cloud
ip/cloud
Type: Settings Directory
Settings of the MikroTik cloud services: the DDNS name, the time update at startup and Back To Home. The router sends its requests to cloud2.mikrotik.com on UDP port 15252. For an overview and examples, see Cloud and Back To Home.
| Argument | Type | Description |
|---|---|---|
| ddns-enabled | enum (auto | yes) | Whether the router registers a DNS name (
|
| ddns-update-interval | alt { ddns-update-interval: enum (none) { none:0 } , ddns-update-interval: time [1m .. ] } | Interval at which the router sends DDNS updates to the cloud server, in addition to the updates it decides to send by itself. With none, the router only sends its own updates; behind NAT, that is one every minute. Minimum: 1 minute. Default: none. |
| update-time | bool | Whether the router sets its clock from the cloud server when it starts. It does so only while the NTP client (/system/ntp/client) is disabled, also with ddns-enabled=auto, and logs cloud change time <old> => <new>. DDNS updates and force-update do not set the clock. The time zone is set separately by time-zone-autodetect in /system/clock. Default: yes. |
| back-to-home-vpn (syscap=cloud-vpn) | enum (revoked-and-disabled | enabled) | Whether Back To Home runs.
|
| vpn-prefer-relay-code (syscap=cloud-vpn) | string | Code of the relay region to use, from vpn-relay-regions, for example EUR1. When it is empty, the router uses the relay with the lowest round-trip time (vpn-relay-rtts). Default: empty. |
| Read-only Argument | Type | Description |
|---|---|---|
| public-address | ipAddr | Public IPv4 address of the router as the cloud server sees it, that is, the source address of the router's requests. Behind NAT, this is the address of the NAT device. Shown after the first reply from the cloud server, also when only the time update runs. |
| public-address-ipv6 | ip6Addr | Public IPv6 address of the router as the cloud server sees it. Shown when the router reaches the cloud server over IPv6. |
| dns-name | string | DNS name of the router: its serial number in lower case followed by .sn.mynetname.net. Shown after the name is registered. It resolves to public-address, or to the router's local address with use-local-address=yes in advanced, with a time to live of 60 seconds. |
| status | string | State of the last request to the cloud server, for example:
|
| vpn-dns-name (syscap=cloud-vpn) | string | DNS name of the Back To Home endpoint: the serial number in lower case followed by .vpn.mynetname.net. It resolves to the router's public address, or to the relay the router uses when it cannot be reached directly. Client configurations use it as the endpoint. |
| vpn-port (syscap=cloud-vpn) | num | UDP port of the back-to-home-vpn WireGuard interface. The router picks it when Back To Home is enabled. |
| vpn-status (syscap=cloud-vpn) | string | State of Back To Home, for example running. |
| vpn-relay-rtts (syscap=cloud-vpn) | multi { code: string } | Round-trip time to each relay region over IPv4 and IPv6, for example EUR1(ip4: 0.976ms, ip6: timeout). |
| vpn-relay-ipv4-status (syscap=cloud-vpn) | string | How clients reach the router over IPv4: reachable directly (region: EUR1 ip: <relay address> rtt: 0.761ms) when they can connect to the router's public address, or reachable via relay (region: EUR1 ...) when they connect through the relay. |
| vpn-relay-ipv6-status (syscap=cloud-vpn) | string | How clients reach the router over IPv6, in the same format as vpn-relay-ipv4-status, for example connecting (...) while the router has no IPv6 internet access. |
| vpn-relay-regions (syscap=cloud-vpn) | multi { code: string } | Relay regions the router can use, for example EUR1 and USA1. Use a code from this list in vpn-prefer-relay-code. |
| vpn-relay-addresses (syscap=cloud-vpn) | multi { address: ipAddr } | IPv4 addresses of the relay servers, one per region. |
| vpn-relay-addresses-ipv6 (syscap=cloud-vpn) | multi { address: ip6Addr } | IPv6 addresses of the relay servers, one per region. |
| vpn-private-key (syscap=cloud-vpn) | string | Private key of the back-to-home-vpn WireGuard interface. |
| vpn-public-key (syscap=cloud-vpn) | string | Public key of the back-to-home-vpn WireGuard interface. Client configurations use it as the key of the router's peer. |
| vpn-peer-private-key (syscap=cloud-vpn) | string | Private key of the built-in client configuration in vpn-wireguard-client-config. |
| vpn-peer-public-key (syscap=cloud-vpn) | string | Public key of the built-in client configuration. The router has a dynamic peer with this key on back-to-home-vpn. |
| vpn-interface (syscap=cloud-vpn) | iface_enum | WireGuard interface of Back To Home, back-to-home-vpn. |
| vpn-wireguard-client-config (syscap=cloud-vpn) | string | WireGuard configuration of the built-in client, with the addresses 192.168.216.2 and fc00:0:0:216::2 and the DNS server the router uses. Import it in a WireGuard app on one device. For more devices, add users in back-to-home-user. |
| vpn-wireguard-client-config-qrcode (syscap=cloud-vpn) | pic | vpn-wireguard-client-config as a QR code, for a WireGuard app on a phone. |
| warning | string | Warning about the router's setup, for example Router is behind a NAT. Remote connection might not work. Shown only when there is a warning. |