I want to install a Mikrotik infraestructure. How can I create an infrastructure so that from my office I can create a tunnel to a HaP Lite in a remote installation? My intention is to install a HAP LITE in each of the CCTV installations that we carry out and when they need technical support, I open the tunnel from my office routerboard and the desired installation. Could you help me?
Thank you very much.
Assuming your Main router has:
a. a publicly accessible IP address
OR
b. you can forward ports from an upstream ISP router to your Main MT router.
Then I recommend wireguard as a secure and relatively easy setup.
If you do not have a public IP on your router but one of your remote installations has one, then you could
all connect to that remote installation over wireguard and you could reach anyone.
Another option would be to rent a CHR in the cloud $7 US a month roughly for servers, and all devices would connect to that over wireguard.
Thanks for your answer.
First of all, we have a fixed IP provided by our ISP.
The point is that I would like to know how the tunnel is made between 2 Hap Lites (either through L2TP or any other configuration). When I want to provide technical assistance at a facility, I open the tunnel and can remotely manage the CCTV cameras, recorders or any device that we install in said facility as if it were physically there.
My idea is to install an hAP lite RB941-2nD-TC for each client with the necessary configuration to open the tunnel from my office that I can have a Routerboard or an hAP lite RB941-2ND.
I don’t know if I explained myself correctly and my idea is the correct one to make the concept viable.
All the best.-
Yes perfectly feasible using wireguard.