CCR2004-16G-2S+ no default firewall?

RouterOS General
1

I received a new CCR2004-16G-2S+ with 7.5 and it appears to have no default firewall configured and it doesn’t have one under
/system default-configuration print.

What is the thinking behind that?

2

Some models, like CCRs don’t come with an extensive default config as they are not designed for inexperienced users.

https://wiki.mikrotik.com/wiki/Manual:Default_Configurations

Start with the forums or help website and build the config (disconnected from the Internet)

https://help.mikrotik.com/docs/display/ROS/Building+Your+First+Firewall

3

https://help.mikrotik.com/docs/display/ROS/Default+configurations

i think is a device intended to be deployed by somebody who somewhat knows what is doing or at least capable to search info about it

vendor has a starter guide about firewall kindly named Building Your First Firewall

https://help.mikrotik.com/docs/display/ROS/Building+Your+First+Firewall

most of the time if a CCR came preconfigured , will be more the hazle of verifying which parts of that config fit to your scenario and which not so not helpful

4

Thanks guys makes perfect sense. I’ve done lots of firewalls on RouterOS v6, just haven’t done any under v7 yet.

5

When it comes to firewall, there aren’t any important differences between v6 and v7.

The practice that top-of-line devices (e.g. CCR1xxx) are shiped without any firewall is a tradition already since v6, so that’s nothing new with CCR2xxx or v7 or both.

6

Dont get yourself in a knot over the firewall setup… Too many docs vids and ideas that create a bloated mess, focus on only the traffic you need to give to the users.

You cant go wrong with the Novice Setup - https://forum.mikrotik.com/viewtopic.php?t=180838