Control your MikroTik router remotely
For network technicians and hotspot operators
Remote admin access to your MikroTik router without a public IP: manage it through Winbox, Webfig, API and SSH from anywhere. Your router connects out to our server, so you need no real IP address and no port forwarding at your ISP. One subscription also includes VPN bandwidth at your plan's speed.
From $4.99/month
No browsing logsWhy Dualbuy for remote MikroTik access?
One command in the MikroTik terminal is enough to reach it through Winbox from anywhere, even behind CGNAT or a 4G SIM.
Remote access without a public IP
Manage your router through Winbox, Webfig, API and SSH from anywhere. Your device connects out to us, so you need no real IP address and no open ports at your ISP.
VPN and bandwidth at plan speeds
Every plan has a stated download and upload speed, and the data allowance is shown on each plan.
Four protocols
SSTP, L2TP/IPsec, OpenVPN and WireGuard — choose what suits your device and network.
Pay without a bank card
Cryptocurrency (USDT, BTC, ETH and others), Jawwal Pay, or your wallet balance.
How does it work?
No complicated setup — just three steps.
Subscribe and pick your plan
Create your account and choose the plan that matches your device count and bandwidth needs.
Paste a single command
Copy the ready-made line from your dashboard and paste it into your MikroTik device's terminal (Winbox → New Terminal).
Instant, ready connection
Your device connects to us automatically, and you get immediate admin access and a full-speed VPN channel.
This is what it looks like
Real screenshots from a working device - not mock-ups.
Plans & Pricing
Pick the plan that fits you, and get started right away.
Basic
- Download 20 Mbps
- Upload 10 Mbps
- Unlimited data
- 1 simultaneous devices
Pro
- Download 50 Mbps
- Upload 25 Mbps
- Unlimited data
- 5 simultaneous devices
Business
- Download 200 Mbps
- Upload 200 Mbps
- Unlimited data
- 12 simultaneous devices
MikroTik remote access: frequently asked questions
Quick answers about how the service works, protocols, security and payment.
How do I reach my MikroTik remotely if I don't have a public IP?
The router starts the connection: you paste one command into its terminal and it connects to our server automatically, giving you a dedicated address and ports for Winbox, Webfig, SSH and API. You need no real IP address and no port forwarding at your ISP. See the step-by-step guide.
How is this different from opening the Winbox port to the internet?
Opening Winbox on your router needs a public IP and open ports on your network, which is often impossible behind CGNAT or a 4G SIM. With Dualbuy nothing is opened on your side because the router connects out to us, and you reach it through an address and ports dedicated to you on our server. As with any management port, use strong passwords and disable services you don't need. Our security checklist covers the details.
Do Winbox, Webfig, SSH and API all work?
Yes. Each service has its own port, shown on your device's card in the dashboard, so use the port listed for each one. This access works while the router is connected over SSTP, L2TP/IPsec or OpenVPN, not over WireGuard.
Which protocol should I choose: SSTP, L2TP/IPsec, OpenVPN or WireGuard?
SSTP runs over TCP, so it passes most firewalls and networks. L2TP/IPsec is built into every RouterOS version. OpenVPN is there if you prefer it. WireGuard is modern and lightweight but needs RouterOS 7 and doesn't support admin access through ports. Choose based on your device's version and your network. The full comparison is in MikroTik VPN protocols compared.
Does remote access work behind CGNAT or a 4G connection?
Usually yes: the router opens the connection to our server, and outbound connections normally work over mobile networks and ISPs that use CGNAT. If your network blocks UDP, use SSTP, which runs over TCP. Here is how the tunnel works behind CGNAT.
How long does setup take?
A few minutes: create your account, pick a plan, copy the ready-made line from the dashboard and paste it into the MikroTik terminal (Winbox → New Terminal). Your device then connects automatically.
How many devices and what speed does each plan include?
Basic: 1 device, 20/10 Mbps; Pro: 5 devices, 50/25 Mbps; Business: 12 devices, 200/200 Mbps. See the plans section above for current prices.
Is it secure? Do you log what I browse?
We don't log the sites you visit or the content of your traffic. Your devices' connection credentials are stored encrypted (AES-256-GCM), passwords are hashed (bcrypt), and we don't sell your data. Details are in the privacy policy.
How do I pay without a bank card?
With cryptocurrency (USDT, BTC, ETH and others), with Jawwal Pay (a confirmation code is texted to you), or from your wallet balance. Your subscription activates automatically once the payment is confirmed.
Can I manage a whole hotspot network from one place?
Higher plans connect several devices (up to 12), and each device gets its own address and ports, so you can manage your different hotspot sites remotely from one place.
Try the Basic plan free for a month
Create a free account, redeem the code DBUY-66QP-6U3W-FUDM in the dashboard, and paste one line into your router's terminal.
Try free for one monthFrom the blog
Short, practical guides on remote access, VPNs and management security.
MikroTik remote access behind Starlink, CGNAT and 4G
Why Winbox fails remotely behind Starlink and 4G SIMs, how to tell your router is behind CGNAT, and a comparison of the four ways to reach a MikroTik without a public IP.
How to access a MikroTik router remotely without a public IP
Behind CGNAT, Starlink or a 4G SIM you can't forward ports. Here is why, and how a tunnel started by the router lets you reach Winbox, Webfig, SSH and the API from anywhere.
SSTP, L2TP/IPsec, OpenVPN or WireGuard on MikroTik: which should you use?
A practical comparison of the four VPN protocols RouterOS supports: ports, firewall friendliness, RouterOS version requirements, and when to pick each one.