Enabling Mikrotik network configuration management backups

< 1 minute

Before trying to unlock MikroTik devices SNMP and SSH should be enabled.

[admin@MikroTik] > snmp 
[admin@MikroTik] /snmp> set enabled yes

The SSH service should be enabled by default on the RouterOS.
In case it is disabled you can enable it by issuing the following commands:

/ip service enable ssh

requires a user that is able to execute the following command through SSH:

/export verbose

Connecting with a user belonging to a group with read only and ssh policies is sufficient to retrieve most of the configuration settings.

For example:

/user group add name=config-readers policy=read,ssh

N.B. Additional policies could be necessary to retrieve additional settings.

For example, to retrieve CALEA rules, the sniff policy sould be added:

/user group add name=config-readers policy=read,ssh,sniff

Please note that in RouterOS, there is no startup and running configuration. Once a change is made it’s committed.

This integration includes only backups on MikroTik for network configuration management. Currently, the “restore” option is not available.