/ip fire raw print
Flags: X - disabled, I - invalid, D - dynamic
 0    chain=prerouting action=passthrough dst-port=4500 log=no log-prefix=""
      protocol=udp

 1    chain=prerouting action=passthrough dst-port=500 log=no log-prefix=""
      protocol=udp

 2    chain=prerouting action=passthrough log=no log-prefix="" protocol=ipsec-esp

/ip fire raw print
Flags: X - disabled, I - invalid, D - dynamic
 0    chain=prerouting action=passthrough dst-port=4500 log=no log-prefix=""
      protocol=udp

 1    chain=prerouting action=passthrough dst-port=500 log=no log-prefix=""
      protocol=udp

 2    chain=prerouting action=passthrough log=no log-prefix="" protocol=ipsec-esp