skills.rest
clfigueiredo
clfigueiredoCOMMUNITY
Explore all skills by this author →
GitHub

mikrotik-ops

Diagnose, configure, and audit MikroTik RouterOS devices via SSH and REST API.

5|15|Updated Jul 8, 2026
Search Tags:#ssh#bgp#network troubleshooting#routeros#mikrotik#firewall audit#pppoe
One-click install
npx skills add https://github.com/clfigueiredo/hermes-infra-skills --skill mikrotik-ops-clfigueiredo
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: mikrotik-ops
Source: https://github.com/clfigueiredo/hermes-infra-skills/tree/main/.hermes/skills/forumtelecom/mikrotik-ops
Command: npx skills add https://github.com/clfigueiredo/hermes-infra-skills --skill mikrotik-ops-clfigueiredo

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Operating MikroTik routers remotely is risky: RouterOS 6 and 7 have incompatible syntax for BGP, OSPF, and routing tables, and a single wrong command can lock you out of a production device. This Skill enforces a disciplined senior-engineer workflow—identify the device, snapshot before changes, apply with rollback safety, and validate—so ISP and network operations stay safe and auditable. ## Core Features & Use Cases - Version-aware diagnostics: Automatically detects RouterOS 6 vs 7 and uses the correct command trees for BGP, OSPF, firewall, queues, and routing filters. - Safe change management: Mandatory config export and backup before mutations, scheduled self-heal rollback for risky remote changes, and an explicit CONFIRMO pattern for destructive commands. - ISP operations coverage: PPPoE concentrators with queue trees, CGNAT pools, multi-upstream BGP, WAN failover, hotspot, CAPsMAN, and SNMP setup for Zabbix monitoring. - Use Case: A NOC analyst receives "BGP do upstream caiu" via WhatsApp, uses the Skill to inspect /routing/bgp/session print detail, correlate logs, and produce a structured incident report with rollback steps. ## Quick Start Ask the agent to audit the firewall rules and check BGP session status on the MikroTik router at the configured MIKROTIK_HOST.

Frequently Asked Questions about mikrotik-ops

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I troubleshoot BGP sessions on MikroTik RouterOS?▼

Check BGP session state with `/routing/bgp/session print detail` on RouterOS 7 or `/routing bgp peer print status` on RouterOS 6, then correlate with `/log print where topics~"bgp"`. The Skill automatically selects the correct command tree based on the detected RouterOS version.

How to safely change MikroTik configuration remotely without lockout?▼

Export a backup with `/export` and `/system backup save` first, then schedule a self-heal rollback via `/system scheduler` before applying the change. Remove the scheduler only after confirming the session survives, or use interactive safe-mode with Ctrl+X.

What is the difference between RouterOS 6 and 7 BGP configuration?▼

RouterOS 6 uses `/routing bgp peer` with embedded templates, while RouterOS 7 splits BGP into `/routing/bgp/connection`, `/routing/bgp/template`, and `/routing/filter/rule`. Version 6 peer configs do not migrate directly and must be recreated.

Can I manage MikroTik devices through a REST API instead of SSH?▼

Yes, RouterOS 7.1 and later expose a REST API over HTTPS that returns JSON, which is preferred for structured data. SSH remains the fallback for RouterOS 6 devices that lack REST support.

When should I not use SSH-based MikroTik automation?▼

Avoid it for brand-new routers without an IP address, password recovery, or hardware failures. Those scenarios require Winbox MAC access, serial console, Netinstall, or an RMA through the distributor.

Related Skills

Explore More Software Engineering Skills→
chf3198chf3198

network-platform-resources

Inventory network-accessible compute platforms and manage SSH/Tailscale connections.

Community
Intermediate
xalgordxalgord
954

implementing-ticketing-system-for-incidents

Automates SIEM-to-ticket incident creation, SLA tracking, and escalation in ServiceNow, Jira, or TheHive.

Community
Advanced
xalgordxalgord
954

configuring-pfsense-firewall-rules

Configures pfSense firewall rules, NAT policies, VLAN segmentation, and logging for network zones.

Community
Intermediate
thistleknotthistleknot

rocky10-gnome-rdp

Enable GNOME native RDP on Rocky Linux 10 KVM VMs via SSH.

Community
Intermediate