wrzucamy przez ftp potem

user ssh-keys import public-key-file=public.key user=admin

add chain=dstnat protocol=tcp dst-port=2022 action=dst-nat to-addresses=192.168.0.22 to-ports=22 comment="ssh"

ip dhcp-server lease add address=192.168.0.23 mac-address=00:25:64:ce:6d:1f

Generujemy certyfikat, przypisujemy do www-ssl, uruchamiamy www-ssl i zmieniamy nr portu, na koniec otwieramy port w zaporze.

/certificate add name=my-rtr-ca common-name=my-rtr-ca key-usage=key-cert-sign,crl-sign
/certificate sign my-rtr-ca
/certificate add name=my-rtr common-name=my-rtr key-usage=tls-server
/certificate sign ca=my-rtr-ca my-rtr
/certificate set trusted=yes my-rtr-ca
/certificate set trusted=yes my-rtr
/ip service set www-ssl certificate=my-rtr
/ip service enable www-ssl
/ip service set www-ssl port 20343