Every router iberry runs - in a hotel, office or hotspot - dials out to our servers over an encrypted tunnel. That means no public IP, no port forwarding and no WinBox open to the internet, and one place to see whether every site is up.
Most business internet lines - fibre, broadband behind the ISP's router, 4G/5G - give the MikroTik a private or changing address, so it cannot be reached from outside. The fix is to turn the connection around: the router opens an encrypted tunnel to a server with a fixed address, and every management connection travels through that tunnel. On RouterOS 7 iberry uses WireGuard; on older RouterOS 6 devices, SSTP or another VPN the router supports.
Once the tunnel is up, WinBox, SSH, the web interface and the REST API answer only over it. The management ports are closed to the internet, which stops the password-guessing that every exposed MikroTik sees within minutes.
MikroTik's free dynamic DNS name for your router. Useful when the router has a public IP that changes; no help behind CGNAT.
MikroTik's built-in VPN for reaching your own network through MikroTik's relay. Designed for a person connecting home, not for managing a fleet.
A small cloud server with a fixed IP and one WireGuard peer per router. Flexible and secure, but you build the monitoring, backups and alerting yourself.
MikroTik's free network monitor. It still needs a path to each router - usually the same VPN.
MikroTik does not run a hosted multi-site management platform like Omada Cloud or UniFi Site Manager. That gap is what a managed service fills.
Each router is checked over the tunnel every few minutes; offline and back-online times are logged per site.
When an internet line drops and the backup takes over, it is recorded - see internet failover and MikroTik load balancing.
A cable plugged into two switch ports can flood a network. Routers that log a loop or a packet flood are flagged within minutes.
Every router's configuration is backed up to cloud storage each night, so a failed or reset router can be restored.
Hotspot users and limits, blocked websites, bandwidth rules and firewall changes - made remotely and recorded.
Management ports closed to the internet, unused services off, and logins from the management network only.
Hotels, offices and hotspot operators with one router or a hundred, in India or abroad, that want their MikroTik routers looked after rather than looked at. Remote management is part of iberry's managed service for the networks we run - with the captive portal, cloud RADIUS and firewall - not a separate self-service app. See also MikroTik setup and support.
Make the router connect out: set up WireGuard (RouterOS 7) or SSTP to a server with a fixed public IP, then manage the router through that tunnel. MikroTik's Back To Home VPN does the same for personal use.
Not a hosted multi-site controller. RouterOS offers IP Cloud dynamic DNS and the Back To Home VPN, and The Dude for monitoring; managing many sites from one place needs your own server or a managed service such as iberry.
No. Exposed WinBox, SSH, web and API ports are scanned and attacked constantly. Close them on the WAN and manage the router through a VPN tunnel instead.
Bring them all onto one VPN, then poll each one for status, interfaces and logs - with The Dude, Zabbix or Grafana if you run it yourself. iberry does this as a service, with alerts, WAN events, LAN loop warnings and nightly backups.
Yes. The tunnel works from any country; iberry configures and monitors remotely, and a local technician handles anything physical.
Tell us how many sites, the RouterOS versions and what the routers do. Published plans in India start at ₹30,000 one-time with ₹15,000 yearly maintenance; outside India every project is quoted on its own.
Ask about your routers