Hi MikrotikForumers,
How does my ISP control my Mikrotik through Winbox, and all that?
To even get into my Mikrotik admin page (192.168.1.1), I need an account made by my ISP in order for me to access the configuration page.
I checked that there are no scripts, no WAN in address list, and my ISP “magically” could connect through their ip (192.xx.xx.xxx).
They also only gave me a “write” access, not the “full” access, so I my functions in the admin page is very limited.
Sorry everyone, I’m a newbie so please if there are things I did wrong, lack of information, please inform me. Thanks everyone.
Most likely, they have a VPN set up. If you have any type of Winbox/Webfig access, you should be able to see it in the list of interfaces. It would be the one that isn’t Ethernet or Wireless, but something else like OVPN or L2TP.
If they have a custom config panel for you, they could be hiding that, along with other settings they don’t want you to touch. If they DO have a custom admin panel, chances are they’re using the RouterOS API protocol to connect from their server to your router via the VPN interface.
No one but them can really say anything definitive without knowing the actual config (an “export” from the root of a terminal).
There is no need for vpn. Isp is directly on the same L2 network so it can use whatever access way that is allowed by firewall. If you want to cut your isp access off, reset the device and make your own settings. Be sure you will not break any agreement, you already accepted before.