[vetinari]

> I've also locked myself out of them a fair bit

There's a solution for that: Winbox (the native app, nowadays also for Linux and Mac) and the Safe mode feature.

With Safe mode enabled, once the device detects that the connection to Winbox has been lost, it rolls back the configuration back to state, when it was working.

[Maxious]

RoMON is a life saver to be able to unbrick a device (remotely if you have another working mikortik device on the same network to proxy through!) if you mess up some config that breaks the normal tcp/ip remote management

> RoMON works by establishing independent MAC layer peer discovery and data forwarding network. RoMON packets are encapsulated with EtherType 0x88bf and dst-MAC 01:80:c2:00:88:bf and its network operates independently from L2 or L3 forwarding configuration.

https://wiki.mikrotik.com/Manual:Tools/RoMON