» » mikrotik frame protection Properties

mikrotik frame protection Properties

Properties V54SPTWN5PWF

Property Description
ap-tx-limit (integer [0..4294967295]; Default: 0) Limit rate of data transmission to this client. Value 0 means no limit. Value is in bits per second.
authentication (yes | no; Default: yes) .
  • no - Client association will always fail.
  • yes - Use authentication procedure that is specified in the security-profile of the interface.
client-tx-limit (integer [0..4294967295]; Default: 0) Ask client to limit rate of data transmission. Value 0 means no limit. This is a proprietary extension that is supported by RouterOS clients.
Value is in bits per second.
comment (string; Default: ) Short description of an entry
disabled (yes | no; Default: no)
forwarding (yes | no; Default: yes) .
  • no - Client cannot send frames to other station that are connected to same access point.
  • yes - Client can send frames to other stations on the same access point.
interface (string | all; Default: all) Rules with interface=all are used for all wireless interfaces. To make rule that applies only to one wireless interface, specify that interface as a value of this property.
mac-address (MAC; Default: 00:00:00:00:00:00) Rule matches client with the specified MAC address. Value 00:00:00:00:00:00 matches always.
management-protection-key (string; Default: "")
private-algo (104bit-wep | 40bit-wep | aes-ccm | none | tkip; Default: none) Only for WEP modes.
private-key (string; Default: "") Only for WEP modes.
private-pre-shared-key (string; Default: "") Used in WPA PSK mode.
signal-range (NUM..NUM - both NUM are numbers in the range -120..120; Default: -120..120) Rule matches if signal strength of the station is within the range.
If signal strength of the station will go out of the range that is specified in the rule, access point will disconnect that station.
time (TIME-TIME,sun,mon,tue,wed,thu,fri,sat - TIME is time interval 0..86400 seconds; all day names are optional; value can be unset; Default: ) Rule will match only during specified time. Station will be disconnected after specified time ends. Both start and end time is expressed as time since midnight, 00:00.
Rule will match only during specified days of the week.

Align

Sub-menu: /interface wireless align


Property Description
active-mode (yes | no; Default: yes) If in active mode, station will send out frames for align.
audio-max (integer [-2147483648..2147483647]; Default: -20) Maxumum signal strength for beeper
audio-min (integer [-2147483648..2147483647]; Default: -100) Minimum signal strength for beeper
audio-monitor (MAC; Default: 00:00:00:00:00:00) Which MAC address to use for audio monitoring
filter-mac (MAC; Default: 00:00:00:00:00:00) Filtered out MAC address that will be shown in monitor screen.
frame-size (integer [200..1500]; Default: 300) Size of the frames used by monitor.
frames-per-second (integer [1..100]; Default: 25) Frame transmit interval
receive-all (yes | no; Default: no) If set to "no", monitoring will work only if both wireless stations are in align mode.
ssid-all (yes | no; Default: no) Whether to show all SSIDs in the monitor or only one configured in wireless settings.

Menu Specific Commands

Property Description
monitor (interface name) Start align monitoring
test-audio (integer [-2147483648..2147483647]) Test the beeper

Connect List

Sub-menu: /interface wireless connect-list

connect-list is used to assign priority and security settings to connections with remote access points, and to restrict allowed connections. connect-list is an ordered list of rules. Each rule in connect-list is attached to specific wireless interface, specified in the interface property of that rule (this is unlike access-list, where rules can apply to all interfaces). Rule can match MAC address of remote access point, it's signal strength and many other parameters.
Operation:
  • connect-list rules are always checked sequentially, starting from the first.
  • disabled rules are always ignored.
  • Only the first matching rule is applied.
  • If connect-list does not have any rule that matches remote access point, then the default values from the wireless interface configuration are used.
  • If access point is matched by rule that has connect=no value, connection with this access point will not be attempted.
  • If access point is matched by rule that has connect=yes value, connection with this access point will be attempted.
    • In station mode, if several remote access points are matched by connect list rules with connect=yes value, connection will be attempted with access point that is matched by rule higher in the connect-list.
    • If no remote access points are matched by connect-list rules with connect=yes value, then value of default-authentication interface property determines whether station will attempt to connect to any access point. If default-authentication=yes, station will choose access point with best signal and compatible security.
  • In access point mode, connect-list is checked before establishing WDS link with remote device. If access point is not matched by any rule in the connect list, then the value of default-authentication determines whether WDS link will be established.


Properties

Property Description
area-prefix (string; Default: ) Rule matches if area value of AP (a proprietary extension) begins with specified value.area value is a proprietary extension.
comment (string; Default: ) Short description of an entry
connect (yes | no; Default: yes) Available options:
  • yes - Connect to access point that matches this rule.
  • no - Do not connect to any access point that matches this rule.
disabled (yes | no; Default: no)
mac-address (MAC; Default: 00:00:00:00:00:00) Rule matches only AP with the specified MAC address. Value 00:00:00:00:00:00 matches always.
security-profile (string | none; Default: none) Name of security profile that is used when connecting to matching access points, If value of this property is none, then security profile specified in the interface configuration will be used. In station mode, rule will match only access points that can support specified security profile. Value none will match access point that support security profile that is specified in the interface configuration. In access point mode value of this property will not be used to match remote devices.
signal-range (NUM..NUM - both NUM are numbers in the range -120..120; Default: -120..120) Rule matches if signal strength of the access point is within the range. If station establishes connection to access point that is matched by this rule, it will disconnect from that access point when signal strength goes out of the specified range.
ssid (string; Default: "") Rule matches access points that have this SSID. Empty value matches any SSID. This property has effect only when station mode interface ssid is empty, or when access point mode interface has wds-ignore-ssid=yes
wireless-protocol (802.11 | any | nstreme | tdma; Default: any)
interface (string; Default: ) Each rule in connect list applies only to one wireless interface that is specified by this setting.

Subscribe to receive free email updates:

0 Response to "mikrotik frame protection Properties"

Post a Comment

Subscribe to: Post Comments (Atom)