router management Archives - Justin Wilson (j2sw)

MikroTik and Cloudflare Zero Trust Part 2: Using WinBox Without Exposing Port 8291

October 25, 2026 by j2sw

MikroTik WinBox access through Cloudflare Zero Trust and WARP without exposing port 8291, Part 2.

In Part 1, we covered how to use Cloudflare Tunnel to protect MikroTik management access. We configured a connector inside the management network and used Cloudflare Access to authenticate users before allowing them to reach WebFig. The router no longer needed a public-facing management port. Most of us MikroTik administrators spend more time in WinBox … Read more

Securing MikroTik Management with Cloudflare Zero Trust (Part 1)

September 23, 2026 by j2sw

Architecture diagram for managing a MikroTik router through Cloudflare Zero Trust, Cloudflare Access, Cloudflare Tunnel, cloudflared, and a management VLAN.

I, due to recent SSH vulnerabilities in MikroTik, figured this series of articles would be relevant. The router may have strong passwords and firewall filters, but those services still receive constant login attempts from automated scanners. For years, the normal answer was a VPN with a management network. VPNs work well, but they require another … Read more