Persisten reverse ssh tunnel

RouterOS Beginner Basics
1

Hi,
is there a way to create (persistent) reverse ssh tunnel from routeros (ssh session originating from mikrotik and forwarding server port to the box)?

My mikrotik is behind the carrier grade NAT but still I’d like to have a VPN to it. Which is hard task as the box does not have public IP :frowning:
Fortunately I have another server with public IP. I plan to use it as an proxy for my box. I’d like to open few ports on server and forward them via ssh tunnels to the mikrotik VPN server. As the mikrotik does not have public IPs the ssh sessions must originate from the mikrotik → reverse tunnels required. Anyway I’m stuck on mikrotik side unable to figure out a way to create ssh reverse tunnels… …any hint?

Or is there any solution for mikrotik VPN server behind NAT/firewall?

2

A cleaner and better practice would be using any kind of VPN connection from the NATted mikrotik router to the one with a fixed public IP. (pptp, sstp, l2tp… client)

You can then stablish another VPN from your workstation to the public IP server, then access the natted mikrotik router through it.