All documentation
Remote access9 min

Winbox and RoMON

Create per-workflow Winbox access and reach downstream RouterOS devices.

Outcome

Technicians use familiar Winbox workflows without receiving permanent router credentials.

Before you start

  • An online MikroTik
  • Winbox enabled on the router
  • Permission to manage access

Create a Winbox access entry

  1. 1Open Winbox and choose Add account.
  2. 2Select the target MikroTik.
  3. 3Name the entry for the job or team.
  4. 4Provide router-side credentials through the protected workflow.
  5. 5Give the assigned technician only the managed connection details.
Operational note: Use separate access entries for teams or purposes instead of one universal technician login.

Open and monitor a session

  1. 1Enter the Wantastic endpoint in native Winbox.
  2. 2Use the generated managed identity.
  3. 3Confirm RouterBOARD identity and RouterOS version after login.
  4. 4Review activity after the work is complete.
  • Represent sessions independently.
  • Revoke access centrally.
  • Keep the router on its private management path.

Use RoMON deliberately

  1. 1Verify the gateway sees the downstream neighbor locally.
  2. 2Connect through the gateway's managed Winbox entry.
  3. 3Select the exact RoMON neighbor.
  4. 4Enable RoMON only on interfaces that match the management design.

Verify the result

Managed credentials open the selected router.
The router password was not shared.
Revocation blocks a new session.
RoMON reaches only the intended downstream path.

Common issues

Invalid user or password.
Likely cause

The managed entry is stale or router credentials changed.

Fix

Update the router-side credential in the protected entry and use the refreshed managed details.

Winbox opens the wrong router.
Likely cause

The wrong entry or RoMON neighbor was selected.

Fix

Stop, verify the entry/device name and confirm hardware identity before continuing.

Continue with

Winbox and RoMON | Wantastic Docs