Saltar a contenido

mikrotik_routeros#

Warning

This is automatically generated. In case of any issues, please refer to the source code or, even better, open an issue on the GitHub repository. Thanks! 🤗📖

Platforms:#

Commands#

enable#

Output: None

Help: enter enable mode

Prompt: - mikrotik_routeros>

ip firewall filter print all without-paging#

Output:

Flags: X - disabled, I - invalid, D - dynamic 
 0    ;;; defconf: accept established,related,untracked
      chain=input action=accept connection-state=established,related,untracked 

 1    ;;; defconf: drop invalid
      chain=input action=drop connection-state=invalid 

 2    ;;; FIREWALL-DMZ-1
      chain=forward action=accept connection-state=established,related,new in-interface=dmz-1-vlan out-interface=pppoe-out1 

 3    chain=forward action=accept dst-address=185.163.212.156/30 

 4    ;;; defconf: accept ICMP
      chain=input action=accept protocol=icmp 

 5    ;;; Acces VPN
      chain=input action=accept protocol=udp dst-port=500,1701,4500 log-prefix="Acces VPN" 

 6    chain=input action=accept protocol=ipsec-esp 

 7    ;;; Acces WAN
      chain=input action=accept protocol=tcp src-address-list=Supervision dst-port=4430,22,8291 

 8    ;;; Acces WAN SNMP
      chain=input action=accept protocol=udp src-address-list=Supervision dst-port=161 
17:20:06 echo: system,error,critical login failure for user admin from 65.160.140.13 via ssh

 9    ;;; defconf: accept to local loopback (for CAPsMAN)
      chain=input action=accept dst-address=127.0.0.1 

10    ;;; defconf: drop all not coming from LAN
      chain=input action=drop in-interface-list=!LAN 

11    ;;; defconf: accept in ipsec policy
      chain=forward action=accept ipsec-policy=in,ipsec 

12    ;;; defconf: accept out ipsec policy
      chain=forward action=accept ipsec-policy=out,ipsec 

13 X  ;;; defconf: fasttrack
      chain=forward action=fasttrack-connection hw-offload=yes connection-state=established,related

14    ;;; defconf: accept established,related, untracked
      chain=forward action=accept connection-state=established,related,untracked 

15    ;;; defconf: drop invalid
      chain=forward action=drop connection-state=invalid 

16    ;;; defconf: drop all from WAN not DSTNATed
      chain=forward action=drop connection-state=new connection-nat-state=!dstnat in-interface-list=WAN 

17    ;;; Input
      chain=input action=accept src-address-list=Eqinoxe 

18    ;;; related established
      chain=input connection-state=established,related 

19    chain=forward connection-state=established,related src-mac-address=67:33:EB:0E:EB:A8

20    ;;; drop invalid connections
17:20:06 echo: system,error,critical login failure for user admin from 65.160.140.13 via ssh
      chain=forward action=drop connection-state=invalid protocol=tcp 

21    ;;; Block all entrant
      chain=input action=drop in-interface=all-ppp 

22    chain=input action=drop in-interface=all-ethernet log-prefix=""

Help: execute the command "ip firewall filter print all without-paging"

Prompt: - mikrotik_routeros> - mikrotik_routeros#

system clock print#

Output:

                  time: 10:00:47
                  date: jul/21/2023
  time-zone-autodetect: yes
        time-zone-name: Europe/Moscow
            gmt-offset: +03:00
            dst-active: no

Help: execute the command "system clock print"

Prompt: - mikrotik_routeros> - mikrotik_routeros#

ip route print terse#

Output:

 0 ADS  dst-address=::/0 gateway=pppoe-out1 gateway-status=pppoe-out1 reachable distance=100 scope=30 target-scope=10 
 1 ADC  dst-address=2a05:c100:7::/64 gateway=bridge-lan gateway-status=bridge-lan reachable distance=0 scope=10 
 2   S  dst-address=9bb8:baac:d400::/38 gateway=ether4 gateway-status=ether4 unreachable distance=44 scope=30 target-scope=10 
17:20:06 echo: system,error,critical login failure for user admin from 65.160.140.13 via ssh
 3 X S  dst-address=ec64:a7fd:bc1c:14c:7960:5000::/84 gateway=ether2 gateway-status=ether2 inactive distance=7 scope=30 target-scope=10 
 4   S  dst-address=fd79:f1d4:a400::/39 gateway=ether5 gateway-status=ether5 unreachable distance=24 scope=30 target-scope=10 

Help: execute the command "ip route print terse"

Prompt: - mikrotik_routeros> - mikrotik_routeros#

ip dhcp-server lease print without-paging#

Output:

Flags: X - disabled, R - radius, D - dynamic, B - blocked 
 #   ADDRESS                                 MAC-ADDRESS       HOST-NAME                     SERVER                     RATE-LIMIT                     STATUS  LAST-SEEN                               
17:20:06 echo: system,error,critical login failure for user admin from 65.160.140.13 via ssh
 0                                           AF:D6:C8:F2:36:16                                                                                         waiting never                                   
 1 X 192.168.1.56                                                                                                       15                             waiting never                                   

Help: execute the command "ip dhcp-server lease print without-paging"

Prompt: - mikrotik_routeros> - mikrotik_routeros#

interface ethernet poe print without-paging#

Output:

bad command name po (line 1 column 7)

Help: execute the command "interface ethernet poe print without-paging"

Prompt: - mikrotik_routeros> - mikrotik_routeros#

interface ethernet print#

Output:

Flags: X - disabled, R - running, S - slave
 #    NAME     MTU MAC-ADDRESS       ARP             SWITCH
 0    ether1  1500 12:34:56:78:90:AA enabled         switch1
 1 R  ether2  1500 12:34:56:78:90:AB enabled         switch1
 2 XS ether3  1500 12:34:56:78:90:AC enabled         switch1
 3  S ether4  1500 12:34:56:78:90:AD enabled         switch1
 4 R  ether5  1500 12:34:56:78:90:AE enabled         switch1

Help: execute the command "interface ethernet print"

Prompt: - mikrotik_routeros> - mikrotik_routeros#

system routerboard print#

Output:

       routerboard: yes
        board-name: hEX PoE lite
             model: RouterBOARD 750UP r2
     serial-number: 8B0208F4D5F9
     firmware-type: qca9531L
  factory-firmware: 3.41
  current-firmware: 3.41
  upgrade-firmware: 6.48.6

Help: execute the command "system routerboard print"

Prompt: - mikrotik_routeros> - mikrotik_routeros#

user active print#

Output:

Flags: R - radius, M - by-romon
 #    WHEN                 NAME       ADDRESS         VIA
 0    jul/21/2023 09:38:39 user1      1.2.3.4         ssh
 1    jul/21/2023 11:00:32 user2      1.2.3.5         telnet

Help: execute the command "user active print"

Prompt: - mikrotik_routeros> - mikrotik_routeros#

ip firewall address-list print terse#

Output:

 0   list=Eqinoxe address=185.48.253.0/27 creation-time=jan/01/2002 01:00:25 
 1   list=Eqinoxe address=185.48.254.0/28 creation-time=jan/01/2002 01:00:25 
 2   list=Eqinoxe address=185.163.212.64/28 creation-time=jan/01/2002 01:00:25 
 3   list=Eqinoxe address=185.163.212.48/28 creation-time=jan/01/2002 01:00:25 
 4   list=Eqinoxe address=185.197.109.16/28 creation-time=jan/01/2002 01:00:25 
 5   list=Supervision address=185.132.66.240 creation-time=jan/01/2002 01:00:25 
 6   list=Supervision address=85.14.167.232/29 creation-time=jan/01/2002 01:00:25 
 7   list=Supervision address=185.48.254.16/29 creation-time=jan/01/2002 01:00:25 
 8   list=Supervision address=5.10.130.152/30 creation-time=jan/01/2002 01:00:25 
 9   list=Supervision address=85.14.167.193 creation-time=jan/01/2002 01:00:25 
10   list=azeazeaze address=192.168.1.1 creation-time=jun/14/2022 06:34:30 
11   list=azeazeaze address=192.168.1.2 creation-time=jun/14/2022 06:44:09 
12   list=azeazeaze address=192.168.1.3 creation-time=jun/14/2022 06:44:51 
13 X list=azeazeaze address=192.168.3.0/24 creation-time=jun/14/2022 07:53:30 
14 D list=azeazeaze address=192.168.3.0/24 creation-time=jun/14/2022 07:53:49 timeout=4m52s 
15 list=snmp-monitoring-address-list address=85.14.167.234 creation-time=mar/01/2023 13:59:33

Help: execute the command "ip firewall address-list print terse"

Prompt: - mikrotik_routeros> - mikrotik_routeros#

log print detail without-paging#

Output:

 time=jul/19 14:27:01 topics=script,info message="Ping testA: Packets Sent = 18, Packets Loss = 10 % "

 time=jul/19 16:27:01 topics=script,info message="Ping testA: Packets Sent = 18, Packets Loss = 10 % "

 time=jul/19 16:37:01 topics=script,info message="Ping testA: Packets Sent = 12, Packets Loss = 40 % "

 time=jul/19 19:17:01 topics=script,info message="Ping testA: Packets Sent = 17, Packets Loss = 15 % "

 time=jul/19 03:05:02 topics=script,warning message="Connection via Box bad. Reset USB Modem"

 time=jul/20 03:07:40 topics=interface,info message="lte1 link down"

 time=jul/20 03:07:46 topics=interface,info message="lte1 link up"

 time=jul/20 03:07:46 topics=dhcp,info message="dhcp-client on lte1 got IP address 192.168.1.2"

Help: execute the command "log print detail without-paging"

Prompt: - mikrotik_routeros> - mikrotik_routeros#

ip firewall nat print all without-paging#

Output:

Flags: X - disabled, I - invalid, D - dynamic 
17:20:06 echo: system,error,critical login failure for user admin from 65.160.140.13 via ssh
 0    ;;; dmz-1: masquerade
      chain=srcnat action=masquerade src-address=!185.163.212.156/30 out-interface-list=WAN ipsec-policy=out,none 

 1    chain=dstnat action=redirect protocol=icmp src-address=192.168.1.16 dst-address=31.31.31.31 in-interface-list=dmz-1 log=no log-prefix="" 

 2 X  ;;; qsdqsdqsd
17:20:06 echo: system,error,critical login failure for user admin from 65.160.140.13 via ssh
      chain=srcnat action=accept protocol=vmtp in-interface=all-ethernet out-interface=ether4 log=no log-prefix="" 

 3 X  chain=srcnat action=accept protocol=tcp src-address-list=Supervision dst-address-list=Eqinoxe src-port=80 dst-port=8080 log=no log-prefix="" 

 4    chain=srcnat action=masquerade protocol=icmp src-address=0.0.0.0 out-interface-list=DMZ log=no log-prefix="" ipsec-policy=out,ipsec 

Help: execute the command "ip firewall nat print all without-paging"

Prompt: - mikrotik_routeros> - mikrotik_routeros#

routing bgp peer print status without-paging#

Output:

Flags: X - disabled, E - established
 0 E name="SRV-R1" instance=default remote-address=1.2.3.4 remote-as=8491 tcp-md5-key="" nexthop-choice=default multihop=no route-reflect=no hold-time=3m ttl=255 in-filter=INTERNAL-RR-IN out-filter=INTERNAL-RR-OUT address-families=ip update-source=Loopback0 default-originate=never remove-private-as=no as-override=no passive=no use-bfd=no remote-id=1.2.3.4 local-address=1.2.3.44 uptime=7w6d1h49m36s prefix-count=1836 updates-sent=331 updates-received=237257 withdrawn-sent=301 withdrawn-received=84853 remote-hold-time=1m30s used-hold-time=1m30s used-keepalive-time=30s refresh-capability=yes as4-capability=yes state=established

 1 E name="SRV-R2" instance=default remote-address=1.2.3.5 remote-as=8491 tcp-md5-key="" nexthop-choice=default multihop=no route-reflect=no hold-time=3m ttl=255 in-filter=INTERNAL-RR-IN out-filter=INTERNAL-RR-OUT address-families=ip update-source=Loopback0 default-originate=never remove-private-as=no as-override=no passive=no use-bfd=no remote-id=1.2.3.5 local-address=1.2.3.44 uptime=7w6d1h49m43s prefix-count=1835 updates-sent=331 updates-received=243335 withdrawn-sent=301 withdrawn-received=84680 remote-hold-time=1m30s used-hold-time=1m30s used-keepalive-time=30s refresh-capability=yes as4-capability=yes state=established

Help: execute the command "routing bgp peer print status without-paging"

Prompt: - mikrotik_routeros> - mikrotik_routeros#

ipv6 neighbor print without-paging#

Output:

Flags: R - router 
 0   address=ff02::5 interface=main mac-address=33:33:00:00:00:05 status="noarp" 

 1   address=ff02::1 interface=main mac-address=33:33:00:00:00:01 status="noarp" 

 2 R address=fe80::d7:4cff:fec1:2e32 interface=main mac-address=00:0C:42:28:79:45 status="stale" 

 3   address=2a05:c100:1d::351c interface=bridge-lan status="failed"

Help: execute the command "ipv6 neighbor print without-paging"

Prompt: - mikrotik_routeros> - mikrotik_routeros#

ip address print#

Output:

Flags: X - disabled, I - invalid, D - dynamic
 #   ADDRESS            NETWORK         INTERFACE
 0   10.156.1.229/30    10.156.1.228    ether4_CiscoPhone3
 1   10.152.1.229/30    10.152.1.228    ether5_KFCcisco
 2   10.160.1.229/30    10.160.1.228    ether2_BOX
 3 XI 10.100.3.200/27    10.100.3.192    bridge70

Help: execute the command "ip address print"

Prompt: - mikrotik_routeros> - mikrotik_routeros#

interface ethernet monitor name once#

Output:

                     name: ether30
                    status: no-link
          auto-negotiation: done
               advertising: 10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
  link-partner-advertising:

Help: execute the command "interface ethernet monitor name once"

Prompt: - mikrotik_routeros> - mikrotik_routeros#

snmp community print without-paging#

Output:

17:20:06 echo: system,error,critical login failure for user admin from 65.160.140.13 via ssh
Flags: * - default, X - disabled 
 #    NAME                                                        ADDRESSES                                                                                         SECURITY   READ-ACCESS WRITE-ACCESS
17:20:06 echo: system,error,critical login failure for user admin from 65.160.140.13 via ssh
 0 *  Monitoring                                                  ::/0                                                                                              none       yes         no          

Help: execute the command "snmp community print without-paging"

Prompt: - mikrotik_routeros> - mikrotik_routeros#

ip arp print without-paging#

Output:

Flags: X - disabled, I - invalid, H - DHCP, D - dynamic, P - published, C - complete 
 #    ADDRESS         MAC-ADDRESS       INTERFACE                                                                                                                                                      
 0 D  185.163.212.158                   dmz-1-vlan                                                                                                                                                     
17:20:06 echo: system,error,critical login failure for user admin from 65.160.140.13 via ssh
 1    185.163.212.159 AF:D6:C8:F2:36:16 vlan-2                                                                                                                                                     

Help: execute the command "ip arp print without-paging"

Prompt: - mikrotik_routeros> - mikrotik_routeros#

ip address export verbose#

Output:

# jul/21/2023 09:42:42 by RouterOS 6.48.6
# software id = 1234-ABCD
 #
# model = RB750UPr2
# serial number = AB12345CD789
/ip address
add address=10.159.1.159/30 disabled=no interface=ether2 network=10.159.1.158
add address=10.80.90.5/27 comment="test comment" disabled=yes interface=eth3_vlan1 network=10.80.90.0

Help: execute the command "ip address export verbose"

Prompt: - mikrotik_routeros> - mikrotik_routeros#

routing ospf neighbor print terse without-paging#

Output:

 0 instance=default router-id=1.2.3.4 address=1.2.3.58 interface=vlan1 priority=128 dr-address=0.0.0.0 backup-dr-address=0.0.0.0 state=Full state-changes=5 ls-retransmits=0 ls-requests=0 db-summaries=0 adjacency=7w5d8h47m54s
 1 instance=default router-id=1.2.3.5 address=1.2.3.59 interface=vlan2 priority=128 dr-address=0.0.0.0 backup-dr-address=0.0.0.0 state=Full state-changes=5 ls-retransmits=0 ls-requests=0 db-summaries=0

Help: execute the command "routing ospf neighbor print terse without-paging"

Prompt: - mikrotik_routeros> - mikrotik_routeros#

interface print terse without-paging#

Output:

 0 D   name=ether1 default-name=ether1 type=ether mtu=1500 actual-mtu=1500 l2mtu=1598 max-l2mtu=2028 mac-address=12:34:56:78:90:AA last-link-up-time=aug/16/1970 13:05:43 link-downs=0
 1 DR  name=ether2_UniFi2 default-name=ether2 type=ether mtu=1500 actual-mtu=1500 l2mtu=1598 max-l2mtu=2028 mac-address=12:34:56:78:90:AB last-link-down-time=aug/17/1970 13:33:01 last-link-up-time=aug/17/1970 13:23:11 link-downs=3
 2     name=ether3_UniFi1 default-name=ether3 type=ether mtu=1500 actual-mtu=1500 l2mtu=1598 max-l2mtu=2028 mac-address=12:34:56:78:90:AC link-downs=0
 3  R  name=bridge-VLAN1 type=bridge mtu=auto actual-mtu=1500 l2mtu=1594 mac-address=12:34:56:78:90:AD last-link-up-time=aug/16/1970 13:05:35 link-downs=0
 4  X  name=bridge-VLAN2 type=bridge mac-address=12:34:56:78:90:AE link-downs=0
 5   S name=eth3_vlan1 type=vlan mtu=1500 actual-mtu=1500 l2mtu=1594 mac-address=12:34:56:78:90:AF last-link-down-time=aug/17/1970 13:33:01 last-link-up-time=aug/17/1970 13:23:11 link-downs=3
 6   S name=eth4_vlan2 type=vlan mtu=1500 actual-mtu=1500 l2mtu=1594 mac-address=12:34:56:78:90:BA link-downs=0
 7  RS name=eth4_vlan3 type=vlan mtu=1500 actual-mtu=1500 l2mtu=1594 mac-address=12:34:56:78:90:BB link-downs=0
 8 D S name=eth4_vlan4 type=vlan mtu=1500 actual-mtu=1500 l2mtu=1594 mac-address=12:34:56:78:90:BC link-downs=0
 9 DXS name=eth5_vlan5 type=vlan mtu=1500 actual-mtu=1500 l2mtu=1594 mac-address=12:34:56:78:90:BD last-link-up-time=aug/16/1970 13:05:43 link-downs=0
10  R  name=eth6_vlan6 type=vlan mtu=1500 actual-mtu=1500 l2mtu=1598 mac-address=12:34:56:78:90:BE fast-path=yes last-link-down-time=sep/08/2023 01:07:00 last-link-up-time=sep/08/2023 01:07:09 link-downs=7

Help: execute the command "interface print terse without-paging"

Prompt: - mikrotik_routeros> - mikrotik_routeros#

ping#

Output:

  SEQ HOST                                     SIZE TTL TIME  STATUS
    0 8.8.8.8                                    56  64 157ms
    1 8.8.8.8                                    56  64 64ms
    2 8.8.8.8                                    56  64 60ms
    3 8.8.8.8                                    56  64 65ms
    sent=13 received=13 packet-loss=0% min-rtt=55ms avg-rtt=67ms max-rtt=157ms

Help: execute the command "ping"

Prompt: - mikrotik_routeros> - mikrotik_routeros#