So even if customers' security administrators would accept such a solution, you should think about some other way to reach your devices for your own protection against eventual consequences. This is possible, but it is a security nightmare, as any malware eventually squatting in one of your customers' LANs can infect your support PC, and then it can spread to other customers' LANs once you connect that PC there.

What you seem to ask for is an L2 tunnel between your support center and the customer's LAN. The only important thing about my project, to be as less intrusive as possible on the customer's network (plug and play), to always be able to have remote access and control on the mikrotik and on the device - as if it were connected directly to my pc. Maybe because I'm under a different ip family, I'm under 192.168.5.x which is the ip of the chr vpn and the device is under 192.168.88.x, so maybe I can't recognize it with the software.

I have created some routes (do I lose them every time the user vpn disconnects?), In short From my pc I can ping the device that is under the mikrotik but not recognize it. I managed to create two vpns, from my pc to the chr, from the client's mikrotik to the chr. I set up a CHR on amazon AWS, so I created a vpn sstp server with relative certificates on this. I also specify that there are 2 software, one so that uses port 5200, the other not so. Therefore mikrotik should give me the possibility to be plug and play, to network with mikrotik and in that moment my device becomes manageable via vpn.įor now I have tried in this way managing to ping the device, but not to see it with the management software, I will perhaps explain why. I state that the management program of the device that I sell recognizes the device automatically when it is under the same network as the PC (same range of ip) so I would like to get out of this thing. I have several devices from my customers, I do remote assistance but the biggest obstacle to overcome is the configuration of the network or of the customers' PCs. I approached mikrotik because of my business. Hi guys, i have recently known the world of mikrotik.

Teamviewer vpn ping not working