Mikrotik
Prepare Mikrotik devices for QUARK Config Backup.
This guide covers MikroTik routers and switches running RouterOS, and switches running SwOS or SwOS Lite.
RouterOS
RouterOS runs on all MikroTik routers and on CRS switches (which can also boot SwOS).
Create a backup account. Create a group with read access and a dedicated user:
The sensitive policy lets the export include sensitive values (for example wireless keys) so the backup is complete and restorable. Omit it if you prefer redacted backups — the export still succeeds, but secrets are hidden.
Enable SSH. SSH is enabled by default. To confirm, and to restrict it to the Netwatch collector's IP address:
Replace 203.0.113.10 with the collector's address (comma-separate multiple entries).
Platform notes. QUARK retrieves the configuration with the RouterOS export function over SSH — it does not use the binary .backup format, so backups are text and diffable between versions.
SwOS and SwOS Lite
SwOS and SwOS Lite run on MikroTik switch models (and on CRS switches booted into SwOS instead of RouterOS).
Prepare the account. SwOS has no multi-user support — it uses a single password set in the System tab of the web interface. QUARK authenticates with the admin user (or the username configured on the device) and this password.
Enable management access. SwOS has no SSH or CLI; QUARK retrieves the configuration backup through the web interface over HTTP. In the System tab, set Allow From to the Netwatch collector's IP address or management subnet to restrict access.
Platform notes. The retrieved backup is the SwOS binary backup file; QUARK versions it and detects changes between runs, but it is not a human-readable text diff like a RouterOS export.
Enable backup in Netwatch
Once the device is prepared, open its host in Netwatch (Data collection > Hosts) and add the Config Backup macros — the supported status flag, the model code for this platform, and the credentials you created. See Getting started for the full macro list and values.