Community discussions

MikroTik App
 
tabate47
Long time Member
Long time Member
Topic Author
Posts: 510
Joined: Wed Mar 13, 2013 5:23 am
Location: Los Angeles

Password Access

Fri Oct 02, 2015 4:55 am

I want to make sure the MikroTik's we install are secure. If they are password protected, is there any way someone can get into the OS while on site if they don't know the username and password? Are there any backdoors or is there any other way to get in? Can someone pull the programming off the router or make a backup without the password? If so, is there a way to prevent this? Thanks.
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Fri Oct 02, 2015 4:47 pm

Everyone can reset the router to its defaults or run netinstall. Then it is accessible easily. Read about routerboot protection for this case.
 
tabate47
Long time Member
Long time Member
Topic Author
Posts: 510
Joined: Wed Mar 13, 2013 5:23 am
Location: Los Angeles

Re: Password Access

Fri Oct 02, 2015 4:53 pm

Correct, but if they do that, the programming that was on the router is gone, and they cannot access that specific programming, right? They only have a factory defaulted router?
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Fri Oct 02, 2015 5:14 pm

Script file with config before reset can appear. Try it...
 
tabate47
Long time Member
Long time Member
Topic Author
Posts: 510
Joined: Wed Mar 13, 2013 5:23 am
Location: Los Angeles

Re: Password Access

Fri Oct 02, 2015 5:19 pm

And this can be prevented with what you mentioned above?
 
freemannnn
Forum Veteran
Forum Veteran
Posts: 700
Joined: Sun Oct 13, 2013 7:29 pm

Re: Password Access

Fri Oct 02, 2015 7:30 pm

is it possible not to be able to reset also? brick device?
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Sat Oct 03, 2015 1:04 pm

Looks like the reset button can be disabled or surely it can be removed from the device.
 
freemannnn
Forum Veteran
Forum Veteran
Posts: 700
Joined: Sun Oct 13, 2013 7:29 pm

Re:

Sat Oct 03, 2015 1:07 pm

Script file with config before reset can appear. Try it...
nice idea. you mean that a script can run after a reset and apply a password to the device so undesired people cant take control of the device if they stole it?
this make the device unaccesible forever?
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Sat Oct 03, 2015 6:06 pm

I have seen such discussion here recently. Look for it. If I remember well such script was not able to set users. Anyway, you can load your defaults script via netinstall. Then this will be used when device is reset.
 
tabate47
Long time Member
Long time Member
Topic Author
Posts: 510
Joined: Wed Mar 13, 2013 5:23 am
Location: Los Angeles

Re: Password Access

Sat Oct 03, 2015 6:25 pm

Can someone post a step by step on how to do this with an example?
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Sun Oct 04, 2015 12:13 am

Who is online

Users browsing this forum: adrianmartin16, Qanon, Rockyboa, senseivita and 85 guests