...
Note: SCSI controller Hyper-V and ESX is are usable just for secondary disks, system image must be used with IDE controller!
...
Steps to install CHR
- Download the virtual disk image for your hypervisor
- Create a guest virtual machine
- Use the previously downloaded image file as a virtual disk drive
- Start the guest CHR virtual machine
- Log in to your new CHR. The default user is 'admin', without a password
...
p1 (perpetual-1) license level allows CHR to run indefinitely. It is limited to 1Gbps upload per interface. All the rest of the features provided by CHR are available without restrictions. It is possible to upgrade p1 to p10 or p-unlimited (New new license level can be purchased by standard price). After the upgrade is purchased the former license will become available for later use on your account.
...
The p-unlimited (perpetual-unlimited) license level allows CHR to run indefinitely. It is the highest-tier license and it has no enforced limitations.
...
| Info |
|---|
| If you plan to use multiple virtual systems of the same kind, it may be possible that the next machine has the same system ID as the original one. This can happen on certain cloud providers, such as Linode. To avoid this, after your first boot, run the command "/system license generate-new-id" before you request a trial license. Note that this feature must be used only while CHR is running on a free type of RouterOS license. If you have already obtained a paid or trial license, do not use the regenerate feature since you will not be able to update your current key any moreanymore |
Getting the License
After the initial setup, a CHR instance will have a free license assigned. From there, it is possible to upgrade the license to a higher tier. Once you have a trial license all the work with the license is done on the account server where it is possible to upgrade the license to a higher tier unless it is p-unlimited already.
...
Payment:
To acquire a higher-level trial, set up a new CHR instance, renew the license, and select the desired level.
To upgrade from a Trial license to a Paid one go to to MikroTik.com account server and choose 'all keys' in Cloud Hosted Router (CHR) section:
...
If there are prepaid keys available, it is possible to use it for CHR - press "Pay using Prepaid key". If there is are no prepaid keys or you do not want to use them, press "Proceed to checkout".
...
In '/system license' menu router will indicate the time next-renewal-at when it will attempt to contact the server located on licence.mikrotik.com. Communication attempts will be performed once an hour after the date on next-renewal-at and will not cease until the server responds with an error. If the deadline-at date is reached without successfully contacting the account server, the router will consider that the license has expired and will disallow further software updates. However, the router will continue to work with the same license tier as before.
| Note |
|---|
If you want to upgrade perpetual license to a higher level please transfer the previous perpetual license to another CHR, to exclude the situation when where the previous perpetual license is lost on upgrade. |
...
| Note |
|---|
Fast Path is supported since in RouterOS v7 for "vmxnet3" and "virtio-net" adapters. |
...
VMware ESXi supports MTU of up to 9000 bytes. To get the benefit of that, you have to adjust your ESXi installation to allow a higher MTU. Virtual Ethernet interface added after the MTU change will be properly allowed by the ESXi server to pass jumbo frames. Interfaces added prior to MTU change on the ESXi server will be barred by the ESXi server (it will still report the old MTU as the maximum possible size). If you have this, you have to re-add interfaces to the virtual guests.
...
The solution: check your VMS (Virtualization Management System) security settings, if other MAC addresses are allowed to pass and if packets with VLAN tags are allowed to pass through. Adjust the security settings according to your needs like allowing MAC spoofing or a certain MAC address range. For VLAN interfaces, it is usually possible to define allowed VLAN tags or VLAN tag range.
Using VLANs on CHR in various Hypervisors
In some hypervisors, before VLAN can be used on VMs, they need to first be configured on the hypervisor itself.
...
Enable Promiscuous mode in a port group or virtual switch that you will use for a specific VM.
ESX documentation:
...
- poweron and resume scripts are executed (if present and enabled) after power on and resume operations respectively.
- poweroff and suspend scripts are executed before power off and suspend operations respectively.
- If scripts take longer than 30 seconds or contain errors, the operation fails
- In case of failure, retrying the same operation will ignore any errors and complete it successfully
- Failed script output is saved to a file (e. g. 'poweroff-script.log', 'resume-script.log' etc)
- Scripts can be enabled/disabled from hypervisor GUI ('run VMware Tools Scripts') or by enbalingenabling/disabling scripts from the console
Quiescing/backup
Guest filesystem quiescing is performed only if requested.
- freeze script is executed before freezing the filesystem
- freeze-fail script is executed if the hypervisor failed to prepare for a snapshot or if if freeze script failed
- thaw script is executed after the snapshot has been taken
- Script run time is limited to 60 seconds
- freeze script timeouts and errors result in the backup operation being aborted
- FAT32 disks are not quiesced
- Failed script output is saved to a file (e. g. 'freeze-script.log', 'freeze-fail-script.log', 'thaw-script.log')
...
Networking, disk, and OS info are reported to the hypervisor every 30 seconds (GuestStats (memory) are disabled by default, and can be enabled by setting 'guestinfo.disable-perfmon = "FALSE"' in VM config).
- The order, in which network interfaces are reported, can be controlled by setting 'guestinfo.exclude-nics', 'guestinfo.primary-nics' and 'guestinfo.low-priority-nics' options. Standard wildcard patterns can be used.
Provisioning
Can You can use the ProcessManager from vim Vim API to execute scripts. Python bindings are available
...
Script progress can be tracked by using the ListProcessesInGuest command. ListProcessesInGuest accepts an array of job id's; passing an empty array will report on all jobs started from the API
- ListProcessesInGuest returns an array of GuestProcessInfo instances:
- pid field is set to JobID
- endTime is only set after completion
- exitCode is set to 0 on success and -1 on error
- name is set to 'inline' or 'import' (same as programPath in GuestProgramSpec)
...
QEMU guest agent is available. Supported agent commands can be retrieved by using the guest-info command. Host-guest file transfer can be performed by using guest-file-* commands. Guest networking information can be retrieved by using the guest-network-get-interfaces command.
...
- Script job progress can be monitored with guest-exec-status command. The GuestExecStatus data structure is populated as follows:
- On success, exitcode member is set to 0
- If the script timed out exitcode is set to 1
- If the script contained errors exitcode is set to -1
- signal member is not set
- The err-data member is not used
- If capture-output was true, Base64 encoded script output is stored in out-data
...