nimda
1
The command doesn’t work.
/ip firewall nat set [/ip firewall nat find out-interface=l2tp-out1 ] disabled=yes
/ip firewall nat set [find out-interface=l2tp-out1] disabled=yes
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface=l2tp-out1
[admin@821] /ip firewall nat> /ip firewall nat set [find out-interface=l2tp-out1] disabled=yes
[admin@821] /ip firewall nat> export
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface=l2tp-out1
[admin@821] /ip firewall nat>
Where is the mistake?
anav
2
Buying an MT router?
Not taking a training course?
Try the rule ENABLED! 
The command doesn’t work.
/ip firewall nat set [/ip firewall nat find out-interface=l2tp-out1] disabled=yes
/ip firewall nat set [find out-interface=l2tp-out1] disabled=yes
nimda
3
How is this command written correctly?
anav
4
Sorry I dont write commands…
I go into winbox and make config change
nimda
5
With this, the following command works correctly.
/ip firewall nat set [find dynamic=no] disabled=yes
but not these
/ip firewall nat set [find out-interface=l2tp-out1] disabled=yes
/ip firewall nat set [/ip firewall nat find out-interface=l2tp-out1] disabled=yes
/ip firewall nat set [find where out-interface=l2tp-out1] disabled=yes
what is l2tp-out1, a “system something”?
If not, why you do not use " "?
# disable
/ip firewall nat
disable [find where out-interface="l2tp-out1" and disabled=no]
# enable
/ip firewall nat
enable [find where out-interface="l2tp-out1" and disabled=yes]
Offtopic:
Even if then there is to understand why you want to deactivate exactly that rule…
anav
7
To make rextended points clear… Imagine software on the spaceship…
disable <----- NONSENSICAL
/ip firewall nat
disable [find where dst-location=“earth-home” and disabled=no]
enable Logical…
/ip firewall nat
enable [find where dst-location=“earth-home” and disabled=yes