Prepare Router Access
- Enable API-SSL on the intended router endpoint.
- Restrict source access to the RouteGlass VM.
- Create a dedicated read-only account.
- Use a certificate signed by the trusted or dedicated CA you supply to the installer.
Check Connectivity And Trust
Replace the uppercase placeholders and CA path:
nc -zv ROUTER_IP 8729
openssl s_client -connect ROUTER_IP:8729 -CAfile /path/to/router-ca.crt -verify_return_errorResolve TLS verification errors before proceeding. Do not disable CA validation.
Installer Inputs
Enable BGP Lookup and select MikroTik RouterOS v7. Provide the API-SSL address/port, read-only username, password and exported CA certificate path. The installer stores its CA at /etc/routeglass/certs/mikrotik-ca.crt and protects the password file with mode 0600.
Validate Lookup
curl -sS 'http://127.0.0.1:8080/api/diagnostics?type=bgp&target=1.1.1.1'If lookup fails, inspect operator logs and verify route availability. Keep management addresses and credentials out of public screenshots.