Zero touch provision

Hi,

I am new to mikrotik. How is zaro touch provision possible, absolutely zero touch. Does the routeros initially use DHCP? I cannot see any pakets originating from the device. Is TR069 possible via DHCP or come other technique?

Michael Schwartzkopff

AFAIK one needs to at least set the devices to change the default boot device (which was “nand-if-fail-then-ethernet”) to something other desired (e.g. “try-ethernet-once-then-nand”)

otherwise the router will start with the factory default config when powered on the first time

maybe a batch netinstall procedure could help. but i never did that on large scale myself

I mean real "ZERO TOUCH". so not touching the device at all. Not even reconfigure the boot device.

Is this possible to unbox a device, plug in and the device finds its config server automatically, i.e. the TR069 server.

have not seen a solution without ever touching a router to achieve that.
maybe someone here on the forum knows something different to accomplish this

It requires a lot of prep and additional components… without divulging our proprietary process details, you need to have something running to monitor when new devices are connected to the network, and then programmatically log into that device and load a configuration onto it using your preferred procedure.

We supply proprietary configured zero touch routers to our customers that are pre-programmed to connect to their assigned accounts on one of our network segments, which we use our own separate proprietary zero touch programming process to program them in our office before shipping them. we’ve streamlined the process down so we can now do a case of 10 AC3 routers from unboxing to inventoried, programmed, labeled and reboxed in about 21 or 22 minutes, and a case of 20 AC2 routers in 45 minutes, and those numbers scale linearly for between 1 to about 5 cases, beyond ~5 cases then you’re losing a couple of extra minutes per case dealing with moving inventory around and whatnot so add ~3 minutes per case to those numbers. These numbers are also for 1 person doing all the work.

We are using mac-telnet as a sort of “zero touch”.

But no, there is no way of downloading a new config at boot via DHCP/TFTP like a Cisco device to my knowledge.

https://help.mikrotik.com/docs/display/ROS/Flashfig

I wouldn’t recommend it per se. But you can set the boot mode to use “try-ethernet-then-nand” & then always have a netinstall instance running (e.g. make it a daemon someplace). The big limitation here is netintall doesn’t distinguish between WHICH router is connected, so same config be provided to all routers. But nothing says that single config can’t do something like fetch to get another config (based on MAC or serial or whatever) from web server and then :import the specific for needed router from some HTTP server.