Management of CPE behind Mtik

RouterOS General
1

Hey Folks.

I am fairly new to MikroTik so hopefully somebody can help me out here.

My Mikrotik is going to act as a router at each AP.

Eth1 = 172.18../16 (To internet)

Eth2= 172.19.1.1/24 (To Clients & APs)

My CPE devices are all using a 10.0.8.* address behind the mikrotik router.

I need to be able to manage my CPE devices from my management station for remote support. Can anybody tell me what rules I need to add into the firewall or what IPs I need to add to the interfaces to get this to work properly?


If i need to provide more information just tell me what to put up and I will gladly do so.

Thanks in Advance.

B

2

Where is 10.0.8.x subnet address configuration on MikroTik Router ?
You may use DST-NAT rules to forward SSH or Telnet traffic to local server, but DST-NAT rule will work only for directly connected routers (network that is attached to the router interface).

3

I have better solution - in your inner network force all your routers connect to L2TP or PPTP server on the main router - then by connecting to the same server from public network you will get full access to all inner routers