So I go to ip cloud and get both the mynetname address and the corresponding ip
How can I access this router from outside of the LAN ?
Thanks in advance
If you are external to the router (diff location) and I am assuming access to config the router or to access the LAN, then the way to do this is via VPN.
A less preferred but still viable method is called port knocking.
Anything else is not secure and leaves one more vulnerable to hacking.
For example I setup IKEv2 VPN on my MT router and connect to it from my iphone using the MT App.
This is strictly to configure the router.
So in the Mikrotik I need to setup a VPN?
How do I go about doing that?
MikroTik has a great wiki, check this (and especially the L2TP server part):
https://wiki.mikrotik.com/wiki/Manual:Interface/L2TP#L2TP_Server
Although I dont usually espouse youtube videos, the series from this chap seems okay.
https://www.youtube.com/watch?v=QWLY5vdKV4c
or
https://www.youtube.com/watch?v=_6ZefLMhlmc
However, unless you know what the lines of hte config do on the router it easy to blindly copy someone elses work and
have a broken config in no time. So go slow. Other than ticking that vpn box in quickset, I would stay away from much else in quickset and instead use the regular settings.
Also use SAFEMODE button top left of winbox everytime you open winbox.
https://www.youtube.com/watch?v=W_dMR7sOAXM
The router should aquire real ip address in order to be reachable from the internet. Ip cloud net name will translate to public ip address
VPN is the best way to administrate the router from a remote location.
But if you can not use VPN
- Use another port than default.
- Use port knocking. This prevents someone from seeing open ports.
- Use a long and good password.
- Use access list to prevent any random internet from accessing your router.
- Log everything. (See my signature for example.)
- Upgrade firmware to latest stable release
- If possible setup the remote router to connect using VPN to an admin site.
8.++++