MikroTik Routing ขั้นสูง

# สร้าง Script สำหรับตรวจสอบและสลับ Gateway
/system/script
add name="check-failover" source={
    # กำหนดตัวแปร
    :local isp1Gateway "192.168.100.1"
    :local isp2Gateway "192.168.200.1"
    :local checkHost "8.8.8.8"
    :local currentGateway [/ip/route/get [find comment="main-default"] gateway]
    
    # ทดสอบ ISP1
    :local isp1Up false
    if ([/ping $checkHost interface=ether1-WAN1 count=3] > 0) do={
        set isp1Up true
    }
    
    # ตรรกะสลับ Gateway
    if ($isp1Up && $currentGateway != $isp1Gateway) do={
        /ip/route set [find comment="main-default"] gateway=$isp1Gateway
        :log info "Switched to ISP1"
    }
    
    if (!$isp1Up && $currentGateway = $isp1Gateway) do={
        /ip/route set [find comment="main-default"] gateway=$isp2Gateway
        :log info "Switched to ISP2 (Failover)"
    }
}

# สร้าง Schedule เรียก Script ทุก 30 วินาที
/system/scheduler
add name="failover-check" interval=30s \
    on-event="check-failover" comment="Auto failover check"

# สร้าง OSPF Instance
/routing/ospf/instance
add name=ospf-internal router-id=1.1.1.1 \
    distribute-default=if-installed-as-type-1 \
    redistribute-connected=as-type-1

# สร้าง OSPF Area
/routing/ospf/area
add instance=ospf-internal name=backbone area-id=0.0.0.0
add instance=ospf-internal name=area1 area-id=0.0.0.1
add instance=ospf-internal name=area2 area-id=0.0.0.2

# กำหนด Interface Template
/routing/ospf/interface-template
add interfaces=ether3-Backbone area=backbone \
    networks=10.0.0.0/30 cost=10 priority=1 \
    hello-interval=10s dead-interval=40s

add interfaces=ether4-Branch1 area=area1 \
    networks=10.0.1.0/30 cost=20

add interfaces=ether5-Branch2 area=area2 \
    networks=10.0.2.0/30 cost=20

# ตรวจสอบ OSPF Neighbors
/routing/ospf/neighbor/print

# ตรวจสอบ OSPF Routes
/routing/ospf/route/print

# กำหนด BGP Instance
/routing/bgp/connection
add name=isp1-peer remote.address=203.0.113.1 \
    remote.as=65001 local.address=192.168.100.2 \
    local.as=65002 as-override=yes \
    output.procname=isp1-in

add name=isp2-peer remote.address=198.51.100.1 \
    remote.as=65003 local.address=192.168.200.2 \
    local.as=65002 as-override=yes \
    output.procname=isp2-in

# ประกาศ Networks ของเรา
/routing/bgp/network
add network=203.0.113.0/24 synchronize=no
add network=198.51.100.0/24 synchronize=no

# กำหนด Route Filter (Preferring ISP1)
/routing/filter/rule
add chain=isp1-in action=accept \
    set-bgp-local-pref=200 comment="Prefer ISP1"

add chain=isp2-in action=accept \
    set-bgp-local-pref=100 comment="ISP2 Backup"

# ตรวจสอบ BGP Status
/routing/bgp/connection/print
/routing/bgp/advertisements/print
/routing/bgp/routes/print

# ตั้งค่า Email ก่อน
/tool/e-mail
set address=smtp.gmail.com port=587 \
    from=admin@company.com \
    user=your-email@gmail.com \
    password=your-app-password

# Script สำหรับ Auto Backup
/system/script
add name="auto-backup" source={
    :local backupName ("backup-" . \
        [:pick [/system/clock/get date] 0 4] . \
        [:pick [/system/clock/get date] 5 7] . \
        [:pick [/system/clock/get date] 8 10])
    
    # สร้าง Backup File
    /system/backup/save name=$backupName
    
    # ส่ง Email
    /tool/e-mail/send to="admin@company.com" \
        subject=("Router Backup - " . $backupName) \
        body="Backup file attached" \
        file=($backupName . ".backup")
    
    :log info ("Backup sent: " . $backupName)
}

# Schedule ทุกวันเวลา 02:00
/system/scheduler
add name="daily-backup" start-time=02:00:00 \
    interval=1d on-event="auto-backup"

# Script ตรวจสอบ Bandwidth และแจ้งเตือน
/system/script
add name="bandwidth-monitor" source={
    :local interface "ether1-WAN1"
    :local threshold 80000000  # 80 Mbps in bits
    :local telegramToken "YOUR_BOT_TOKEN"
    :local chatId "YOUR_CHAT_ID"
    
    # ดึงค่า Traffic
    :local rxCurrent [/interface/get $interface rx-bits-per-second]
    :local txCurrent [/interface/get $interface tx-bits-per-second]
    :local totalTraffic ($rxCurrent + $txCurrent)
    
    # แปลงเป็น Mbps
    :local rxMbps ($rxCurrent / 1000000)
    :local txMbps ($txCurrent / 1000000)
    
    :log info ("RX: " . $rxMbps . " Mbps, TX: " . $txMbps . " Mbps")
    
    # ตรวจสอบ Threshold
    if ($totalTraffic > $threshold) do={
        :local message ("⚠️ High Traffic Alert%0A" . \
            "Interface: " . $interface . "%0A" . \
            "RX: " . $rxMbps . " Mbps%0A" . \
            "TX: " . $txMbps . " Mbps")
        
        /tool/fetch url=("https://api.telegram.org/bot" . \
            $telegramToken . "/sendMessage?chat_id=" . \
            $chatId . "&text=" . $message) \
            keep-result=no
    }
}

# Schedule ทุก 5 นาที
/system/scheduler
add name="bw-monitor" interval=5m on-event="bandwidth-monitor"

# Script สำหรับ Export Configuration และส่งไป Git Server
/system/script
add name="config-export" source={
    :local gitServer "git.company.com"
    :local projectName "network-configs"
    :local routerName [/system/identity/get name]
    :local timestamp [/system/clock/get date]
    
    # Export Configuration
    /export file=("config-" . $routerName . ".rsc")
    
    # ส่งไปยัง API Server (Node.js/Python)
    /tool/fetch url=("https://" . $gitServer . "/api/config/upload") \
        http-method=post \
        http-data=({ \
            "router": $routerName; \
            "timestamp": $timestamp; \
            "config": [/file/get [find name=("config-" . $routerName . ".rsc")] contents] \
        }) \
        keep-result=no
    
    :log info ("Config exported and synced: " . $timestamp)
}

# Schedule ทุกชั่วโมง
/system/scheduler
add name="config-sync" interval=1h on-event="config-export"

# Enable SNMP และตั้งค่า Community
/snmp
set enabled=yes contact="admin@company.com" \
    location="Data Center 1"

# สร้าง Community (สำหรับ SNMP v1/v2c)
/snmp/community
add name=monitoring addresses=192.168.1.100/32 \
    read-access=yes write-access=no

# สำหรับ SNMP v3 (แนะนำสำหรับ Security)
/snmp/community
add name=secure-monitoring \
    security=private \
    authentication-protocol=SHA \
    authentication-password=your-auth-password \
    encryption-protocol=AES \
    encryption-password=your-enc-password \
    read-access=yes

# ตรวจสอบ
/snmp/print

# prometheus.yml
scrape_configs:
  - job_name: 'mikrotik-routers'
    static_configs:
      - targets:
          - 192.168.1.1  # Core Router
          - 192.168.1.2  # Branch Router 1
          - 192.168.1.3  # Branch Router 2
    metrics_path: /snmp
    params:
      module: [mikrotik]
    relabel_configs:
      - source_labels: [__address__]
        target_label: __param_target
      - source_labels: [__param_target]
        target_label: instance
      - target_label: __address__
        replacement: snmp-exporter:9116

# snmp.yml (Module สำหรับ MikroTik)
modules:
  mikrotik:
    walk:
      - 1.3.6.1.2.1.1  # System
      - 1.3.6.1.2.1.2  # Interfaces
      - 1.3.6.1.4.1.14988.1  # MikroTik MIB