As said before, you can set the default to a different value then "all", or you can disable it, but it can not be removed. Regarding 6.11 and adding a mac-server interface, I dont have a CCR to test on, can someone test please? Actually, on that particular 750GL w/ ros 6.10 I can remove t...

Description: When doing a "export compact" changes to queue type default-small are not exported for me (v6.11, x86) it's exported, but in strange manner: "set 16 pfifo-limit=20". I don't think that default-small has index 16 on every system :) Unable to change or add any telnet ...

Unable to change or add any telnet interfaces into mac-server Model: CCR1036-12G-4S ROS Version 6.11 /tool mac-server remove 0 failure: can not remove the default entry add interface=ether2 failure: interface unsupported I have 6.10 on another device that is not a CCR and am able to use these comman...

Yeah it would be better to run ipsec over ipip for the encryption.

Sent from my Galaxy Nexus using Tapatalk

The TCP flags in firewall filter aren't in compact or full as noted above Compact add action=add-src-to-address-list address-list="port scanners" \ address-list-timeout=2w chain=input comment="Drop Port Scanners" \ in-interface=ether1 protocol=tcp add action=add-src-to-address-li...

in v5.12 new command "export compact" is what you need

Love this