@usex/mikrotik-mcp 3.22.0 → 3.24.0

package/schemas/tools/create_ipv6_nat_rule.json

@@ -20,7 +20,9 @@
         "return",
         "jump",
         "passthrough",
-        "log"
+        "log",
+        "add-src-to-address-list",
+        "add-dst-to-address-list"
       ]
     },
     "src_address": {
@@ -56,6 +58,138 @@
     "dst_address_list": {
       "type": "string"
     },
+    "in_interface_list": {
+      "description": "Ingress interface list, e.g. \"WAN\" or \"!LAN\"",
+      "type": "string"
+    },
+    "out_interface_list": {
+      "description": "Egress interface list",
+      "type": "string"
+    },
+    "src_address_type": {
+      "description": "\"unicast\" / \"local\" / \"multicast\" / etc.",
+      "type": "string"
+    },
+    "dst_address_type": {
+      "description": "\"unicast\" / \"local\" / \"multicast\" / etc.",
+      "type": "string"
+    },
+    "src_mac_address": {
+      "description": "Source MAC, negate \"!AA:BB:..\"",
+      "type": "string"
+    },
+    "port": {
+      "description": "Match src OR dst port (any protocol with ports)",
+      "type": "string"
+    },
+    "connection_mark": {
+      "description": "Match a connection mark set in mangle",
+      "type": "string"
+    },
+    "connection_state": {
+      "description": "e.g. \"new\" / \"established,related\" / \"!invalid\"",
+      "type": "string"
+    },
+    "connection_type": {
+      "description": "Helper-detected conn type, e.g. \"ftp\" / \"sip\"",
+      "type": "string"
+    },
+    "connection_bytes": {
+      "description": "Total conn bytes range, e.g. \"1000000-\"",
+      "type": "string"
+    },
+    "connection_limit": {
+      "description": "Per-address conn limit, e.g. \"100,64\"",
+      "type": "string"
+    },
+    "connection_rate": {
+      "description": "Conn rate range, e.g. \"0-100k\"",
+      "type": "string"
+    },
+    "packet_mark": {
+      "description": "Match a packet mark set in mangle",
+      "type": "string"
+    },
+    "routing_mark": {
+      "description": "Match a routing mark set in mangle",
+      "type": "string"
+    },
+    "icmp_options": {
+      "description": "ICMPv6 type:code, e.g. \"128:0\"",
+      "type": "string"
+    },
+    "ipsec_policy": {
+      "description": "e.g. \"in,ipsec\" / \"out,none\"",
+      "type": "string"
+    },
+    "content": {
+      "description": "Match a literal string in the packet payload",
+      "type": "string"
+    },
+    "dscp": {
+      "description": "DSCP value 0-63",
+      "type": "string"
+    },
+    "priority": {
+      "description": "Match packet priority (queue/VLAN)",
+      "type": "string"
+    },
+    "tcp_flags": {
+      "description": "e.g. \"syn,!ack\"",
+      "type": "string"
+    },
+    "tcp_mss": {
+      "description": "TCP MSS range, e.g. \"1440-1500\"",
+      "type": "string"
+    },
+    "packet_size": {
+      "description": "Packet size range, e.g. \"1500\" or \"0-500\"",
+      "type": "string"
+    },
+    "hop_limit": {
+      "description": "IPv6 hop-limit matcher, e.g. \"equal:64\"",
+      "type": "string"
+    },
+    "headers": {
+      "description": "Match IPv6 extension headers",
+      "type": "string"
+    },
+    "limit": {
+      "description": "Rate limit, e.g. \"10,5:packet\"",
+      "type": "string"
+    },
+    "dst_limit": {
+      "description": "Per-dst rate limit, e.g. \"10,5,dst-address/1m\"",
+      "type": "string"
+    },
+    "nth": {
+      "description": "Every Nth packet, e.g. \"2,0\"",
+      "type": "string"
+    },
+    "random": {
+      "description": "Match packet randomly with given probability % (1-99)",
+      "type": "string"
+    },
+    "per_connection_classifier": {
+      "description": "PCC classifier, e.g. \"both-addresses:2/0\"",
+      "type": "string"
+    },
+    "time": {
+      "description": "Time/day matcher, e.g. \"8h-16h,mon,tue,wed,thu,fri\"",
+      "type": "string"
+    },
+    "jump_target": {
+      "description": "Target chain name when action=jump",
+      "type": "string"
+    },
+    "address_list": {
+      "description": "List name for add-src-to-address-list / add-dst-to-address-list",
+      "type": "string"
+    },
+    "address_list_timeout": {
+      "description": "Timeout for the address-list entry, e.g. \"1h\" or \"none\"",
+      "type": "string"
+    },
     "comment": {
       "type": "string"
     },

package/schemas/tools/create_ipv6_raw_rule.json

@@ -23,6 +23,10 @@
     "dst_port": {
       "type": "string"
     },
+    "port": {
+      "description": "Match src or dst port (any direction)",
+      "type": "string"
+    },
     "protocol": {
       "type": "string"
     },
@@ -32,12 +36,60 @@
     "out_interface": {
       "type": "string"
     },
+    "in_interface_list": {
+      "description": "Match inbound interface list name",
+      "type": "string"
+    },
+    "out_interface_list": {
+      "description": "Match outbound interface list name",
+      "type": "string"
+    },
     "src_address_list": {
       "type": "string"
     },
     "dst_address_list": {
       "type": "string"
     },
+    "src_address_type": {
+      "description": "Source address type e.g. \"unicast\", \"local\", \"multicast\"",
+      "type": "string"
+    },
+    "dst_address_type": {
+      "description": "Destination address type e.g. \"unicast\", \"local\", \"multicast\"",
+      "type": "string"
+    },
+    "src_mac_address": {
+      "description": "Match source MAC address",
+      "type": "string"
+    },
+    "hop_limit": {
+      "description": "Hop-limit expression e.g. \"equal:1\" or \"less:64\"",
+      "type": "string"
+    },
+    "tcp_flags": {
+      "description": "TCP flag expression e.g. \"syn,!ack\"",
+      "type": "string"
+    },
+    "tcp_mss": {
+      "description": "TCP MSS value or range e.g. \"1400-1500\"",
+      "type": "string"
+    },
+    "packet_size": {
+      "description": "Packet size or range in bytes e.g. \"0-500\"",
+      "type": "string"
+    },
+    "dscp": {
+      "description": "DSCP value 0-63",
+      "type": "string"
+    },
+    "ipsec_policy": {
+      "description": "IPsec policy match e.g. \"in,ipsec\" or \"out,none\"",
+      "type": "string"
+    },
+    "limit": {
+      "description": "Rate/burst string e.g. \"10,5:packet\"",
+      "type": "string"
+    },
     "comment": {
       "type": "string"
     },

package/schemas/tools/create_l2tp_client.json

@@ -26,6 +26,12 @@
     "add_default_route": {
       "type": "boolean"
     },
+    "default_route_distance": {
+      "description": "Distance of the auto-added default route",
+      "type": "integer",
+      "minimum": -9007199254740991,
+      "maximum": 9007199254740991
+    },
     "use_ipsec": {
       "type": "string",
       "enum": ["yes", "no"]
@@ -34,6 +40,42 @@
       "description": "Pre-shared key for L2TP/IPsec",
       "type": "string"
     },
+    "allow": {
+      "description": "Allowed auth protocols, comma-separated (pap,chap,mschap1,mschap2)",
+      "type": "string"
+    },
+    "use_peer_dns": {
+      "description": "Use DNS servers offered by the remote peer",
+      "type": "boolean"
+    },
+    "dial_on_demand": {
+      "description": "Connect only when traffic is present",
+      "type": "boolean"
+    },
+    "keepalive_timeout": {
+      "description": "Seconds before an idle tunnel is considered down",
+      "type": "integer",
+      "minimum": -9007199254740991,
+      "maximum": 9007199254740991
+    },
+    "max_mtu": {
+      "description": "Maximum transmission unit",
+      "type": "integer",
+      "minimum": -9007199254740991,
+      "maximum": 9007199254740991
+    },
+    "max_mru": {
+      "description": "Maximum receive unit",
+      "type": "integer",
+      "minimum": -9007199254740991,
+      "maximum": 9007199254740991
+    },
+    "mrru": {
+      "description": "Max receive reconstructed unit for MRRU (multilink)",
+      "type": "integer",
+      "minimum": -9007199254740991,
+      "maximum": 9007199254740991
+    },
     "comment": {
       "type": "string"
     },

package/schemas/tools/create_mangle_rule.json

@@ -44,9 +44,17 @@
     "dst_port": {
       "type": "string"
     },
+    "port": {
+      "description": "Match if src OR dst port matches (with protocol)",
+      "type": "string"
+    },
     "protocol": {
       "type": "string"
     },
+    "src_mac_address": {
+      "description": "Source MAC, negatable e.g. \"!00:11:...\"",
+      "type": "string"
+    },
     "in_interface": {
       "description": "Negatable, e.g. \"!ether1\"",
       "type": "string"
@@ -129,6 +137,42 @@
       "description": "e.g. \"1500\" or \"0-500\"",
       "type": "string"
     },
+    "ttl": {
+      "description": "Match TTL, e.g. \"equal:64\", \"less-than:10\"",
+      "type": "string"
+    },
+    "tcp_mss": {
+      "description": "Match TCP MSS, e.g. \"1400-1500\" or \"!1460\"",
+      "type": "string"
+    },
+    "fragment": {
+      "description": "Match second and further fragments",
+      "type": "boolean"
+    },
+    "icmp_options": {
+      "description": "Match ICMP type:code, e.g. \"8:0\"",
+      "type": "string"
+    },
+    "ipv4_options": {
+      "description": "e.g. \"any\", \"loose-source-routing\", \"record-route\"",
+      "type": "string"
+    },
+    "limit": {
+      "description": "Rate limit matcher, e.g. \"50,5:packet\"",
+      "type": "string"
+    },
+    "dst_limit": {
+      "description": "Per-destination rate matcher, e.g. \"50,5,dst-address/1m\"",
+      "type": "string"
+    },
+    "content": {
+      "description": "Match packets containing this text",
+      "type": "string"
+    },
+    "psd": {
+      "description": "Port scan detection, e.g. \"21,3s,3,1\"",
+      "type": "string"
+    },
     "layer7_protocol": {
       "description": "Name of an /ip firewall layer7-protocol regex",
       "type": "string"
@@ -177,10 +221,30 @@
       "description": "e.g. \"1440\" or \"clamp-to-pmtu\", for change-mss",
       "type": "string"
     },
+    "new_priority": {
+      "description": "Priority for action=set-priority, e.g. \"4\", \"from-dscp\", \"from-ingress\"",
+      "type": "string"
+    },
     "routing_table": {
       "description": "Routing table for action=route",
       "type": "string"
     },
+    "route_dst": {
+      "description": "Gateway IP for action=route",
+      "type": "string"
+    },
+    "jump_target": {
+      "description": "Target chain name for action=jump",
+      "type": "string"
+    },
+    "sniff_target": {
+      "description": "Collector IP for action=sniff-tzsp/sniff-pc",
+      "type": "string"
+    },
+    "sniff_target_port": {
+      "description": "Collector UDP port for action=sniff-tzsp",
+      "type": "string"
+    },
     "address_list": {
       "description": "Target list name for add-src/dst-to-address-list",
       "type": "string"

package/schemas/tools/create_nat_rule.json

@@ -54,6 +54,150 @@
       "description": "\"srcnat\" / \"dstnat\" / \"!dstnat\"",
       "type": "string"
     },
+    "connection_state": {
+      "description": "Match conn state, e.g. \"new\" / \"established,related\" / \"!invalid\"",
+      "type": "string"
+    },
+    "connection_type": {
+      "description": "Match helper-detected conn type, e.g. \"ftp\" / \"sip\"",
+      "type": "string"
+    },
+    "connection_bytes": {
+      "description": "Total conn bytes range, e.g. \"1000000-\"",
+      "type": "string"
+    },
+    "connection_limit": {
+      "description": "Per-address conn limit, e.g. \"100,32\"",
+      "type": "string"
+    },
+    "connection_rate": {
+      "description": "Conn rate range, e.g. \"0-100k\"",
+      "type": "string"
+    },
+    "port": {
+      "description": "Match src OR dst port (any protocol with ports)",
+      "type": "string"
+    },
+    "src_mac_address": {
+      "description": "Source MAC, negate \"!AA:BB:..\"",
+      "type": "string"
+    },
+    "packet_mark": {
+      "description": "Match a packet mark set in mangle",
+      "type": "string"
+    },
+    "routing_mark": {
+      "description": "Match a routing mark set in mangle",
+      "type": "string"
+    },
+    "src_address_type": {
+      "description": "\"unicast\" / \"local\" / \"broadcast\" / etc.",
+      "type": "string"
+    },
+    "dst_address_type": {
+      "description": "\"unicast\" / \"local\" / \"broadcast\" / etc.",
+      "type": "string"
+    },
+    "in_bridge_port": {
+      "description": "Ingress bridge port (bridge-filtered)",
+      "type": "string"
+    },
+    "out_bridge_port": {
+      "description": "Egress bridge port (bridge-filtered)",
+      "type": "string"
+    },
+    "in_bridge_port_list": {
+      "description": "Ingress bridge port list",
+      "type": "string"
+    },
+    "out_bridge_port_list": {
+      "description": "Egress bridge port list",
+      "type": "string"
+    },
+    "icmp_options": {
+      "description": "ICMP type:code, e.g. \"8:0\"",
+      "type": "string"
+    },
+    "ipsec_policy": {
+      "description": "e.g. \"in,ipsec\" / \"out,none\"",
+      "type": "string"
+    },
+    "layer7_protocol": {
+      "description": "Name of an /ip firewall layer7-protocol",
+      "type": "string"
+    },
+    "content": {
+      "description": "Match a literal string in the packet payload",
+      "type": "string"
+    },
+    "dscp": {
+      "description": "DSCP value 0-63",
+      "type": "string"
+    },
+    "priority": {
+      "description": "Match packet priority (queue/VLAN)",
+      "type": "string"
+    },
+    "tcp_flags": {
+      "description": "e.g. \"syn,!ack\"",
+      "type": "string"
+    },
+    "tcp_mss": {
+      "description": "TCP MSS range, e.g. \"1440-1500\"",
+      "type": "string"
+    },
+    "packet_size": {
+      "description": "Packet size range, e.g. \"1500\" or \"0-500\"",
+      "type": "string"
+    },
+    "limit": {
+      "description": "Rate limit, e.g. \"10,5:packet\"",
+      "type": "string"
+    },
+    "nth": {
+      "description": "Every Nth packet, e.g. \"2,0\"",
+      "type": "string"
+    },
+    "psd": {
+      "description": "Port-scan detection params",
+      "type": "string"
+    },
+    "random": {
+      "description": "Match packet randomly with given probability % (1-99)",
+      "type": "string"
+    },
+    "per_connection_classifier": {
+      "description": "PCC classifier, e.g. \"both-addresses:2/0\"",
+      "type": "string"
+    },
+    "time": {
+      "description": "Time/day matcher, e.g. \"8h-16h,mon,tue,wed,thu,fri\"",
+      "type": "string"
+    },
+    "ttl": {
+      "description": "IP TTL matcher, e.g. \"equal:64\"",
+      "type": "string"
+    },
+    "hotspot": {
+      "description": "Hotspot state, e.g. \"auth\" / \"!auth\"",
+      "type": "string"
+    },
+    "jump_target": {
+      "description": "Target chain name when action=jump",
+      "type": "string"
+    },
+    "address_list": {
+      "description": "List name for action=add-src-to-address-list / add-dst-to-address-list",
+      "type": "string"
+    },
+    "address_list_timeout": {
+      "description": "Timeout for the address-list entry, e.g. \"1h\" or \"none\"",
+      "type": "string"
+    },
+    "fragment": {
+      "description": "Match non-first IP fragments",
+      "type": "boolean"
+    },
     "to_addresses": {
       "description": "Single IP or range e.g. \"10.0.0.1\" or \"10.0.0.1-10.0.0.10\"",
       "type": "string"

package/schemas/tools/create_ovpn_client.json

@@ -32,6 +32,11 @@
     "auth": {
       "type": "string"
     },
+    "tls_version": {
+      "description": "Accepted TLS version",
+      "type": "string",
+      "enum": ["any", "only-1.2"]
+    },
     "mode": {
       "type": "string",
       "enum": ["ip", "ethernet"]
@@ -40,12 +45,29 @@
       "type": "string",
       "enum": ["tcp", "udp"]
     },
+    "mac_address": {
+      "description": "Client MAC for ethernet mode",
+      "type": "string"
+    },
+    "max_mtu": {
+      "type": "integer",
+      "minimum": -9007199254740991,
+      "maximum": 9007199254740991
+    },
     "profile": {
       "type": "string"
     },
     "add_default_route": {
       "type": "boolean"
     },
+    "route_nopull": {
+      "description": "Ignore routes pushed by the server",
+      "type": "boolean"
+    },
+    "use_peer_dns": {
+      "description": "Use DNS servers pushed by the server",
+      "type": "boolean"
+    },
     "verify_server_certificate": {
       "type": "boolean"
     },

package/schemas/tools/create_ppp_profile.json

@@ -18,14 +18,48 @@
     "dns_server": {
       "type": "string"
     },
+    "wins_server": {
+      "description": "WINS server IP(s) pushed to clients",
+      "type": "string"
+    },
+    "address_list": {
+      "description": "Address list to add the remote address to",
+      "type": "string"
+    },
+    "incoming_filter": {
+      "description": "Firewall chain for incoming packets",
+      "type": "string"
+    },
+    "outgoing_filter": {
+      "description": "Firewall chain for outgoing packets",
+      "type": "string"
+    },
     "rate_limit": {
       "description": "Rate limit, e.g. '10M/10M'",
       "type": "string"
     },
+    "session_timeout": {
+      "description": "Max session duration, e.g. '1h'",
+      "type": "string"
+    },
+    "idle_timeout": {
+      "description": "Disconnect after this idle time, e.g. '5m'",
+      "type": "string"
+    },
     "use_encryption": {
       "type": "string",
       "enum": ["default", "yes", "no", "required"]
     },
+    "use_mpls": {
+      "description": "MPLS over the link policy",
+      "type": "string",
+      "enum": ["default", "yes", "no", "required"]
+    },
+    "use_compression": {
+      "description": "Compression policy",
+      "type": "string",
+      "enum": ["default", "yes", "no"]
+    },
     "change_tcp_mss": {
       "type": "string",
       "enum": ["default", "yes", "no"]
@@ -38,6 +72,36 @@
     "bridge": {
       "type": "string"
     },
+    "bridge_horizon": {
+      "description": "Bridge split-horizon group",
+      "type": "integer",
+      "minimum": -9007199254740991,
+      "maximum": 9007199254740991
+    },
+    "bridge_path_cost": {
+      "description": "Bridge port path cost",
+      "type": "integer",
+      "minimum": -9007199254740991,
+      "maximum": 9007199254740991
+    },
+    "bridge_port_priority": {
+      "description": "Bridge port priority",
+      "type": "integer",
+      "minimum": -9007199254740991,
+      "maximum": 9007199254740991
+    },
+    "dhcpv6_pd_pool": {
+      "description": "IPv6 prefix delegation pool name",
+      "type": "string"
+    },
+    "on_up": {
+      "description": "Script to run when the session connects",
+      "type": "string"
+    },
+    "on_down": {
+      "description": "Script to run when the session disconnects",
+      "type": "string"
+    },
     "comment": {
       "type": "string"
     }

package/schemas/tools/create_ppp_secret.json

@@ -26,9 +26,25 @@
     "remote_address": {
       "type": "string"
     },
+    "routes": {
+      "description": "Routes added while this client is connected",
+      "type": "string"
+    },
     "caller_id": {
       "type": "string"
     },
+    "limit_bytes_in": {
+      "description": "Max bytes the client may upload",
+      "type": "integer",
+      "minimum": -9007199254740991,
+      "maximum": 9007199254740991
+    },
+    "limit_bytes_out": {
+      "description": "Max bytes the client may download",
+      "type": "integer",
+      "minimum": -9007199254740991,
+      "maximum": 9007199254740991
+    },
     "comment": {
       "type": "string"
     },