For wireless networks
Every tower on your panel, without a drive out to the site.
The router on the tower connects with one line even without a fixed IP, you open Winbox on it from your browser, and if it goes down the system is the one that tells you. Subscribers and invoices sit in the same panel.
- One line connects the router
- No fixed IP, no port to open
- Winbox from the browser
On SAS4 today? Upload the backup and keep working the same day. You can go back whenever you want.
nas — tower-06
- transport
- wireguard
- tunnel
- 10.9.0.14
- routeros
- 7.11.2
- radius
- ok
- icmp
- up
NAS online
Problems you can stop dealing with
The tower is on a line with no fixed IP, so nothing can reach it from outside.
The router connects to us and registers itself. No fixed IP, and no port to open on your side.
Every small change on the router means a drive out to the tower.
You open Winbox or SSH on the router from your browser, and on the switches and cameras behind it too.
A tower goes down and you find out from a subscriber's phone call.
The system watches every device all the time, and if something stops or goes past the limit you set, the alert reaches you.
A subscriber uses up the quota, the connection cuts out, and they call you.
Instead of cutting out, they drop to the next plan you chose, while they stay online.
What you get for your network
One line connects the router
Type the router's name, pick the RouterOS version, copy the line you get and paste it into the MikroTik. If you want, you can edit the script itself.
Old routers and new
Each router connects to us over its own private link, whether the MikroTik runs version 6 or version 7. Remove the router from the panel and that link closes with it.
Reach the router from anywhere
Winbox opens for your address only and closes when you are done. SSH gives you temporary access to the router's console.
Monitoring and the map
A limit for everything you watch, every device on the map where it stands, grouped by area when there are many of them, and a network drawing with the links you draw between devices.
Limits for every plan
Each plan has a limit on usage, time and speed, and on how many devices can sign in on the same account at once.
Subscribers pick their speed
A plan can offer a range of speeds. The subscriber picks inside it from their own page, and the speed changes while they are online.
DetailsThe technical part
If you own the network you can skip this part. It is for your engineer.
Managed tunnels
WireGuard for RouterOS 7, OpenVPN over TCP for RouterOS 6, ZeroTier for RouterOS 7 on ARM. One tunnel per NAS, and the NAS registers itself by its tunnel source address, with no inbound firewall rule. Deleting the NAS tears its tunnel session down. The script template is editable per account.
Monitoring and access
ICMP and SNMP sweeps with thresholds per sensor, and an alert centre where a sensor inherits the device's notification settings. The Winbox relay opens a port pinned to your address, and the SSH front door mints short-lived credentials.
Quotas and CoA
Counters on the hot path in Redis, Postgres as the source of truth. The drop to the next plan is applied at login and live over CoA, and a subscriber's speed choice reaches the running session the same way.
~6,000 sessions
Concurrent sessions at about 600 accounting packets per second, with authentication at 800 auth/s and p95 13.7 ms, measured on one 4 vCPU / 7.7 GB server, release 0.2.16.
Questions we get asked a lot
Does the router need a fixed IP?
No. The router connects to us, and you do not open any port on your side. Everything between the router and the panel, sign-ins and management, goes through that connection.
Which RouterOS versions can connect?
Version 6 and version 7. The line your panel gives you is made for your router's version: version 6 connects over OpenVPN, version 7 over WireGuard, and ZeroTier on version 7 with an ARM processor. The hotspot page designs are tested on 7.11.2.
What if the connection between the tower and us drops?
The router connects again on its own. Until it does, the system marks the device as down and sends you an alert on the channels you chose.
Can I disconnect a subscriber from the panel?
Yes. A disconnect or a speed change goes from the panel straight to the router, without you signing in to the router.
What if the router is not a MikroTik?
Any RADIUS device signs subscribers in and counts their usage and bills as normal. The one-line connection, Winbox in the browser and the hotspot page designs are for MikroTik only.