Community discussions

MikroTik App
 
twistsd
newbie
Topic Author
Posts: 26
Joined: Fri Mar 15, 2019 11:57 am

Remote access

Mon Aug 02, 2021 12:57 pm

I am trying to use the .sn.mynetnames.net address from winbox when I am not onsite, but it will not connect. If I type the URL into web browser it takes me to my ISP's router, what do I need to change on the ISP's router to allow access?
Thanks
 
User avatar
Jotne
Forum Guru
Forum Guru
Posts: 3291
Joined: Sat Dec 24, 2016 11:17 am
Location: Magrathean

Re: Remote access  [SOLVED]

Mon Aug 02, 2021 1:25 pm

DO NOT OPEN ADMIN INTRAFACE FROM INTERNET.

Use VPN to administrate your device from remote location.
If VPN can not be used, follow this list to make connection some more secure.

1. Use another port than default.
2. Use port knocking. This prevents someone from seeing open ports.
3. Use a long and good password.
4. Use access list to prevent any random internet from accessing your router.
5. Log everything. (See my signature for example.)
6. Upgrade firmware to latest stable release
7. Block all user for some time that do try an port that is not open
8. +++

Do you have a public IP on your MikroTik router?
If not, you need to make ISP set their modem/router to bridge mode, or NAT the port you need to use in ISP mode/Router.
Last edited by Jotne on Sun Jun 05, 2022 11:07 am, edited 1 time in total.
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19099
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: Remote access

Mon Aug 02, 2021 3:26 pm

Best advice you will get today is from Jotne...
Never allow direct access to the router, VPN or port knock into the router and then access the router via winbox
Also change winbox port from default.
 
vinu
newbie
Posts: 42
Joined: Sun Mar 05, 2017 8:09 pm
Location: India

Re: Remote access

Mon Aug 02, 2021 8:06 pm

hi,
Most probably you been assigned a private natted address from your ISP u need a public IP from your ISP confirm that
check your WAN ip in mikrotik is it a public IP / Private IP?
 
SimonAngatia
just joined
Posts: 5
Joined: Sat Apr 09, 2022 7:43 am

Re: Remote access

Sat May 07, 2022 10:40 am

DO NOT OPEN ADMIN INTRAFACE FROM INTERNET.

Use VPN to administrate your device from remote location.
If VPN can not be used, follow this list to make connection some more secure.

1. Use another port than default.
2. Use port knocking. This prevents someone from seeing open ports.
3. Use a long and good password.
4. Use access list to prevent any random internet from accessing your router.
5. Log everything. (See my signature for example.)
6. Upgrade firmware to latest stable release
7. ++++

Do you have a public IP on your MikroTik router?
If not, you need to make ISP set their modem/router to bridge mode, or NAT the port you need to use in ISP mode/Router.
Thank you for this answer. If I may request you, could you provide any links to articles on how to setup VPN? I am new to mikrotik please.
 
User avatar
Jotne
Forum Guru
Forum Guru
Posts: 3291
Joined: Sat Dec 24, 2016 11:17 am
Location: Magrathean

Re: Remote access

Sat May 07, 2022 11:04 am

Use google ans search for mikrotik vpn.
MikroTik do support a big variety of VPN so select the type that fits your need. (Stay away for PPTP VPN)
 
SimonAngatia
just joined
Posts: 5
Joined: Sat Apr 09, 2022 7:43 am

Re: Remote access

Mon May 09, 2022 1:58 pm

Use google ans search for mikrotik vpn.
MikroTik do support a big variety of VPN so select the type that fits your need. (Stay away for PPTP VPN)
Hello, considering that I intend to use my application as SAAS, which means that it should be able to provide for connecting many routers to the same domain. One domain controls many routers with different credentials. What could be the easiest way/ the most efficient way to accomplish this? Thank you.
 
User avatar
own3r1138
Long time Member
Long time Member
Posts: 681
Joined: Sun Feb 14, 2021 12:33 am
Location: Pleiades
Contact:

Re: Remote access

Mon May 09, 2022 2:08 pm

different credentials. What could be the easiest way/ the most efficient way to accomplish this?
Easiest L2TP IPsec
Best WG - IKEv2

Who is online

Users browsing this forum: GoogleOther [Bot], mtkvvv and 43 guests