Question 1

What is Wantastic?

Accepted Answer

Wantastic is a remote device-management platform for MikroTik RouterOS, OpenWrt and Linux fleets. It combines remote Winbox, WebSSH, WebProxy, team access, monitoring and WireGuard-based connectivity for devices behind NAT, CGNAT or firewalls.

Question 2

Is Wantastic free to use?

Accepted Answer

Yes. Wantastic has a free plan for small fleets and evaluation, and no credit card is required to sign up.

Question 3

What devices does Wantastic support?

Accepted Answer

Wantastic supports MikroTik routers running RouterOS v7+ using native WireGuard, plus Linux-based devices including OpenWrt, Raspberry Pi and containers through the open-source wantasticd agent.

Question 4

Where do I sign up and access the console?

Accepted Answer

You can create an account and access the management console at console.wantastic.app. Setup takes seconds and no credit card is required.

Question 5

Do I need to install an agent on my MikroTik router?

Accepted Answer

No. Wantastic connects to MikroTik routers using the built-in WireGuard client already present in RouterOS. There is no software to install and no modifications to your router's configuration beyond applying the auto-generated import script from the console.

Question 6

Which MikroTik RouterOS versions are supported?

Accepted Answer

RouterOS v7.x is recommended, as it includes native WireGuard support. RouterOS v6 does not have built-in WireGuard and is not currently supported for the agentless connection method.

Question 7

How does Winbox remote access work with Wantastic?

Accepted Answer

A connected MikroTik gets a controlled management endpoint. You use native Winbox workflows without exposing port 8291 or sharing the router's real admin credentials with every technician.

Question 8

Does Wantastic support RoMON for nested device access?

Accepted Answer

Yes. Native RoMON support is included, allowing you to reach downstream MikroTik devices through a connected upstream router — the same way you would on a local network.

Question 9

Can I use Winbox v2, v3, and v4 with Wantastic?

Accepted Answer

Yes. All Winbox versions are supported on the free and paid plans.

Question 10

How does Wantastic work without a public IP address?

Accepted Answer

Devices initiate outbound WireGuard-based connectivity to the management mesh. That means a router can be managed even when the WAN side has no public IP address or inbound firewall access.

Question 11

Does Wantastic work behind CGNAT, Starlink, or LTE?

Accepted Answer

Yes. The overlay network is designed to work behind CGNAT, Starlink, LTE, and any connection where you have no control over the public IP or inbound ports.

Question 12

Do I need to configure port forwarding or open firewall ports?

Accepted Answer

No port forwarding is required for the managed device path. Devices initiate the connection, and the overlay handles routing, NAT traversal and fallback behavior where needed.

Question 13

What is the P2P overlay network?

Accepted Answer

The overlay is the private management network that connects devices to the workflows in the console. It uses direct peer-to-peer paths where possible and relay fallback when network conditions require it.

Question 14

What security model does Wantastic use?

Accepted Answer

Wantastic focuses on reducing exposure and credential sprawl: isolated routing, explicit access policies, managed credentials, outbound device connections and central revocation.

Question 15

What transport security does Wantastic use?

Accepted Answer

MikroTik devices use native RouterOS WireGuard, while wantasticd provides a WireGuard-based agent path for Linux, OpenWrt and other supported platforms.

Question 16

Does Wantastic collect or store my network traffic or credentials?

Accepted Answer

Wantastic is designed for management-plane access, not packet inspection. Avoid storing shared router credentials in team workflows by using managed access and central revocation.

Question 17

What is zero-trust connectivity?

Accepted Answer

Zero-trust means no device or user is trusted by default, even if they are on the same overlay network. You explicitly define which devices can communicate with each other using ACL rules. This limits lateral movement in the event of a compromised device.

Question 18

What is wantasticd?

Accepted Answer

wantasticd is the open-source Wantastic agent for non-MikroTik devices. It connects Linux, OpenWrt, macOS and Windows systems to the WireGuard-based management mesh.

Question 19

What are the minimum system requirements for wantasticd?

Accepted Answer

wantasticd is designed for embedded and heterogeneous environments, including OpenWrt routers, Raspberry Pi boards, containers and standard Linux systems.

Question 20

Can I run wantasticd on OpenWrt?

Accepted Answer

Yes. wantasticd supports OpenWrt and other embedded Linux distributions.

Question 21

Can I run wantasticd in a Docker container?

Accepted Answer

Yes. wantasticd can run inside containers. It does not require kernel modules or privileged access beyond what is needed for its userspace networking stack.

Question 22

Can multiple team members access the same device simultaneously?

Accepted Answer

Yes. Team members can be invited and managed centrally, with access scoped to the devices and workflows they need.

Question 23

What is WebSSH and how does it work in Wantastic?

Accepted Answer

WebSSH is a browser-based SSH terminal for connected devices. It helps technicians work from a trusted browser without installing a separate SSH client on every workstation.

Question 24

Does Wantastic provide access logs or audit trails?

Accepted Answer

Yes. The platform includes access logs and audit logging for device connections and ACL rule changes.

Question 25

Who is Wantastic designed for?

Accepted Answer

Wantastic is built for ISPs, WISPs, MSPs, NOC teams, network engineers, lab owners and IoT operators managing MikroTik, OpenWrt and Linux infrastructure across hard-to-reach sites.

Remote Access Questions, Practical Answers.

Getting Started

MikroTik Remote Access

CGNAT & Connectivity

Security & Privacy

Linux & OpenWrt

Team & Management

Still have questions?