OptiWize is an advanced platform for centralised management of MikroTik equipment, based on a full API architecture. It supports both on-premise and cloud installations and offers simplified and centralised management.

Key functionalities include troubleshooting, manual and massive device onboarding, centralised backup, advanced monitoring, template framework for automation, and browser-integrated SSH and Winbox access.

Troubleshooting allows operations such as pinging, trace route, bandwidth test, and others to be performed via the web panel with a single click. It is designed to facilitate immediate technical assistance.

Onboarding can be manual or via provisioners. Manual onboarding requires copying a string into the device console, while provisioners allow automatic and massive configuration of devices.

Massive onboarding uses a Docker container that connects via SSH to devices, applying configurations in multi-thread mode, allowing thousands of devices to be onboarded in minutes.

The backup system automatically performs nightly binary and full export backups, transferred via FTP over an encrypted VPN. You can view and download backups from the dedicated menu, and force manual backups if necessary.

Monitoring, based on Zabbix and SNMP, monitors the status of equipment, including CPU, RAM, disk space and other parameters. It automatically configures customisable alert rules to ensure optimal quality control.

The Template framework makes it possible to automate device configurations with scripts in the MikroTik language, supporting dynamic variables and maximum applications. Templates can be complete or modular, for quick and specific configurations.

SSH access is emulated in the browser via an encrypted VPN, supporting all keyboard commands. Winbox runs in a Linux container and is made accessible via the web interface, which can also be used on tablets.

Elastic IP allows dedicated IP addresses or classes of IP addresses to be reserved and moved, while maintaining the same IP when reconfiguring the SD-WAN service. It is useful for firewall and external access services.

OptiWize's SD-WAN service enables multiple connectivity, even from different operators, with bandwidth aggregation and failover capabilities. It uses WireGuard encrypted channels and dynamic BGP routing for intelligent route management.

Integrated with FlashStart, the content filtering service uses AI to filter the DNS and protect the network from malware, phishing and inappropriate content. It offers real-time updated protection via the global Anycast network.

Yes, it is possible to configure both port forwarding and VPN ‘Road Warrior’ on OptiWize with SD-WAN active, even when using a private network. Here are the details:

• Port Forwarding: When you activate SD-WAN, you are assigned a public IP directly on the MikroTik. This public IP can be used to reach your MikroTik and configure port forwarding. You can do this manually or by using an OptiWize template. Here is an example of how to configure port forwarding:

^{/ip firewall nat add action=dst-nat chain=dstnat dst-address=<<IP-PUBBLICO-SDWAN>> protocol=tcp \ to-addresses=<<IP-PRIVATO>> to-ports=<<PORTA>> place-before=0}

For example, if the SD-WAN IP assigned was 45.18.183.20 and you wanted to reach a Linux server in SSH on your LAN with IP 192.168.88.2, you could add this rule:
^{/ip firewall nat add action=dst-nat chain=dstnat dst-address=45.18.183.20 protocol=tcp \ to-addresses=192.168.88.2 to-ports=22 place-before=0}

• VPN ‘Road Warrior’: The SD-WAN tunnels for each gateway are already configured as Wireguard in ‘Road Warrior’ mode. This means you can establish VPN connections on-demand from any location.

NB: SD-WAN over Wireguard reduces MTU packets to 1420, so the Wireguard server should have MTU set to 1340 for optimal operation.

In summary, the SD-WAN service can be regarded as an additional dedicated connection with a static IP, configured directly on the RouterBoard. This allows features such as port forwarding and NAT 1:1 to be used without any problems.