/ip firewall filter add action=accept chain=input disabled=no dst-port=22 protocol=tcp place-before=0
/user ssh-keys import public-key-file=id_rsa.pub
user: kasatkin
/ip ssh set always-allow-password-login=yes
To allow forwarding of TCP ports via SSH connection (on both local and remote side): 2)
/ip ssh set forwarding-enabled=both