Managing 100+ Mikrotik routers

Hello,

I manage 100+ Mikrotik routers, the vast majority of which are RB2011UiAS-2HnD-IN models.

Currently we use Winbox to manage all of these routers remotely. We document each install with customer name and their static IP. Or we set up Mikrotik cloud address if they use DHCP.

This allows us to manage them on an individual basis, but it is not scalable.

We would like a way to mass update firmware, push out files to all routers at once (rsc scripts), make broad changes to queues, and more.

I’ve briefly looked into the Dude and that may be what I need, but it seems to be more of a mapping/monitoring tool and not much for management. Plus the documentation is scattered about the internet, outdated, and spotty at best. Not something I’m looking forward to deciphering, but I will if I must.

Is there any other tool that we can use, paid or otherwise, to do what I’m asking? Thanks very much.

Have you watched https://www.youtube.com/watch?v=KL6wrfa9Cnk (Managing 1500 mikrotiks…")? (second presentation video on the presentation stripe on the top of the page)

I have not! Thank you! I will see what he recommends.

I only have ~20 Mikrotik in my production network. With this small amount (and since they are all different) I still do any configuration by hand, but for updates and monitoring I use 2 different things.

  1. I use Cacti’s Mikrotik plugin to keep track of firmware and software versions. It uses SNMP to pull the information from the devices, and displays a * next to any firmware or software that isn’t the latest. It does some other things too, but I don’t use those parts (Trees, Users, APs, etc..). I use Cacti itself to graph all my interfaces, voltages, temperatures, etc… and I use the Weathermap plugin to make a visual representation of my network so you can see at a glance where any bandwidth links may be having issues.

  2. I use Ansible to automatically push updates to everything. I use it since it allows me to do the updates serially (one at a time, in the order I specify). I particularly needed this since if they are rebooted in the wrong order, then you will lose connection to the next ones in the list. You can ofcourse have it updating multiple at once if you need it to. It just connects in via an SSH key and runs the command to update / reboot.
    Mikrotik.png

Have you looked into setting up a ACS Server? TR069 is supported via a extra package now, I wrote a little guide here for FreeACS

Really useful info going on here! :smiley:

Nice :slight_smile: Never actually thought of that.