MikroTik Encyclopedia
Overview
Use a docs-first workflow for MikroTik work. Prefer the official MikroTik documentation at https://help.mikrotik.com/docs/, consult cached local copies under .MikroTik-Encyclopedia/ before re-fetching, and record useful official-doc excerpts plus environment-specific operational learnings so future work gets faster and safer.
This skill is for the MikroTik RouterOS/device layer. It should trigger for real RouterOS behavior, configuration, and device-management questions — not for generic networking advice or generic Linux firewall/router administration.
Workflow
- 1. Classify the task
- Decide whether the task is a MikroTik question, troubleshooting task, command-planning task, config review, or live SSH/API task.
- Use this skill when the request is clearly about MikroTik hardware, RouterOS behavior, or a networking/admin task in a MikroTik context.
- Do not use this skill for generic networking theory, vendor-neutral firewall design, or generic Linux firewall/admin work unless the MikroTik/RouterOS context is explicit.
- 2. Check local cache first
- Use
.MikroTik-Encyclopedia/ as the local knowledge/cache root.
- Check these locations first when relevant:
-
.MikroTik-Encyclopedia/docs/help.mikrotik.com/docs/...
-
.MikroTik-Encyclopedia/notes/devices/...
-
.MikroTik-Encyclopedia/notes/patterns/...
-
.MikroTik-Encyclopedia/inventory/...
- If a cached page or note already answers the question well enough, use it.
- 3. Consult official MikroTik docs before answering or touching devices
- Before answering direct or indirect MikroTik questions that depend on RouterOS behavior, syntax, feature boundaries, security posture, or version-sensitive details, consult the official docs unless the answer is already well-supported by the local cache.
- Before performing direct SSH/API access against a MikroTik device, consult the relevant docs first when:
- the exact command path matters
- feature semantics are easy to misremember
- the action could affect routing, switching, bridge behavior, VLANs, CAPsMAN, DHCP, firewalling, or management reachability
- Do not improvise high-impact MikroTik commands from memory when the docs are easy to check.
- 4. Cache consulted docs locally
- When you consult a MikroTik doc page, save a normalized markdown/text cache copy under
.MikroTik-Encyclopedia/docs/help.mikrotik.com/docs/....
- Mirror the official docs path structure as much as practical.
- Cache only pages actually consulted; do not try to mirror the whole docs site eagerly.
- Use
scripts/cache_doc.py when appropriate.
- 5. Separate official documentation from local observations
- Store official-doc-derived material under
.MikroTik-Encyclopedia/docs/....
- Store environment-specific operational knowledge under:
-
.MikroTik-Encyclopedia/notes/devices/
-
.MikroTik-Encyclopedia/notes/patterns/
-
.MikroTik-Encyclopedia/inventory/
- Distinguish clearly between:
- official documented behavior
- observed local configuration/state
- inferred best-practice guidance
- 6. Record useful local learnings
- After useful live work, save durable notes such as:
- device roles and naming
- management-access methods
- discovered topology relationships
- CAPsMAN/controller placement
- repeated gotchas or RouterOS command patterns
- safe/unsafe operational boundaries for the environment
- Prefer concise durable notes over re-learning the same topology later.
Live Access Rules
- - Treat official docs lookup as the default preflight for non-trivial MikroTik work.
- Prefer read/inspect first when entering a device you have not recently reviewed.
- Treat edge routers/firewalls, bridge/VLAN changes, CAPsMAN changes, and management-service changes as high-sensitivity areas.
- When uncertainty remains after checking cache + docs, say so and avoid bluffing.
- When answering a question, mention when useful whether the answer comes from cached official docs, a fresh official docs lookup, or live observed device state.
Data Root
Use this workspace-local root for cache and notes:
Expected structure:
- - INLINECODE14
- INLINECODE15
- INLINECODE16
- INLINECODE17
Use scripts/init_workspace.py to create or repair the expected directory structure.
Note Destinations
- - Device-specific observations → INLINECODE19
- Reusable RouterOS patterns/gotchas → INLINECODE20
- Environment-wide topology/access info → INLINECODE21
- Cached official docs → INLINECODE22
Secrets / Sensitive Data
- - Do not store plaintext credentials, API keys, session tokens, private URLs, recovery codes, or other secrets in the encyclopedia notes/inventory tree.
- If a note needs to mention access details, keep it high-level and redact or omit secret material.
- Treat these workspace notes as operational memory, not as a secrets vault.
Resources
- -
scripts/init_workspace.py — create or repair the .MikroTik-Encyclopedia/ directory tree. - INLINECODE25 — fetch and cache a consulted official MikroTik docs page under
.MikroTik-Encyclopedia/docs/.... - INLINECODE27 — detailed operating workflow and evidence-handling rules.
- INLINECODE28 — canonical
.MikroTik-Encyclopedia/ directory structure. - INLINECODE30 — useful MikroTik topic groupings for faster doc lookup.
Good Outcomes
- - Answer a MikroTik question using cached or freshly checked official docs instead of guesswork.
- Inspect a live MikroTik device after checking the relevant docs and record any new local topology knowledge.
- Build a growing local MikroTik knowledge cache that makes later work faster, safer, and more grounded.
- Turn one-off RouterOS discoveries into durable notes so future work does not rediscover them from scratch.
Avoid
- - Answering RouterOS-specific questions purely from memory when docs are easy to consult.
- Treating local observed behavior as if it were guaranteed official documented behavior.
- Dumping large amounts of low-value docs into the workspace without a reason.
- Writing device-specific observations into the official-doc cache tree.
- Making high-impact live changes before checking the relevant docs when exact behavior matters.
MikroTik百科全书
概述
采用文档优先的工作流程处理MikroTik相关工作。优先使用官方MikroTik文档(网址:https://help.mikrotik.com/docs/),在重新获取前先查阅.MikroTik-Encyclopedia/下的本地缓存副本,并记录有用的官方文档摘录及特定环境的操作经验,以便未来工作更快速、更安全。
本技能适用于MikroTik RouterOS/设备层。应针对真实的RouterOS行为、配置和设备管理问题触发,而非通用网络建议或通用Linux防火墙/路由器管理。
工作流程
- 1. 任务分类
- 判断任务是MikroTik问题、故障排除任务、命令规划任务、配置审查还是实时SSH/API任务。
- 当请求明确涉及MikroTik硬件、RouterOS行为或MikroTik环境下的网络/管理任务时,使用本技能。
- 除非明确提及MikroTik/RouterOS上下文,否则不将本技能用于通用网络理论、厂商无关的防火墙设计或通用Linux防火墙/管理工作。
- 2. 优先检查本地缓存
- 将.MikroTik-Encyclopedia/作为本地知识/缓存根目录。
- 相关时优先检查以下位置:
- .MikroTik-Encyclopedia/docs/help.mikrotik.com/docs/...
- .MikroTik-Encyclopedia/notes/devices/...
- .MikroTik-Encyclopedia/notes/patterns/...
- .MikroTik-Encyclopedia/inventory/...
- 如果缓存的页面或笔记已能充分回答问题,则直接使用。
- 3. 在回答问题或操作设备前查阅官方MikroTik文档
- 在回答直接或间接依赖RouterOS行为、语法、功能边界、安全态势或版本敏感细节的MikroTik问题前,除非本地缓存已充分支持答案,否则应查阅官方文档。
- 在对MikroTik设备执行直接SSH/API访问前,当以下情况时先查阅相关文档:
- 确切的命令路径至关重要
- 功能语义容易记错
- 操作可能影响路由、交换、桥接行为、VLAN、CAPsMAN、DHCP、防火墙或管理可达性
- 当文档易于查阅时,不要凭记忆即兴编写高影响的MikroTik命令。
- 4. 本地缓存查阅过的文档
- 查阅MikroTik文档页面时,在.MikroTik-Encyclopedia/docs/help.mikrotik.com/docs/...下保存规范化的Markdown/文本缓存副本。
- 尽可能镜像官方文档的路径结构。
- 仅缓存实际查阅过的页面,不要主动镜像整个文档站点。
- 适当时使用scripts/cache_doc.py。
- 5. 区分官方文档与本地观察
- 将官方文档衍生材料存储在.MikroTik-Encyclopedia/docs/...下。
- 将特定环境的操作知识存储在:
- .MikroTik-Encyclopedia/notes/devices/
- .MikroTik-Encyclopedia/notes/patterns/
- .MikroTik-Encyclopedia/inventory/
- 清晰区分:
- 官方记录的行为
- 观察到的本地配置/状态
- 推断的最佳实践指导
- 6. 记录有用的本地经验
- 完成有用的实时工作后,保存持久的笔记,例如:
- 设备角色和命名
- 管理访问方法
- 发现的拓扑关系
- CAPsMAN/控制器位置
- 反复出现的陷阱或RouterOS命令模式
- 环境的安全/不安全操作边界
- 优先使用简洁持久的笔记,避免日后重新学习相同拓扑。
实时访问规则
- - 将官方文档查阅视为非平凡MikroTik工作的默认前置检查。
- 进入近期未审查的设备时,优先执行读取/检查操作。
- 将边缘路由器/防火墙、桥接/VLAN变更、CAPsMAN变更和管理服务变更视为高敏感区域。
- 在检查缓存和文档后仍存在不确定性时,如实说明并避免猜测。
- 回答问题时,酌情说明答案来源:缓存官方文档、最新官方文档查阅或实时观察的设备状态。
数据根目录
使用以下工作区本地根目录存储缓存和笔记:
- - .MikroTik-Encyclopedia/
预期结构:
- - .MikroTik-Encyclopedia/docs/help.mikrotik.com/docs/...
- .MikroTik-Encyclopedia/notes/devices/...
- .MikroTik-Encyclopedia/notes/patterns/...
- .MikroTik-Encyclopedia/inventory/...
使用scripts/init_workspace.py创建或修复预期的目录结构。
笔记存储位置
- - 设备特定观察 → .MikroTik-Encyclopedia/notes/devices/<设备名称>.md
- 可复用的RouterOS模式/陷阱 → .MikroTik-Encyclopedia/notes/patterns/<主题>.md
- 环境范围的拓扑/访问信息 → .MikroTik-Encyclopedia/inventory/*.md
- 缓存的官方文档 → .MikroTik-Encyclopedia/docs/help.mikrotik.com/docs/...
机密/敏感数据
- - 不要在百科笔记/库存树中存储明文凭据、API密钥、会话令牌、私有URL、恢复代码或其他机密信息。
- 如果笔记需要提及访问细节,保持高层面描述并编辑或省略机密材料。
- 将这些工作区笔记视为操作记忆,而非机密保险库。
资源
- - scripts/initworkspace.py — 创建或修复.MikroTik-Encyclopedia/目录树。
- scripts/cachedoc.py — 获取并缓存查阅过的官方MikroTik文档页面至.MikroTik-Encyclopedia/docs/...。
- references/workflow.md — 详细的操作工作流程和证据处理规则。
- references/cache-layout.md — 规范的.MikroTik-Encyclopedia/目录结构。
- references/topic-map.md — 有用的MikroTik主题分组,便于快速查找文档。
良好成果
- - 使用缓存或最新查阅的官方文档回答MikroTik问题,而非猜测。
- 在查阅相关文档后检查实时MikroTik设备,并记录任何新的本地拓扑知识。
- 构建不断增长的本地MikroTik知识缓存,使后续工作更快速、更安全、更有依据。
- 将一次性的RouterOS发现转化为持久笔记,避免未来工作从头重新发现。
避免事项
- - 在文档易于查阅时,仅凭记忆回答RouterOS特定问题。
- 将本地观察到的行为视为官方保证的文档行为。
- 无理由地向工作区倾倒大量低价值文档。
- 将设备特定观察写入官方文档缓存树。
- 在确切行为至关重要时,未查阅相关文档就进行高影响的实时变更。