RoS feature idea (config backup/export before factory reset)

I propose that when you decide to make hard reset/factory reset, just before resetting router/switch will automaticaly make configuration backup/export first.

I am in the process of replacing some of my network equipment and reconfiguring whole network (had faulty CCR1016 which I have patched and now replacing).
I use VLANs and I have managed (twice in few days) to lock myself out of my router and AP (all Mikrotik), I am ok with Mikrotik and would say I am quite familiar but deffinetly not professional (so this lockouts happen).

Different devices use different console connectors (which means a lot of different cables plus usb dongle), so saving/exporting configuration before resetting would save a lot of time to reconfigure everything up to a point where I locked myself out (specially if I do not have access to console).

I propose that when you decide to make hard reset/factory reset, just before resetting router/switch will automaticaly make configuration backup/export first.

In some cases RouterOS does this (e.g. upgrade) , but it cannot be automatic for security reasons.

Suppose you want to hack a MT router. You hardware reset the device, download and analyze the automatic export with passwords in readable form, and import it back in.
It is quite common in IT, if you have to do a hardware reset, that you will not get access to the current config or data on the device.

Your use case seems to be the hardware reset.

So: I propose that when you decide to make a change to VLAN or other important things where “Safe Mode” will not protect you, and may have to do a hardware reset/factory reset, just before starting the change on the router/switch you make a configuration backup/export first. Download that export and/or that backup, and leave a copy in the permanent storage on the router. After the factory reset restore backup or import the export. Chances that you will have to upload first are minimal. Download/upload is not limited to console or USB dongles, there are many network paths and options to do it.

I have spent some more hours reading and learning and your response (of course) makes perfect sense. It would be a security issue (maybe a little less if that behaviour is tied to pressing the physical button, because that means that malicious someone would have access to the device).

But yes, I should be both more careful and understand better what I am doing :slight_smile:.