Here is a "Long Content" example of what a standard Small Office/Home Office (SOHO) MikroTik configuration looks like when exported. You can copy this structure to document your own network or restore a backup.
# software id = A1B2-C3D4
# model = RB750Gr3
# serial number = ABC12345678
/interface bridge
add admin-mac=48:A9:8A:12:34:56 auto-mac=no comment=defconf name=bridge-local
/Interface ethernet
set [ find default-name=ether1 ] name=ether1-WAN
set [ find default-name=ether2 ] name=ether2-LAN
set [ find default-name=ether3 ] name=ether3-LAN
set [ find default-name=ether4 ] name=ether4-LAN
set [ find default-name=ether5 ] name=ether5-LAN
/interface wireless
/export compact file=daily-config-$(/system clock get date)
Note: By default, passwords are exported as "" (empty) or "-----" – not the actual value.
To run an exported .rsc script and restore config: mikrotik export configuration
/import file-name.rsc
Or via drag-and-drop into WinBox Files → right-click → Import.
The import will add configuration on top of existing settings. To replace the entire config, first reset:
/system reset-configuration no-defaults=yes skip-backup=yes
Then import after reboot.
Before looking at the content, it is important to know how to generate it safely.
In the world of network administration, the ability to back up and restore configurations is not just a convenience—it is a necessity. For MikroTik administrators, the export command is one of the most powerful tools available. Unlike a binary backup file, a configuration export provides a human-readable, script-based representation of the device's settings.
This write-up explores the mechanics of the MikroTik export command, the differences between export types, and best practices for maintaining a robust backup strategy. Here is a "Long Content" example of what
The simplest way to export the entire configuration:
/export
This prints the configuration script to the terminal. For a file-based export:
/export file=backup-name
This creates a .rsc (RouterOS Script) file in the router's Files menu. Note: By default, passwords are exported as ""
| Practice | Reason |
|----------|--------|
| Never use show-sensitive in production logs | Exports PPP secrets, WiFi passwords, VPN keys |
| Remove exported .rsc files from router after transfer | Files remain in RAM/storage and could be retrieved |
| Encrypt exported files externally | Use zip -e or GPG before storing or emailing |
| Redact default credentials (admin/"") before sharing | Attackers could use known defaults |
/ip firewall export file=firewall-only