Hello experts,
My Mikrotik olt firewall has only API (for radius server) and winbox enabled.
Today i was setting my IP in winbox firewall. so that only this IP can access Mikrotik olt via winbox.
But I have added the wrong IP. and now I am unable to access it. Error: Connection refused.
Tried to connect via Mac address, still unable to access it.
Is there any way to access my OLT without resetting it?
*SSH is not enabled.
You should learn about SAFE MODE.
Use Splunk> to log/monitor your MikroTik Router(s). See link below. 
Why I created this article…
https://forum.mikrotik.com/viewtopic.php?t=181718
Basically besides use safe mode,
Take one port and remove it from the bridge.
add interface=etherX address=192.168.5.1/24 network=192.168.5.0
Then ensure in the input chain you have rule that you dont touch
add action=accept chain=input in-interface=etherX src-address=192.168.5.55 ( or any single IPV4 address you could stick into a laptop etc.)
Regardless what you do for other input chain rules etc… that will always be available…
Sometimes a console will safe your access;
e.g. use MT Woobm in the USB port if there is a USB connector, like on hAP ac2, hEX, Omnitk, and many others. Didn’t try another USB-serial adapter, but should work as well.