Transfere settings from rb433 to rb133

RouterOS General
1

Is it possible to make a backup on rb433 and then transfere it and restore on rb133?

I have tried to do it with backup and restore, but I am not able to restore the backup file on rb133, I am getting an error message.

Both of the routerboards have the same routerOS version

2

Hello,

try to:

New terminal on RB433.
type: export
copy/paste to the notepad.
delete all setting related with MACs of the board, and keep only other configurations.
delete all settings related to ether2 and ether3 because RB133 don’t have this ports..
Copy paste the result to the RB133.

Enjoy.

3

Additionally to Martin comment, I would recommend to edit export file, and leave only important part of the configuration, while default/unused settings could be deleted.

4

ok.
You explained me how to export the settings. But how do i Import it then to the new board? Which command do i use?
Please explain me more detailed.

Thanks

5

http://wiki.mikrotik.com/wiki/Manual:Configuration_Management#Importing_Configuration

6
7

Thank you very much, yes now i managed with copy pasting.


Thank you

8

Karma vote please!

9

One more question:

Is there a way how i can export the certificate and transfer it to new routerbaord?

thank you

10

No, unless the file from which it was imported is still in the file system on the router, in which case you can copy the key and cert file off.

11

Hi,

As pointed out above, you may also find this program useful, even in the future - http://forum.mikrotik.com/viewtopic.php?f=2&t=40092&start=0&hilit=milliscript

Rgds,
Mark

12

I have the certificate file , but i dont have the private-key.pem file anymore.

So, what to do now? Can i re-create the private-key.pem file?


Thanks

13

You are not able to get it from RB133, I think that new certificate should be created (if it signed).

14

Pretty much. Not only is it best practice (to the point that running a PKI without following this best practice is completely pointless) to revoke any certificate signed with a private key the owner has lost control of, it is also mathematically impossible to derive the private key from the public key (the certificate is the public key) because that’s the entire point of asymmetric encryption: anyone can see your certificate but cannot possibly derive your private key from it.

For what it’s worth, if you have your own PKI revoking and issuing a new certificate is free and quick, and pretty much any seller of certificates will let you do the same thing via some web interface. Like I said: everyone revokes certs when private keys are lost, and a key would count lost if someone had stolen your AP. Certificate authorities are well set up to reissue new certs.