/export IPsec configuration

RouterOS General
1

Hi @all.

I really like the export feature of mikrotik. It’s the perfect way to migrate and change the configuration to other devices.

However mikrotik really likes to change the topology of the configuration…

Till now it was no Problem, if my config-script wasn’t compatible with a newer version, i just exported the same config from anothe device which i updated to the same ROS-version as the other device.

However I’ve found a problem with the config changes in IPsec.

My last config was from ROS 6.44.3, updated the Firmware to ROS 6.45.2 and exported the config.
In the new exported config is stil:

/ip ipsec profile
add dh-group=modp1024 enc-algorithm=aes-256 name=profile_1
/ip ipsec peer
add address=***.***.***.***/** name=**** profile=profile_1

However i cant’t run that config on another Mikrotik with ROS 6.45.2 because Mikrotik removed the IPsec Profile O.O

My question now is: Is that a Bug? If not, WTF, can’t i rely now anymore on the config export?

BR

2

And where do you see (or don’t see) that?

3

https://mikrotik.com/download/changelogs
What’s new in 6.44 (2019-Feb-25 14:11):
*) ipsec - moved “profile” menu outside “peer” menu;

there’s no “/ip ipsec profiles” anymore.

4

Small correction, there’s no “/ip ipsec peer profile” anymore, it’s now named “/ip ipsec profile”. So it could be annoying if you want to take export from older version and use it with new one as is, that’s true. But there was never any guarantee that newer RouterOS would be compatible with older config. And they don’t do such changes too often.

5

Sorry my bad :confused:

I’ve violated the first rule of the admin-code: Never trust a customer… :smiley:

Everything ist fine now, he just sent me wrong configs and version informations…