Opening port 8728 and setup firewall on my ISP router ===> real headache

RouterOS Scripting
1

Now my system works very well with mikrotik + router from my ISP, but if I want to install it on a client, for example. restaurant, coffee shop, … this is extremely difficult to open ports, configure firewall, a router on each ISP, as there are many models, brands for each ISP and each is different, and that’s a real headache because I have had to deal with other ARRIS and CISCO router, I tried to do the same thing with my router, and fails to make my system work.
There should be some way to bypass this configuration, only the configuration would suffice to mikrotik and ready.
There is a socifi.com company that works just like my system (provides free wifi in restaurant, hotel, …), but they do not make any configuration on the ISP router, only setup the mikrotik. But they use a radius server (I think here is the key).
You just have to add in the control panel(socifi) brand router (in this case mikrotik) and the serial number from mikrotik, and it works, do not do anything with the ISP router.

Do you know something about this??
Thank you

2

Maybe you should explain why you need to open a port.
Common way to avoid this is to make the router setup a VPN to your company using a VPN protocol that
works OK over NAT.

3

Movile.png
Ok, I need to open port and the firewall setting, because I use the mikrotik API(it use the 8728 port) since my hosting, because my users who are using my free wifi, are adding to the mikrotik, and my customers are changing the bandwidth for the users, changing session time…

thanks

4

Hi,

I’m not sure if the problem still stands but if the Mikrotik router is the only client connected to the ISP router, why not put it in the DMZ of the ISP router?

cheers,
David