MikroTik ControlNetwork Control Platform
UARUEN
Sign in
PUBLIC OPERATIONS MANUAL

Documentation

Public read-only documentation for installation, RouterOS integration, VPN, security, reliability, backups, NOC and administration. Interface examples are anonymized.

VERSION3.6.3
SECTIONS63
Overview

Dashboard

Main overview of your accessible MikroTik devices: status, VPN, backups, configuration changes, and security.

  1. Open the Dashboard after signing in.
  2. Check the number of online/offline devices and warnings.
  3. Use cards and quick links to open the affected MikroTik device.
  4. For detailed status, open Monitoring; for history, open Charts.
Overview

NOC Wallboard 2.0

Full-screen operations view for a TV or NOC monitor: Router Health, Offline, WAN/SLA, incidents, threats, and a live timeline.

  1. Open NOC Wallboard.
  2. Switch the browser to full-screen mode.
  3. Monitor Offline, Health, WAN/SLA, Incidents and Threats.
  4. Watch for Security Timeline in lower part.
  5. Keep the page open — data updates automatically.
Overview

Monitoring

Compact live view: 3 devices per row on wide screens, 2 on medium screens, and 1 on mobile.

  1. Open «Monitoring».
  2. Find group/company and needed router.
  3. Assess CPU, RAM, uptime, interfaces and RouterOS.
  4. Click «Open» for card devices.
  5. To update RouterOS, open the device card → Update tab.
Overview

Charts

Historical telemetry for CPU, RAM, disk, availability, temperature, voltage, and traffic.

  1. Select MikroTik.
  2. Select period 1h / 6h / 24h / 7d / 30d.
  3. Compare peaks load and period downtime.
  4. Term retention data is determined plan owner devices.
Overview

Incident Center

Events and rules incidents: offline, CPU/RAM, temperature, SLA, certificates and other conditions.

  1. On tab «Events» view OPEN/RECOVERED incidents.
  2. Confirm handled events through ACK.
  3. On tab «Rules» set condition, threshold and object.
  4. When needed select Telegram destination.
  5. Check, that Maintenance Mode not suppresses needed notifications.
EventsRules incidents
Infrastructure

Routers

List all owned and shared you MikroTik. Administrator sees all devices system.

  1. Open list routers.
  2. Use group, status and name for selection devices.
  3. Click «Open», to go in card.
  4. For new devices use «＋ Add MikroTik».
Infrastructure

Add MikroTik

Connection new RouterOS through Native API/API-SSL.

  1. Prepare on MikroTik separate user panel.
  2. Recommended API-SSL TCP/8729.
  3. Enter IP/DDNS, login, password and transport.
  4. Click «Check connection».
  5. After successfully test save device.
  6. Assign group/company and fill card object.
Infrastructure

Groups / Companies

Logical organization devices by clients, companies or technical group.

  1. Open tab «Create».
  2. Enter name and type Group/Company.
  3. Save group.
  4. When adding or editing MikroTik assign its group.
  5. Deletion groups not deletes themselves routers.
ListCreation groups
Infrastructure

Topology

MNDP/LLDP/Cdp-sosedi and automatically discovered topology.

  1. Open Topology.
  2. Select or find needed MikroTik.
  3. Click update Neighbor Discovery when needed.
  4. Checks IP/MAC, interface, identity, model and RouterOS neighbors.
  5. Devices panel are marked as MANAGED NODE.
Infrastructure

VPN Users

Management end Vpn-polzovatelyami and their devices.

  1. Create Vpn-polzovatelya.
  2. Open its card.
  3. Add device and select MikroTik.
  4. Select WireGuard/OpenVPN/L2TP-IPsec/SSTP/PPTP.
  5. Select allowed Lan-seti.
  6. Download configuration, QR or ZIP.
List usersNew Vpn-polzovatelVpn-ustroystva userAdd Vpn-ustroystvoSettings Vpn-polzovatelya
Functions card devices

Card MikroTik

Main center management specific devices. Less common functions moved here from global menu.

  1. Open «Routers» → needed device.
  2. Check identity, RouterOS, status and parameters API.
  3. IN top tab use «Service ports» for /ip service: API, API-SSL, WWW/WWW-SSL, SSH and Winbox.
  4. Change active Api-porta passes validation connection and rollback when error.
  5. Use tiles functions for Interfaces, DHCP/ARP, Wi-Fi/LTE, Routing, Certificates, SLA, RouterOS Logs, Backups and Security.
  6. IN block Shared Access grant access by login exists user system.
Module devicesChannel APIService portsShared Access
Functions card devices

Interfaces Manager

Interfaces ether/SFP/VLAN/bridge/bonding, counters and status link.

  1. Open Interfaces from card router.
  2. Check Running, MTU, MAC, RX/TX, errors and link downs.
  3. When having permissions manage use Enable/Disable.
Functions card devices

DHCP / ARP Inventory

Inventory end devices for MikroTik.

  1. Open DHCP/ARP from card.
  2. Refresh inventory when needed.
  3. Search for IP, MAC, hostname, interface and last seen.
  4. For search by all routers use «Global search».
Functions card devices

Wi-Fi / CAPsMAN / LTE / 5G

Clients Wi-Fi/CAPsMAN and status LTE/5G-modemov.

  1. Open functions from card MikroTik.
  2. For Wi-Fi check SSID, signal, TX/RX rate and clients.
  3. For LTE/5G check operator, band, Cell ID, RSRP/RSRQ/SINR/RSSI.
  4. Correlate poor signal with history SLA.
Functions card devices

Routing Monitor

BGP/OSPF peers and status dynamic routing.

  1. Open Routing from card.
  2. Check peer/neighbor state and uptime.
  3. When failure adjacency correlate time with Alerts and RouterOS Logs.
Functions card devices

Certificates

Inventory RouterOS certificates and control term actions.

  1. Open Certificates.
  2. Check Common Name, issuer, trusted and expiration.
  3. Create Alert Rule on approaching term expiration.
Functions card devices

WAN / SLA Monitoring

Latency, packet loss and availability external targets with measured by by itself MikroTik.

  1. On tab Targets select exists target.
  2. On tab Create add IP/hostname for checks.
  3. Open Graph for history for 24 hours.
  4. Create Alert Rule for latency/packet loss.
SLA targetsSLA chartAdd target
Functions card devices

Config History / Diff

Versioning RouterOS export and comparison changes configuration.

  1. Select MikroTik.
  2. Create snapshot manually or wait for worker.
  3. Open needed version.
  4. Go on Diff, to see added and deletion rows.
  5. When needed download historical .rsc.
History snapshotDiff configuration
Functions card devices

Backups

Backup .backup + .rsc with Local or FTP/FTPS backend and retention by plan.

  1. On tab Manual select router and create backup.
  2. On Archive download or delete archives.
  3. Administrator on Policy set automatically backup.
  4. FTP/FTPS is configured in Settings → Storage.
  5. Term retention is determined plan owner.
Archive backupManual backupPolicy backup
Functions card devices

Security Audit

Score security RouterOS by scale 0–100 and recommendations.

  1. Open Security Audit from card devices.
  2. Run Scan.
  3. View found risks and recommendations.
  4. Fix API/WinBox/SSH/firewall/DNS/update findings.
  5. Repeat Scan for checks result.
Functions card devices

Safe Apply + Rollback

Safe change configuration with checkpoint, backup and subsequent verification API.

  1. Select MikroTik.
  2. Paste RouterOS script or apply Template through Safe Apply.
  3. Describe change and run.
  4. Panel will create checkpoint and will check availability after application.
  5. If change unsuccessful — use History / Rollback.
Safe ApplyHistory / Rollback
Functions card devices

Asset card

Address, contacts, provider, contract, rack, UPS, SIM, coordinates and notes.

  1. Open card object from MikroTik.
  2. Fill operational data.
  3. Save changes.
  4. Use card as technical record site.
Fleet Operations

Network Operations v3.0

Unified center operations and security: Compliance, RouterOS Update Center, Firewall Analyzer, Change Audit, Golden Configuration, API Traffic Flow, Topology 2.0, IPAM 2.0, DNS Security, Scheduled Jobs, Runbooks, Log Correlation, Disaster Recovery and control uniqueness Acme-poddomenov.

  1. Select needed tab Network Operations.
  2. For live-proverok select MikroTik and run Scan/Sample/Runbook.
  3. Change Audit and Golden Configuration use normalized config snapshots.
  4. Traffic Flow works through exists RouterOS Native API/TCP and not requires separate UDP collector.
  5. Before Disaster Recovery created fresh backup/export.
  6. Administrator monitor stale hostname leases on tab «Subdomain».
Fleet Operations

Reliability, Security & NOC v3.1

Unified operations center v3.1: Router Health Score, safe changes, WAN/SLA, Wi‑Fi/CAPsMAN, ARP/MAC, L2 loop health, DDoS/GeoIP, Security Timeline and Root Cause Analysis.

  1. Select MikroTik in top filter.
  2. Click «Full v3.1 scan» for initial population analytics.
  3. Start with Health Score: open components with lowest score.
  4. On Config / Safe Apply create snapshot until changes and monitor COMMIT/ROLLBACK.
  5. On WAN / SLA check availability, latency, jitter and packet loss.
  6. Wi‑Fi Analyzer and CAPsMAN use for clients, radio, SSID and provisioning.
  7. ARP / MAC and L2 Health checks when conflicts addresses, MAC move, topology changes and loop-priznakakh.
  8. DDoS / GeoIP and Security Timeline provide context attacks and sequence protective actions.
  9. Root Cause combines related symptoms in one likely source problem.
Router Health ScoreConfig / Safe ApplyWAN / SLAWi‑Fi AnalyzerCAPsMAN ManagerARP / MAC SecurityL2 / Loop HealthDDoS / GeoIP / ASNSecurity TimelineRoot Cause Analysis
Fleet Operations

Custom Dashboard + Dashboard Builder

Personal operations Dashboard. User selects widgets, changes order drag-and-drop and gets own Noc-svodku.

  1. Open Dashboard Builder.
  2. Select needed widgets: Health, Routers, SLA, Incidents, Threats, Wi‑Fi, Timeline, Locations, Backups, Certificates.
  3. Drag rows for drag handle, to set order.
  4. Save layout.
  5. Go in Custom Dashboard and check display on working allowed.
Dashboard BuilderCustom Dashboard
Fleet Operations

Locations / Network Map

Geographic map sites: site name, country, city, address, coordinates and navigation to specific MikroTik.

  1. Select MikroTik.
  2. Fill Site name, Country, City and Address.
  3. Specify Latitude/Longitude.
  4. Save location.
  5. Check marker on map and navigation to card router.
Fleet Operations

Asset Management

Inventory equipment: type, vendor/model, serial, asset tag, date purchase/installation, warranty, responsible, supplier and site.

  1. Open Assets → Equipment.
  2. Add device and when needed link its to MikroTik.
  3. Fill serial number, asset tag, purchase/install date and warranty.
  4. Specify responsible person, supplier and location.
  5. Use list as technical registry equipment.
Fleet Operations

Warranty / Contract Lifecycle

Control term warranties, ISP/SIM/domain/support/license/maintenance contracts with reminders until date expiration.

  1. Open Assets → Lifecycle.
  2. Select type obligation and linked MikroTik.
  3. Specify provider/reference and Due date.
  4. Configure list days reminders, for example 90,60,30,14,7,3,1,0.
  5. Monitor Days left and delete completed entries.
Fleet Operations

Troubleshooting Center

Operational diagnostics with the router itself MikroTik: Ping, Traceroute, DNS lookup, TCP-port check, Torch, Route/ARP lookup and WireGuard health.

  1. Select MikroTik.
  2. Select diagnostic tool.
  3. For Ping/Traceroute/DNS/TCP specify target; for TCP also port; for Torch — interface.
  4. Run test and review structured result.
  5. Use history diagnostics for comparison recurring problems.
Fleet Operations

IPAM

Centralized tracking IPv4 CIDR, VLAN, gateway and DHCP pools with verification overlaps.

  1. Add network manually or import LAN owned MikroTik.
  2. Specify VLAN, gateway and DHCP pool.
  3. Panel not will allow save overlapping CIDR.
  4. Use suggested available /24 when planning new VPN/site-to-site networks.
Fleet Operations

Network Discovery

Combined discovery MNDP/LLDP/CDP, DHCP/ARP, Wi-Fi and bridge hosts.

  1. Select MikroTik.
  2. Click «Refresh Discovery».
  3. Check neighbors, clients, Wi-Fi and bridge hosts.
  4. Go to card router or global search for further diagnostics.
Fleet Operations

VPN Health Center

Unified status client and site-to-site tunnels: online/offline, handshake, RX/TX and HUB/SPOKE.

  1. Open VPN Health.
  2. Check Offline-tunneli and time last handshake.
  3. Correlate problem with WAN/SLA and RouterOS Logs.
  4. For site-to-site check count online SPOKE relative to total count.
Fleet Operations

NAT / Port Forward Inventory

Centralized table DNAT/port-forward all available MikroTik with highlighting sensitive external port.

  1. Select MikroTik and refresh NAT/Firewall snapshot.
  2. Check external address/port → internal address/port.
  3. Pay attention on warnings for SSH, RDP, WinBox, API/API-SSL and other management ports.
  4. Use filtering/search for audit exposures.
Fleet Operations

Firewall Analyzer

Static analysis filter/input: broad allow, absence stateful baseline/final drop, duplicates and suspicious order rules.

  1. Refresh NAT + analysis selected MikroTik.
  2. Open Firewall Analyzer.
  3. Start with CRITICAL/HIGH findings.
  4. Checks rule ID, details and recommendation before changes.
  5. After fix perform analysis again.
Fleet Operations

PKI / API-SSL Certificates

Issuance local CA and server certificate for API-SSL directly on RouterOS.

  1. Select test MikroTik.
  2. Specify Common Name.
  3. Issue CA + server certificate.
  4. Panel assigns server certificate service api-ssl.
  5. Check connection API-SSL and only after this includes verify TLS.
Fleet Operations

Credential Rotation

Safe rotation RouterOS Api-uchyotki: create new → check sign in → switch panel → optionally delete old.

  1. Select MikroTik.
  2. Run Rotation.
  3. Panel will create new random account with group current user.
  4. New account first passes real API-login.
  5. After successfully checks panel saves new credentials; deletion old accounts performed only after test.
Fleet Operations

Firmware Rollout Rings

Staged update RouterOS by rings TEST → PILOT → PRODUCTION with backup, soak period, alert-stop and post-reboot verification.

  1. Create Update Window.
  2. Create rollout and select devices.
  3. First device becomes TEST, then PILOT and PRODUCTION.
  4. Run rollout.
  5. After install panel waits for reboot, return API and expected RouterOS version.
  6. Only after successfully checks and soak period starts next ring.
Fleet Operations

Update Windows

Allowed temporarily windows automatically RouterOS upgrades, enable windows through midnight.

  1. Select one MikroTik or all owned devices.
  2. Specify Iso-dni week.
  3. Specify Start and End, for example 23:00 → 02:00.
  4. Rollout outside allowed windows not starts install.
Fleet Operations

Customer Status Page

Private token-ssylka only for view status devices clients and WAN/SLA.

  1. Create Status Page.
  2. Immediately save issued link — token in plain sees more not stored.
  3. Share link clients.
  4. Public page not contains credentials and not provides management.
  5. When needed delete link and create new.
Fleet Operations

Maintenance Calendar

Scheduled windows maintenance for one MikroTik or all devices owner with automatically Maintenance Mode.

  1. Specify scope, start and expiration.
  2. Add name and reason work.
  3. Worker automatically includes Maintenance on period windows.
  4. After expiration Maintenance is disabled automatically.
Fleet Operations

Storage Dashboard

Control Local/FTP/FTPS backup backend, availability and usage space by owner.

  1. Check Backend and Health.
  2. For FTP/FTPS details set in Settings → Storage.
  3. Monitor volume, oldest/newest backup and errors verification.
Fleet Operations

Backup Verification

Check real usability backup: read from storage, decryption, sanity-size and SHA-256.

  1. Open Backup Verification.
  2. Run Verify for one archive or all available.
  3. Status VERIFIED confirms, that file real is readable and decrypts.
  4. Worker again checks long ago not verified backup automatically.
Fleet Operations

Usage / Billing Analytics

Actual use plan and resources: routers, VPN, backup storage, logs, metrics and forecast backup growth.

  1. Check limits routers/VPN.
  2. View actual volume backup and count log/metric rows owned devices.
  3. Compare retention current plan.
  4. Use 30-day forecast for planning storage.
Fleet Operations

PWA / Mobile

Standalone mobile monitoring with Passkey-vkhodom and full background Web Push/VAPID.

  1. Open PWA Monitor through HTTPS and install application.
  2. Administrator one time generates VAPID in Notifications → Web Push / VAPID.
  3. On PWA → Settings click «Enable Push on this device».
  4. Select categories events user.
  5. Push receives Service Worker even when closed PWA; click opens appropriate mobile page.
Fleet Operations

Admin Impersonation

View panel as specific user without knowing its password.

  1. Open Users.
  2. Click «Sign in as» at needed user.
  3. Persistent red bar show mode impersonation.
  4. All actions Audit records from real administrator with mark impersonated user.
  5. Click «Return to administrator» for exit from mode.
Automation

RouterOS Logs + Analyzer

Log RouterOS is collected directly through Native API/API-SSL, and built-in local analyzer classifies events, searches for recurring incidents and anomalous spikes.

  1. Add MikroTik and make sure, that Native API available.
  2. Worker automatically reads /log through API and saves only new entries.
  3. On tab «Logs» filter events by router, topics, categories, IP and text.
  4. On tab «Analyzer» select router and period 1h/6h/24h/7d/30d.
  5. Check Risk Score, spikes events, recurring incidents and Ip-istochniki.
  6. Use recommendations analyzer together with Security Audit, Interfaces, VPN and Routing.
  7. Term retention logs is determined plan owner devices.
View logsAnalyzer logsAPI Collector
Automation

Blacklist / Threat Intelligence

Three independent source block: AbuseIPDB, Global Blacklist panel and personal User Blacklist. Admin/User Whitelist always excludes address from exports on MikroTik.

  1. AbuseIPDB: administrator set Api-klyuch, confidence, limit and schedule updates.
  2. Global: worker aggregates security-sobytiya Log Analyzer with all MikroTik and calculates common score.
  3. User: user manually maintains owned IP/CIDR blacklist.
  4. Whitelist: Admin Whitelist active on all, User Whitelist — on routers owner.
  5. MikroTik: enable needed sources, limits and automatically delta-sinkhronizatsiyu.
  6. When needed enable DROP rules for INPUT/FORWARD.
  7. Administrator may generate queue confirmation Global events and send reports in AbuseIPDB manually or automatically.
AbuseIPDBGlobal BlacklistUser BlacklistWhitelistMikroTik syncAbuseIPDB ReportingSettingsHistory
Automation

Templates configurations

Library reusable RouterOS scripts: user, global and system templates.

  1. Open Library and select exists template or Create.
  2. Specify type Snippet/Baseline/Full configuration, categories, tags and minimum RouterOS.
  3. Use variables {{ROUTER_NAME}}, {{ROUTER_HOST}}, {{LAN_NETWORKS}}, {{GROUP_NAME}}.
  4. Select MikroTik and apply template.
  5. For critical changes includes Safe Apply.
  6. System template first clone itself, then edit copy.
My / CommonSystem templatesCreation templateEditing template
Automation

Bulk Operations

Job Queue for execution operations on several MikroTik.

  1. On Create select operation: sync/backup/update/security/inventory/reboot/template.
  2. If needed Template — select its.
  3. Select target routers.
  4. Create Job.
  5. On Queue track OK/fail/total by job.
Job QueueNew bulk operation
Automation

Scheduler

Periodic backup, sync, inventory, update check, security and reboot.

  1. Open Create.
  2. Enter name and operation.
  3. Select one Router or group.
  4. Specify interval not menu 300 seconds.
  5. Save and monitor Next Run / Last Status on tab Tasks.
JobNew job
Account

Plan / Payment

Current plan, use MikroTik/VPN, retention and history payments.

  1. On Overview check current plan and use limits.
  2. On Plans select suitable plan.
  3. Payment through enabled LiqPay or WayForPay.
  4. On Payments check status payments.
  5. When reaching limits exists resources saves, but creation new is blocked.
Overview planSelection planMy payments
Account

2FA / Passkeys

TOTP and WebAuthn Passkeys/Windows Hello/Touch ID.

  1. For TOTP open tab TOTP and start settings.
  2. Scan QR Authenticator-prilozheniem and confirm code.
  3. For Passkey open tab Passkeys and register key.
  4. After registration use button Passkey directly on screen sign in.
  5. WebAuthn requires HTTPS and valid public domain.
TOTPPasskeys / Windows Hello
Account

Settings

Settings profile and administrative integrations: Public Portal, Feedback, Legal/Requisites, SMTP and file storage.

  1. Profile: check data own account.
  2. Public Portal: configure multilingual main UA/RU/EN, contact rows and copyright.
  3. Feedback: select delivery request on Email or Telegram destination and monitor inbox.
  4. Legal / Requisites: fill Privacy, Public Offer and Requisites separately for UK/RU/EN.
  5. SMTP: set mail server and test email.
  6. Storage: select Local or FTP/FTPS and perform test read/write/delete.
ProfilePublic PortalFeedback routing / InboxLegal / Company DetailsSMTP / EmailBackup Storage / FTP
Administration

Public Portal / Feedback / Legal

Public site panel until authorization: UA/RU/EN, open documentation, form feedback links, Privacy, Public Offer, Requisites and copyright.

  1. IN Settings → Public Portal fill text main on three languages.
  2. IN Feedback select Email or Telegram destination for request.
  3. Check Inbox and status delivery message.
  4. IN Legal / Requisites fill three legal pages for UK/RU/EN.
  5. Open /docs without authorization and check public documentation.
  6. Before commercial launch adapt legal templates under data operator.
Multilingual mainFeedback formPublic documentationPrivacyPublic OfferRequisites
Administration

Billing / Plans

Payment gateways, plans, retention, subscriptions and history payments all users.

  1. Gateways: enable billing and configure LiqPay/WayForPay.
  2. Plans: create plan, limits MikroTik/VPN and retention Logs/Graphs/Backups.
  3. Subscriptions: assign plan user manually when needed.
  4. Payments: monitor status CREATED/PROCESSING/PAID/FAILED.
Payment systemPricingUser subscriptionsPayment history
Administration

Panel Updates

Local panel release catalog from /opt/mikrotik-panel/update. It shows changes and downloadable files modified during the last 7 days.

  1. Place ZIP/TAR/GZ packages and CHANGELOG/RELEASE NOTES files in /opt/mikrotik-panel/update.
  2. Public page available without authorization by adresu /update.
  3. Administrator also sees sluzhebnyy katalog in Administration → Updates panel.
  4. IN block «Changes for 7 days» otobrazhayutsya svezhie CHANGELOG/RELEASE NOTES.
  5. IN table faylov vidny date, size, type paketa and public knopka skachivaniya.
  6. Symlink, skrytye fayly, zapreshchyonnye rasshireniya and vykhod for predely update-kataloga not obsluzhivayutsya.
Administration

Notifications

Center Telegram and Web Push/VAPID: recipients, events, background Pwa-uvedomleniya and server Vapid-klyuchi.

  1. Telegram Bot: save token and check its.
  2. Discovery: send message bot and detect chat/topic ID.
  3. Destinations: add recipient and scope groups.
  4. Web Push / VAPID: one time generate server pair key and set allowed categories events.
  5. User includes Push on specific device in PWA Settings.
  6. Send test notification and check opening needed Pwa-stranitsy.
Telegram BotRecipientsDiscovery chatsWeb Push / VAPID
Administration

Users

All registered account system.

  1. Find user by login/email.
  2. Check email verification and active status.
  3. When needed disable account.
  4. For exact permissions use RBAC.
  5. Access to separate router grant from its card by login user — email send automatically.
Administration

RBAC

Role ADMIN/MANAGER/OPERATOR/USER/VIEWER and exact permission overrides.

  1. Select user.
  2. Assign basic role.
  3. Select needed permissions.
  4. Save RBAC.
  5. Remember: object isolation and Shared Access continue act over role.
Administration

Audit

Log administrative and user actions. Object clickable.

  1. Open Audit.
  2. Find actions by temporarily/type.
  3. Click on user, MikroTik, VPN, backup, plan or other related object.
  4. Check details and source IP.
  5. Use log for investigation changes configuration and access.
Help

Documentation

This page. Structure repeats menu after authorization, and each section has persistent anchor.

  1. Use table of contents left.
  2. Start enter text in field search for filtering functions.
  3. On any page panel click «? Documentation» in header.
  4. Link automatically opens needed anchor functions.