SSL‐Setup

SSL Setup

TLS encrypted connection to RouterOS API on port 8729.

---

Enable on Router

WinBox → IP → Services → api-ssl → Enabled: yes → Port: 8729 → Certificate: (optional — self-signed works)

/ip service set api-ssl disabled=no port=8729

---

Enable in Laravel

MIKROTIK_SSL=true
MIKROTIK_SSL_VERIFY=false
MIKROTIK_PORT=8729

No code changes needed — auto-selected from config:

MikroTik::pppoe()->getActiveSessions(); // uses SSL automatically

---

Self-Signed Certificate (ISP Standard)

Most ISP routers use self-signed certificates. Set verify_peer: false to accept them:

MIKROTIK_SSL=true
MIKROTIK_SSL_VERIFY=false

---

Strict Mode (Production with Valid Cert)

For production with a valid CA-signed certificate:

MIKROTIK_SSL=true
MIKROTIK_SSL_VERIFY=true
MIKROTIK_SSL_CA_CERT=/etc/ssl/certs/ca-certificates.crt

---

Manual SSL Client

use ZillEAli\MikrotikLaravel\Connections\RouterosClientSSL;

// Self-signed
$client = new RouterosClientSSL(
    host:       '192.168.88.1',
    port:       8729,
    username:   'admin',
    password:   'secret',
    verifyPeer: false,
);
$client->connect();

// Strict
$client = new RouterosClientSSL(
    host:       'router.yourisp.com',
    port:       8729,
    username:   'admin',
    password:   'secret',
    verifyPeer: true,
    caCertPath: '/etc/ssl/certs/ca-certificates.crt',
);
$client->connect();

// Connection info
$info = $client->getConnectionInfo();
// ['host' => '...', 'port' => 8729, 'ssl' => true, 'connected' => true]

---

Per-Router SSL Config

// config/mikrotik.php
'routers' => [
    'main' => [
        'host'     => '192.168.1.1',
        'ssl'      => false, // plain connection
    ],
    'branch' => [
        'host'     => '192.168.2.1',
        'port'     => 8729,
        'ssl'      => true,  // SSL connection
        'verify_peer'  => false,
    ],
],

---

← Multi-Router Setup | Caching →

---

📝 Found an error or missing info?
Edit this page or open an issue to suggest improvements.