Hi, We use redundant ipsec solution using RB and it works good enough. But it is hard to add or change configs at 2 or 3 routers. Because each router has it`s own specific configurations. So we need to do intelligent config sync between routers. If RoS can export specific commented configuration to file. We can fetch it and import those only needed configs. I believe it will be very useful feature for MT lovers. Who with me?
[admin@MainRouter] > /export [find where comment~"notdefaultconf"] file=example;
[admin@BackupRouter] > /tool fetch address=x.x.x.x src-path="example.rsc" mode=ftp user="admin" password="";
[admin@BackupRouter] > /ip firewall filter remove [find where comment~"notdefaultconf"];
[admin@BackupRouter] > /import file-name=example.rsc;
etc…
this used to work in older versions and they removed the ability to do it… i asked for it to be added back but i think they didnt find it useful. I would love to have it back again.
Really? I don`t understand why MT removed their feature. I think feature need to add but not remove.
yogii
December 2, 2011, 9:38am
4
me too, i couldn’t export several line configuration. RouterOS V5.8.
janisk
December 2, 2011, 11:07am
5
what version was it? I cannot find one, where it is.
Only thing i found was that was removed from (last seen in 2.9.x) was
from=""
argument that where weird
[admin@br2] ip firewall address-list> export from=[find list="ddos-20111101"]
# dec/02/2011 09:35:21 by RouterOS 2.9.51
# software id = SZZ3-6RT
#
/ ip firewall address-list
add list=ddos-20111101 address=218.93.127.70 comment="" disabled=no
add list=ddos-20111101 address=219.143.38.232 comment="" disabled=no
...
add list=ddos-20111101 address=61.239.251.66 comment="" disabled=no
[admin@br2] ip firewall filter> export from=[find chain=input]
# dec/02/2011 09:36:12 by RouterOS 2.9.51
# software id = SZZ3-6RT
#
/ ip firewall filter
add chain=input action=jump jump-target=ICMP protocol=icmp comment="ICMP" disabled=no
add chain=input action=accept dst-port=8291 protocol=tcp comment="Winbox Management" disabled=no
...
add chain=input action=accept dst-port=33434-33490 protocol=udp limit=20,20 comment="UDP tracert \(rate-limited\)" disabled=no
add chain=input action=log limit=5,5 log-prefix="" comment="Last resort - log" disabled=no
add chain=input action=drop comment="Last resort - drop it" disabled=no
You can no longer use ‘from=’ command in export… I would love to have that available again.
[admin@br2] ip firewall filter> export
file --
[b]from[/b] -- item numbers
yogii
December 3, 2011, 3:41am
7
i hope this will be back.