Persona 2 • ISP & WISP Operations Blueprint

Subscriber Self-Service Portal &
High-Speed CPE Automation

Automated remote CPE management for ISPs and WISPs: Empower subscribers with a branded self-service portal, automate Tier-1 router diagnostics, safely manage NAT port forwarding without remote Winbox exposure, and benchmark line-rate throughput with MikroSpeed.

Subscriber Self-Service Portal
Subscriber Portal

White-Label Customer Self-Service Portal

Empower end-customers with a branded self-service portal while retaining strict governance over accessible features.

  • Subscriber Telemetry View: Displays assigned router uptime, public WAN IP, RouterOS version, and live throughput graphs.
  • Granular Tab Governance: ISP admins control exactly which tabs (Diagnostics, WiFi, NAT, Simple Firewall) each customer sees.
🔍 Inspect Screenshot
Automated Diagnostics
1-Click Diagnostics

1-Click Automated Subscriber Diagnostics

Drastically reduce ISP Tier-1 support call volumes by empowering customers to diagnose connectivity issues in 1 click.

  • Automated Health Suite: Tests WAN gateway reachability, public DNS resolution (8.8.8.8, 1.1.1.1), and physical link status.
  • Interactive Utilities: Built-in ping and traceroute allow subscribers to independently verify packet loss and latency.
🔍 Inspect Screenshot
NAT Port Forwarding
Safe NAT Forwarding

Self-Service NAT Port Forwarding with Validation

Let power users and gaming subscribers configure port forwarding safely with zero support tickets.

  • Conflict Prevention: Automated checks prevent overlapping external port ranges and safeguard management ports.
  • Safe Protocol Selectors: Supports TCP/UDP dst-nat rule creation directly mapped to RouterOS firewall tables.
🔍 Inspect Screenshot
Security Presets
Firewall Presets

1-Click Router Security Presets & Blocklists

Frictionless router security presets and custom IP blocking for non-technical subscribers.

  • 1-Click Hardening: One-click toggles for Stealth Mode (Block WAN Ping), Drop Invalid Packets, and FastTrack.
  • Custom IP Address-Lists: Simple subscriber blacklisting modal mapping directly to RouterOS address-lists.
🔍 Inspect Screenshot
WireGuard Management
WireGuard VPN

WireGuard Server & QR Code Peer Provisioning

Deploy high-speed WireGuard tunnels and onboard mobile clients with instant QR code scanning and auto-generated RouterOS scripts.

  • Automated Peer Provisioning: Dynamic IP allocation, public key handshake monitoring, MSS clamping, and live throughput meters.
  • Mobile QR Codes: Generate client configs, downloadable profiles, and QR codes for instant mobile onboarding.
🔍 Inspect Screenshot
MikroSpeed Rust Engine
Speed Benchmarking

MikroSpeed: Rust-Engine Bandwidth Tester

Ultra-fast line-rate bandwidth benchmarking for MikroTik routers powered by a custom Rust-compiled BTest engine.

  • Rust btest-rs Engine: Benchmarks line-rate TCP/UDP throughput against RouterOS v6.43+ and v7 with modern Curve25519 EC-SRP5 auth.
  • Animated SVG Gauges: Real-time animated speedometer displaying Download/Upload Mbps, jitter, and historical logs.
🔍 Inspect Screenshot
Golden Master CPE Cloner
CPE Cloner

Golden Master CPE Provisioning & Cloner

Maintain 100% configuration consistency across subscriber CPEs by replicating Golden Master baselines.

  • Rapid Subscriber Onboarding: Push standardized baseline wireless, firewall, and routing configs to new CPEs in seconds.
  • Selective Sync: Replicate global firewall policies across thousands of subscriber units without affecting unique PPPoE credentials.
🔍 Inspect Screenshot