Migrating 10 Mikrotik devices to 2 devices

RouterOS General
1

I have 10 Mikrotik routerOS devices running from 6.39.2 to the newest version. They have between 30 and 200 NAT Rules, multeple OpenVPN and fail-over. Some of them have 800+ SiteToSite VPN connections.

My task is to collect all the firewall rules, and delete duplicates, and delete rules that have not had a packets and are 0.
To my frustration I figure out, after i run an export file=backup and using notepad++ I locate /ip firewall nat, I don´t see the nice Winbox picture telling which one have trafic or not.

I also tried “the dude”, only to get more frustrated that it is not a management tool for Mikrotik devices but a fully fetched classic monitoring solution for Windows/Linux and simple tasks, as finding a specific mac-address or setting a scheduled RouterOS update, is something that is not easy to locate using “the dude”.

I am really looking for an easy way to get a bigger picture, cross mikrotik devices.
I could do this in combination of Winbox/notepad++, but it will take weeks and it simply to boring

How should I get a bigger picture that makes sense?

2

You will see this in winbox. Go to ip firewall nat/mangle etc and se what counting and not.

to combine 10 routers to 2 - is a lot of work. :smiley: , but its possible to do a compare in some kind of editor - combine r1 firewall config to r2 firewall config - and deleate duplikated entries. Then you should have a full ruleset in all routers combined (at the end)

You can do a /export /ip firewall only if preffered.

3

Instead of /ip firewall export, you can use /ip firewall filter print detail followed by /ip firewall filter print stats (and then the same for raw, mangle and nat). You’ll have to use some spreadsheet to stitch together the statistics with the rule properties, but you’ll have every match condition there on a single line per rule, which is not the case with the WebFig or Winbox.