All tutorials
OLT

Access an OLT through MikroTik

Reach the web interface of an OLT sitting behind your MikroTik router — from anywhere — by pairing a remote with one NAT rule. No public IP and no CGNAT headaches.

Your OLT has no direct path from the internet. MikRouter solves this with a VPN tunnel: your MikroTik dials out to a MikRouter server, and the server forwards a public address + port down that tunnel. You add one NAT rule on the MikroTik that hands the traffic to the OLT on your LAN. The result: opening ph1.mikrouter.com:44541in your browser lands you on the OLT's login page.

Your browseranywhereMikRouter serverph1.mikrouter.compublic port 44541Your MikroTikVPN client + NATsite routerOLT192.168.1.10 : 80HTTPSVPN tunnelLANBrowser → server public port → down the VPN tunnel → MikroTik NAT rule → OLT web page

Before you start, make sure you have

  • A MikRouter account with enough credits or a payment method.
  • Winbox open and connected to the MikroTik that the OLT sits behind.
  • The OLT's LAN IP address and web port — e.g. 192.168.1.10 on port 80. Check this under IP›DHCP Server›Leases in the MikroTik, or from the OLT itself.
1

Create a remote for the OLT

In the dashboard go to Remotes and click + New Remote.
https://mikrouter.com/remotes

Remote Accounts

Manage your remote access accounts. Drag to rearrange.

+ New Remote

Office Router

Online
+ add another

Pick a server close to you, set a Duration, and choose a VPN Service (L2TP is easiest). The key field for an OLT is Service Port:

FieldValue
VPN ServiceOVPN
Service PortOther
Port8080
ProtocolTCP
Remote NameOLT — Site name

Why “Other” for the Service Port?

The Service Port is the port that arrives on your MikroTik through the tunnel. The built-in choices (Winbox 8291, HTTPS 443, HTTP 80, SSH 22) point at the router itself. Because the OLT is a separate device, pick Other with a free port like 8080— you'll aim it at the OLT in step 5.
https://mikrouter.com/remotes/new
1. Remote Server

PH 1

🇵🇭 PH

L2TP, SSTP, OVPN

SG 1

L2TP, SSTP

US 1

OVPN

2. Service Configuration
Duration1
UnitWeek(s)
VPN ServiceOVPN
Service PortOther ▾
Port8080
ProtocolTCP
3. Details
Remote NameOLT — Barangay Site
Purchase Summary
Server
PH 1 (PH)
Duration
1 Week(s)
VPN Service
OVPN
Service Port
8080 (TCP)
Total
PHP 10
Purchase — PHP 10
2

Pay and confirm

Choose a Payment Method, click Purchase, then Confirm. With Credits the remote activates instantly; with an e-wallet it activates once payment clears.
3

Copy your connection details

Open the new remote under Remotes. The detail page gives you everything below — use the copy buttons rather than retyping.
https://mikrouter.com/remotes/665…

OLT — Barangay Site

Online
VPN Credentials

Username

mr-8x3k9p

Password

a1b2c3d4e5

Connect To

ph1.mikrouter.com

Assigned Port

44541

Remote URL

ph1.mikrouter.com:44541

Use this address to connect via Winbox, SSH, HTTP, or API.

Quick Setup
MikroTik TerminalCopy
/interface l2tp-client add name=mikrouter-l2tp-mr-8x3k9p connect-to=ph1.mikrouter.com user=mr-8x3k9p password=a1b2c3d4e5 disabled=no
FieldValue
Connect Toph1.mikrouter.com
Usernamemr-8x3k9p
Passworda1b2c3d4e5
Remote URLph1.mikrouter.com:44541
Service Port8080
4

Build the VPN tunnel on the MikroTik

The fastest way is the Quick Setupcommand on the remote's detail page. In Winbox openNew Terminal, paste it, and press Enter:
MikroTik Terminal
/interface l2tp-client add name=mikrouter-l2tp-mr-8x3k9p connect-to=ph1.mikrouter.com user=mr-8x3k9p password=a1b2c3d4e5 disabled=no

Prefer clicking? Add it by hand instead: go to PPP, click + › L2TP Client, and on the Dial Out tab fill in:

FieldValue
Connect Toph1.mikrouter.com
Usermr-8x3k9p
Passworda1b2c3d4e5
Profiledefault-encryption
Allowmschap2, mschap1, chap, pap

Using SSTP, OVPN or PPTP? Follow the matching VPN Client Setup guide. Either way, confirm the client shows an R (running) flag and the remote's badge turns Online.

5

Point the port at the OLT

The tunnel now reaches your MikroTik on port 8080. This NAT rule forwards it to the OLT. Open New Terminal and paste, replacing the OLT IP/port with your own:
MikroTik Terminal
/ip firewall nat add chain=dstnat protocol=tcp \
    in-interface=mikrouter-l2tp-mr-8x3k9p dst-port=8080 \
    action=dst-nat to-addresses=192.168.1.10 to-ports=80 \
    comment="mikrouter OLT"
FieldValue
in-interfacemikrouter-l2tp-…
dst-port8080
to-addresses192.168.1.10
to-ports80

Prefer the menus? Go to IP›Firewall›NAT and add the same values on the General and Action tabs.

If the page still won't load

The OLT's default gateway must be this MikroTik so its replies find their way back. If it points elsewhere, add a source-NAT so traffic appears to come from the router:
MikroTik Terminal
/ip firewall nat add chain=srcnat dst-address=192.168.1.10 action=masquerade comment="mikrouter OLT return"
6

Open the OLT from anywhere

That's it. From any device, open a browser and go to your Remote URL:
FieldValue
Addresshttp://ph1.mikrouter.com:44541
http://ph1.mikrouter.com:44541
O

OLT Management

EPON / GPON Controller

admin
••••••
Login

You'll see the OLT's own login page. Sign in with the OLT's username and password — not your MikroTik or MikRouter login. Need a second device too? Buy another remote, pick a different Service Port (say 8081), and add another NAT rule pointing at it.

Troubleshooting

Remote shows “Offline” in the dashboard

  • The VPN client isn't connected — recheck step 4 (username, password, server address).
  • Make sure your ISP isn't blocking the protocol; try SSTP (port 443) if L2TP won't connect.
  • Confirm the subscription hasn't expired.

Online, but the browser page times out

  • Check the NAT rule from step 5 — dst-port must equal your Service Port (8080), and to-addresses/to-ports must match the OLT.
  • From New Terminal run /ping 192.168.1.10 to confirm the MikroTik can reach the OLT.
  • If ping works but the page doesn't load, add the srcnat masquerade rule from step 5.

Page loads but looks broken / won't log in

  • Some OLTs only serve HTTPS — try https:// and set the NAT to-ports=443.
  • Use the OLT's own admin credentials, not your router or MikRouter login.

Quick recap

  1. Buy a remote — set Service Port = Other (8080, TCP).
  2. Copy the credentials & Remote URL from the detail page.
  3. Create the VPN client on the MikroTik (paste the Quick Setup command).
  4. Add one NAT rule forwarding port 8080 → the OLT's IP:80.
  5. Browse to ph1.mikrouter.com:44541 — you're on the OLT.