We are planning to install a RouterOS router behind a DSL modem. The DSL provider only gives out private IP addresses (which are not publically routable), but we’d still like to be able to access the router’s web interface remotely (i.e. from off-site).
For ordinary PCs we have (in the past) used a script that automatically establishes a reverse tunnel via SSH from the router to one of our servers. Does anyone know if a similar setup is possible with RouterOS?
If the DSL modem performs PPPoE, most major models allow you to put them in to transparent bridge mode, at which point you can setup the PPPoE on the MikroTik and get your static IP directly on there. This has a number of nice advantages, but isn’t always feasible.
When that doesn’t work, you are absolutely right about PPTP tunnels, just make sure you have good firewall policies to restrict traffic, since the tunnel is a two-way street.