Multiple devices behind router

General discussion of anything Unimus
Post Reply
zetle
Posts: 3
Joined: Sun Dec 29, 2024 10:18 am

Sun Dec 29, 2024 10:27 am

Hello,
I'm new customer with 200 licenses bought, and will grow in near future.
I know the topic is discussed over the years, but I can't find up to date info.
The common case where we want to connect and backup internal devices such as switches, etc.
The concept of using Core module is not very useful in that case, as there is need to deploy it on many environments, some of which do not have on premise servers that can handle the Core VM/Container.
At this point I have managed to workaround this limitation, doing NAT on the router and put the internal devices in different "Zones" and "per-Tag connector" to skip the limit of "One IP, One Device" but it is not a good way to go.

So the question: What is the best way to connect internal devices without using on-premises Core?
In the context of Mikrotiks as routers on most locations, do you consider something as SSH Jumphost from the router to internal devices ?
Also possibility to run "Core" in Mikrotik's Container ?
User avatar
Tomas
Posts: 1308
Joined: Sat Jun 25, 2016 12:33 pm

Sun Dec 29, 2024 10:38 am

zetle wrote:
Sun Dec 29, 2024 10:27 am
...
At this point I have managed to workaround this limitation, doing NAT on the router and put the internal devices in different "Zones" and "per-Tag connector" to skip the limit of "One IP, One Device" but it is not a good way to go.

So the question: What is the best way to connect internal devices without using on-premises Core?
In the context of Mikrotiks as routers on most locations, do you consider something as SSH Jumphost from the router to internal devices ?
Also possibility to run "Core" in Mikrotik's Container ?
Hi. Probably the easiest setup at the moment would indeed be to run the Core on Tik's Docker. We have a guide for this here:
https://blog.unimus.net/running-unimus- ... -routeros/

We do plan to add the ability to use an SSH jumphost / proxying / port forwarding in the future as a Zone's connection method, so you would be able to create a Zone that would use the edge router for each network as it's proxy into the network. That will take a bit of implementation time however, so at the moment going with a Dockerized Core would be the best approach.
zetle
Posts: 3
Joined: Sun Dec 29, 2024 10:18 am

Sun Dec 29, 2024 12:12 pm

Thank You for the fast reply.
Implementation of "Edge router" will be greatly appreciated by many.

I will try the Docker approach now.
zetle
Posts: 3
Joined: Sun Dec 29, 2024 10:18 am

Sun Dec 29, 2024 1:26 pm

New blocker, that I forgot. There is no Container support for most of the Mikrotik's architecture. Only supported on ARM/ARM64 and x86, while much of our routers are based on MMIPS and TILE architectures... So the jumphost functionality appears to be even more important now :)
Post Reply