MikroTik Router OS V3.0 User Manual
Have a look at the manual MikroTik Router OS V3.0 User Manual online for free. It’s possible to download the document as PDF or print. UserManuals.tech offer 1 MikroTik manuals and user’s guides for free. Share the user manual or guide on Facebook, Twitter or Google+.
antenna-gain(integer; default:0) - antenna gain in dBi. This parameter will be used to calculate whether your system meets regulatory domains requirements in your country antenna-mode(ant-a|ant-b|rxa-txb|txa-rxb; default:ant-a) - which antenna to use for transmit/receive data: •ant-a- use only antenna a •ant-b- use only antenna b •rxa-txb- use antenna a for receiving packets, use antenna b for transmitting packets •txa-rxb- use antenna a for transmitting packets, antenna b for receiving packets area(text; default:) - string value that is used to describe an Access Point. Connect List on the Clients side comparing this string value with area-prefix string value makes decision whether allow a Client connect to the AP. If area-prefix match the entire area string or only the beginning of it the Client is allowed to connect to the AP arp(disabled|enabled|proxy-arp|reply-only; default:enabled) - Address Resolution Protocol setting band- operating band •2.4ghz-b- IEEE 802.11b •2.4ghz-b/g- IEEE 802.11g (supports also legacy IEEE 802.11b protocol) •2.4ghz-g-turbo- IEEE 802.11g using double channel, providing air rate of up to 108 Mbit •2.4ghz-onlyg- only IEEE 802.11g •5ghz- IEEE 802.11a up to 54 Mbit •5ghz-turbo- IEEE 802.11a using double channel, providing air rate of up to 108Mbit •2ghz-10mhz- variation of IEEE 802.11g with half the band, and, accordingly, twice lower speed (air rate of up to 27Mbit) •2ghz-5mhz- variation of IEEE 802.11g with quarter the band, and, accordingly, four times lower speed (air rate of up to 13.5Mbit) •5ghz-10mhz- variation of IEEE 802.11a with half the band, and, accordingly, twice lower speed (air rate of up to 27Mbit) •5ghz-5mhz- variation of IEEE 802.11a with quarter the band, and, accordingly, four times lower speed (air rate of up to 13.5Mbit) basic-rates-a/g(multiple choice: 6Mbps, 9Mbps, 12Mbps, 18Mbps, 24Mbps, 36Mbps, 48Mbps, 54Mbps; default:6Mbps) - basic rates in 802.11a or 802.11g standard. This should be the minimal speed all the wireless network nodes support (they will not be ableto connect otherwise). It is recommended to leave this as default basic-rates-b(multiple choice: 1Mbps, 2Mbps, 5.5Mbps, 11Mbps; default:1Mbps) - basic rates in 802.11b mode. This should be the minimal speed all the wireless network nodes support (they will not be ableto connect otherwise). It is recommended to leave this as default burst-time(time; default:disabled) - time in microseconds which will be used to send data without stopping. Note that no other wireless cards in that network will be able to transmit data during burst-time microseconds. This setting is available only for AR5000, AR5001X, and AR5001X+ chipset based cards compression(yes | no; default:no) - if enabled on AP (in ap-bridge or bridge mode), it advertizes that it is capable to use hardware data compression. If a client, connected to this AP, also supports and is configured to use the hardware data compression, it requests the AP to use compression. This Page 140 of 480Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
property does not affect clients, which do not support compression. country(albania|algeria|argentina|armenia|australia|austria|azerbaijan|bahrain|belarus| belgium|belize|bolvia|brazil|brunei darussalam|bulgaria|canada|chile|china|colombia| costa rica|croatia|cyprus|czech republic|denmark|dominican republic|ecuador|egypt|el salvador|estonia|finland|france|france_res|georgia|germany|greece|guatemala|honduras| hong kong|hungary|iceland|india|indonesia|iran|ireland|israel|italy|japan|japan1| japan2|japan3|japan4|japan5|jordan|kazakhstan|korea republic|korea republic2|kuwait| latvia|lebanon|liechtenstein|lithuania|luxemburg|macau|macedonia|malaysia|mexico| monaco|morocco|netherlands|new zealand|no_country_set|north korea|norway|oman| pakistan|panama|peru|philippines|poland|portugal|puerto rico|qatar|romania|russia| saudi arabia|singapore|slovak republic|slovenia|south africa|spain|sweden|switzerland| syria|taiwan|thailand|trinidad & tobago|tunisia|turkey|ukraine|united arab emirates|united kingdom|united states|uruguay|uzbekistan|venezuela|viet nam|yemen|zimbabwe; default: no_country_set) - limits wireless settings (frequency and transmit power) to those which are allowed in the respective country •no_country_set- no regulatory domain limitations default-ap-tx-limit(integer; default:0) - limits data rate for each wireless client (in bps) •0- no limits default-authentication(yes | no; default:yes) - specifies the default action on the clients side for APs that are not in connect list or on the APs side for clients that are not in access list •yes- enables AP to register a client if it is not in access list. In turn for client it allows to associate with AP not listed in clients connect list default-client-tx-limit(integer; default:0) - limits each clients transmit data rate (in bps). Works only if the client is also a MikroTik Router •0- no limits default-forwarding(yes | no; default:yes) - whether to use data forwarding by default or not. If set to no, the registered clients will not be able to communicate with each other dfs-mode(none|radar-detect|no-radar-detect; default:none) - used for APs to dynamically select frequency at which this AP will operate •none- do not use DFS •no-radar-detect- AP scans channel list from scan-list and chooses the frequency which is with the lowest amount of other networks detected •radar-detect- AP scans channel list from scan-list and chooses the frequency which is with the lowest amount of other networks detected, if no radar is detected in this channel for 60 seconds, the AP starts to operate at this channel, if radar is detected, the AP continues searching for the next available channel which is with the lowest amount of other networks detected disable-running-check(yes|no; default:no) - disable running check. If value is set to no, the router determines whether the card is up and running - for AP one or more clients have to be registered to it, for station, it should be connected to an AP. This setting affects the records in the routing table in a way that there will be no route for the card that is not running (the same applies to dynamic routing protocols). If set to yes, the interface will always be shown as running disconnect-timeout(time; default:3s) - time since the third sending failure ( 3*(hw-retries+1) packets have been lost) at the lowest datarate only (i.e. since the first time on-fail-retry-time has been activated), when the client gets disconnected (logged as extensive data loss) frame-lifetime(integer; default:0) - frame lifetime in centiseconds since the first sending attempt Page 141 of 480Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
to send the frame. Wireless normally does not drop any packets at all until the client is disconnected. If there is no need to accumulate packets, you can set the time after which the packet will be discarded •0- never drop packets until the client is disconnected (default value) frequency(integer) - operating frequency of the AP (ignored for the client, which always scans through its scan list regardless of the value set in this field) frequency-mode(regulatory-domain|manual-tx-power|superchannel; default: regulatory-domain) - defines which frequency channels to allow •regulatory-domain- use the channels allowed in the selected country at the allowed transmit power (with the configured antenna-gain deducted) only. Also note that in this mode card will never be configured to higher power than allowed by the respective regulatory domain •manual-tx-power- use the channels allowed in the selected country only, but take transmit power from the tx-power settings •superchannel- only possible with the Superchannel license. In this mode all hardware supported channels and transmit power settings are allowed hide-ssid(yes|no; default:no) - whether to hide ssid or not in the beacon frames: •yes- ssid is not included in the beacon frames. AP replies only to probe-requests with the given ssid •no- ssid is included in beacon frames. AP replies to probe-requests with the given ssid ant to broadcast ssid (empty ssid) hw-retries(integer; default:15) - number of frame sending retries until the transmission is considered failed. Data rate is decreased upon failure, but if there is no lower rate, 3 sequential failures activate on-fail-retry-time transmission pause and the counter restarts. The frame is being retransmitted either until success or until client is disconnected interface-type(read-only: text) - adapter type and model mac-address(MAC address) - Media Access Control (MAC) address of the interface master-interface(name) - physical wireless interface name that will be used by Virtual Access Point (VAP) interface max-station-count(integer: 1..2007; default:2007) - maximal number of clients allowed to connect to AP. Real life experiments (from our customers) show that 100 clients can work with one AP, using traffic shaping mode(alignment-only|ap-bridge|bridge|nstreme-dual-slave|station|station-pseudobridge| station-pseudobridge-clone|station-wds|wds-slave; default:station) - operating mode: •alignment-only- this mode is used for positioning antennas (to get the best direction) •ap-bridge- the interface is operating as an Access Point •bridge- the interface is operating as a bridge. This mode acts like ap-bridge with the only difference being it allows only one client •nstreme-dual-slave- the interface is used for nstreme-dual mode •station- the interface is operating as a wireless station (client) •station-pseudobridge- wireless station that can be put in bridge. MAC NAT is performed on all traffic sent over the wireless interface, so that it look like coming from the stations MAC address regardless of the actual sender (the standard does not allow station to send packets with different MAC address from its own). Reverse translation (when replies arrive from the AP to the pseudobridge station) is based on the ARP table. Non-IP protocols are being sent to the Page 142 of 480Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
default MAC address (the last MAC address, which the station has received a non-IP packet from). That means that if there is more than one client that uses non-IP protocols (for example, PPPoE) behind the station, none of them will be able to work correctly •station-pseudobridge-clone- similar to the station-pseudobridge, but the station will clone MAC address of a particular device (set in the station-bridge-clone-mac property), i.e. it will change itsown address to the one of a different device. In case no address is set in the station-bridge-clone-mac property, the station postpones connecting to an AP until some packet, with the source MAC address different from any of the router itself, needs to be transmitted over that interface. It then connects to an AP with the MAC address of the device that have sent that packet •station-wds- the interface is working as a station, but can communicate with a WDS peer •wds-slave- the interface is working as it would work in ap-bridge mode, but it adapts to its WDS peers frequency if it is changed mtu(integer: 68..1600; default:1500) - Maximum Transmission Unit name(name; default:wlanN) - assigned interface name noise-floor-threshold(integer|default: -128..127; default:default) - noise strength in dBm below which the card will transmit on-fail-retry-time(time; default:100ms) - time, after which we repeat to communicate with a wireless device, if a data transmission has failed 3 times on the lowest rate periodic-calibration(default|disabled|enabled; default:default) - to ensure performance of chipset over temperature and environmental changes, the software performs periodic calibration periodic-calibration-interval(integer; default:60) - interfal between periodic recalibrations, in seconds preamble-mode(both|long|short; default:both) - sets the synchronization field in a wireless packet •long- has a long synchronization field in a wireless packet (128 bits). Is compatible with 802.11 standard •short- has a short synchronization field in a wireless packet (56 bits). Is not compatible with 802.11 standard. With short preamble mode it is possible to get slightly higher data rates •both- supports both - short and long preamble prism-cardtype(30mW|100mW|200mW) - specify the output of the Prism chipset based card proprietary-extensions(pre-2.9.25|post-2.9.25; default:post-2.9.25) - the method to insert additional information (MikroTik proprietary extensions) into the wireless frames. This option is needed to workaround incompatibility between the old (pre-2.9.25) method and new Intel Centrino PCI-Express cards •pre-2.9.25- include extensions in the form accepted by older RouterOS versions. This will include the new format as well, so this mode is compatiblewith all RouterOS versions. This mode is incompatible with wireless clients built on the new Centrino wireless chipset and may as well be incompatible with some other stations radio-name(text) - descriptive name of the card. Only for MikroTik devices rate-set(default|configured) - which rate set to use: •default- basic and supported-rates settings are not used, instead default values are used •configured- basic and supported-rates settings are used as configured Page 143 of 480Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
scan-list(multiple choice: integer|default; default:default) - the list of channels to scan •default- represents all frequencies, allowed by the regulatory domain (in the respective country). If no country is set, these frequencies are used - for 2.4GHz mode: 2412, 2417, 2422, 2427, 2432, 2437, 2442, 2447, 2452, 2457, 2462; for 2.4GHz-g-turbo mode: 2437; for 5GHz mode: 5180, 5200, 5220, 5240, 5260, 5280, 5300, 5320, 5745, 5765, 5785, 5805, 5825; for 5GHz-turbo: 5210, 5250, 5290, 5760, 5800 security-profile(text; default:default) - which security profile to use. Define security profiles under /interface wireless security-profiles where you can setup WPA or WEP wireless security, for further details, see the Security Profiles section of this manual ssid(text; default:MikroTik) - Service Set Identifier. Used to separate wireless networks supported-rates-a/g(multiple choice: 6Mbps, 9Mbps, 12Mbps, 18Mbps, 24Mbps, 36Mbps, 48Mbps, 54Mbps) - rates to be supported in 802.11a or 802.11g standard supported-rates-b(multiple choice: 1Mbps, 2Mbps, 5.5Mbps, 11Mbps) - rates to be supported in 802.11b standard tx-power(integer: -30..30; default:17) - manually sets the transmit power of the card (in dBm), if tx-power-mode is set to card rates or all-rates-fixed (see tx-power-mode description below) tx-power-mode(all-rates-fixed|card-rates|default|manual-table; default:default) - choose the transmit power mode for the card: •all-rates-fixed- use one transmit power value for all rates, as configured in tx-power •card-rates- use transmit power, that for different rates is calculated according the cards transmit power algorithm, which as an argument takes tx-power value •default- use the default tx-power •manual-table- use the transmit powers as defined in /interface wireless manual-tx-power-table update-stats-interval(time) - how often to update (request from the clients) signal strength and ccq values in /interface wireless registration-table wds-cost-range(integer; default:50-150) - range, within which the bridge port cost of the WDS links are adjusted. The calculations are based on the p-throughput value of the respective WDS interface, which represents estimated approimate rhtoughput on the interface, which is mapped on the wds-cost-range scale so that bigger p-throughput would correspond to numerically lower port cost. The cost is recalculated every 20 seconds or when the p-throughput changes more than by 10% since the last recalculation wds-default-bridge(name; default:none) - the default bridge for WDS interface. If you use dynamic WDS then it is very useful in cases when wds connection is reset - the newly created dynamic WDS interface will be put in this bridge wds-default-cost(integer; default:100) - default bridge port cost of the WDS links wds-ignore-ssid(yes | no; default:no) - if set to yes, the AP will create WDS links with any other AP in this frequency. If set to no the ssid values must match on both APs wds-mode(disabled|dynamic|static) - WDS mode: •disabled- WDS interfaces are disabled •dynamic- WDS interfaces are created on the fly •static- WDS interfaces are created manually wmm-support(disabled|enabled|required) - whether to allow (or require) peer to use WMM extensions to provide basic quality of service Page 144 of 480Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
[admin@MikroTik] interface wireless> printFlags: X - disabled, R - running0 name=wlan1 mtu=1500 mac-address=00:0C:42:18:5C:3D arp=enabledinterface-type=Atheros AR5413 mode=station ssid=MikroTik frequency=2412band=2.4ghz-b scan-list=default antenna-mode=ant-a wds-mode=disabledwds-default-bridge=none wds-ignore-ssid=no default-authentication=yesdefault-forwarding=yes default-ap-tx-limit=0 default-client-tx-limit=0hide-ssid=no security-profile=default compression=no[admin@MikroTik] interface wireless> ! mmt 2.4-b/g 0 [admin@MikroTik] interface wireless> set 0 ssid=mmt disabled=no \band=2.4ghz-b/g[admin@MikroTik] interface wireless> monitor wlan1status: connected-to-essband: 2.4ghz-gfrequency: 2412MHztx-rate: 54Mbpsrx-rate: 54Mbpsssid: mmtbssid: 00:0C:42:05:00:14radio-name: 000C42050014signal-strength: -23dBmtx-signal-strength: -35dBmnoise-floor: -96dBmsignal-to-noise: 73dBtx-ccq: 79%rx-ccq: 46%p-throughput: 28681overall-tx-ccq: 79%authenticated-clients: 1current-ack-timeout: 56wds-link: nonstreme: noframing-mode: nonerouteros-version: 3.0last-ip: 10.10.10.1802.1x-port-enabled: yescompression: nocurrent-tx-powers: 1Mbps:19(19),2Mbps:19(19),5.5Mbps:19(19),11Mbps:19(19),6Mbps:19(19),9Mbps:19(19),12Mbps:19(19),18Mbps:19(19),24Mbps:19(19),36Mbps:18(18),48Mbps:17(17),54Mbps:16(16)notify-external-fdb: no [admin@MikroTik] interface wireless> %% F !( ! &*FFF C.-// Interface Monitor Command name:/interface wireless monitor [interface name] Description 6 * ( ( Property Description Page 146 of 480Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
802.1x-port-enabled(read-only:yes | no) - (on station only) whether the data exchange is allowed with the AP (i.e., whether 802.1x authentication is completed, if needed). Compare authenticated-clients and registered-clients authenticated-clients(read-only: integer) - clients that have successfully completed 802.11 authentication process and have associated with the AP. Normally it is possible to exchange data with client right after this step, however WPA/WPA2 needs additional 802.1x authentication and dynamic key exchange procedures that start only after this stage (see registered-clients). For a wireless station this property relates to its AP band- operating band bssid(read-only: MAC address) - (on station only) MAC address of the AP compression(read-only:yes | no) - (on station only) whether data compression is enabled for this interface current-ack-timeout(read-only: integer) - current value of ack-timeout current-tx-powers(read-only: text) - current transmit power values for every rate supported by the link framing-mode(read-only: text) - (on station only) current framing mode frequency(read-only: integer) - operating frequency last-ip(read-only: IP address) - (on station only) source IP address found in the last IP packet received from the AP noise-floor(read-only: text) - (on station only) received current noise level notify-external-fdb(read-only:yes | no) - whether forwarding database is to be generated from the links registration table to add known hosts in the local bridge host table (i.e., the associated bridge port is configured to request this information - its respective external-fdb property is set to auto or yes) nstreme(read-only:yes | no) - whether nstreme protocol is used for this link overall-tx-ccq(read-only: integer) - overall link CCQ, for transmitting to the wireless infrastructure, not to aome particular peers p-throughput(read-only: integer) - (on station only) estimated approximate throughput that is expected on the given link, by taking into account the effective transmit rate and hardware retries. Calculated once in 5 seconds radio-name(read-only: text) - (on station only) radio name registered-clients(read-only: integer) - (on AP only) number of fully authenticated clients, that have completed not only 802.11 authentication procedures (as specified in the authenticated-clients propery), but also 802.1x ones. Registered clients are listed in the registration table and are ready for data exchange routeros-version(read-only: text) - (on station only) RouterOS version installed on the AP rx-ccq(read-only: integer: 0..100) - (on station only) Client Connection Quality - a value in percent that shows how effective the receive bandwidth (this value is received from the other end as this value represents its transmission quality) is used regarding the theoretically maximum available bandwidth. Mostly it depends from an amount of retransmited wireless frames. rx-rate(read-only: text) - (on station only) current receive air rate signal-strength(read-only: text) - (on station only) received signal strength signal-to-noise(read-only: text) - (on station only) signal to noise ratio Page 147 of 480Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
ssid(read-only: text) - (on station only) SSID status(read-only: searching-for-frequency|radar-detecting|running-ap|connected-to-ess| disabled) - interface status tx-ccq(read-only: integer: 0..100) - (on station only) Client Connection Quality - a value in percent that shows how effective the transmit bandwidth is used regarding the theoretically maximum available bandwidth. Mostly it depends from an amount of retransmited wireless frames. tx-rate(read-only: text) - (on station only) current transmit air rate tx-signal-strength(read-only: text) - (on station only) received signal strength on the AP side (available if the AP is MikroTik RouterOS) wds-link(read-only:yes | no) - (on station only) whether this link supports WDS (i.e., is in station-wds mode) Notes ( +$ ( +$ Nstreme Settings Home menu level:/interface wireless nstreme Description E * Property Description disable-csma(yes | no; default:no) - disable CSMA/CA when polling is used (better performance) enable-nstreme(yes | no; default:no) - whether to switch the card into the nstreme mode enable-polling(yes | no; default:yes) - whether to use polling for clients framer-limit(integer; default:3200) - maximal frame size framer-policy(none|best-fit|exact-size|dynamic-size; default:none) - the method how to combine frames. A number of frames may be combined into a bigger one to reduce the amount of protocol overhead (and thus increase speed). The card is not waiting for frames, but in case a number of packets are queued for transmitting, they can be combined. There are several methods of framing: •none- do nothing special, do not combine packets (framing is disabled) •best-fit- put as much packets as possible in one frame, until the framer-limit limit is met, but do not fragment packets •exact-size- put as much packets as possible in one frame, until the framer-limit limit is met, even if fragmentation will be needed (best performance) •dynamic-size- choose the best frame size dynamically name(name) - reference name of the interface Page 148 of 480Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
Notes & ( + $ (M +$ 65! 9 8 7 3 65! +$ & Example $! 72 [admin@MikroTik] interface wireless nstreme> print0 name=wlan1 enable-nstreme=no enable-polling=yes disable-csma=noframer-policy=none framer-limit=3200[admin@MikroTik] interface wireless nstreme> set wlan1 enable-nstreme=yes \\... framer-policy=exact-size Nstreme2 Group Settings Home menu level:/interface wireless nstreme-dual Description - $ 7 7$ - $ - •8 7 • • 7 • 7 • 77 • 7 Property Description arp(disabled|enabled|proxy-arp|reply-only; default:enabled) - Address Resolution Protocol setting disable-csma(yes | no; default:no) - disable CSMA/CA (better performance) disable-running-check(yes | no) - whether the interface should always be treated as running even if there is no connection to a remote peer framer-limit(integer; default:2560) - maximal frame size framer-policy(none|best-fit|exact-size; default:none) - the method how to combine frames. A Page 149 of 480Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.Other trademarks and registred trademarks mentioned herein are properties of their respective owners.