Page 1 of 1

Remote access

Posted: Mon Aug 02, 2021 12:57 pm
by twistsd
I am trying to use the .sn.mynetnames.net address from winbox when I am not onsite, but it will not connect. If I type the URL into web browser it takes me to my ISP's router, what do I need to change on the ISP's router to allow access?
Thanks

Re: Remote access  [SOLVED]

Posted: Mon Aug 02, 2021 1:25 pm
by Jotne
DO NOT OPEN ADMIN INTRAFACE FROM INTERNET.

Use VPN to administrate your device from remote location.
If VPN can not be used, follow this list to make connection some more secure.

1. Use another port than default.
2. Use port knocking. This prevents someone from seeing open ports.
3. Use a long and good password.
4. Use access list to prevent any random internet from accessing your router.
5. Log everything. (See my signature for example.)
6. Upgrade firmware to latest stable release
7. Block all user for some time that do try an port that is not open
8. +++

Do you have a public IP on your MikroTik router?
If not, you need to make ISP set their modem/router to bridge mode, or NAT the port you need to use in ISP mode/Router.

Re: Remote access

Posted: Mon Aug 02, 2021 3:26 pm
by anav
Best advice you will get today is from Jotne...
Never allow direct access to the router, VPN or port knock into the router and then access the router via winbox
Also change winbox port from default.

Re: Remote access

Posted: Mon Aug 02, 2021 8:06 pm
by vinu
hi,
Most probably you been assigned a private natted address from your ISP u need a public IP from your ISP confirm that
check your WAN ip in mikrotik is it a public IP / Private IP?

Re: Remote access

Posted: Sat May 07, 2022 10:40 am
by SimonAngatia
DO NOT OPEN ADMIN INTRAFACE FROM INTERNET.

Use VPN to administrate your device from remote location.
If VPN can not be used, follow this list to make connection some more secure.

1. Use another port than default.
2. Use port knocking. This prevents someone from seeing open ports.
3. Use a long and good password.
4. Use access list to prevent any random internet from accessing your router.
5. Log everything. (See my signature for example.)
6. Upgrade firmware to latest stable release
7. ++++

Do you have a public IP on your MikroTik router?
If not, you need to make ISP set their modem/router to bridge mode, or NAT the port you need to use in ISP mode/Router.
Thank you for this answer. If I may request you, could you provide any links to articles on how to setup VPN? I am new to mikrotik please.

Re: Remote access

Posted: Sat May 07, 2022 11:04 am
by Jotne
Use google ans search for mikrotik vpn.
MikroTik do support a big variety of VPN so select the type that fits your need. (Stay away for PPTP VPN)

Re: Remote access

Posted: Mon May 09, 2022 1:58 pm
by SimonAngatia
Use google ans search for mikrotik vpn.
MikroTik do support a big variety of VPN so select the type that fits your need. (Stay away for PPTP VPN)
Hello, considering that I intend to use my application as SAAS, which means that it should be able to provide for connecting many routers to the same domain. One domain controls many routers with different credentials. What could be the easiest way/ the most efficient way to accomplish this? Thank you.

Re: Remote access

Posted: Mon May 09, 2022 2:08 pm
by own3r1138
different credentials. What could be the easiest way/ the most efficient way to accomplish this?
Easiest L2TP IPsec
Best WG - IKEv2