The Mikrotik config segment prints are: NAT: admin@rtehckp001] /ip firewall nat> print Flags: X - disabled, I - invalid, D - dynamic Routes: [admin@rtehckp001] /ip route> print Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, ...