Network settings

Two settings pages control network-wide options: PPPoE Network, for the IP addresses your PPPoE customers get, and Winbox Access, for reaching your routers’ Winbox remotely. Both are on the Settings page and can be found by name in the top search.

PPPoE Network

Settings → PPPoE Network (/dashboard/settings/pppoe-network) manages the IP address pool, static IP assignment and public IPs for your PPPoE customers.

Current Configuration

Shows your Network CIDR (the range customer IPs come from) and the Next Available IP (the address the next new customer will get).

Change Network

1. Under Change Network, enter a Network CIDR, for example 10.100.0.0/16.
2. Click Update Network.

Only /16 networks are supported. The Next Available IP is reset to the first usable address in the new network. Some ranges are reserved and blocked: 10.121.0.0/16 through 10.130.0.0/16 can’t be used. Examples of valid networks are 10.100.0.0/16, 10.200.0.0/16 and 192.168.0.0/16.

Caution

Choose a range that doesn’t overlap the dynamic PPPoE pool on your routers. If a customer’s assigned IP sits inside the router’s own pool, another customer can be handed the same address and one of them loses internet. See IP Conflicts below.

Set Next Available IP

Enter an address under Next Available IP, for example 10.100.0.11, and click Set IP. New customers get IPs one after another from this address. Use this to skip a block you’ve reserved. You need a network configured first.

Bulk IP Reassignment

Reassign All IPs clears every PPPoE customer’s IP assignment and hands out new ones in order from the start of the current network. Use it after changing the network or to close gaps. A progress bar shows while it runs, then the number of customers assigned.

Danger

This clears all customer IP assignments. Active PPPoE sessions get their new IP the next time they reconnect. If you run port forwards or firewall rules against specific customer IPs, plan for them to change.

IP Conflicts

Click Scan for conflicts to find customers whose static IP another customer is connected on right now. For each conflict you can move the customer to the next free static IP, or click Move all. Each moved customer gets their new IP on their next reconnect.

Public IP Addresses

Keep your business’s pool of public IP addresses here and assign them to PPPoE customers who need one, for example a business customer running a server. One public IP can be assigned to several customers. To remove an assignment, open the customer’s profile.

See PPPoE for how IPs are used on customer accounts.

Winbox Access

Settings → Winbox Access (/dashboard/settings/winbox-jumpbox) lets you reach your routers’ Winbox through a secure gateway (a “jumpbox”), so you can manage them remotely without opening Winbox to the whole internet.

Note

Changes take about 3 minutes to apply.

Turn it on or off

Tick Winbox jumpbox enabled (all devices). Current status shows Enabled or Disabled.

This switch overrides the Winbox jumpbox setting on every router. When it’s off, no device can be reached through the jumpbox, whatever its own setting says.

Allowed IPv4 Networks

Only IP addresses inside the networks on this list can reach Winbox on your devices. Everything else is blocked.

1. Enter an IPv4 address or network, for example 196.201.11.0/24. A bare address such as 41.90.10.5 counts as a single host (/32).
2. Click Add Network.

Shortcuts:

• Allow my IP: if ISPMan detects the address you’re connecting from, it offers to add just that one.
• Quick add common ISP bands: broad ranges seen from real users, grouped by provider (for example Starlink). Click one to add it, then narrow it down later for tighter security.

The Allow list shows every allowed network and its count. There is a maximum number of networks; when you reach it, remove one to add another. If the list is empty, nothing can reach Winbox.

Tip

Your office or home internet IP can change. If Winbox suddenly stops connecting, open this page from the same connection and use Allow my IP.

Current Jumpbox Rules

A read-only table of the rules applied right now: Device, External port, Internal port, Allowed sources and when each was Added. It reflects what is live, not what you just changed. If it says “No rules recorded yet”, wait for the next build (about 3 minutes) after enabling the jumpbox with at least one reachable device.

For device-level remote access, see Devices.

Related

• Settings
• PPPoE
• Devices
• Troubleshooting