enable_ipv6_firewall_rule
Enable an existing IPv6 firewall filter rule by comment, optionally narrowed by chain. Preview changes before applying; never creates new rules.
Instructions
Enable an EXISTING IPv6 firewall filter rule (/ipv6/firewall/filter set disabled=no), resolved by its comment - optionally narrowed by
chain if more than one rule shares that comment. Mirrors
enable_firewall_rule on the IPv6 menu - see its docstring and
README's "Firewall rule toggle (by comment)" section for the full
admin-creates/LLM-enables workflow.
SAFE BY DESIGN: this NEVER creates a rule.
WRITE tool, guarded: blocked entirely unless the server is running
with MIKROTIK_ALLOW_WRITE=true. Call with confirm=False (the
default) to get a before/after preview - the FULL matched rule, not
just its disabled field - without changing anything; call again
with confirm=True to actually apply it. Errors clearly if no rule
matches comment (narrowed by chain), or if more than one still
does (AmbiguousResourceError) - never guesses which one to
toggle. Also errors clearly (does not return an empty result) if
the ipv6 package is disabled on the device - see "IPv6 write
parity (v1.10)" in the README.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| chain | No | ||
| comment | Yes | ||
| confirm | No | ||
| device_name | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||