<div dir="ltr">The MikroTik winbox UI webbox UI are already very user-friendly imo, webbox looks like this: <a href="http://i.imgur.com/e2vRhJ2.png">http://i.imgur.com/e2vRhJ2.png</a><div>You can also modify the skin to remove items you don't want the user to have vision of, like so: <a href="http://i.imgur.com/48LM4mq.png">http://i.imgur.com/48LM4mq.png</a></div>
<div><br></div><div style>I would warn against metarouter in general as they have used a couple of different virtualisation options with limited success, however if you're happy to go with your alternative and setup an x86 box you can easily run multiple RouterOS vm's and clamp down the CPU cycles/RAM allocations given the router needs very little for the most part anyway. This gives you the best of both worlds as you can happily run RouterOS on top of ESX which gives you the added administration/maintenance layer and makes it a walk in the park if you wanted to back up your customer routers (not just config) periodically too.</div>
<div style><br></div><div style>- Andrew</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On 28 April 2013 11:21, David George <span dir="ltr"><<a href="mailto:davidg@oztix.com.au" target="_blank">davidg@oztix.com.au</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="white" lang="EN-AU" link="blue" vlink="purple">
<div>
<p class="MsoNormal"><span style="color:#1f497d">I’ll certainly be looking at simplifying the requirement if possible, was just reaching out to see if anyone had a silver bullet handy
</span><span style="font-family:Wingdings;color:#1f497d">J</span><span style="color:#1f497d">
<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d">I’ll have a look at metarouter, but I think we’d still need to wrap that in a ui of some sort to make it user manageable. I think the answer here is to reduce the requirements or something like Skeeve’s approach.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d"><u></u> <u></u></span></p>
<div>
<div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">From:</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">
<a href="mailto:ausnog-bounces@lists.ausnog.net" target="_blank">ausnog-bounces@lists.ausnog.net</a> [mailto:<a href="mailto:ausnog-bounces@lists.ausnog.net" target="_blank">ausnog-bounces@lists.ausnog.net</a>] <b>On Behalf Of
</b>Greg McLennan<br>
<b>Sent:</b> Sunday, 28 April 2013 10:55 AM<br>
<b>To:</b> <a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a><br>
<b>Subject:</b> Re: [AusNOG] multi customer self manageable virtual router<u></u><u></u></span></p>
</div>
</div><div><div class="h5">
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Dave, thats a very tough ask( you sure you cant re-engineer the requirement). The closest I can think of off hand is something like using a Mikrotik router that has its MetaRouter option enabled. (<a href="http://wiki.mikrotik.com/wiki/Manual:Metarouter" target="_blank">
http://wiki.mikrotik.com/wiki/Manual:Metarouter</a> ).<u></u><u></u></p>
<div>
<div>
<p class="MsoNormal"><b><span style="font-size:18.0pt"><br>
Quote for metarouter:<br>
</span></b><span><b><i>Where it can be used? </i></b></span><br>
<i><span style="font-size:7.5pt">The MetaRouter function is useful for allowing clients or lower-privilege users access to their own 'router' and config to configure as they like, without the need for a complete second router, or giving them access to the main
router configuration. </span></i><br>
<i><span style="font-size:7.5pt">For example; a WISP can create a virtual router for the clients ethernet port allowing them to define their own firewall settings, while leaving the WISP's wireless settings untouched.
</span></i><br>
<br>
-------------------------------------------------------------------------------------------------------------------<br>
<br>
On 28/04/2013 10:31 AM, David George wrote:<u></u><u></u></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal">Morning all,<u></u><u></u></p>
<p class="MsoNormal"> Does anyone know if a product exists that can allow me to act as a gateway for a bunch of different private l3/l2 networks with overlapping ips… so it’ll have to understand multiple route tables or vrf at some level (still
need each customer isolated, although each customer can have multiple sites)… and give the customers the ability to manage their own ipsec tunnels, port forwards and anything else they’re likely to want via a friendly web ui ? The alternative is running
up one vm per customer of one of the many good all-in-one router distros.. Currently each customer is handed off via a dot1q vlan.
<u></u><u></u></p>
<p class="MsoNormal"> Or am I looking at this the wrong way, and should I move all of this onto some decent cisco kit and work on finding a friendly web ui that can manage rules relevant to the client on that device?
<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">Thanks in advance<u></u><u></u></p>
<p class="MsoNormal">-dave.<u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><br>
<br>
<br>
<u></u><u></u></span></p>
<pre>_______________________________________________<u></u><u></u></pre>
<pre>AusNOG mailing list<u></u><u></u></pre>
<pre><a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a><u></u><u></u></pre>
<pre><a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><u></u><u></u></pre>
</blockquote>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><u></u> <u></u></span></p>
</div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><u></u> <u></u></span></p>
</div></div></div>
</div>
<br>_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
<br></blockquote></div><br></div>