Paste one command into the router terminal, then open WinBox, WebFig or the API at tunnel.maesuaisystem.com:your-port. Traffic graphs, daily backups and offline alerts included.
Built for network technicians, ISPs, shops, dorms, branch offices and anyone looking after routers in many places
The router dials out to us, so it works behind CGNAT, 4G/5G and any home line. No port forwarding, no DDNS.
A private public port for each service. Add your own, such as API-SSL or a port you moved.
One click limits a port to the addresses you allow, and rapid connection attempts are throttled automatically to stop WinBox password guessing.
Watch WAN and other interfaces live, look back minute by minute, with CPU and memory.
The config (/export) is kept for 14 days, encrypted at rest. Download and /import it whenever you need. Or press Backup now.
An e-mail when a router has been down longer than you choose, and another when it is back. Know before the customer calls.
Under two minutes per router
Name the router; we make the setup command for it.
WinBox > New Terminal, paste the one line. WireGuard (v7) or OpenVPN (v6) is picked for you.
In WinBox put tunnel.maesuaisystem.com:port in Connect To and log in with the router’s own user and password.
Try every feature first, decide later
Your WinBox password stays on the router; we never store it. Traffic runs inside an encrypted tunnel (WireGuard or OpenVPN). A read-only user called mae-tunnel is created for status and backups, and it can log in only from our server through the tunnel. You can lock each port to the IPs you allow.
No. The router connects out to tunnel.maesuaisystem.com (UDP 61000 on v7, TCP 61001 on v6), so it works behind CGNAT or a 4G SIM.
Any RouterOS v7 (WireGuard) and v6.48 or newer (OpenVPN), CHR included. If UDP is blocked where the router sits, switch it to OpenVPN mode in its settings.
It adds the mae-tunnel interface, one firewall rule accepting our server through the tunnel, and the read-only mae-tunnel user. Everything is tagged "MAE Tunnel" and the website has a remove command. Routes, NAT and the rest of your config are not touched.
The output of /export (including the secrets in the config), encrypted on our server. Download the .rsc file to a reset router and run /import.
No. The tunnel is only for reaching the router to manage it, not an internet VPN. Your normal traffic never goes through us.