Skip to content
English
Contact us
  • There are no suggestions because the search field is empty.

Adding Mikrotik Poller Access/Enabling API access

The poller needs access to Mikrotik devices to build a full network topology, map DHCP/PPPoE deployments, and extract RF metrics.

Why does Preseem require access to Mikrotik devices?

  1. On MikroTik APs, RF and station-level metrics require RouterOS API access, while SNMP is used in parallel to collect interface and device health metrics.
  2. On MikroTik routers, we require RouterOS API access for mapping and service attribution (including PPPoE, DHCP, IPv6, and bridged sites), and we rely on SNMP in parallel to collect interface metrics.

How do I configure Mikrotik SNMP/credential access for APs and Routers?

SNMP/Credential configuration is covered in this user guide: https://docs.preseem.com/element-credentials

How do I add API access for Mikrotik APs and Routers?

Because Preseem should already be configured for SNMP access, we’ll assume that there is ICMP/TCP reachability between the poller and your Mikrotik gear. We’ll need you to add API support to your existing configuration.

We recommend using automation to:
  • Enable a read-only group and user for Mikrotik, local (in this example), or RADIUS
    • /user group
      add name=read-api policy="read,api"
    • /user
      add comment="Read-only user for Preseem" group=read-api name=preseem-ro 
  • Set the password for the new user you've created. This can be unique per device or global; you'll need to transfer users and passwords to Preseem support later.
  • Enable access to the API (SSL preferred) using the service ACL
    • /ip/service set api disabled=no
    •  or for SSL:/ip/service set api-ssl disabled=no

  • Lock down access to the API using local firewall rules if not centrally managed
    • /ip/firewall/filter add action=accept chain=input comment="Allow Preseem API access" dst-address=<device management IP> src-address=<Preseem poller IP> dst-port=8728,8729 protocol=tcp
    • /ip/firewall/filter add action=drop chain=input comment="Disallow API access from others" dst-port=8728,8729 protocol=tcp

Contact Us

Once you've enabled SNMP and created a user for API access. Please contact Preseem Support to advise us of the community string and credentials. You can do so via the in-app chat or by clicking the following link.