I want to sync my firewall settings from one VRRP router to another. Therefore I'm exporting the rules with
Code: Select all
/ip firewall export file=firewallrulesRemove all firewall settings before import
Hi,
I want to sync my firewall settings from one VRRP router to another. Therefore I'm exporting the rules with. But before import on the second router I have to wipe out all firewall settings. How could I do this?
I want to sync my firewall settings from one VRRP router to another. Therefore I'm exporting the rules with
Re: Remove all firewall settings before import
Code: Select all
/ip firewall filter remove [find]
/ip firewall nat remove [find]
/ip firewall raw remove [find]
/ip firewall mangle remove [find]
/ip firewall address-list remove [find]
/ip firewall layer7-protocol remove [find]
/ip firewall connection remove [find]
Re: Remove all firewall settings before import
Thanks! But sorry, I've fogot to mention that I've already tried this one:
But it gives the error
and does not remove any rules.
I guess this is because of rule 0, which is a builtin rule for fasttrack.
Code: Select all
/ip firewall filter remove [find]Code: Select all
failure: cannot remove builtinI guess this is because of rule 0, which is a builtin rule for fasttrack.
Re: Remove all firewall settings before import
This should work
Code: Select all
/ip firewall filter remove [find dynamic=no]Re: Remove all firewall settings before import
Thanks, that one works!
-
-
gotsprings
Forum Guru
- Posts: 2313
- Joined:
Re: Remove all firewall settings before import
I use find comment = "defcon" on new routers.
Will have to try that dynamic no at some point on a running router.
Thing is... I import my new rules THEN delete the old ones.
Will have to try that dynamic no at some point on a running router.
Thing is... I import my new rules THEN delete the old ones.