Granular access to winbox options? Webfig?

RouterOS General
1

Hi,

I have some an opportunity to work with an integrator group that wants me to configure the router, support them, upgrade, etc… MSP stuff, but they need access to certain things, specifically the ability to setup DHCP reservations. I do not want hem to be able to export my scripts or see detailed parts of the configuration.

Is there a way to do this? It appears you can create webfig pages? I don’t and have never used webfig. If this is the only way the so be it.

Any advice appreciated!

2

So… I have played around with webfig and it surprisingly… looks like it will do the job. If anyone can double check me I would appreciate it -

  1. I turned on the web service and logged into the webfig page and selected design skin. I then created a “restricted” skin with the options I wanted to show, make read only, etc… It is pretty well put together. The on thing that is pretty neat is the status option - it creates a tab a the top called status where you can customize a page and add basically any element you want. DNS, DHCP, IP, etc… a dashboard if you will.

  2. I created a new user group called webfig (great I know), and enabled read, write, and web. I then selected the “restricted” skin at the bottom

  3. I added my user and password and added them to the “webfig” group.

Further questions -

  1. Once I have this set is there a way to template it?
  2. How should I lock this down - change the port, allowed addresses… I can think through this, but if anyone has a recommendation please let me know.

Thanks!

3

This is great - RTFM to me

“If it is required to use created skin on other router you can copy files to skins folder on the other router. On new router it is required to add copied skin to user group to use it.”

I must have looked at his 1000000 times in the files area and simply ignored it. So simply copy from on router and stick it into the same folder. yeah. I have not tested it but I assume it works.

Maybe this will help some other #$@%@#$$% like me who should have done more research before posting a questions :slight_smile:

Now - how to secure this… I

4

Are the order of the status page items set by the order in which you click them or there order in the menu?

edit: Yes I can answer - it adds them to the status page in the order you add them. Hmmmm can you edit the order? Not really.

Webfig is not a dumpster fire after all.

I am a slow learner. Somebody (anva?) should pile on. I deserve it :slight_smile:.

5

You can also edit the file in a text editor.

6

Thank you for this - it looks a simple as reordering the entries. Seems to works well.

Add specific tabs/entries look a bit different - I can see somethings (ro: true) makes sense, but some of the of other fields I have decided to show are not here.

Am I correct in thinking anything not listed here will be available in the webfig? Only items that are blocked or modified will show here?

Thanks for your help.