เทคนิคสำรองข้อมูล MikroTik

# สร้าง Binary Backup พร้อมรหัสผ่าน (แนะนำ)
/system backup save name=mybackup password=YourStrongPassword

# สร้าง Binary Backup ไม่มีรหัสผ่าน
/system backup save name=mybackup dont-encrypt=yes

# กู้คืนจาก Binary Backup
/system backup load name=mybackup password=YourStrongPassword

# ดูไฟล์ Backup ทั้งหมด
/file print where type=backup

# Export แบบ Compact (แนะนำ ตั้งแต่ RouterOS 5.x+)
/export compact file=myconfig

# Export แบบ Verbose (แสดงค่า default ทั้งหมด)
/export verbose file=myconfig

# Export โดยซ่อนข้อมูล sensitive (password, secrets)
/export hide-sensitive file=myconfig

# Export เฉพาะส่วน เช่น Firewall
/ip firewall filter export file=firewall-rules

#!/usr/bin/env python3
"""
MikroTik RouterOS Backup Script
Requires: pip install paramiko scp
"""

import paramiko
from scp import SCPClient
from datetime import datetime
import os
import logging

logging.basicConfig(level=logging.INFO)
logger = logging.getLogger(__name__)

class MikrotikBackup:
    def __init__(self, host, username, password=None, key_file=None, port=22):
        self.host = host
        self.username = username
        self.password = password
        self.key_file = key_file
        self.port = port
        self.client = None
        
    def connect(self):
        """Establish SSH connection to MikroTik device"""
        self.client = paramiko.SSHClient()
        self.client.set_missing_host_key_policy(paramiko.AutoAddPolicy())
        
        if self.key_file:
            private_key = paramiko.RSAKey.from_private_key_file(self.key_file)
            self.client.connect(
                hostname=self.host,
                port=self.port,
                username=self.username,
                pkey=private_key,
                timeout=30
            )
        else:
            self.client.connect(
                hostname=self.host,
                port=self.port,
                username=self.username,
                password=self.password,
                timeout=30
            )
        logger.info(f"Connected to {self.host}")
        
    def disconnect(self):
        """Close SSH connection"""
        if self.client:
            self.client.close()
            
    def create_backup(self, backup_password=None):
        """Create binary backup and export configuration"""
        timestamp = datetime.now().strftime("%Y%m%d_%H%M%S")
        identity = self._run_command("/system identity get name").strip()
        backup_name = f"{identity}_{timestamp}"
        
        # Create binary backup
        if backup_password:
            cmd = f'/system backup save name="{backup_name}" password="{backup_password}"'
        else:
            cmd = f'/system backup save name="{backup_name}"'
        self._run_command(cmd)
        
        # Create config export
        self._run_command(f'/export compact file="{backup_name}_config"')
        
        import time
        time.sleep(5)  # Wait for files
        return backup_name
        
    def download_backup(self, backup_name, local_dir="./backups"):
        """Download backup files via SCP"""
        os.makedirs(local_dir, exist_ok=True)
        
        with SCPClient(self.client.get_transport()) as scp:
            scp.get(f"{backup_name}.backup", local_dir)
            scp.get(f"{backup_name}_config.rsc", local_dir)
            logger.info(f"Downloaded backup to {local_dir}")
            
    def _run_command(self, command):
        stdin, stdout, stderr = self.client.exec_command(command, timeout=60)
        return stdout.read().decode('utf-8')

# Usage
if __name__ == "__main__":
    backup = MikrotikBackup(
        host="192.168.88.1",
        username="admin",
        password="yourpassword"
    )
    
    backup.connect()
    backup_name = backup.create_backup(backup_password="SecurePassword123")
    backup.download_backup(backup_name, "/backups/mikrotik")
    backup.disconnect()