Access To MikroTik remote

RouterOS Beginner Basics
1

Is there a way to log in to a remote MikroTik by vpn

Is there any solution Because of my work in another province

Thank you for your patience :slight_smile:

2

Yes. There are many possibilities to establish a VPN tunnel to mikrotik device.

3

Can you help me with this , and thank you

4

Why don’t you just access it via winbox or SSH and limit the port to your IP. Or use port knocking.

5

You can look at my blog there are some tutorials in PPTP VPN and SSTP VPN.

Blog.codexploit.si

6

I want to enter from another province and I have no ip real

7

You mean you dont have an static IP? You don’t want to leave port 8291 open to whole world.

8

check this: http://wiki.mikrotik.com/wiki/Tunnels

9

What do you think is the solution?

10

To run l2tp tunnel from the place you do not have public ip to the place you have public ip and keep it running. Then route thru it to get access. This is probably the easiest way.

11

Is there a solution through vpn and no-ip???

12

You always have some ip.

The problem is how to have the device reachabe generally. There you have two options: to have public IP or to convince your isp to make some port mapping specially for you, at least. Or the second to initiate a tunnel from that device like any other outbound communication to the place you can reach from it and establish a tunnel with it. So it means, you always need a public ip on at least one side. Otherwise the devices cannot get in touch.

13

Thank you for your help

14

The easiest way (without any considertation for the security)
IF the remote Routerboard has at least one public IP, static or dynamic not matter:

  1. on winbox enable ip cloud and read the dns name assigned, usually <serial_number_of_the_board>.sn.mynetname.net
  2. Use the dns name to connect your board with winbox and/or webfig
15

But he is missing the public ip on the side he wants to manage. Ddns will not help in this case.

16

use one RB with local IP address and <serial_number_of_the_board>.sn.mynetname.net

The remote device try to instaurate an PPTP tunnel from remote RB to local RB…

One script, or inside the routeros, if support that, put the <serial_number_of_the_board>.sn.mynetname.net on local board.

17

Unfortunately did not succeed After a try :frowning: