 只读访问
l M3P – MikroTik分包协议,支持无线连接和以太网。
l MNDP – MikroTik邻近探测协议;同样支持思科的CDP。
l Tools - ping; traceroute; bandwidth test; ping flood; telnet; SSH; packet sniffer; DDNS。
二层链接
l Wireless - IEEE802.11a/b/g wireless client和访问节点(AP);Nsetreme和 Nstreme2 协议;无线分布系统(WDS);虚拟AP功能;40和104 bit WEP; WPA pre-shared key加密; 访问控制列表;RADIUS服务器验证;漫游功能(wireless客户端); 接入点桥接功能。
l Bridge – 支持生成树协议(STP);多桥接口;桥防火墙;MAC NAT功能。
l VLAN - IEEE802.1q Virtual LAN,支持以太网和无线连接;多VLAN支持;VLAN桥接。
l Synchronous - V.35, V.24, E1/T1, X.21, DS3 (T3)媒体类型; sync-PPP, Cisco HDLC, 帧中继协议; ANSI-617d (ANDI or annex D)和Q933a (CCITT or annex A) 帧中继LMI类型
l Asynchronous – 串型PPP dial-in / dial-out;PAP, CHAP, MSCHAPv1和MSCHAPv2 验证协议;RADIUS验证和记录;支持串口;modem池支持128个端口。
l ISDN - ISDN dial-in / dial-out; PAP, CHAP, MSCHAPv1和MSCHAPv2 验证协议;RADIUS验证和记录;Cisco HDLC, x75i, x75ui, x75bui 队列支持。
X86硬件要求
CPU和主板 – 核心频率在100MHz或更高的单核心X86处理器,以及与兼容的主板。
RAM – 最小32 MiB, 最大1 GB; 推荐64 MB或更高。
ROM – 标准ATA/IDE接口(SCSI和USB控制器不支持;RAID控制器驱动不支持; SATA不完全支持) 最小需要64 Mb空间; Flash和一些微型驱动器使用ATA接口能连接使用。
MIPS硬件要求
支持系统 - RouterBOARD 500 series (532, 512 and 511)
RAM – 最小 32 MB
ROM – 板载NAND驱动,最小64Mb
配置
RouterOS提供了强大的命令配置接口。你同样可以通过简易的Windows远程图形软件WinBox管理路由器。Web 配置提供了多数常用的功能上。 主要特征:
l 完全一至的用户接口
l 运行时配置和监控
l 支持多个连接访问
l 用户策略配置
l 活动历史记录,undo/redo操作
l 安全模式操作
l Scripts能事先安排执行时间和执行内容,脚本支持所有的命令操作。
l 路由器可用通过下面的接口进行管理
l 本地teminal console - PS/2或USB键盘和VGA显示卡进行控制
l Serial console – 任何 (默认为COM1) RS232异步串口,串口默认设置为9600bit/s, 8 data bits, 1 stop bit, no parity, hardware (RTS/CTS) flow control。
l Telnet – telnet服务默认运行在23TCP端口
l SSH - SSH (安全shell) 服务默认运行在22 TCP端口
l MAC Telnet - MikroTik MAC Telnet协议被默认启用在所以类以太网卡接口上。
l Winbox – Winbox是RouterOS的一个Windows远程图形管理软件,同样也可用通过MAC地址连接。
ROS高级企业宽带路由防火墙系统产品概述
routerOS高级路由器是针对我国企业宽带接入特点特别优化设计,具备满足良好的网络兼容性,整体性能优越,配置简单,提供多方面的管理功能,极具性价比。可全面满足政府、机关、企业、宽带社区、校园网对高性能、多功能、高可靠性、高安全性、高性价比的需求。
产品集宽带路由 (Router)、专业级防火墙、QoS带宽流量管理、多线路负载均衡、VPN、上网行为管理等多项功能于一身,支持功能模块扩展,是一个安装简单、稳定性高、易维护、投资低的一体化智能路由产品。
编辑本段
优良的性能
RouterOS高级路由器从底层系统核心、核心安全模块和硬件兼容性等各个层次进行了精心的的设计和优化,使得这款路由产品在性能上具有出众的优势。线速转发的高吞吐量可满足大型企业/网吧等机构的绝大部分应用,也可为运营商的以太网接入提供高负载的支持,高转发低时延为增加用户数量提供了强有力的保障。
支持双线负载均衡、策略路由
支持2个或以上WAN口接入,可以实现ADSL、光纤等方式的自由组合。具备实时备份功能,能实现多线路带宽负载均衡,可根据源或目的地址指定优先线路,还可依据出口带宽分配流量,使线路利用率达最高。内置电信和网通的最新路由表,多线路接入不同的运营商可以有效地解决由于单个线路接入引起的运营商互联互通问题。
VPN功能
系统支持PPTP_VPN和SSL_VPN两种方式接入。通过VPN使企业里的电脑工作在同一个安全的虚拟局域网内,为程序共用(如ERP)、数据安全共享、VOIP等功能提供高效的平台
QoS带宽管理控制
系统提供基于HTB (Hierarchical Token Bucket)算法的流量管理功能,可有效提高带宽利用率和限制P2P等海量下载软件的使用:对于正常上网的内网主机,系统将允许它偶然突破最大限速;相反,对于长期使用P2P等软件的内网主机,系统将会减小它的带宽,使其对其他主机的影响降到最低。支持根据IP地址、协议、端口等信息对数据流进行优先级设置,然后针对不同类别的数据流进行带宽控制。指定主机或服务预留带宽、限制最高带宽,也能实现平均分配带宽,并进行优先级管理,特别适合语音视频和数据混合的网络。
防火墙功能
系统提供强大的防护功能,支持内/外部攻击防范,提供扫描类、DoS类、可疑包和含有IP选项的包等攻击保护,能侦测及阻挡IP欺骗、源路由攻击、DoS等网络攻击,能有效的阻止端口扫描、防SYN flood , UDP flood , ICMP flood,Smurf/Fraggle攻击,分片报文攻击等,为网吧提供可靠的安全保障。提供MAC和IP地址绑定功能,可以有效防范ARP攻击,并且监视局域网内的ARP数据包,发现有攻击自动报警,并且在控制页面显示相关攻击信息,让网管能够立即查出有问题的机器。
支持端口映射
系统支持端口映射功能,可在内网架设WEB、Mail、FTP服务器对外网开放服务。
PPPOE服务器功能
PPPOE 拨号服务为用户提供另外一种局域网访问 Internet 的方式,这种方式如同 ADSL 宽带上网,每个工作站访问 Internet 是相对独立的,互不干扰,可以有效解决局域网 ARP 攻击等带来的问题。支持PPPOE与传统以太网混合接入。
支持上网行为管理
系统支持外网访问权限管理、上网时段管理;支持封杀局域网内的P2P软件(如BT、kugoo,电驴,迅雷)、IM聊天软件(如QQ、MSN、Skype等)的使用。支持基于内容和URL的过滤功能?
针对公司/企业的应用
:
1.上网时段控制
2.上网行为管理
3.应用协议特征过滤(限制程序的)
4.ssl vpn企业互联和pptp 拨入vpn支持
5.多网段隔离6.路由初步过滤常见网页病毒7.日志分析系统8.支持DSL,FTTX+LAN和Cable Modem连接,特别适合光纤接入;9.支持快速转发,吞吐量最高可达200M,最多210K PPS ;10.基于IP的内网主机上行和下载速率限制 ;11.支持DHCP(Server Client Relay)功能 ;12.基于地址,协议和端口的包过滤 ;13.基于站点、URL和关键字的应用层过滤 ;14.支持网络时间同步 ;15.支持UPnP ;16.支持IP/MAC绑定 ;17.支持DNS代理 ;18.支持动态DNS ;19.支持PPPOE服务器;20.静态路由,动态路由RIP I和RIP II ;21.支持SSL-VPN/PPTP-VPN.针对网吧的特有功能:1、多网络的支持,支持电信、网通、联通、铁通等多WAN口接入,实现自动切换,无需另加切换软件,实现电信的网站走电信,网通的网站走网通,真正实现南北互联互通;实现电信线路断开,自动切换到网通,网通线路断开自动走电信。2、多种网吧特需功有,如IP-MAC绑定,或是利用PPPOE-SERVER功能,解决ARP攻击问题;单IP限速,解决BT/QQ直播占用大量网络带宽,影响网速等问题。3、最精细的单IP限速,合理分配网络带宽,避免网络扔堵,拒绝掉线!针对小区,学校、酒店等作宽带二级运营的ISP商功能:1.PPPoE用户认证+Radius或者利用内置的User Manage 功能管理用户,多种灵活的计费模式。2.HotSpot热点认证或叫Web认证,强制弹出认证页,跨平台,不依赖第三方软件或者操作系统,非常先进。3.非常先进,功能完善的限速模式,支持用户限速管理,IP限速管理,等等。
Routeros路由器管理软件
Routeros软路由的强大功能与容易上手的主要原因之一来自于Routeros路由器管理软件----winbox。winbox将复杂的路由器命令融合到一个类似于客户端类的软件,使得用户在合用routeros软路由时感到非常得直观、易用。Winbox是一个可视化的路由器管理工作,目前版本也有中文版的,但大多数routeros管理者因为使用习惯的原因还是比较喜欢使英文版的Winbox。附上winbox管理软件的图片。

从官网BT下载得到,因为用了好多天才下载完,所以分享到这里,希望于大家有用。
官方下载来的是个文件夹,含有很多文件,所以将其中的ISO文件单独放在第一个资源,第二个资源为全部文件,直接压缩而成。
不含破解。
版本更新介绍:
What's new in 5.2 (2011-Apr-26 16:09):
*) fixed webfig;
*) console - fixed problem with supout file generation and export that
appeared in version 5.1, it was causing console to enter busy loop
on some boards;
*) ssh client - added source address and remote command options;
*) user manager - added /tool usermanager profile;
*) route - fixed problem with missing connected routes;
What's new in 5.1 (2011-Apr-08 12:55):
*) ipsec - fix SA lifetime display when timezone offset does not equal 0;
*) ipsec - now default DPD interval is 2 min for new configurations;
*) webfig - make bandwidth-test work;
*) fixed problem - wireless package got disabled after upgrading from v4;
*) sstp - fix problems on multicore systems;
What's new in 5.0 (2011-Mar-31 11:33):
*) route - fixed cause of crashes when handling multipath routes;
*) route - fixed limit on maximum active IPv6 route count,
was causing issues with more than 2000 active routes;
*) ipsec - added command kill-connections under remote-peers;
*) ipsec - fix responder side phase2 negotiation problem
which prevented more than one Windows7 host to initiate SA;
*) fixed vrrp - interface was invalid after undoing remove;
*) winbox - added more detailed /interface ethernet stats;
*) winbox - added ability to send e-mail;
*) winbox - added missing 'set-metric' parameter
in 'Routing/Prefix List';
*) wireless - 802.11 dynamic distance fix;
*) fixed problem - packages could not be uninstalled if disk was full;
*) fixed problem - some of the RouterBOARDS did not reboot properly sometimes;
*) fixed problem - VLANs on bridge interface did not work;
*) ssh - client supports public key authentication;
What's new in 5.0rc11 (2011-Mar-04 14:29):
*) led trigger - changed blinking for modem signal and interface monitoring;
*) ppp - added ability to specify data-channel for ppp server interfaces;
*) ipsec - added more Diffie-Hellman groups;
*) console - fixed a memory leak;
*) console - don't recreate default '/system console' entry for the serial
port if it is removed;
*) netinstall - fixed CD-ROM usb install;
*) wireless nv2 - fixed RB532 freeze;
*) wireless - fixed station-bridge mode;
*) wireless - added station-bridge support for 802.11 and nstreme;
*) gps - show higher precision coordinates;
*) snmp - added OIDs for kvm and metarouter;
*) usermanager - works again and to make user profile active after signup,
please recreate relevant user profiles;
What's new in 5.0rc10 (2011-Feb-17 14:06):
*) routing - fixed ipv6 connected routes,
IPv6 connected routes disappeared after interface restart;
*) routing - fixed high CPU usage when adding BGP ipv6 routes;
*) winbox - fixed opening terminal window to KVM instance;
*) winbox - fixed connect button in wireless scan;
*) winbox - fixed make-binding in hotspot hosts;
*) ipsec - fix possible crash when ipv6 is enabled;
*) snmp - add usb power reset (see updated MIB);
What's new in 5.0rc9 (2011-Feb-09 13:57):
*) wireless - fixed disconnect problem on long distance
802.11 40MHz links;
*) wireless nv2 - fixed station mode that broke when station-bridge
was introduced
*) wireless - more improvements for 11n compatibility;
*) routing - fixed problem with best route selection, sometimes inferior route
could get selected as the active, problem was introduced in 5.0rc8;
*) kvm - fix guest starting;
What's new in 5.0rc8 (2011-Feb-01 14:03):
*) added led trigger - change leds on different events;
*) snmp - restored access to routing tables;
*) snmp - fixed memory leak for OID 1.3.6.1.2.1.25.2;
*) ipsec - added ipv6 support;
*) removed broadcast setting from ip address;
*) radv - fixed problem when wrong link local address was used
to send advertisements on bridge interface;
*) ppp - make IPv6 work again (introduced in v5.0rc7);
*) ppp - fixed problem when user re-authenticated and traffic accounting
included data from previous session;
*) fixed traffic-flow on x86-smp (could stop sending flows);
*) improved usb modem mode switching;
*) kvm - fixed problem when sometimes virtualization detection fails;
*) routing - route with recursive gateway sometimes was not selected as
active, if another inferior route with directly reachable gateway
was present;
*) bgp - removed "interface" property from bgp peer configuration, now
ipv6 link local remote address must be specified using the
"address%interface" notation;
*) added extended ethernet statistics (/interface ethernet print stats) for RB800,RB1000,RB1100 and RB7xx with AR7241 or newer cpu;
*) wireless - improved 11n compatibility;
*) wireless nv2 - added support for station-bridge mode;
*) wireless nv2 - added area support;
*) wireless - added ability to set registration-table comment using RADIUS
attribute;
*) implemented usb power-reset command on RB SXT 5HnD;
What's new in 5.0rc7 (2010-Dec-29 10:39):
*) fixed hotspot;
*) tftp - fixed problem when nobody could
connect if no ip-address were provided;
*) winbox - fixed mac ping from neighbor list;
*) fixed simple queues on little endian cpus;
*) fixed simple queues without provided dst-address;
*) fixed problem - could not update license for
old style 7 digit software-id's;
*) fixed winbox - IPv6 route could not be added;
*) ssh - allow bigger packets (fixes some disconnecting problems);
*) added support for RDC R6040 Ethernet controller;
What's new in 5.0rc6 (2010-Dec-23 13:33):
*) ntp server now requires a broadcast address for broadcast mode to work
it should be specified under broadcast-addresses (X.X.X.255),
255.255.255.255 is not going to work;
*) ssh - fixed showing forwarding settings,
check your setting after upgrade!
*) allow to specify multiple networks (including IPv6)
in user's allowed-from list;
*) added support for Safe Mode to WinBox;
*) allow to specify non acceptable groups for RADIUS console logins;
*) handle correctly IPv6 address on bridged or switched interfaces;
*) added IPv6 connection list;
*) added IPV6 support to graphing;
*) added IPv6 support to SNTP client;
*) added IPv6 support to NTP client server;
*) added IPv6 support to RADIUS client;
*) added IPv6 support to snmp;
*) added IPv6 support to tftp server, also changed logging levels;
*) added IPv6 support to ssh client;
*) added IPv6 support to watchdog;
*) added IPv6 support for /tool e-mail;
*) added IPv6 support to log remote target;
*) added IPv6 support to API;
*) added IPv6 support to winbox;
*) added IPv6 support to ftpd;
*) added IPv6 support to netwatch;
*) added IPv6 support for /queue simple;
*) added IPv6 support for /tool bandwidth-test;
*) added IPv6 support for /tool torch;
*) added IPv6 support for /interface vrrp (version 3);
*) added IP/IPv6 over ipv6 tunnel interface (/interface ipipv6);
*) added Ethernet over IPv6 tunnel interface (/interface eoipv6);
*) snmp - added ipv6AddrTable from IPV6-MIB;
*) wireless nv2 - fixed station-wds mode multicast problem;
*) wireless nv2 - fixed occasional encrypted link stalls;
What's new in 5.0rc5 (2010-Dec-01 07:47):
*) logging - added email-starttls option for email target;
*) pcq - added burst settings, like in "/queue tree" and "/queue simple";
*) pcq - can specify address masks for pcq;
*) pcq - added ipv6 support;
*) wireless - fixed WPA;
*) radius - fixed encryption key decoding for wireless EAP PPPs;
*) winbox - make keyboard work right away after main window is activated;
*) snmp - fix BER encoding for negative INTEGER values;
What's new in 5.0rc4 (2010-Nov-22 16:58):
*) radius - fixed Disconnect and CoA response signature generation;
*) winbox - make double click work in text fields again;
*) winbox - allow to drag windows outside of main one to the left;
*) winbox - make some settings look more consistent;
*) winbox - allot to specify IPv6 address in routing filter prefix;
*) winbox - make possible to open IPv6 routes without crashing;
*) winbox - improved item reordering in long lists;
*) winbox - improved SNMP configuration support;
*) winbox - added support for KVM configuration;
*) winbox - added support for Traffic Engineering configuration;
*) ovpn - make ovpn client work with OpenVPN v2.1.3;
*) lcd - support Crystalfontz 631,633
also support for Crystalfontz lcd contrast setting is added;
*) console - fixed missing return value of the ping command when executed
from a scheduler entry;
*) console - 'ping' command with specified value of 'interface' always forced
"arp-ping=yes", fixed;
*) routing - fixed problem with 'check-gateway' status update that could get
triggered when multiple routes with different values of 'target-scope'
and 'check-gateway' referenced the same gateway IP address;
*) store - allow to use external disks;
*) modem firmware directory can be specified in /port firmware
Gobi users should change this setting or directory name;
*) ups - support USB UPS on RB4xx as well;
*) snmp - fix BER encoding for some INTEGER based values;
*) snmp - provide proxy stats using SQUID-MIB;
*) snmp - provide ups info using UPS-MIB;
*) snmp - provide external storage information;
*) wireless nv2 - add missing statistics fields;
*) wireless - add per-chain signal strength fields;
*) added hotspot html variable "host-ip";
*) fixed pcq queue type;
*) fixed leds on RB750;
*) added hotspot html variable "host-ip";
*) wireless nv2 - fixed station-wds mode multicast problem;
*) wireless nv2 - fixed occasional encrypted link stalls;
What's new in 5.0rc3 (2010-Oct-29 09:02):
*) lcd - support Crystalfontz 635
*) wireless nv2 - fix stalls on encrypted 11n links using high rates;
*) wireless nv2 - fix encryption related kernel crash;
*) sstp - fixed memory leak;
*) fixed problem - bad boot/kernel crc was reported on powerpc boards
when in fact it was good;
What's new in 5.0rc2 (2010-Oct-27 16:20):
*) wireless nv2 - encryption support;
*) tool fetch - support ftp STOR;
*) ospf - fixed crash when working with external LSA that contain
forwarding addess;
*) ipsec - supports NAT-T drafts;
*) ipsec - added debug logging, to maintain same log verbosity as before with
'ipsec' topic now use topics 'ipsec,debug,!packet';
*) ipsec - make it work with EoIP, GRE, PPTP and L2TP;
*) support for Atheros AR9271 wireless chip;
*) added support for more Intel 82575/82576 PCI-Express Gigabit Ethernet cards;
*) added support for idle detection on RB1xx/RB5xx in /tool profile;
*) fixed Wireless manual tx power configuration for 11n rates in WinBox;
*) fixed torch;
What's new in 5.0rc1 (2010-Sep-17 13:58):
*) wireless nv2 - add WDS support;
*) added ability to monitor cpu usage by task (/tool profile);
*) added support for RPS (Receive Packet Steering) on multicore systems;
*) added cisco compatible gre tunnels;
*) fix simple queues on multicore (fixes intel 82576 crash/reboot);
*) fixed sstp memory leak;
*) winbox - fixed ability to configure RB1100 switches;
*) ssh - fix possible crashing;
*) snmp - fix GET request processing;
*) ipsec - added ability to specify ID_USER_FQDN peer identity;
*) ipsec - encypt last IKE phase 1 packet when in aggresive mode as initiator;
*) wireless nv2 - added nv2-cell-radius parameter to specify distance
in km to farthest client on AP;
*) wireless nv2 - fix transmit stall issue for non-11n chips;
*) wireless - fix x86 nstreme multiprocessor hang;
*) made user manager web interface work again;
*) updated drivers and kernel (to linux-2.6.35);
What's new in 5.0beta6 (2010-Aug-10 13:22):
*) sstp - fixed memory leak;
*) wireless - changed band setting and added channel-width setting
*) wireless - support for 11n rates in 5 10mhz channels
*) wireless nv2 - fixed multiple problems including occasional tx stall;
*) made gps accessible through SNMP;
*) snmp - added GETBULK support, no more table caching - solves problems
with huge tables, routing tables currently are not available;
*) ssh - fixed public key authentication in case
when client is not verifying if server will accept the key;
*) fixed problem - MetaROUTER did not work on RB800, RB1000 RB1100;
*) user manager is not working - will be fixed in next version;
*) intel 82576 (uncommon expensive chip) crash/reboot to be fixed in
next release;
What's new in 5.0beta5 (2010-Jul-23 14:50):
*) email - supports multiple CCs
*) fix 5 10MHz channel support for 11n cards;
*) ssh - fix ssh client crash;
*) ssh - password authentication is disabled for users with public keys;
*) ping - fixed ping packet-loss calculation;
What's new in 5.0beta4 (2010-Jun-28 16:17):
*) console - /ping command again returns number of ping responses received,
didn't work in 5.0beta3;
*) added ability to monitor each cpu core usage;
*) added support for SATA,SCSI USB CD-ROMs in CD installer;
*) fixed problem - IRQ balancer did not use correct CPU core
on non auto MSI irqs after reboot;
*) fixed memory leak;
*) route - new property 'vrf-interface' (for static and dhcp routes),
automatically updates 'routing-mark' of the route to keep it in the same
VRF as the specified interface;
What's new in 5.0beta3 (2010-Jun-17 13:46):
*) hotspot - drop hotspot specific tcp connections from non-hotspot clients
already at firewall;
*) lcd - added support for AX89063
*) console - output of '/ping' and '/tool traceroute' commands is more
in line with the rest of the console commands;
*) api - '/ping' and '/tool traceroute' commands are fully functional;
*) console - added 'server' and 'server-port' arguments to '/resolve' command;
*) lcd - show free/total memory in units of million bytes (MB);
*) lcd - added page that shows system identity;
*) sstp - made it work with Windows 7;
*) sstp server - client reconnects did not work;
*) winbox - implemented proper maximize support for inner windows;
*) fix 5 10MHz channel support for 11n cards;
*) added IRQ balancer;
*) enabled PCI MSI on i386 multicore setups;
What's new in 5.0beta2 (2010-Apr-30 11:24):
*) added wireless distance setting, removed ack-timeout;
*) improved 802.11 operation for outdoor distances;
*) fixed sstp on x86;
*) console - removed 'delay' argument from '/system scheduler add' command;
*) console - remove 'comment=""' values from export;
*) console - updated '/system script job':
- also show active login sessions here;
- new read-only property 'type' with values "command", "login"
or "api-login" for running commands and either kind of login sessions;
- new optional read-only property 'parent' with id of the job that
has spawned this one;
*) console - changed "started" property of '/system script job' to use
local time;
*) console - new property 'type' in '/system script job'
*) console - added '/port remote-access export' command;
*) console - fixed bug that caused "cannot set ..." error when using
some properties in 'find' commands;
*) show old software id in export file header;
*) api - can supply password to '/system/upgrade/upgrade-package-source/add';
*) api - 'print' command was not showing values of some properties
such as 'servers' in "/ip/dns";
*) api - fixed api login sessions not dissapearing from '/user active' after
termination;
*) '/user active' now lists type of api connections as 'api';
*) added support for hardware watchdog on RB1000 RB800;
*) added support for ASIX AX88xxx based USB Ethernet Adapters on RB4xx;
*) fixed problem - ipv6 traffic was not bridged if ipv6 package was not enabled;
*) fixed getting interface stats in dude;
*) fixed metarouter stability problem on RB400s RB750s;
*) fixed metarouter - it didn't work on RB1000 with 2Gb;
*) fixed metarouter - it locked up on RB800;
*) fixed problem - SFQ queues did not work on interfaces (wireless) if none
of simple or tree queues were added;
*) fixed RB800 temperature;
*) fixed problem - WinBox crashed while opening VAP interface;
*) dhcp server - fixed possible inactive dhcp server in case of many
dhcp leases with address-pool enabled;
*) dhcp server - show non-printable option 82 agent-circuit-id and
agent-remote-id values in hexadecimal notation
(in the same way as client-id is shown);
What's new in 5.0beta1 (2010-Mar-31 09:17):
*) updated drivers and kernel (to linux-2.6.32.5);
*) ssh is now completely rewritten (supports connection forwarding, only DSA keys);
*) added support for SSTP protocol (PPP over TLS);
*) added support for multiple Intel Ethernet cards;
*) added support for IPv6 over PPP
(enabled by default if ipv6 package is installed),
link-local addresses are assigned, and server can issue IPv6 global prefixes
to clients per ppp secret or RADIUS reply (Framed-IPv6-Prefix);
*) added proper support for MPLS over PPP (by default it is now disabled);
*) fixed RB800 temperature;
*) silentboot feature updated;
*) WinBox - any file dropped on WinBox will be uploaded to router;
*) multicast - fixed possible crash during PIM startup;
*) report platform name in "/sysrem resource";
*) fixed problem - vlans were not working on RB750 ether1;
*) fixed mac address handling on RB750, some specific arp requests did not work;
*) more than two dns servers allowed in /ip dns;
*) sniffer and torch could process packet from other interfaces;
*) ospf - fixed DR and BDR election;
*) ospf - changed "/routing ospf route" to show type 2 metric instead of
internal metric for type 2 external routes;
*) added IPv6 support to trafflow (v9 only);
*) rewritten user-manager (formerly known as userman-test);
*) dns cache rotates order of records in reply messages
What's new in 4.6:
*) only accept dotted decimal notation for IP addresses. Use of numbers
with leading zero, numbers larger than 255 and non-decimal numbers
is not accepted (but still can omit third or second and third numbers,
if they are zero);
*) email - user must enable tls explicitly
*) remove limit on number of multicast enabled interfaces, maximum was 32;
*) dhcp server - show last-seen time for leases;
*) fixed - when closing winbox terminal window with active serial-terminal
console command, serial port sometimes was left in acquired state;
What's new in 4.5:
*) ipsec - added blowfish, twofish, and camellia encryption algorithms;
*) fixed static route removing;
*) fixed DHCP client compatibility with some DHCP servers;
*) added static multi-cast route support;
*) fixed temperature monitor on RB800 and RB450G;
*) user manager - payment bug fix - now able to buy
credits without extend price specified;
What's new in 4.4:
*) snmp - fixed snmp version three;
*) snmp - fixed vlan interface speed;
*) hotspot - fixed radius variables in hotspot html pages;
*) removed support for xen;
*) routing - added support for BFD protocol;
*) fixed problem - MetaROUTER sometimes froze on RB4xx;
*) fixed OSPFv3 on bridge interfaces;
What's new in 4.3:
*) kvm - vnc support, booting from cdrom image
*) API - fixed possible crash when running concurrent commands;
*) console - fixed logging commands: 'warning', 'error' and 'debug' were
all using 'info' topic;
*) bgp - added routing-table configuration option for instances;
*) bgp - added 'as-override' and 'passive' configuration options for peers;
*) bgp - added support for Site of Origin extended communities;
*) bgp - fixed some network issues;
*) ospf - fixed problem: when last neighbor on multi-access interface disappeared,
incorrect RouterLSA was generated on designated router;
*) metarouter - allow to specify metarouter's memory size when importing image;
*) firewall - added 'routing-table' matcher;
*) fixed problem - e1000 driver did not work in virtual machines;
What's new in 4.2:
*) fixed problem - RB450G ethernet did not work if one of the ports was disabled;
*) fixed ethernet of RB433 with switch chip IP175D;
*) fixed route attribute problem;
*) fixed route next-hops falling under multiple connected routes;
What's new in 4.1:
*) fixed problem - RB750 (clocked at 300MHz) Ethernet did not work;
*) fixed problem - routes on some interfaces (like VLAN) were not activated;
*) ppp, gps, sms, serial terminal - allow use of different channels
on same port across multiple programs simultaneous
*) dhcp server - added support for dynamic address-list entries;
*) hotspot - added support for dynamic address-list entries;
*) hotspot - fixed redirect after login in case if client gets new IP address
(problem introduced in 3.28);
What's new in 4.0:
*) IT87XX hardware monitoring sensor support;
*) kvm allows to choose emulated nic model;
*) hotspot - fixed redirect after login in case if client gets new IP address
(problem introduced in 3.28);
*) hotspot - fixed redirect after login in case if client gets new IP address;
*) console - commands like 'monitor', 'torch' and others that periodically
refresh information sometimes failed to work when started from
the scheduler;
*) console - scheduled scripts no longer require 'test' policy to run;
*) console - fix issues with scripts that contain lines with trailing spaces;
*) console - add back compatibility with old scripts that use space instead
of '=' to separate argument name and value;
*) console - following fixes:
- accept item numbers when prompted by command to specify item;
- argument names without '=' were matched even when expecting unnamed
value; this broke code such as:
:foreach i in=1,2,3 do {}
here 'i' was matched as argument name "in";
- 'tab' key did not automatically append '=' after complete argument
names;
What's new in 4.0rc1:
*) console - removed support for Lua (will be reintroduced later);
*) incorporated all the bug fixes since v3.30;
*) port remote-access - added 'log-file' property. If value is a non-empty
string, then all data that is read from the port is appended to a file
with that name, regardless of the active remote connection;
*) console - removed '/user' from the output of top level '/export' command,
still can be exported by '/user export';
What's new in 4.0beta4:
*) routing - changed BGP network and default-originate behavior;
*) web proxy - allow to edit error page;
*) console - terminal window size change now does not trigger full terminal
reset;
*) mesh protocol - improved loop prevention (becomes incompatible with earlier versions);
*) incorporated all the bug fixes since v3.27;
What's new in 4.0beta3:
*) added support for 802.11n atheros based wireless cards;
*) added ability to run other OSs in MetaROUTERs;
*) console: Lua scripting language. http://wiki.mikrotik.com/wiki/Lua
*) console: added nstreme-dual OIDs;
*) incorporated all the bug fixes since v3.23;
What's new in 4.0beta2:
*) console: added 'without-paging' argument to 'monitor' commands;
*) console: now 'without-paging' and 'interval' arguments in of 'print'
commands work together. Printing can be stopped by pressing 'q' or
ctrl-c, any other key triggers printing;
*) incorporated all the bug fixes since v3.22;
*) fixed TFTP server logging;
*) fixed problem - "/system upgrade" did not show proper package
architecture and was unable to fetch new packages;
What's new in 4.0beta1:
*) added support for MetaROUTERs;
*) all test packages are regular ones;
*) console - can mix named and unnamed arguments, can use names for unnamed
argument values. For example all of the following commands are
accepted now:
/ping 10.11.12.13 count=4
/ping address=10.11.12.13 count=4
/ping count=4 10.11.12.13
资源介绍:
MikroTik RouterOS是一种路由操作系统,并通过该软件将标准的PC电脑变成专业路由器,在软件RouterOS 软路由图的开发和应用上不断的更新和发展,软件经历了多次更新和改进,使其功能在不断增强和完善。特别在无线、认证、策略路由、带宽控制和防火墙过滤等功能上有着非常突出的功能,其极高的性价比,受到许多网络人士的青睐。
routeros简介
RouterOS在具备现有路由系统的大部分功能,能针对网吧、企业、小型ISP接入商、社区等网络设备的接入,基于标准的x86构架的PC。一台586PC机就可以实现路由功能,提高硬件性能同样也能提高网络的访问速度和吞吐量。完全是一套低成本,高性能的路由器系统。
特色功能介绍
桥接功能
RouterOS能将多张网卡组建为一个桥模式,是路由器变成一个透明的桥设备,同样也实行三层交换的作用,MAC层的以太网桥、EoIP 、Prism、Atheros和RadioLAN 等都是支持的。所有802.11b和802.11a 客户端的无线网卡(如station模式的无线)受802.11 的限制无法支持桥模式,但可以通过EoIP协议的桥接方式实现。
为防止环路出现在网络中,可以使用生成树协议(STP) ,这个协议同样使冗余线路成为可能。
包括特征如下:
l 生成树协议(STP)
l 多桥接接口功能
l 该协议能选择转发或者丢弃
l 能实时监控MAC地址
l 桥防火墙
l 多线路支持
RouterOS基于策略的路由为网络管理者提供了比传统路由协议对报文的转发和存储更强的控制能力,路由器用从路由协议派生出来的路由表,根据目的地址进行报文的转发。
在负载均衡下也可以根据带宽的比例调整两条线路的流量。RouterOS提供了多种方式的路由功能,使其路由功能更强大,更灵活。RouterOS的路由功能主要为:
l 基于源地址的路由
l 基于目标地址的路由
l 基于端口的路由
l 基于定义用户类的路由
l 基于负载均衡的路由
l 基于端口的负载均衡
l 隧道协议
RouterOS支持多种隧道协议如PPP、PPPoE、PPTP、EoIP、IPIP以及IPsec,这些隧道协议可以为远程资源访问和企业间的连接提供很好的解决方案,如:
l 通过PPTP或IPIP实现通网络资源互用
l EoIP或PPTP的远程局域网解决方案
l 支持PPPoE服务器
l Hotspot热点认证服务
热点服务认证系统是一种web的认证方式,在此种认证方式中,用户可以通过自设IP地址或DHCP获得一个地址,打开浏览器,无论输入一个什么地址,都会被强制到一个认证界面,要求用户进行认证,认证通过后,就可以访问其他站点了。主要特征:
l 用户通过时间与流量认证计费
l Cookie (存储用户的账号和密码)
带宽控制功能
l 定额控制(连接超时时间, 下载/上传传输限制)
l 实时用户状态信息显示
l 自定义认证HTML页(可以由你自己设计认证页)
l DHCP服务器分配IP地址
l 简单的RAIUS客户端配置
l RouterOS 能与PPTP隧道、IPsec以及其它的一些功能配合使用。
l 可以通过Access Point与以太网接入用户。
l 定时广播指定的URL链接
l 脚本控制
RouterOS提供了可以编写的脚本功能,脚本的加入使RouterOS在处理很多网络方案、自动检查故障和动态生成策略等,都可以通过脚本很好的解决。使得在处理很多网络问题上更加的灵活和智能化。
具体功能:
TCP/IP协议组:
l Firewall和NAT–包状态过滤;P2P协议过滤;源和目标NAT;对源MAC、IP地址、端口、IP协议、协议(ICMP、TCP、MSS等)、接口、对内部的数据包和连接作标记、ToS 字节、内容过滤、顺序优先与数据频繁和时间控制、包长度控制...
l 路由 – 静态路由;多线路平衡路由;基于策略的路由(在防火墙中分类); RIP v1 / v2, OSPF v2, BGP v4
l 数据流控制 – 能对每个IP、协议、子网、端口、防火墙标记做流量控制;支持PCQ, RED, SFQ, FIFO对列; Peer-to-Peer协议限制
l HotSpot – HotSpot认证网关支持RADIUS验证和记录;用户可用即插即用访问网络;流量控制功能;具备防火墙功能;实时信息状态显示;自定义HTML登录页;支持iPass;支持SSL安全验证;支持广告功能。
l 点对点隧道协议 – 支持PPTP, PPPoE和L2TP访问控制和客户端; 支持PAP, CHAP, MSCHAPv1和MSCHAPv2 验证协议; 支持RADIUS验证和记录;MPPE加密;PPPoE压缩;数据流控制;具备防火墙功能;支持PPPoE按需拨号。
l 简单隧道 – IPIP隧道、EoIP隧道 (Ethernet over IP)
l IPsec – 支持IP安全加密AH和ESP协议;
l Proxy – 支持FTP和HTTP缓存服务器;支持HTTPS代理;支持透明代理 ; 支持SOCKS协议; DNS static entries; 支持独立的缓存驱动器;访问控制列表;支持父系代理。
l DHCP – DHCP服务器;DHCP接力;DHCP客户端; 多DHCP网络;静态和动态DHCP租约;支持RADIUS。
l VRRP – 高效率的VRRP协议(虚拟路由冗余协议)
l UPnP – 支持即插即用
l NTP – 网络对时协议服务器和客户端;同步GPS系统
l Monitoring/Accounting – IP传输日志记录;防火墙活动记录;静态HTTP图形资源管理。
l SNMP – 只读访问
l M3P – MikroTik分包协议,支持无线连接和以太网。
l MNDP – MikroTik邻近探测协议;同样支持思科的CDP。
l Tools - ping; traceroute; bandwidth test; ping flood; telnet; SSH; packet sniffer; DDNS。
二层链接
l Wireless - IEEE802.11a/b/g wireless client和访问节点(AP);Nsetreme和 Nstreme2 协议;无线分布系统(WDS);虚拟AP功能;40和104 bit WEP; WPA pre-shared key加密; 访问控制列表;RADIUS服务器验证;漫游功能(wireless客户端); 接入点桥接功能。
l Bridge – 支持生成树协议(STP);多桥接口;桥防火墙;MAC NAT功能。
l VLAN - IEEE802.1q Virtual LAN,支持以太网和无线连接;多VLAN支持;VLAN桥接。
l Synchronous - V.35, V.24, E1/T1, X.21, DS3 (T3)媒体类型; sync-PPP, Cisco HDLC, 帧中继协议; ANSI-617d (ANDI or annex D)和Q933a (CCITT or annex A) 帧中继LMI类型
l Asynchronous – 串型PPP dial-in / dial-out;PAP, CHAP, MSCHAPv1和MSCHAPv2 验证协议;RADIUS验证和记录;支持串口;modem池支持128个端口。
l ISDN - ISDN dial-in / dial-out; PAP, CHAP, MSCHAPv1和MSCHAPv2 验证协议;RADIUS验证和记录;Cisco HDLC, x75i, x75ui, x75bui 队列支持。
X86硬件要求
CPU和主板 – 核心频率在100MHz或更高的单核心X86处理器,以及与兼容的主板。
RAM – 最小32 MiB, 最大1 GB; 推荐64 MB或更高。
ROM – 标准ATA/IDE接口(SCSI和USB控制器不支持;RAID控制器驱动不支持; SATA不完全支持) 最小需要64 Mb空间; Flash和一些微型驱动器使用ATA接口能连接使用。
MIPS硬件要求
支持系统 - RouterBOARD 500 series (532, 512 and 511)
RAM – 最小 32 MB
ROM – 板载NAND驱动,最小64Mb
配置
RouterOS提供了强大的命令配置接口。你同样可以通过简易的Windows远程图形软件WinBox管理路由器。Web 配置提供了多数常用的功能上。 主要特征:
l 完全一至的用户接口
l 运行时配置和监控
l 支持多个连接访问
l 用户策略配置
l 活动历史记录,undo/redo操作
l 安全模式操作
l Scripts能事先安排执行时间和执行内容,脚本支持所有的命令操作。
l 路由器可用通过下面的接口进行管理
l 本地teminal console - PS/2或USB键盘和VGA显示卡进行控制
l Serial console – 任何 (默认为COM1) RS232异步串口,串口默认设置为9600bit/s, 8 data bits, 1 stop bit, no parity, hardware (RTS/CTS) flow control。
l Telnet – telnet服务默认运行在23TCP端口
l SSH - SSH (安全shell) 服务默认运行在22 TCP端口
l MAC Telnet - MikroTik MAC Telnet协议被默认启用在所以类以太网卡接口上。
l Winbox – Winbox是RouterOS的一个Windows远程图形管理软件,同样也可用通过MAC地址连接。
ROS高级企业宽带路由防火墙系统产品概述
routerOS高级路由器是针对我国企业宽带接入特点特别优化设计,具备满足良好的网络兼容性,整体性能优越,配置简单,提供多方面的管理功能,极具性价比。可全面满足政府、机关、企业、宽带社区、校园网对高性能、多功能、高可靠性、高安全性、高性价比的需求。
产品集宽带路由 (Router)、专业级防火墙、QoS带宽流量管理、多线路负载均衡、VPN、上网行为管理等多项功能于一身,支持功能模块扩展,是一个安装简单、稳定性高、易维护、投资低的一体化智能路由产品。
编辑本段
优良的性能
RouterOS高级路由器从底层系统核心、核心安全模块和硬件兼容性等各个层次进行了精心的的设计和优化,使得这款路由产品在性能上具有出众的优势。线速转发的高吞吐量可满足大型企业/网吧等机构的绝大部分应用,也可为运营商的以太网接入提供高负载的支持,高转发低时延为增加用户数量提供了强有力的保障。
支持双线负载均衡、策略路由
支持2个或以上WAN口接入,可以实现ADSL、光纤等方式的自由组合。具备实时备份功能,能实现多线路带宽负载均衡,可根据源或目的地址指定优先线路,还可依据出口带宽分配流量,使线路利用率达最高。内置电信和网通的最新路由表,多线路接入不同的运营商可以有效地解决由于单个线路接入引起的运营商互联互通问题。
VPN功能
系统支持PPTP_VPN和SSL_VPN两种方式接入。通过VPN使企业里的电脑工作在同一个安全的虚拟局域网内,为程序共用(如ERP)、数据安全共享、VOIP等功能提供高效的平台
QoS带宽管理控制
系统提供基于HTB (Hierarchical Token Bucket)算法的流量管理功能,可有效提高带宽利用率和限制P2P等海量下载软件的使用:对于正常上网的内网主机,系统将允许它偶然突破最大限速;相反,对于长期使用P2P等软件的内网主机,系统将会减小它的带宽,使其对其他主机的影响降到最低。支持根据IP地址、协议、端口等信息对数据流进行优先级设置,然后针对不同类别的数据流进行带宽控制。指定主机或服务预留带宽、限制最高带宽,也能实现平均分配带宽,并进行优先级管理,特别适合语音视频和数据混合的网络。
防火墙功能
系统提供强大的防护功能,支持内/外部攻击防范,提供扫描类、DoS类、可疑包和含有IP选项的包等攻击保护,能侦测及阻挡IP欺骗、源路由攻击、DoS等网络攻击,能有效的阻止端口扫描、防SYN flood , UDP flood , ICMP flood,Smurf/Fraggle攻击,分片报文攻击等,为网吧提供可靠的安全保障。提供MAC和IP地址绑定功能,可以有效防范ARP攻击,并且监视局域网内的ARP数据包,发现有攻击自动报警,并且在控制页面显示相关攻击信息,让网管能够立即查出有问题的机器。
支持端口映射
系统支持端口映射功能,可在内网架设WEB、Mail、FTP服务器对外网开放服务。
PPPOE服务器功能
PPPOE 拨号服务为用户提供另外一种局域网访问 Internet 的方式,这种方式如同 ADSL 宽带上网,每个工作站访问 Internet 是相对独立的,互不干扰,可以有效解决局域网 ARP 攻击等带来的问题。支持PPPOE与传统以太网混合接入。
支持上网行为管理
系统支持外网访问权限管理、上网时段管理;支持封杀局域网内的P2P软件(如BT、kugoo,电驴,迅雷)、IM聊天软件(如QQ、MSN、Skype等)的使用。支持基于内容和URL的过滤功能?
针对公司/企业的应用
:
1.上网时段控制
2.上网行为管理
3.应用协议特征过滤(限制程序的)
4.ssl vpn企业互联和pptp 拨入vpn支持
5.多网段隔离6.路由初步过滤常见网页病毒7.日志分析系统8.支持DSL,FTTX+LAN和Cable Modem连接,特别适合光纤接入;9.支持快速转发,吞吐量最高可达200M,最多210K PPS ;10.基于IP的内网主机上行和下载速率限制 ;11.支持DHCP(Server Client Relay)功能 ;12.基于地址,协议和端口的包过滤 ;13.基于站点、URL和关键字的应用层过滤 ;14.支持网络时间同步 ;15.支持UPnP ;16.支持IP/MAC绑定 ;17.支持DNS代理 ;18.支持动态DNS ;19.支持PPPOE服务器;20.静态路由,动态路由RIP I和RIP II ;21.支持SSL-VPN/PPTP-VPN.针对网吧的特有功能:1、多网络的支持,支持电信、网通、联通、铁通等多WAN口接入,实现自动切换,无需另加切换软件,实现电信的网站走电信,网通的网站走网通,真正实现南北互联互通;实现电信线路断开,自动切换到网通,网通线路断开自动走电信。2、多种网吧特需功有,如IP-MAC绑定,或是利用PPPOE-SERVER功能,解决ARP攻击问题;单IP限速,解决BT/QQ直播占用大量网络带宽,影响网速等问题。3、最精细的单IP限速,合理分配网络带宽,避免网络扔堵,拒绝掉线!针对小区,学校、酒店等作宽带二级运营的ISP商功能:1.PPPoE用户认证+Radius或者利用内置的User Manage 功能管理用户,多种灵活的计费模式。2.HotSpot热点认证或叫Web认证,强制弹出认证页,跨平台,不依赖第三方软件或者操作系统,非常先进。3.非常先进,功能完善的限速模式,支持用户限速管理,IP限速管理,等等。
Routeros路由器管理软件
Routeros软路由的强大功能与容易上手的主要原因之一来自于Routeros路由器管理软件----winbox。winbox将复杂的路由器命令融合到一个类似于客户端类的软件,使得用户在合用routeros软路由时感到非常得直观、易用。Winbox是一个可视化的路由器管理工作,目前版本也有中文版的,但大多数routeros管理者因为使用习惯的原因还是比较喜欢使英文版的Winbox。附上winbox管理软件的图片。
从官网BT下载得到,因为用了好多天才下载完,所以分享到这里,希望于大家有用。
官方下载来的是个文件夹,含有很多文件,所以将其中的ISO文件单独放在第一个资源,第二个资源为全部文件,直接压缩而成。
不含破解。
版本更新介绍:
What's new in 5.2 (2011-Apr-26 16:09):
*) fixed webfig;
*) console - fixed problem with supout file generation and export that
appeared in version 5.1, it was causing console to enter busy loop
on some boards;
*) ssh client - added source address and remote command options;
*) user manager - added /tool usermanager profile;
*) route - fixed problem with missing connected routes;
What's new in 5.1 (2011-Apr-08 12:55):
*) ipsec - fix SA lifetime display when timezone offset does not equal 0;
*) ipsec - now default DPD interval is 2 min for new configurations;
*) webfig - make bandwidth-test work;
*) fixed problem - wireless package got disabled after upgrading from v4;
*) sstp - fix problems on multicore systems;
What's new in 5.0 (2011-Mar-31 11:33):
*) route - fixed cause of crashes when handling multipath routes;
*) route - fixed limit on maximum active IPv6 route count,
was causing issues with more than 2000 active routes;
*) ipsec - added command kill-connections under remote-peers;
*) ipsec - fix responder side phase2 negotiation problem
which prevented more than one Windows7 host to initiate SA;
*) fixed vrrp - interface was invalid after undoing remove;
*) winbox - added more detailed /interface ethernet stats;
*) winbox - added ability to send e-mail;
*) winbox - added missing 'set-metric' parameter
in 'Routing/Prefix List';
*) wireless - 802.11 dynamic distance fix;
*) fixed problem - packages could not be uninstalled if disk was full;
*) fixed problem - some of the RouterBOARDS did not reboot properly sometimes;
*) fixed problem - VLANs on bridge interface did not work;
*) ssh - client supports public key authentication;
What's new in 5.0rc11 (2011-Mar-04 14:29):
*) led trigger - changed blinking for modem signal and interface monitoring;
*) ppp - added ability to specify data-channel for ppp server interfaces;
*) ipsec - added more Diffie-Hellman groups;
*) console - fixed a memory leak;
*) console - don't recreate default '/system console' entry for the serial
port if it is removed;
*) netinstall - fixed CD-ROM usb install;
*) wireless nv2 - fixed RB532 freeze;
*) wireless - fixed station-bridge mode;
*) wireless - added station-bridge support for 802.11 and nstreme;
*) gps - show higher precision coordinates;
*) snmp - added OIDs for kvm and metarouter;
*) usermanager - works again and to make user profile active after signup,
please recreate relevant user profiles;
What's new in 5.0rc10 (2011-Feb-17 14:06):
*) routing - fixed ipv6 connected routes,
IPv6 connected routes disappeared after interface restart;
*) routing - fixed high CPU usage when adding BGP ipv6 routes;
*) winbox - fixed opening terminal window to KVM instance;
*) winbox - fixed connect button in wireless scan;
*) winbox - fixed make-binding in hotspot hosts;
*) ipsec - fix possible crash when ipv6 is enabled;
*) snmp - add usb power reset (see updated MIB);
What's new in 5.0rc9 (2011-Feb-09 13:57):
*) wireless - fixed disconnect problem on long distance
802.11 40MHz links;
*) wireless nv2 - fixed station mode that broke when station-bridge
was introduced
*) wireless - more improvements for 11n compatibility;
*) routing - fixed problem with best route selection, sometimes inferior route
could get selected as the active, problem was introduced in 5.0rc8;
*) kvm - fix guest starting;
What's new in 5.0rc8 (2011-Feb-01 14:03):
*) added led trigger - change leds on different events;
*) snmp - restored access to routing tables;
*) snmp - fixed memory leak for OID 1.3.6.1.2.1.25.2;
*) ipsec - added ipv6 support;
*) removed broadcast setting from ip address;
*) radv - fixed problem when wrong link local address was used
to send advertisements on bridge interface;
*) ppp - make IPv6 work again (introduced in v5.0rc7);
*) ppp - fixed problem when user re-authenticated and traffic accounting
included data from previous session;
*) fixed traffic-flow on x86-smp (could stop sending flows);
*) improved usb modem mode switching;
*) kvm - fixed problem when sometimes virtualization detection fails;
*) routing - route with recursive gateway sometimes was not selected as
active, if another inferior route with directly reachable gateway
was present;
*) bgp - removed "interface" property from bgp peer configuration, now
ipv6 link local remote address must be specified using the
"address%interface" notation;
*) added extended ethernet statistics (/interface ethernet print stats) for RB800,RB1000,RB1100 and RB7xx with AR7241 or newer cpu;
*) wireless - improved 11n compatibility;
*) wireless nv2 - added support for station-bridge mode;
*) wireless nv2 - added area support;
*) wireless - added ability to set registration-table comment using RADIUS
attribute;
*) implemented usb power-reset command on RB SXT 5HnD;
What's new in 5.0rc7 (2010-Dec-29 10:39):
*) fixed hotspot;
*) tftp - fixed problem when nobody could
connect if no ip-address were provided;
*) winbox - fixed mac ping from neighbor list;
*) fixed simple queues on little endian cpus;
*) fixed simple queues without provided dst-address;
*) fixed problem - could not update license for
old style 7 digit software-id's;
*) fixed winbox - IPv6 route could not be added;
*) ssh - allow bigger packets (fixes some disconnecting problems);
*) added support for RDC R6040 Ethernet controller;
What's new in 5.0rc6 (2010-Dec-23 13:33):
*) ntp server now requires a broadcast address for broadcast mode to work
it should be specified under broadcast-addresses (X.X.X.255),
255.255.255.255 is not going to work;
*) ssh - fixed showing forwarding settings,
check your setting after upgrade!
*) allow to specify multiple networks (including IPv6)
in user's allowed-from list;
*) added support for Safe Mode to WinBox;
*) allow to specify non acceptable groups for RADIUS console logins;
*) handle correctly IPv6 address on bridged or switched interfaces;
*) added IPv6 connection list;
*) added IPV6 support to graphing;
*) added IPv6 support to SNTP client;
*) added IPv6 support to NTP client server;
*) added IPv6 support to RADIUS client;
*) added IPv6 support to snmp;
*) added IPv6 support to tftp server, also changed logging levels;
*) added IPv6 support to ssh client;
*) added IPv6 support to watchdog;
*) added IPv6 support for /tool e-mail;
*) added IPv6 support to log remote target;
*) added IPv6 support to API;
*) added IPv6 support to winbox;
*) added IPv6 support to ftpd;
*) added IPv6 support to netwatch;
*) added IPv6 support for /queue simple;
*) added IPv6 support for /tool bandwidth-test;
*) added IPv6 support for /tool torch;
*) added IPv6 support for /interface vrrp (version 3);
*) added IP/IPv6 over ipv6 tunnel interface (/interface ipipv6);
*) added Ethernet over IPv6 tunnel interface (/interface eoipv6);
*) snmp - added ipv6AddrTable from IPV6-MIB;
*) wireless nv2 - fixed station-wds mode multicast problem;
*) wireless nv2 - fixed occasional encrypted link stalls;
What's new in 5.0rc5 (2010-Dec-01 07:47):
*) logging - added email-starttls option for email target;
*) pcq - added burst settings, like in "/queue tree" and "/queue simple";
*) pcq - can specify address masks for pcq;
*) pcq - added ipv6 support;
*) wireless - fixed WPA;
*) radius - fixed encryption key decoding for wireless EAP PPPs;
*) winbox - make keyboard work right away after main window is activated;
*) snmp - fix BER encoding for negative INTEGER values;
What's new in 5.0rc4 (2010-Nov-22 16:58):
*) radius - fixed Disconnect and CoA response signature generation;
*) winbox - make double click work in text fields again;
*) winbox - allow to drag windows outside of main one to the left;
*) winbox - make some settings look more consistent;
*) winbox - allot to specify IPv6 address in routing filter prefix;
*) winbox - make possible to open IPv6 routes without crashing;
*) winbox - improved item reordering in long lists;
*) winbox - improved SNMP configuration support;
*) winbox - added support for KVM configuration;
*) winbox - added support for Traffic Engineering configuration;
*) ovpn - make ovpn client work with OpenVPN v2.1.3;
*) lcd - support Crystalfontz 631,633
also support for Crystalfontz lcd contrast setting is added;
*) console - fixed missing return value of the ping command when executed
from a scheduler entry;
*) console - 'ping' command with specified value of 'interface' always forced
"arp-ping=yes", fixed;
*) routing - fixed problem with 'check-gateway' status update that could get
triggered when multiple routes with different values of 'target-scope'
and 'check-gateway' referenced the same gateway IP address;
*) store - allow to use external disks;
*) modem firmware directory can be specified in /port firmware
Gobi users should change this setting or directory name;
*) ups - support USB UPS on RB4xx as well;
*) snmp - fix BER encoding for some INTEGER based values;
*) snmp - provide proxy stats using SQUID-MIB;
*) snmp - provide ups info using UPS-MIB;
*) snmp - provide external storage information;
*) wireless nv2 - add missing statistics fields;
*) wireless - add per-chain signal strength fields;
*) added hotspot html variable "host-ip";
*) fixed pcq queue type;
*) fixed leds on RB750;
*) added hotspot html variable "host-ip";
*) wireless nv2 - fixed station-wds mode multicast problem;
*) wireless nv2 - fixed occasional encrypted link stalls;
What's new in 5.0rc3 (2010-Oct-29 09:02):
*) lcd - support Crystalfontz 635
*) wireless nv2 - fix stalls on encrypted 11n links using high rates;
*) wireless nv2 - fix encryption related kernel crash;
*) sstp - fixed memory leak;
*) fixed problem - bad boot/kernel crc was reported on powerpc boards
when in fact it was good;
What's new in 5.0rc2 (2010-Oct-27 16:20):
*) wireless nv2 - encryption support;
*) tool fetch - support ftp STOR;
*) ospf - fixed crash when working with external LSA that contain
forwarding addess;
*) ipsec - supports NAT-T drafts;
*) ipsec - added debug logging, to maintain same log verbosity as before with
'ipsec' topic now use topics 'ipsec,debug,!packet';
*) ipsec - make it work with EoIP, GRE, PPTP and L2TP;
*) support for Atheros AR9271 wireless chip;
*) added support for more Intel 82575/82576 PCI-Express Gigabit Ethernet cards;
*) added support for idle detection on RB1xx/RB5xx in /tool profile;
*) fixed Wireless manual tx power configuration for 11n rates in WinBox;
*) fixed torch;
What's new in 5.0rc1 (2010-Sep-17 13:58):
*) wireless nv2 - add WDS support;
*) added ability to monitor cpu usage by task (/tool profile);
*) added support for RPS (Receive Packet Steering) on multicore systems;
*) added cisco compatible gre tunnels;
*) fix simple queues on multicore (fixes intel 82576 crash/reboot);
*) fixed sstp memory leak;
*) winbox - fixed ability to configure RB1100 switches;
*) ssh - fix possible crashing;
*) snmp - fix GET request processing;
*) ipsec - added ability to specify ID_USER_FQDN peer identity;
*) ipsec - encypt last IKE phase 1 packet when in aggresive mode as initiator;
*) wireless nv2 - added nv2-cell-radius parameter to specify distance
in km to farthest client on AP;
*) wireless nv2 - fix transmit stall issue for non-11n chips;
*) wireless - fix x86 nstreme multiprocessor hang;
*) made user manager web interface work again;
*) updated drivers and kernel (to linux-2.6.35);
What's new in 5.0beta6 (2010-Aug-10 13:22):
*) sstp - fixed memory leak;
*) wireless - changed band setting and added channel-width setting
*) wireless - support for 11n rates in 5 10mhz channels
*) wireless nv2 - fixed multiple problems including occasional tx stall;
*) made gps accessible through SNMP;
*) snmp - added GETBULK support, no more table caching - solves problems
with huge tables, routing tables currently are not available;
*) ssh - fixed public key authentication in case
when client is not verifying if server will accept the key;
*) fixed problem - MetaROUTER did not work on RB800, RB1000 RB1100;
*) user manager is not working - will be fixed in next version;
*) intel 82576 (uncommon expensive chip) crash/reboot to be fixed in
next release;
What's new in 5.0beta5 (2010-Jul-23 14:50):
*) email - supports multiple CCs
*) fix 5 10MHz channel support for 11n cards;
*) ssh - fix ssh client crash;
*) ssh - password authentication is disabled for users with public keys;
*) ping - fixed ping packet-loss calculation;
What's new in 5.0beta4 (2010-Jun-28 16:17):
*) console - /ping command again returns number of ping responses received,
didn't work in 5.0beta3;
*) added ability to monitor each cpu core usage;
*) added support for SATA,SCSI USB CD-ROMs in CD installer;
*) fixed problem - IRQ balancer did not use correct CPU core
on non auto MSI irqs after reboot;
*) fixed memory leak;
*) route - new property 'vrf-interface' (for static and dhcp routes),
automatically updates 'routing-mark' of the route to keep it in the same
VRF as the specified interface;
What's new in 5.0beta3 (2010-Jun-17 13:46):
*) hotspot - drop hotspot specific tcp connections from non-hotspot clients
already at firewall;
*) lcd - added support for AX89063
*) console - output of '/ping' and '/tool traceroute' commands is more
in line with the rest of the console commands;
*) api - '/ping' and '/tool traceroute' commands are fully functional;
*) console - added 'server' and 'server-port' arguments to '/resolve' command;
*) lcd - show free/total memory in units of million bytes (MB);
*) lcd - added page that shows system identity;
*) sstp - made it work with Windows 7;
*) sstp server - client reconnects did not work;
*) winbox - implemented proper maximize support for inner windows;
*) fix 5 10MHz channel support for 11n cards;
*) added IRQ balancer;
*) enabled PCI MSI on i386 multicore setups;
What's new in 5.0beta2 (2010-Apr-30 11:24):
*) added wireless distance setting, removed ack-timeout;
*) improved 802.11 operation for outdoor distances;
*) fixed sstp on x86;
*) console - removed 'delay' argument from '/system scheduler add' command;
*) console - remove 'comment=""' values from export;
*) console - updated '/system script job':
- also show active login sessions here;
- new read-only property 'type' with values "command", "login"
or "api-login" for running commands and either kind of login sessions;
- new optional read-only property 'parent' with id of the job that
has spawned this one;
*) console - changed "started" property of '/system script job' to use
local time;
*) console - new property 'type' in '/system script job'
*) console - added '/port remote-access export' command;
*) console - fixed bug that caused "cannot set ..." error when using
some properties in 'find' commands;
*) show old software id in export file header;
*) api - can supply password to '/system/upgrade/upgrade-package-source/add';
*) api - 'print' command was not showing values of some properties
such as 'servers' in "/ip/dns";
*) api - fixed api login sessions not dissapearing from '/user active' after
termination;
*) '/user active' now lists type of api connections as 'api';
*) added support for hardware watchdog on RB1000 RB800;
*) added support for ASIX AX88xxx based USB Ethernet Adapters on RB4xx;
*) fixed problem - ipv6 traffic was not bridged if ipv6 package was not enabled;
*) fixed getting interface stats in dude;
*) fixed metarouter stability problem on RB400s RB750s;
*) fixed metarouter - it didn't work on RB1000 with 2Gb;
*) fixed metarouter - it locked up on RB800;
*) fixed problem - SFQ queues did not work on interfaces (wireless) if none
of simple or tree queues were added;
*) fixed RB800 temperature;
*) fixed problem - WinBox crashed while opening VAP interface;
*) dhcp server - fixed possible inactive dhcp server in case of many
dhcp leases with address-pool enabled;
*) dhcp server - show non-printable option 82 agent-circuit-id and
agent-remote-id values in hexadecimal notation
(in the same way as client-id is shown);
What's new in 5.0beta1 (2010-Mar-31 09:17):
*) updated drivers and kernel (to linux-2.6.32.5);
*) ssh is now completely rewritten (supports connection forwarding, only DSA keys);
*) added support for SSTP protocol (PPP over TLS);
*) added support for multiple Intel Ethernet cards;
*) added support for IPv6 over PPP
(enabled by default if ipv6 package is installed),
link-local addresses are assigned, and server can issue IPv6 global prefixes
to clients per ppp secret or RADIUS reply (Framed-IPv6-Prefix);
*) added proper support for MPLS over PPP (by default it is now disabled);
*) fixed RB800 temperature;
*) silentboot feature updated;
*) WinBox - any file dropped on WinBox will be uploaded to router;
*) multicast - fixed possible crash during PIM startup;
*) report platform name in "/sysrem resource";
*) fixed problem - vlans were not working on RB750 ether1;
*) fixed mac address handling on RB750, some specific arp requests did not work;
*) more than two dns servers allowed in /ip dns;
*) sniffer and torch could process packet from other interfaces;
*) ospf - fixed DR and BDR election;
*) ospf - changed "/routing ospf route" to show type 2 metric instead of
internal metric for type 2 external routes;
*) added IPv6 support to trafflow (v9 only);
*) rewritten user-manager (formerly known as userman-test);
*) dns cache rotates order of records in reply messages
What's new in 4.6:
*) only accept dotted decimal notation for IP addresses. Use of numbers
with leading zero, numbers larger than 255 and non-decimal numbers
is not accepted (but still can omit third or second and third numbers,
if they are zero);
*) email - user must enable tls explicitly
*) remove limit on number of multicast enabled interfaces, maximum was 32;
*) dhcp server - show last-seen time for leases;
*) fixed - when closing winbox terminal window with active serial-terminal
console command, serial port sometimes was left in acquired state;
What's new in 4.5:
*) ipsec - added blowfish, twofish, and camellia encryption algorithms;
*) fixed static route removing;
*) fixed DHCP client compatibility with some DHCP servers;
*) added static multi-cast route support;
*) fixed temperature monitor on RB800 and RB450G;
*) user manager - payment bug fix - now able to buy
credits without extend price specified;
What's new in 4.4:
*) snmp - fixed snmp version three;
*) snmp - fixed vlan interface speed;
*) hotspot - fixed radius variables in hotspot html pages;
*) removed support for xen;
*) routing - added support for BFD protocol;
*) fixed problem - MetaROUTER sometimes froze on RB4xx;
*) fixed OSPFv3 on bridge interfaces;
What's new in 4.3:
*) kvm - vnc support, booting from cdrom image
*) API - fixed possible crash when running concurrent commands;
*) console - fixed logging commands: 'warning', 'error' and 'debug' were
all using 'info' topic;
*) bgp - added routing-table configuration option for instances;
*) bgp - added 'as-override' and 'passive' configuration options for peers;
*) bgp - added support for Site of Origin extended communities;
*) bgp - fixed some network issues;
*) ospf - fixed problem: when last neighbor on multi-access interface disappeared,
incorrect RouterLSA was generated on designated router;
*) metarouter - allow to specify metarouter's memory size when importing image;
*) firewall - added 'routing-table' matcher;
*) fixed problem - e1000 driver did not work in virtual machines;
What's new in 4.2:
*) fixed problem - RB450G ethernet did not work if one of the ports was disabled;
*) fixed ethernet of RB433 with switch chip IP175D;
*) fixed route attribute problem;
*) fixed route next-hops falling under multiple connected routes;
What's new in 4.1:
*) fixed problem - RB750 (clocked at 300MHz) Ethernet did not work;
*) fixed problem - routes on some interfaces (like VLAN) were not activated;
*) ppp, gps, sms, serial terminal - allow use of different channels
on same port across multiple programs simultaneous
*) dhcp server - added support for dynamic address-list entries;
*) hotspot - added support for dynamic address-list entries;
*) hotspot - fixed redirect after login in case if client gets new IP address
(problem introduced in 3.28);
What's new in 4.0:
*) IT87XX hardware monitoring sensor support;
*) kvm allows to choose emulated nic model;
*) hotspot - fixed redirect after login in case if client gets new IP address
(problem introduced in 3.28);
*) hotspot - fixed redirect after login in case if client gets new IP address;
*) console - commands like 'monitor', 'torch' and others that periodically
refresh information sometimes failed to work when started from
the scheduler;
*) console - scheduled scripts no longer require 'test' policy to run;
*) console - fix issues with scripts that contain lines with trailing spaces;
*) console - add back compatibility with old scripts that use space instead
of '=' to separate argument name and value;
*) console - following fixes:
- accept item numbers when prompted by command to specify item;
- argument names without '=' were matched even when expecting unnamed
value; this broke code such as:
:foreach i in=1,2,3 do {}
here 'i' was matched as argument name "in";
- 'tab' key did not automatically append '=' after complete argument
names;
What's new in 4.0rc1:
*) console - removed support for Lua (will be reintroduced later);
*) incorporated all the bug fixes since v3.30;
*) port remote-access - added 'log-file' property. If value is a non-empty
string, then all data that is read from the port is appended to a file
with that name, regardless of the active remote connection;
*) console - removed '/user' from the output of top level '/export' command,
still can be exported by '/user export';
What's new in 4.0beta4:
*) routing - changed BGP network and default-originate behavior;
*) web proxy - allow to edit error page;
*) console - terminal window size change now does not trigger full terminal
reset;
*) mesh protocol - improved loop prevention (becomes incompatible with earlier versions);
*) incorporated all the bug fixes since v3.27;
What's new in 4.0beta3:
*) added support for 802.11n atheros based wireless cards;
*) added ability to run other OSs in MetaROUTERs;
*) console: Lua scripting language. http://wiki.mikrotik.com/wiki/Lua
*) console: added nstreme-dual OIDs;
*) incorporated all the bug fixes since v3.23;
What's new in 4.0beta2:
*) console: added 'without-paging' argument to 'monitor' commands;
*) console: now 'without-paging' and 'interval' arguments in of 'print'
commands work together. Printing can be stopped by pressing 'q' or
ctrl-c, any other key triggers printing;
*) incorporated all the bug fixes since v3.22;
*) fixed TFTP server logging;
*) fixed problem - "/system upgrade" did not show proper package
architecture and was unable to fetch new packages;
What's new in 4.0beta1:
*) added support for MetaROUTERs;
*) all test packages are regular ones;
*) console - can mix named and unnamed arguments, can use names for unnamed
argument values. For example all of the following commands are
accepted now:
/ping 10.11.12.13 count=4
/ping address=10.11.12.13 count=4
/ping count=4 10.11.12.13
