I am trying to sync firewall rules between two VRRP mikrotik and setup SSH key between them. is there any scp/sftp client available in RouterOS so i can transfer file between two mikrotik? I don't want to use ftp or third party server to transfer file between two MT.

/tool fetch mode=ftp upload=yes address=00.11.22.33 port=21 user="user" password="pax" src-path="/localfolder/localfile.rsc" dst-path="/remotefolder/remotefile.rsc" keep-result=yes;

/tool fetch mode=ftp upload=no address=00.11.232.33 port=21 user="user" password="pax" src-path="/remotefolder/remotefile.rsc" dst-path="/localfolder/localfile.rsc" keep-result=yes;

I am trying to sync firewall rules between two VRRP mikrotik and setup SSH key between them. is there any scp/sftp client available in RouterOS so i can transfer file between two mikrotik? I don't want to use ftp or third party server to transfer file between two MT.

forget ssh and use directly the ftp server service inside mikrotik:

(RouterOS 6.3x.x)

for upload one file to anonther RB (with ftp service confugured):

Code: Select all

/tool fetch mode=ftp upload=yes address=00.11.22.33 port=21 user="user" password="pax" src-path="/localfolder/localfile.rsc" dst-path="/remotefolder/remotefile.rsc" keep-result=yes;

for download one file from anonther RB (with ftp service confugured):

Code: Select all

/tool fetch mode=ftp upload=no address=00.11.232.33 port=21 user="user" password="pax" src-path="/remotefolder/remotefile.rsc" dst-path="/localfolder/localfile.rsc" keep-result=yes;

But ftp is the most fast and secure protocol you can use without waiting any implementation.

Simply firewall rules and/or change the default 21 port to any make impossible to hack on easy way or brute force the ftp...

But ftp is the most fast and secure protocol you can use without waiting any implementation.
ost fast and secure protocol you can use without waiting any implementation.

Simply firewall rules and/or change the default 21 port to any make impossible to hack on easy way or brute force the ftp...

The point is not hacking or brute force attack... If your two devices communicate with each other a third party can read your unencrypted credentials from wire.

• activate https management interface at both Mikrotiks in question and use file download/upload of the WebFig interface which is secured by https
• create a secure tunnel between the Mikrotiks (IPsec, SSTP) and use ftp over that tunnel

Code: Select all

Match User mikrotik-upload
    AuthenticationMethods password

Has anyone tried to upload a file (Mikrotik router to remote server) using the src-address parameter? I'm using the following command:

Code: Select all

/tool fetch upload=yes url="sftp://serverIP/path/file" user=$user password=$password src-path=$file src-address=$ip 

But it seems there's a bug or something because it returns this error (even the error says SFTP supports it):

Code: Select all

failure: only http[s]/sftp supports src-address

ROS Version: 6.46.5

Code: Select all

Match User mikrotik-upload
    AuthenticationMethods password

been dealing with this lately and it does work with pub key authentication - which is superior to password. esp that password auth is disabled by default in openssh.
you can easily add private keys to the respective account in routeros, and there it is.