Centralized management for L3 VPN (MPLS/VRF) deployment

RouterOS Forwarding Protocols
1

I deployed L3 VPN using MPLS/VRF and I have a plan to expand this deployment. But it`s difficult to manage thousands of customers with tens of routerboards. Addition to MPLS, I configured static simple queues to rate customer traffic. Basically our VPN service has different packages based on speed like 1Mbps, 5Mbps, 10Mbps, 100Mbps etc…
So I need to make centralized management that all routers queues and ip addresses are in one interface and operation guys can change customer speed and disable/enable IP addresses on this single window.

I think options are:

  1. CAPsMAN - But it manages only wireless related configurations. It would be nice if it supports queue, ip address, vrf etc…
  2. Dude - I dont think its possible to see queues/ipaddresses from different router on single window.
  3. Self developed application using API - More time and money
    4…

Any suggestion?

2

Hello otgooneo,

thousands of customers with tens of routerboards.

This are then many thousands of routers, so I don´t really think
it could or better should be done by only one device in my opinion.

  1. Dude - I dont think its possible to see queues/ipaddresses from different router on single window.

  • It perhaps can be if a CCR1072 is right sorted with much memory (ram)
    and is holding a TheDUDE package, perhaps.

  • Or you MikroTik brings out a Linux based version of TheDUDE
    native x86_64 something like based on CentOS, that is running on Intel Xeon
    based CPUs and is also able to profit from many memory (ram)

  1. Self developed application using API - More time and money
    4…

More time, more money and not a guaranty that then all is running fine

Any suggestion?

At the moment I would suggest you to split this actions to many more units that
can be controlled by your self from one machine. So if you are setting up many
routers and each router is able to sort a greater group of clients you can monitor
this network by using the PRTG from Paessler and if anything happens it will you
also show where something goes wrong or you must do something and then you will
be also able to go on this RouterBoard or CCR and manage the things there.

Powerful Workstation for you
Connected to KVM Switches (daisy chained)
Powerful sorted Windows Server for the PRTG
feed by all Routers and Switches
MikroTik RBs or CCRs connected to the KVM Switches (serial) and LAN Switches
and now all can be controlled from the workstation and monitored by the server

Could this be matching the goal?

3

Thank you Kreacher for your suggestions. Guys, any other advises?