MikroTik Devices Controller

Hello,

MikroTik is planning to develop and build a controller app for MikroTik Devices. Currently we are researching possibilities and options, what should be there and how it could be done and implemented. At the moment we do not want to stick to a specific implementation or standard, but build our own that will help to manage, develop and deploy different scale networks running MikroTik devices.
Any suggestions about features and options are very welcome.

Centralised updates and configuration management!

This is fantastic Idea, whoever what you guys think about something like what Unifi or Meraki do, a nice controller that can be hosted, and adopt all Mikrotik device with potentially dude integrated to it for nice network diagram and more… would be killing feature for us deploy and managed Mikrotik

This is extremely exciting!

Definitely configuration templates but please allow webhooks early on. For example, you may want to create a template with some variable information that can be retrieved from some sort of restful api, fully automated

1- firmware update.
2- configuration backup and compare.
3- Wireguard VPN generator for client side (a file that can be import to fireguard software).
4- site to site ipse vpn
5- network and wifi settings to any mikrotik in the same site
6- firewall rules and NAT
7- IPS IDS
8- sd-wan
9- geo IP location for block and allow list.
10- WAN performance check: speeds, ping, jitter.

Exciting news !

  • web based, so the controller can be accessed from nearly any device or platform and eventually phase out winbox. ideally the controller should not be based on java but static binaries deployment or open source ?
  • better graphing and analytics, time to move away from mrtg. rrdtool is good, what about grafana ?
  • integrated “tailscale-like” controller to easily set up wireguard links between managed endpoints and automatically handle endpoint ports, NAT hole punching etc. “one click wireguard vpn” could be a great marketing tool
  • devices overview with status page, device model image, and a satellite map overview to plot wireless links and do line-of-site calculations similar to ubnt’s UISP
    I’ll update my list if I can think of anything else :smiley:

Yes definitely! Just make update and upgrade routerboard in one click, just mark clients on AP.. In which hour and if will include AP, wait to download clinets FW and than upgrade AP on last.
Most users still don’t know, how to upgrade FW..(not only install and reboot). But this function must be enabled, some users don’t want newer firmware, because some functions are better on spec. FW.
Or example: ISP add new AP because other is overloaded, so some clients migrate to new AP and it want new IP adress. It will be better to mark some new user and give them new IPs so old will be rewritten.
Thank you!

Dude has the ability to specify a “parent” for the current device. With centralized management, it is necessary to check the entire chain of “parents” before rebooting during an update. So, that there is no situation, when the “parent” has already downloaded the update and started rebooting, and the “child” has not yet had time to download the update.

Single app to control all mk devices ?

Winbox with menu → list devices → select mk device → done :slight_smile:
Winbox place with all devices overview
Winbox templates for auto-configuring ?!

and many many

Other option → dedicated app (new dude build from scratch ?! ) with UI from 2022 with nice monitoring and mgment functionality :wink:

How do you define that? Something like TikApp? I suppose not, that is already there.
Or should we read “for MikroTik Devices” as “a centralized solution for management of a whole lot of devices” as some others above appear to infer?
Would that then be only “via an app” or would it be a solution that can also be used from a generic computer?

Hi!
Great idea!
Features which I missed elswhere:
-revision control
-having everything in cleartext as well
-grouping (labeling) the devices
-starting scripts/actions on many devices (on a group) at once
-sending/receiving files to from devices
-central log collector
-SW upgrade/rollback
-device status in detail

Improve The Dude instead?
:slight_smile:

W

Great idea.
Initially it will be great to focus on small scale configuration i.e. SME that want to run a ccr as gateway, use the firewall to protect their network and devices, extend the network with some crs or css switches and manage capsman.

That’s will be more than enough for over 70% of installations.

Cloud based even with subscription for any ROS device. Generate temporary links to access the Device from the cloud. Make a pool of credits for a given account and let the user of the account use the credits based on time of the generated links for its devices. Implement a strong protocol for communication of devices with the cloud. Make the account with only two factor authentication.

From there, if one can connect to a core router then he can use a VPN of choice to control the whole network with tools such as romon.

Have an agent package for all hardware types, like prtg agents or zabix agents?

Let’s call it by it’s name: Ubiquiti solution (UISP) is a good example how it should work together with the technology they use (docker).

Unifi controller not good, too many pictures no functionality.

I would suggest that Mikrotik will do it based decentralized model, similar to cisco ACI.

This way controllers never impact infrastructure.

Also do layered functionality deployment. Meaning set functionality based on categories and priority.
Example:
management access highest priority.

Also important to have configuration files enforcing on controller side. Like diff ( version control ), backup, security audit.

I have seen several mentions of config files, config compare …
Do you suggest for the controller to operate as a configuration export uploader?

yes and No, would be good if controller can do the backup of the correct config, can do compare between the versions of the config and it would be great to push the config too.

but what is the Mikrotik plan for the controller: are you going to develop something like Meraki or Unifi, if yes, then that’s a fantastic news, but if that a simple mobile app or similar then please even don’t try.

RouterOS is fantastic and if you can develop a controller and integrated with ROS7 that would be a killer features, and if the controller can be a appliance or hosted then you can add IDS, IPS and sd-wan and to integrate with ROS.

And also please make this topic HOT as this is the one of the best feature you all come up with.

The initial goal is to develop a protocol to apply and monitor config, hence the question about needed features that this protocol should be able to do.