In the SDS configurator, it is important to go through not only the settings tabs but also the control stages: import of old export, checklist, diagnostics, and export runbook.
Import old configuration
- On the router, execute
/export terse file=before-import. - Copy the export text to the Import tab.
- Check for warnings: Wi-Fi passwords and private keys are usually not restored from export.
- After import, manually check WAN, LAN, VLAN, firewall, and VPN.
Checklist before export
- critical errors must be fixed before .rsc;
- important warnings can only be accepted consciously;
- each firewall rule must have a comment;
- for VLAN, check management access.
Diagnostics after implementation
/ip route print
/ip dhcp-server lease print
/ip firewall filter print stats
/ip firewall nat print stats
/interface wireguard peers print detail
/log print
Export and runbook
The Export tab generates the .rsc and the deployment package. The package should include backup/export before works, a list of checks after implementation, and rollback commands.
Do not apply .rsc to a production router without backup, Safe Mode, or an alternative access channel.