MikroTik (Router OS) – network configuration management set-up

Before trying to unlock MikroTik devices SNMP and SSH should be enabled.

How to Enable SNMP from MikroTik cmdline:

[admin@MikroTik] > snmp 
[admin@MikroTik] /snmp> set enabled yes

How to Enable MikroTik SSH:

The SSH service should be enabled by default on the RouterOS.

In case it is disabled you can enable it by issuing the following commands:

/ip service enable ssh

User Grants on Router OS:

requires a user that is able to execute the following command through SSH: 

/export verbose

Connecting with a user belonging to a group with read only and ssh policies is sufficient to retrieve most of the configuration settings.

For example:

/user group add name=config-readers policy=read,ssh

N.B. Additional policies could be necessary to retrieve additional settings.

For example, to retrieve CALEA rules, the sniff policy sould be added:

/user group add name=config-readers policy=read,ssh,sniff

Please note that in RouterOS, there is no startup and running configuration. Once a change is made it’s committed.

This integration includes only backups on MikroTik for network configuration management. Currently, the “restore” option is not available.