Difference between revisions of "Template:Networking rutos manual wireless"

From Teltonika Networks Wiki
(Created page with "==Summary== The '''Wireless''' section of the Network tab can be used to manage and configure WiFi Access Points (AP) and WiFi Clients (STA). This chapter of the user manual...")
 
(41 intermediate revisions by 7 users not shown)
Line 1: Line 1:
 +
{{Template: Networking_rutos_manual_fw_disclosure
 +
| fw_version = {{{series}}}{{#ifeq:{{{name}}}|RUT241|M|}}_R_00.07.01{{#ifeq:{{{series}}}|RUT9|.1|}}
 +
| series    = {{{series}}}
 +
}}
 +
{{#ifeq: {{{series}}} | RUT9 |<br><i><b>Note</b>: <b>[[{{{name}}} Wireless (legacy WebUI)|click here]]</b> for the old style WebUI (FW version RUT9XX_R_00.06.08.5 and earlier) user manual page.</i>|}}
 +
{{#ifeq: {{{series}}} | RUT2 |
 +
{{#switch: {{{name}}}
 +
  | RUT241 =
 +
  | #default =
 +
<br><i><b>Note</b>: <b>[[{{{name}}} Wireless (legacy WebUI)|click here]]</b> for the old style WebUI (FW version RUT2XX_R_00.01.14.4 and earlier) user manual page.</i>}}
 +
|}}
 +
__TOC__
 
==Summary==
 
==Summary==
  
The '''Wireless''' section of the Network tab can be used to manage and configure WiFi Access Points (AP) and WiFi Clients (STA). This chapter of the user manual is an overview of the Wireless section of {{{name}}} routers.
+
The <b>Wireless</b> section of the Network tab can be used to manage and configure WiFi Access Points and WiFi Stations (clients) . This chapter of the user manual provides an overview of the Wireless section for {{{name}}} devices.
 +
 
 +
{{Template:Networking_rutos_manual_basic_advanced_webui_disclaimer
 +
| series = {{{series}}}
 +
}}
  
 
==Wireless technology==
 
==Wireless technology==
  
{{{name}}} routers support IEEE 802.11b/g/n and 802.11e_WMM wireless technologies. More information on IEEE 802.11b/g/n can be seen '''[[802.11e WMM|here]]'''.
+
{{#switch: {{{wifi}}}
 +
| 2 = {{{name}}} devices support IEEE 802.11b/g/n and 802.11e_WMM wireless technologies.
 +
| 5 = {{{name}}} devices support IEEE 802.11ac (WiFi 5) with data transmission rates up to 867 Mbps (Dual Band, MU-MIMO), 802.11r fast transition.
 +
}}
  
==Wireless Overviewn==
+
==WiFi 2.4 GHz {{#ifeq:{{{wifi}}}|5|& 5 GHz|}}==
  
The '''Wireless Overview''' window provides you with the possibility to configure your wireless access points and wireless clients. The Wireless Clients are needed to set up [[{{{name}}} WAN#Wireless WAN|Wireless WAN]] which will become active only when WiFi Client is already set up.  
+
The <b>WiFi 2.4 GHz {{#ifeq:{{{wifi}}}|5|& 5 GHz|}}</b> section is used to configure your wireless access points (AP) and wireless clients (STA).
  
[[Image:Network wireless configuration.PNG]]
+
{{#ifeq: {{{series}}} | TCR1 | [[File:Networking_tcr_manual_wireless_wifi_{{{wifi}}}.png|border|class=tlt-border]] |
 +
[[File:Networking_rutos_manual_wireless_wifi_{{{wifi}}}.png|border|class=tlt-border]]
 +
}}
  
Above is the overview of the Wireless Configuration window. It displays active access points and stations. Here you can disable or enable your WiFi interfaces, remove unwanted access points or stations or enter a configuration window for each WiFi interface, where you can configure it more thoroughly.
+
Above is the overview of the Wireless Overview window. It displays active access points and stations.  
 +
Here you can turn on or off your WiFi interfaces, remove them or start configuring by clicking on
 +
[[File:Networking rutx manual edit button v1.png]] <b>Edit</b> button on the right side of interface.
 +
You can also configure your WiFi devices by clicking [[File:Networking rutx manual edit button v1.png]] <b>Edit</b> button
 +
in the right side of each table header.
 +
To configure your Wireless device as Client press '''Scan''' button to scan the surrounding area and attempt to connect to a new wireless access point.
  
==Wireless Access Point==
+
{{#ifeq: {{{series}}} | TCR1 |
  
The Wireless Access Point configuration window is used to make changes to different access points. It is divided into two main sections – device and interface. One is dedicated to configuring hardware parameters, the other – software. To access this window, simply click the '''edit''' button next to the WiFi interface that you wish to configure:
+
==Guest Network==
  
[[Image:Network wireless configuration edit.PNG]]
+
Most of us are aware, that network security is extremely important. If your WiFi network is not properly secured, it makes you and all of your home or office resources vulnerable to a variety of security threats. To stay ahead of the curve, many companies and home users have guest WiFi. Unlike your regular WiFi network that you or your company members use, the guest WiFi network restricts what your guests can do in your network. It gives visitors access to the Internet connection, but nothing else making you or your company a lot more secure.
 +
|
 +
}}
  
===Device Configuration===
+
==Global Settings==
 +
 
 +
The <b>Global Settings</b> section is used for configuring WiFi hardware parameters. You can find this section by clicking the 'Edit' button next to a wireless device (<u>not an interface</u>) in the Network → Wireless page:
 +
 
 +
{{#ifeq: {{{series}}} | TCR1 | [[File:Networking_tcr_manual_wireless_global_settings_edit_button.png|border|class=tlt-border]] |
 +
[[File:Networking_rutos_manual_wireless_global_settings_edit_button.png|border|class=tlt-border]]
 +
}}
 +
 
 +
===General Setup===
 
----
 
----
The '''Device Configuration''' section is used for configuring WiFi hardware parameters.
+
The <b>General Setup</b> section is used to turn a wireless device on or off, select the operating frequency (WiFi mode and channel), transmit power and define a country code.
 +
 
 +
A wireless 2.4 GHz WiFi channel requires a signaling band roughly 22 MHz wide, radio frequencies of neighboring channels numbers significantly overlap each other. Choose a WiFi channel according to the busyness of other channels. You can download a free WiFi analyzer app on your phone, laptop or other WiFi device and check which channel is the least populated.  
  
====General Setup====
+
Many home networks utilize routers that by default run on channel 6 on the 2.4 GHz band. Neighboring WiFi home networks that run over the same channel generate radio interference that can cause significant network performance slowdowns for users. Reconfiguring a network to run on a different wireless channel helps minimize these slowdowns. Therefore, pick a channel with no other active Access Points and preferably one that has no active Access Point on two adjacent channels on each side as well. If you don't feel like doing this, set the 'Channel' field to <i>Auto</i> and the device will pick the least busy channel in your location automatically.  
----
 
The '''General Setup''' tab is used to '''Enable''' or '''Disable''' an Access Point and to select the wireless channel used by the Access Point.  
 
  
Choose a WiFi channel according to the busyness of other channels. While RUT devices do not provide a function that lets you monitor the usage of nearby WiFi channels, you can download a free WiFi analyzer app on your phone, laptop or other WiFi device. In most countries there are 13 WiFi channels on the 2.4 GHz band (14 in Japan) to choose from. RUT routers' WiFi works on the 2.4 GHz band. A wireless 2.4 GHz WiFi channel requires a signaling band roughly 22 MHz wide, radio frequencies of neighboring channels numbers significantly overlap each other. Many home networks utilize routers that by default run on channel 6 on the 2.4 GHz band. Neighboring WiFi home networks that run over the same channel generate radio interference that can cause significant network performance slowdowns for users. Reconfiguring a network to run on a different wireless channel helps minimize these slowdowns. Therefore, pick a channel with no other active Access Points and preferably one that has no active Access Point on two adjacent channels on each side as well. If you don't feel like doing this, set the '''Channel''' field to '''Auto''' and the router will pick the least busy channel in your location automatically.  
+
[[File:Networking_rutos_manual_wireless_global_settings_general_setup.png|border|class=tlt-border]]
  
[[Image:Network wireless device general.PNG]]
+
<table class="nd-mantable">
 +
    <tr>
 +
        <th>Field</th>
 +
      <th>Value</th>
 +
      <th>Description</th>
 +
    </tr>
 +
    <tr>
 +
      <td>Enable</td>
 +
      <td>off | on; default: <b>on</b></td>
 +
      <td>Turns Wireless device on or off.</td>
 +
    </tr>
 +
    <tr>
 +
      <th>Operating Frequency (2.4 GHz)</th>
 +
        <th></th>
 +
        <th></th>   
 +
    </tr>
 +
    <tr>
 +
      <td>Mode</td>
 +
      <td>N | Legacy; default: <b>N</b></td>
 +
      <td>Wireless N (802.11n) supports a maximum theoretical transfer rate of 300mbps with 2 antennas. It can reach up to 450 Mbps with 3 antennas. Though typical speeds are more accurately around 130 Mbps. The legacy standards include 802.11a, 802.11b, and 802.11g.</td>
 +
    </tr>
 +
    <tr>
 +
      <td>Channel</td>
 +
      <td>Auto | 1 (2412 MHz) | 2 (2417 MHz) | 3 (2422 MHz) | 4 (2427 MHz) | 5 (2432 MHz) | 6 (2437 MHz) | 7 (2442 MHz) | 8 (2447 MHz) | 9 (2452 MHz) | 10 (2457 MHz) | 11 (2462 MHz); default: <b>11 (2462 MHz)</b></td>
 +
      <td>A wireless 2.4 GHz WiFi channel requires a signaling band roughly 22 MHz wide, radio frequencies of neighboring channels numbers significantly overlap each other. Therefore, pick a channel with no other active Access Points and preferably one that has no active Access Point on two adjacent channels on each side as well.</td>
 +
    </tr>
 +
    <tr>
 +
        <td>Width</td>
 +
        <td>20 MHz | 40 MHz; default: <b>20 MHz</b></td>
 +
        <td>A 40 MHz channel width bonds two 20 MHz channels together, forming a 40 MHz channel width; therefore, it allows for greater speed and faster transfer rates. But not if those channels are crowded with noise and interference. In crowded areas with a lot of frequency noise and interference, a single 20MHz channel will be more stable. 40MHz channel width allows for greater speed and faster transfer rates but it doesn’t perform as well in crowded areas.</td>
 +
    </tr>{{#ifeq: {{{wifi}}} | 5 |
 +
    <tr>
 +
      <th>Operating Frequency (5 GHz)</th>
 +
        <th></th>
 +
        <th></th>   
 +
    </tr>
 +
    <tr>
 +
      <td>Mode</td>
 +
      <td>N <nowiki>|</nowiki> AC; default: <b>AC</b></td>
 +
      <td>Choose between 802.11n and 802.11ac standards.</td>
 +
    </tr>
 +
    <tr>
 +
      <td>Channel</td>
 +
      <td>Auto {{!}} 36(5180 MHz) {{!}} 40(5200 MHz) {{!}} 44(5220 MHz) {{!}} 48(5240 MHz) {{!}} 52(5260 MHz) {{!}} 56(5280 MHz) {{!}} 60(5300 MHz) {{!}} 64(5320 MHz) {{!}} 68(5340 MHz) {{!}} 72(5360 MHz) {{!}} 76(5380 MHz) {{!}} 80(5400 MHz) {{!}} 84(5420 MHz) {{!}} 88(5440 MHz) {{!}} 92(5460 MHz) {{!}} 96(5480 MHz) {{!}} 100(5500 MHz) {{!}} 104(5520 MHz) {{!}} 108(5540 MHz) {{!}} 112(5560 MHz) {{!}} 116(5580 MHz) {{!}} 120(5600 MHz) {{!}} 124(5620 MHz) {{!}} 128(5640 MHz) {{!}} 132(5660 MHz) {{!}} 136(5680 MHz) {{!}} 140(5700 MHz) {{!}} 144 (5720 MHz) {{!}} 149 (5745 MHz) {{!}} 153 (5765 MHz) {{!}}157 (5785 MHz) {{!}} 161 (5805 MHz) {{!}} 165 (5825 MHz); default: <b>36(5180 MHz)</b></td>
 +
      <td>A wireless 5 GHz WiFi channel also requires a signaling band roughly 22 MHz wide, but since its channel with is 20 MHZ ir overlaps less with neighboring channels, but it is still recommended to pick a channel with no other active Access Points and preferably one that has no active Access Point on two adjacent channels on each side as well.</td>
 +
    </tr>
 +
    <tr>
 +
        <td>Width</td>
 +
        <td>20 MHz <nowiki>|</nowiki> 40 MHz <nowiki>|</nowiki> 80 MHz; default: <b>80MHz</b></td>
 +
        <td>A 40 MHz channel width bonds two 20 MHz channels together, forming a 40 MHz channel width, 8 MHZ channel bonds four 20 MHz channels; therefore, it allows for greater speed and faster transfer rates. But not if those channels are crowded with noise and interference. In crowded areas with a lot of frequency noise and interference, a single 20MHz channel will be more stable. 80 MHz width channel is faster than 40MHz which is faster than 20 MHz but it doesn’t perform as well in crowded areas.</td>
 +
    </tr>
 +
    <tr>
 +
        <th></th>
 +
        <th></th>
 +
        <th></th>
 +
    </tr>|}}
 +
    <tr>
 +
        <td>Transmit Power</td>
 +
        <td>[5%...100%]; default: <b>100 %</b></td>
 +
        <td>The transmit power of an access point radio is proportional to its effective range – the higher the transmit power, the more distance that a signal can travel, and/or the more physical materials that it can effectively penetrate and still have data successfully resolved at the receiver.</td>
 +
    </tr>
 +
    <tr>
 +
    <td>Country code</td>
 +
        <td>country code; default: <b>US - United States</b></td>
 +
        <td>SO/IEC 3166 alpha2 country codes as defined in ISO 3166-1 standard.</td>
 +
    </tr>
 +
</table>
  
====Advanced Setup====
+
===Advanced Settings===
 
----
 
----
The '''Advanced Setup''' tab is used to configure how the wireless Access Point will work from a hardware perspective.  
+
The <b>Advanced Settings</b> section is used to configure how the wireless Access Point will work from a hardware perspective.  
  
[[Image:Network wireless device advanced.PNG]]
+
[[File:Networking_rutos_manual_wireless_global_settings_advanced_settings.png|border|class=tlt-border]]
  
 
<table class="nd-mantable">
 
<table class="nd-mantable">
 
     <tr>
 
     <tr>
         <th>field name</th>
+
         <th>Field</th>
       <th>value</th>
+
       <th>Value</th>
       <th>description</th>
+
       <th>Description</th>
 +
    </tr>
 +
    <tr>
 +
      <th>Operating Frequency (2.4 GHz)</th>
 +
        <th></th>
 +
        <th></th>   
 +
    </tr>
 +
<tr>
 +
      <td>Allow legacy 802.11b rates</td>
 +
      <td>off | on; default: <b>on</b></td>
 +
      <td>Turn on to enable connections that uses legacy 802.11b standard.</td>
 +
    </tr>
 +
    <tr>
 +
      <td>Distance Optimization</td>
 +
      <td>integer [0..65535]; default: <b>none</b> </td>
 +
      <td>HT Distance to farthest network member in meters.</td>
 +
    </tr>
 +
    <tr>
 +
    <td>Fragmentation threshold</td>
 +
        <td>integer [256..2346]; default: <b>none</b></td>
 +
        <td>The smallest packet size that can be fragmented and transmitted by multiple frames. In areas were interference is a problem, setting a lower fragment threshold might help reduce the probability of unsuccessful packet transfers, thus increasing speed</td>
 +
    </tr>
 +
    <tr>
 +
    <td>RTS/CTS threshold</td>
 +
        <td>integer [0..2347]; default: <b>none</b></td>
 +
        <td>RTS/CTS (Request to Send/Clear to Send) are mechanisms, used to reduce frame collisions introduced by the hidden node problem. It can help resolve problems arising when several access points are in the same area, contending</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
      <td>Mode</td>
+
    <td>Force 40MHz mode</td>
      <td>Auto {{!}} 802.11b {{!}} 802.11g {{!}} 802.11g+n; Default: '''802.11g+n'''</td>
+
        <td>off | on; default: <b>off</b></td>
      <td>Wireless protocol used. Different modes provide different wireless standard support which directly impacts the radio's throughput performance</td>
+
        <td>Always use 40MHz channels even if the secondary channel overlaps. Using this option does not comply with IEEE 802.11n-2009!</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
      <td>HT mode</td>
+
    <td>Beacon interval</td>
      <td>20 MHz {{!}} 40 MHz 2nd channel above; Default: '''20 MHz'''</td>
+
        <td>integer [15..65535]; default: <b>none</b></td>
      <td>HT (High Throughput) mode allows you to specify channel width. 40 MHz bandwidth provides better performance but it overlaps 4 adjacent channels on each side, therefore, it might overlap with many other Access Points working in those channels. If that is the case, the router will switch back to 20 MHz mode automatically to reduce interference. 40 MHz is only available if the selected channel is not '''Auto'''</td>
+
        <td>Beacon signal interval in seconds.</td>
 
     </tr>
 
     </tr>
 +
{{#ifeq:{{{wifi}}}|5|
 
     <tr>
 
     <tr>
    <td>Country code</td>
+
      <th>Operating Frequency (5 GHz)</th>
         <td>country code; Default: '''0 - World'''</td>
+
         <th></th>
         <td>SO/IEC 3166 alpha2 country codes as defined in ISO 3166-1 standard</td>
+
         <th></th>  
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
    <td>Transmit power</td>
+
      <td>Distance Optimization</td>
        <td>100 % {{!}} 80 % {{!}} 60 % {{!}} 40 % {{!}} 20 %; Default: '''100 %'''</td>
+
      <td>integer [0..65535]; default: <b>none</b> </td>
        <td>WiFi signal power. Use lower power to reduce the router's CPU usage</td>
+
      <td>HT Distance to farthest network member in meters.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
 
     <td>Fragmentation threshold</td>
 
     <td>Fragmentation threshold</td>
         <td>integer [256..2346]; Default: " "</td>
+
         <td>integer [256..2346]; default: <b>none</b></td>
 
         <td>The smallest packet size that can be fragmented and transmitted by multiple frames. In areas were interference is a problem, setting a lower fragment threshold might help reduce the probability of unsuccessful packet transfers, thus increasing speed</td>
 
         <td>The smallest packet size that can be fragmented and transmitted by multiple frames. In areas were interference is a problem, setting a lower fragment threshold might help reduce the probability of unsuccessful packet transfers, thus increasing speed</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
 
     <td>RTS/CTS threshold</td>
 
     <td>RTS/CTS threshold</td>
         <td>integer [0..2347]; Default: " "</td>
+
         <td>integer [0..2347]; default: <b>none</b></td>
 
         <td>RTS/CTS (Request to Send/Clear to Send) are mechanisms, used to reduce frame collisions introduced by the hidden node problem. It can help resolve problems arising when several access points are in the same area, contending</td>
 
         <td>RTS/CTS (Request to Send/Clear to Send) are mechanisms, used to reduce frame collisions introduced by the hidden node problem. It can help resolve problems arising when several access points are in the same area, contending</td>
 
     </tr>
 
     </tr>
 +
    <tr>
 +
    <td>Force 40MHz mode</td>
 +
        <td>off {{!}} on; default: <b>off</b></td>
 +
        <td>Always use 40MHz channels even if the secondary channel overlaps. Using this option does not comply with IEEE 802.11n-2009!</td>
 +
    </tr>
 +
    <tr>
 +
    <td>Beacon interval</td>
 +
        <td>integer [15..65535]; default: <b>none</b></td>
 +
        <td>Beacon signal interval in seconds.</td>
 +
    </tr>
 +
<tr>
 +
      <td>ACS exclude DFS</td>
 +
      <td>off {{!}} on; default: <b>off</b></td>
 +
      <td>Turn this option on to exclude DFS channels from automatic channel selection.</td>
 +
    </tr>
 +
|}}
 
</table>
 
</table>
  
===Interface Configuration===
+
===WiFi Scanner===
 
----
 
----
The '''Interface Configuration''' section is used to configure wireless Access Points from the software perspective.
+
The <b>WiFi Scanner</b> provides you with the possibility to scan and collect information about connected devices and surrounding access points. The collected data is sent using the [[{{{name}}} Data to Server|Data to Server]] functionality with Kinesis argument.
 +
{{#switch: {{{series}}}
 +
  | #default =
 +
  | RUT36X|RUT9|TCR1 =
 +
<u><b>
 +
 
 +
Note:</b> WiFi Scanner is additional software that can be installed from the <b>Services → [[{{{name}}} Package Manager|Package Manager]]</b> page.</u>
 +
 
 +
}}
 +
[[File:Networking_rutos_manual_wireless_global_settings_wifi_scanner.png|border|class=tlt-border]]
 +
 
 +
<table class="nd-mantable">
 +
    <tr>
 +
        <th>Field</th>
 +
        <th>Value</th>
 +
        <th>Description</th>
 +
    </tr>
 +
    <tr>
 +
      <td>Enable</td>
 +
      <td>off | on; default: <b>off</b></td>
 +
      <td>Enables or disables WiFi scanner.</td>
 +
    </tr>
 +
    <tr>
 +
      <td>Interval</td>
 +
      <td>integer; default: <b>10</b></td>
 +
      <td>Interval between scans in seconds.</td>
 +
    </tr>
 +
</table>
  
====General Setup====
+
==Interface Configuration==
----
+
 
The '''General Setup''' tab contains only two options. '''SSID''' is the name of your WiFi interface. When other WiFi capable computers or devices scan the area for WiFi networks they will see your network with this name. '''Hide SSID''' is used to make your Access Point invisible to other devices. To use a hidden WiFi Access Point, first un-hide it, connect your device to it, then hide it again.
+
The <b>Interface Configuration</b> section is used to configure the parameters of Wireless Access Points or Clients. You can find this section by clicking the 'Edit' button next to a wireless device (<u>not an interface</u>) in the Network → Wireless page:
  
[[Image:Network wireless interface general.PNG]]
+
{{#ifeq: {{{series}}} | TCR1 | [[File:Networking_tcr_manual_wireless_interface_configuration_edit_button.png|border|class=tlt-border]] |
 +
[[File:Networking_rutos_manual_wireless_interface_configuration_edit_button.png|border|class=tlt-border]]
 +
}}
  
====Wireless Security====
+
===General Setup===
 
----
 
----
The '''Wireless Security''' tab is used to determine what kind of encryption your WLAN will use.  
+
The <b>General Setup</b> tab contains basic options for ESSID and network interface.
  
=====WPA=====
+
{{#ifeq: {{{series}}} | TCR1 | [[File:Networking_tcr_manual_wireless_interface_configuration_general_setup.png|border|class=tlt-border]] |
----
+
[[File:Networking_rutos_manual_wireless_interface_configuration_general_setup.png|border|class=tlt-border]]
[[Image:Network wireless interface security wpa.PNG]]
+
}}
  
 
<table class="nd-mantable">
 
<table class="nd-mantable">
 
     <tr>
 
     <tr>
         <th>field name</th>
+
         <th>Field</th>
      <th>value</th>
+
        <th>Value</th>
      <th>description</th>
+
        <th>Description</th>
 +
    </tr>
 +
    <tr>
 +
        <td>Mode</td>
 +
        <td>Access Point | Client; default: <b>Access Point</b></td>
 +
        <td>Defines what role this interface will do, Access point to supply WiFi for other devices, or as Client to use other devices WiFi for WWAN.</td>
 +
    </tr>
 +
    <tr>
 +
        <td>ESSID</td>
 +
        <td>Factory ESSID is different for every device; default: <b>none</b></td>
 +
        <td>Extended Service Set Identifier.</td>
 +
    </tr>
 +
    <tr>
 +
        <td>Network</td>
 +
        <td>network interfaces; default: <b>lan</b></td>
 +
        <td>Choose the network(s) you want to attach to this wireless interface or fill out the create field to define a new network.</td>
 +
    </tr>
 +
    <tr>
 +
      <th>Access Point mode</th>
 +
        <th></th>
 +
        <th></th>  
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
      <td>Encryption*</td>
+
        <td>ESSID</td>
      <td>No encryption {{!}} WPA-PSK {{!}} WPA2-PSK {{!}} WPA-PSK/WPA2-PSK mixed mode; Default: '''No encryption'''</td>
+
        <td>off | on; default: <b>off</b></td>
      <td>The type of WiFi encryption used </td>
+
        <td>Hide extended Service Set Identifier.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
      <td>Cipher</td>
+
        <td>WMM Mode</td>
      <td>Auto {{!}} Force CCMP (AES) {{!}} Force TKIP {{!}} Force TKIP and CCMP (AES); Default: '''Auto'''</td>
+
        <td>off | on; default: <b>on</b></td>
      <td>An algorithm for performing encryption or decryption</td>
+
        <td>Wi-Fi Multimedia (WMM), previously known as Wireless Multimedia Extensions (WME), is a subset of the 802.11e wireless LAN (WLAN) specification that enhances quality of service (QoS) on a network by prioritizing data packets according to four categories.</td>
 +
    </tr>
 +
    <tr>
 +
      <th>Client mode</th>
 +
        <th></th>
 +
        <th></th>  
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
    <td>Key</td>
+
        <td>BSSID</td>
         <td>string; Default: " "</td>
+
         <td>off | on; default: <b>off</b></td>
         <td>A custom passphrase used for authentication (at least 8 characters long)</td>
+
         <td>Basic service set identifier.</td>
 
     </tr>
 
     </tr>
 
</table>
 
</table>
  
=====WPA-Enterprise (WPA-EAP, WPA2-EAP)=====
+
 
 +
===Wireless Security===
 
----
 
----
The '''Enterprise variants''' of WPA and WPA2 use a RADIUS server for authentication purposes instead of a password(s).
+
The <b>Wireless Security</b> tab is used to determine what kind of encryption your WLAN will use.  
 
 
[[File:Network wireless interface security enterprise wpa.png]]
 
  
 +
[[File:Networking_rutos_manual_wireless_interface_configuration_wireless_security.png|border|class=tlt-border]]
  
 
<table class="nd-mantable">
 
<table class="nd-mantable">
 
     <tr>
 
     <tr>
         <th>field name</th>
+
         <th>Field</th>
       <th>value</th>
+
       <th>Value</th>
       <th>description</th>
+
       <th>Description</th>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
       <td>Encryption*</td>
+
       <td>Encryption</td>
       <td>No encryption {{!}} WPA-PSK {{!}} WPA2-PSK {{!}} WPA-PSK/WPA2-PSK mixed mode; Default: '''No encryption'''</td>
+
       <td>No encryption | WPA-PSK/WPA2-PSK Mixed Mode | WPA2-PSK | WPA2-EAP |
       <td>The type of WiFi encryption used </td>
+
WPA2-EAP/WPA3-EAP Mixed Mode | WPA3-EAP | WPA2-PSK/WPA3-SAE Mixed Mode
 +
| WPA3-SAE | OWE; default: <b>WPA2-PSK</b></td>
 +
       <td>The type of encryption used on this Wireless Interface.
 +
Opportunistic Wireless Encryption (<b>OWE</b>) - no password is required and
 +
all wireless traffic is encrypted (safer than <b>No Encryption</b>).</td>
 +
    </tr>
 +
    <tr>
 +
      <th>With all encryptions</th>
 +
        <th></th>
 +
        <th></th>   
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
 
       <td>Cipher</td>
 
       <td>Cipher</td>
       <td>Auto {{!}} Force CCMP (AES) {{!}} Force TKIP {{!}} Force TKIP and CCMP (AES); Default: '''Auto'''</td>
+
       <td>Auto | Force CCMP (AES) | Force TKIP | Force TKIP and CCMP (AES); default: <b>Force TKIP and CCMP (AES)</b></td>
       <td>An algorithm for performing encryption or decryption</td>
+
       <td>An algorithm for performing encryption or decryption.</td>
 +
    </tr>
 +
    <tr>
 +
      <th>WPA-PSK/WPA2-PSK Mixed Mode, WPA2-PSK, WPA2-PSK/WPA3-SAE Mixed Mode, WPA3-SAE</th>
 +
        <th></th>
 +
        <th></th>   
 +
    </tr>
 +
    <tr>
 +
    <td>Password</td>
 +
        <td>string; default: <b>random</b> </td>
 +
        <td>A custom passphrase used for authentication (at least 8 characters long).</td>
 +
    </tr>
 +
    <tr>
 +
      <th>WPA2-EAP, WPA2-EAP/WPA3-EAP Mixed Mode, WPA3-EAP</th>
 +
        <th></th>
 +
        <th></th>   
 +
    </tr>
 +
    <tr>
 +
    <td>Radius-Authentication-Server</td>
 +
        <td>string; default: <b>none</b> </td>
 +
        <td>Ip address of the authentification server.</td>
 +
    </tr>
 +
    <tr>
 +
    <td>Radius-Authentication-Port</td>
 +
        <td>string; default: <b>none</b> </td>
 +
        <td>Default port for the server is 1812.</td>
 +
    </tr>
 +
    <tr>
 +
    <td>Radius-Authentication-Secret</td>
 +
        <td>string; default: <b>none</b> </td>
 +
        <td>Server's shared secret.</td>
 +
    </tr>
 +
    <tr>
 +
    <td>Radius-Accounting-Server</td>
 +
        <td>string; default: <b>none</b> </td>
 +
        <td>Ip address of the accounting server.</td>
 +
    </tr>
 +
    <tr>
 +
    <td>Radius-Accounting-Port</td>
 +
        <td>string; default: <b>none</b> </td>
 +
        <td>Default port for the server is 1813.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
     <td>Radius Server IP</td>
+
     <td>Radius-Accounting-Secret</td>
         <td>host {{!}} ip; Default: " "</td>
+
         <td>string; default: <b>none</b> </td>
         <td>RADIUS server's IP address or host name</td>
+
         <td>Server's shared secret.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
     <td>Radius Server Port</td>
+
     <td>NAS id</td>
         <td>integer [0..65535]; Default: " "</td>
+
         <td>string; default: <b>none</b> </td>
         <td>The port number used for connection to the RADIUS server</td>
+
         <td>Network access server identifier.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
     <td>Radius Server Secret</td>
+
     <td>802.11r Fast Transition</td>
         <td>string; Default: " "</td>
+
         <td>off | on; default: <b>off</b></td>
         <td>A case-sensitive shared secret used for authentication on both RADIUS devices</td>
+
         <td>Enables or disables 802.11r Fast Transition functionality </td>
 
     </tr>
 
     </tr>
 
</table>
 
</table>
  
====MAC Filter====
+
===MAC Filter===
 
----
 
----
The '''MAC Filter''' tab is used for setting up rules that allow or exclude devices with specified MAC addresses from connecting to your WiFi network.  
+
The <b>MAC Filter</b> tab is used for setting up rules that allow or exclude devices with specified MAC addresses from connecting to your WiFi network.
 +
This tab is only visible when Wireless interface Mode is set to <b>Access Point</b>.
  
[[Image:Network wireless interface mac.PNG]]
+
[[File:Networking_rutos_manual_wireless_interface_configuration_mac_filter.png|border|class=tlt-border]]
  
 
<table class="nd-mantable">
 
<table class="nd-mantable">
 
     <tr>
 
     <tr>
         <th>field name</th>
+
         <th>Field</th>
       <th>value</th>
+
       <th>Value</th>
       <th>description</th>
+
       <th>Description</th>
    </tr>
 
    <tr>
 
      <td>MAC address filter</td>
 
      <td>Disable {{!}} Allow listed only {{!}} Allow all except listed; Default: '''Disable'''</td>
 
      <td>'''Allow listed only''' – only allows devices with MAC addresses specified in the MAC list to connect to your WiFi network <br>
 
'''Allow all except listed''' -  blocks devices with MAC addresses specified in the MAC list from connecting to your WiFi network</td>
 
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
       <td>MAC</td>
+
       <td>MAC-address filter</td>
       <td>mac; Default: " "</td>
+
       <td>Disable | Allow listed only | Allow all except listed; default: <b>Disable</b></td>
       <td>List of MAC addresses to be included or excluded from connecting to your WiFi network</td>
+
       <td>Defines how the MAC Filter should function.<br>
 +
            <ul>
 +
                <li><b>Allow listed only</b> – only allows devices with specified MAC addresses to connect to your Wireless Access Point.</li>
 +
                <li><b>Allow all except listed</b> -  blocks devices with specified MAC addresses from connecting to your Wireless Access Point.</li>
 +
            <ul>
 +
        </td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
    <td>Key</td>
+
      <td>MAC-List</td>
        <td>string; Default: " "</td>
+
      <td>MAC; default: <b>none</b> </td>
        <td>A custom passphrase used for authentication (at least 8 characters long)</td>
+
      <td>List of MAC addresses to be included or excluded from connecting to your Wireless Access Point.</td>
 
     </tr>
 
     </tr>
 
</table>
 
</table>
  
====Advanced Settings====
+
===Advanced Settings===
 
----
 
----
[[Image:Network wireless interface advanced.PNG]]
+
[[File:Networking_rutos_manual_wireless_interface_configuration_advanced_settings.png|border|class=tlt-border]]
  
 
<table class="nd-mantable">
 
<table class="nd-mantable">
 
     <tr>
 
     <tr>
         <th>field name</th>
+
         <th>Field</th>
       <th>value</th>
+
       <th>Value</th>
       <th>description</th>
+
       <th>Description</th>
 +
    </tr>
 +
    <tr>
 +
      <td>Isolate Clients</td>
 +
      <td>off | on; default: <b>off</b></td>
 +
      <td>Prevents client to client communication on the same subnet.</td>
 +
    </tr>
 +
    <tr>
 +
      <td>Short Preamble</td>
 +
      <td>off | on; default: <b>on</b></td>
 +
      <td>Uses Short Preamble, it uses shorter data strings that adds less data to transmit the error redundancy check which means that it is much faster.</td>
 +
    </tr>
 +
    <tr>
 +
        <td>DTIM interval</td>
 +
        <td>seconds; default: <b>none</b> </td>
 +
        <td>Delivery Traffic Indication Message Interval.</td>
 +
    </tr>
 +
    <tr>
 +
        <td>Time interval for rekeying GTK</td>
 +
        <td>seconds; default: <b>none</b> </td>
 +
        <td>Period of time in between automatic changes of the group key, which all devices on the network share.</td>
 +
    </tr>
 +
    <tr>
 +
        <td>Disable Inactivity Polling</td>
 +
        <td>off | on; default: <b>off</b></td>
 +
        <td>Inactivity polling can be disabled to disconnect stations based on inactivity timeout so that idle stations are more likely to be disconnected even if they are still in range of the AP.</td>
 +
    </tr>
 +
    <tr>
 +
        <td>Station inactivity limit</td>
 +
        <td>seconds; default: <b>none</b> </td>
 +
        <td>Station inactivity limit in seconds. If a station/client does not send anything in st time frame, an empty data frame is sent to it in order to verify whether it is still in range. If this frame is not acknowledged, the station will be disassociated and then deauthenticated.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
      <td>Separate clients</td>
+
        <td>Maximum allowed Listen Interval</td>
      <td>yes {{!}} no; Default: '''no'''</td>
+
        <td>positive integer; default: <b>none</b> </td>
      <td>Prevents WiFi clients from communicating with each other on the same subnet</td>
+
        <td>Association will be refused if a client/station attempts to associate with a listen interval greater than this value.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
      <td>Increase TTL packet size </td>
+
        <td>Disassociate On Low Acknowledgement</td>
      <td>yes {{!}} no; Default: '''no'''</td>
+
        <td>off | on; default: <b>on</b></td>
      <td>Increase TTL packet size for incoming packets</td>
+
        <td>Allow AP mode to disconnect stations/clients based on low Acknowledgement condition.</td>
 
     </tr>
 
     </tr>
 
</table>
 
</table>
  
==Wireless Station==
+
==Client Mode==
 +
 
 +
{{{name}}} can also work as a WiFi client. Configuring client mode is nearly identical to Access Point, except for the fact that most of the options are dictated by the WiFi Access Point that the router is connecting to. Changing them can result in an interrupted connection to that router.
 +
 
 +
To begin configuring WiFi Client first click the 'Scan' button to scan the surrounding area and attempt to connect to a new wireless access point.
 +
 
 +
{{#ifeq: {{{series}}} | TCR1 | [[File:Networking_tcr_manual_wireless_scan_button_wifi_{{{wifi}}}.png|border|class=tlt-border]]
 +
[[File:Networking_rutos_manual_wireless_scan_button_wifi_{{{wifi}}}.png|border|class=tlt-border]]
 +
}}
 +
 
 +
After which you will be redirected to the window shown below, where you will see list of available WiFi Access Points in the area. Choose one according to your liking and press the '''Join Network''' button next to it.
 +
 
 +
[[File:Networking_rutos_manual_wireless_scan_button_results.png|border|class=tlt-border]]
 +
 
 +
You again will be redirected to following window, where you will need to enter WPA passphrase or other security password depending on AP that you are connecting to, name yours network (it will be name of your wireless WAN interface) and assign firewall rule.
  
RUT955 can also work as a WiFi client. Configuring client mode is nearly identical to AP, except for the fact that most of the options are dictated by the wireless access point that the router is connecting to. Changing them can result in an interrupted connection to that AP.
+
[[File:Networking_rutos_manual_wireless_scan_button_results_join_network.png|border|class=tlt-border]]
  
In addition to standard options you can also click the '''Scan''' button to rescan the surrounding area and attempt to connect to a new wireless access point.
+
Next window that opens will be '''Device Configuration'''. Values there, mostly, should be left unchanged to avoid connection problems, because they are dictated by Access Point. Other than that, only difference from Access Point settings are in ''Interface Configuration → General Setup'' section, where '''Mode''' is set to '''Client''', and '''Network''' attached to this wireless interface is '''WAN''' instead of LAN
  
[[Image:Network wireless station step1.PNG]]
+
[[File:Networking_rutos_manual_wireless_scan_button_results_join_network_general_setup.png|border|class=tlt-border]]
  
 +
Click '''Save & Apply''' and if you configured correctly, you will have Wireless Client working. 
  
After which you will be redirected to the window shown below.
+
==Multi AP==
 +
 
 +
The <b>Multi AP</b> feature is used to configure access to multiple wireless access points from one page. To enter Multi AP configuration, click the 'Multi AP' button below other Wireless configurations:
 +
 
 +
[[File:Networking_rutos_manual_wireless_multi_ap_button.png|border|class=tlt-border]]
 +
 
 +
Next, enter a name for the Multi AP network and assign a firewall zone (default: wan).
 +
 
 +
[[File:Networking_rutos_manual_wireless_multi_ap_create_network.png|border|class=tlt-border]]
 +
 
 +
You may then start to configure General Settings for the Multi AP feature.
 +
 
 +
===General Settings===
 +
----
 +
The <b>General Settings</b> section for Multi AP is used to turn it on or off and to change the frequency of scanning for WiFi APs.
 +
 
 +
[[File:Networking_rutos_manual_wireless_multi_ap_general_settings.png|border|class=tlt-border]]
 +
 
 +
<table class="nd-mantable">
 +
    <tr>
 +
        <th>Field</th>
 +
      <th>Value</th>
 +
      <th>Description</th>
 +
    </tr>
 +
    <tr>
 +
      <td>Enable</td>
 +
      <td>off | on; default: <b>off</b></td>
 +
      <td>Turns Multi AP configuration on or off.</td>
 +
    </tr>
 +
    <tr>
 +
      <td>Scan Time (sec)</td>
 +
      <td>integer (30+); default: <b>60</b></td>
 +
      <td>Frequency (in seconds) of scans for WiFi access point availability.</td>
 +
    </tr>
 +
    <tr>
 +
    <td>Upload AP list</td>
 +
        <td>- (interactive button)</td>
 +
        <td>Uploads a list of access point configurations.</td>
 +
    </tr>
 +
</table>
  
 +
===Access Points===
 +
----
 +
You can either configure multiple <b>access points</b> from this page of the WebUI or you can upload a file with a list of access point configurations. The file should contains WiFi access point configuration options and values, which should be defined as <b>option: value</b> (for example, <i>ssid: home_wifi</i>). The SSID option is mandatory.
  
[[Image:Network wireless station step2.PNG]]
+
[[File:Networking_rutos_manual_wireless_multi_ap_access_points.png|border|class=tlt-border]]
  
 +
<table class="nd-mantable">
 +
    <tr>
 +
        <th>Field</th>
 +
      <th>Value</th>
 +
      <th>Description</th>
 +
    </tr>
 +
    <tr>
 +
      <td>SSID</td>
 +
      <td>string; default: <b>none</b></td>
 +
      <td>SSID of an access point.</td>
 +
    </tr>
 +
    <tr>
 +
      <td>Key</td>
 +
      <td>string; default: <b>none</b></td>
 +
      <td>Pre-shared key, a custom passphrase used for user authentication (at least 8 characters long).</td>
 +
    </tr>
 +
    <tr>
 +
      <td>Enable</td>
 +
      <td>off | on; default: <b>off</b></td>
 +
      <td>Turns an access point configuration on or off.</td>
 +
    </tr>
 +
    <tr>
 +
      <td>Delete</td>
 +
      <td>- (interactive button)</td>
 +
      <td>Deletes the access point configuration next to the button.</td>
 +
    </tr>
 +
</table>
  
Pressing '''Start scan''' will initiate a scan for available WiFi Access Points in the area. After the scan finishes, you will see a list of these Access points. Choose one according to your liking and press the '''Join Network''' button next to it.
+
Option names in the file should be provided in lower case letters. AP list file example:
  
 +
ssid: RUT_1
 +
enable: 1
 +
key: 12345678
 +
ssid: RUT_2
 +
enable: 0
 +
key: 87654321
  
[[Image:Network wireless station step3.PNG]]
+
Once uploaded, the contents of the file should become visible in the Access Points list.
  
[[Category:RUT955 WebUI]]
+
[[Category:{{{name}}} Network section]]

Revision as of 18:03, 22 November 2021

Template:Networking rutos manual fw disclosure


Summary

The Wireless section of the Network tab can be used to manage and configure WiFi Access Points and WiFi Stations (clients) . This chapter of the user manual provides an overview of the Wireless section for {{{name}}} devices.

If you're having trouble finding this page or some of the parameters described here on your device's WebUI, you should turn on "Advanced WebUI" mode. You can do that by clicking the "Advanced" button, located at the top of the WebUI.

Networking rutos manual webui basic advanced mode 75.gif

Wireless technology

WiFi 2.4 GHz

The WiFi 2.4 GHz section is used to configure your wireless access points (AP) and wireless clients (STA).

[[File:Networking_rutos_manual_wireless_wifi_{{{wifi}}}.png|border|class=tlt-border]]

Above is the overview of the Wireless Overview window. It displays active access points and stations. Here you can turn on or off your WiFi interfaces, remove them or start configuring by clicking on Networking rutx manual edit button v1.png Edit button on the right side of interface. You can also configure your WiFi devices by clicking Networking rutx manual edit button v1.png Edit button in the right side of each table header. To configure your Wireless device as Client press Scan button to scan the surrounding area and attempt to connect to a new wireless access point.


Global Settings

The Global Settings section is used for configuring WiFi hardware parameters. You can find this section by clicking the 'Edit' button next to a wireless device (not an interface) in the Network → Wireless page:

Networking rutos manual wireless global settings edit button.png

General Setup


The General Setup section is used to turn a wireless device on or off, select the operating frequency (WiFi mode and channel), transmit power and define a country code.

A wireless 2.4 GHz WiFi channel requires a signaling band roughly 22 MHz wide, radio frequencies of neighboring channels numbers significantly overlap each other. Choose a WiFi channel according to the busyness of other channels. You can download a free WiFi analyzer app on your phone, laptop or other WiFi device and check which channel is the least populated.

Many home networks utilize routers that by default run on channel 6 on the 2.4 GHz band. Neighboring WiFi home networks that run over the same channel generate radio interference that can cause significant network performance slowdowns for users. Reconfiguring a network to run on a different wireless channel helps minimize these slowdowns. Therefore, pick a channel with no other active Access Points and preferably one that has no active Access Point on two adjacent channels on each side as well. If you don't feel like doing this, set the 'Channel' field to Auto and the device will pick the least busy channel in your location automatically.

Networking rutos manual wireless global settings general setup.png

Field Value Description
Enable off | on; default: on Turns Wireless device on or off.
Operating Frequency (2.4 GHz)
Mode N | Legacy; default: N Wireless N (802.11n) supports a maximum theoretical transfer rate of 300mbps with 2 antennas. It can reach up to 450 Mbps with 3 antennas. Though typical speeds are more accurately around 130 Mbps. The legacy standards include 802.11a, 802.11b, and 802.11g.
Channel Auto | 1 (2412 MHz) | 2 (2417 MHz) | 3 (2422 MHz) | 4 (2427 MHz) | 5 (2432 MHz) | 6 (2437 MHz) | 7 (2442 MHz) | 8 (2447 MHz) | 9 (2452 MHz) | 10 (2457 MHz) | 11 (2462 MHz); default: 11 (2462 MHz) A wireless 2.4 GHz WiFi channel requires a signaling band roughly 22 MHz wide, radio frequencies of neighboring channels numbers significantly overlap each other. Therefore, pick a channel with no other active Access Points and preferably one that has no active Access Point on two adjacent channels on each side as well.
Width 20 MHz | 40 MHz; default: 20 MHz A 40 MHz channel width bonds two 20 MHz channels together, forming a 40 MHz channel width; therefore, it allows for greater speed and faster transfer rates. But not if those channels are crowded with noise and interference. In crowded areas with a lot of frequency noise and interference, a single 20MHz channel will be more stable. 40MHz channel width allows for greater speed and faster transfer rates but it doesn’t perform as well in crowded areas.
Transmit Power [5%...100%]; default: 100 % The transmit power of an access point radio is proportional to its effective range – the higher the transmit power, the more distance that a signal can travel, and/or the more physical materials that it can effectively penetrate and still have data successfully resolved at the receiver.
Country code country code; default: US - United States SO/IEC 3166 alpha2 country codes as defined in ISO 3166-1 standard.

Advanced Settings


The Advanced Settings section is used to configure how the wireless Access Point will work from a hardware perspective.

Networking rutos manual wireless global settings advanced settings.png

Field Value Description
Operating Frequency (2.4 GHz)
Allow legacy 802.11b rates off | on; default: on Turn on to enable connections that uses legacy 802.11b standard.
Distance Optimization integer [0..65535]; default: none HT Distance to farthest network member in meters.
Fragmentation threshold integer [256..2346]; default: none The smallest packet size that can be fragmented and transmitted by multiple frames. In areas were interference is a problem, setting a lower fragment threshold might help reduce the probability of unsuccessful packet transfers, thus increasing speed
RTS/CTS threshold integer [0..2347]; default: none RTS/CTS (Request to Send/Clear to Send) are mechanisms, used to reduce frame collisions introduced by the hidden node problem. It can help resolve problems arising when several access points are in the same area, contending
Force 40MHz mode off | on; default: off Always use 40MHz channels even if the secondary channel overlaps. Using this option does not comply with IEEE 802.11n-2009!
Beacon interval integer [15..65535]; default: none Beacon signal interval in seconds.

WiFi Scanner


The WiFi Scanner provides you with the possibility to scan and collect information about connected devices and surrounding access points. The collected data is sent using the [[{{{name}}} Data to Server|Data to Server]] functionality with Kinesis argument.

Networking rutos manual wireless global settings wifi scanner.png

Field Value Description
Enable off | on; default: off Enables or disables WiFi scanner.
Interval integer; default: 10 Interval between scans in seconds.

Interface Configuration

The Interface Configuration section is used to configure the parameters of Wireless Access Points or Clients. You can find this section by clicking the 'Edit' button next to a wireless device (not an interface) in the Network → Wireless page:

Networking rutos manual wireless interface configuration edit button.png

General Setup


The General Setup tab contains basic options for ESSID and network interface.

Networking rutos manual wireless interface configuration general setup.png

Field Value Description
Mode Access Point | Client; default: Access Point Defines what role this interface will do, Access point to supply WiFi for other devices, or as Client to use other devices WiFi for WWAN.
ESSID Factory ESSID is different for every device; default: none Extended Service Set Identifier.
Network network interfaces; default: lan Choose the network(s) you want to attach to this wireless interface or fill out the create field to define a new network.
Access Point mode
ESSID off | on; default: off Hide extended Service Set Identifier.
WMM Mode off | on; default: on Wi-Fi Multimedia (WMM), previously known as Wireless Multimedia Extensions (WME), is a subset of the 802.11e wireless LAN (WLAN) specification that enhances quality of service (QoS) on a network by prioritizing data packets according to four categories.
Client mode
BSSID off | on; default: off Basic service set identifier.


Wireless Security


The Wireless Security tab is used to determine what kind of encryption your WLAN will use.

Networking rutos manual wireless interface configuration wireless security.png

Field Value Description
Encryption No encryption | WPA-PSK/WPA2-PSK Mixed Mode | WPA2-PSK | WPA2-EAP |

WPA2-EAP/WPA3-EAP Mixed Mode | WPA3-EAP | WPA2-PSK/WPA3-SAE Mixed Mode

| WPA3-SAE | OWE; default: WPA2-PSK
The type of encryption used on this Wireless Interface.

Opportunistic Wireless Encryption (OWE) - no password is required and

all wireless traffic is encrypted (safer than No Encryption).
With all encryptions
Cipher Auto | Force CCMP (AES) | Force TKIP | Force TKIP and CCMP (AES); default: Force TKIP and CCMP (AES) An algorithm for performing encryption or decryption.
WPA-PSK/WPA2-PSK Mixed Mode, WPA2-PSK, WPA2-PSK/WPA3-SAE Mixed Mode, WPA3-SAE
Password string; default: random A custom passphrase used for authentication (at least 8 characters long).
WPA2-EAP, WPA2-EAP/WPA3-EAP Mixed Mode, WPA3-EAP
Radius-Authentication-Server string; default: none Ip address of the authentification server.
Radius-Authentication-Port string; default: none Default port for the server is 1812.
Radius-Authentication-Secret string; default: none Server's shared secret.
Radius-Accounting-Server string; default: none Ip address of the accounting server.
Radius-Accounting-Port string; default: none Default port for the server is 1813.
Radius-Accounting-Secret string; default: none Server's shared secret.
NAS id string; default: none Network access server identifier.
802.11r Fast Transition off | on; default: off Enables or disables 802.11r Fast Transition functionality

MAC Filter


The MAC Filter tab is used for setting up rules that allow or exclude devices with specified MAC addresses from connecting to your WiFi network. This tab is only visible when Wireless interface Mode is set to Access Point.

Networking rutos manual wireless interface configuration mac filter.png

Field Value Description
MAC-address filter Disable | Allow listed only | Allow all except listed; default: Disable Defines how the MAC Filter should function.
  • Allow listed only – only allows devices with specified MAC addresses to connect to your Wireless Access Point.
  • Allow all except listed - blocks devices with specified MAC addresses from connecting to your Wireless Access Point.
MAC-List MAC; default: none List of MAC addresses to be included or excluded from connecting to your Wireless Access Point.

Advanced Settings


Networking rutos manual wireless interface configuration advanced settings.png

Field Value Description
Isolate Clients off | on; default: off Prevents client to client communication on the same subnet.
Short Preamble off | on; default: on Uses Short Preamble, it uses shorter data strings that adds less data to transmit the error redundancy check which means that it is much faster.
DTIM interval seconds; default: none Delivery Traffic Indication Message Interval.
Time interval for rekeying GTK seconds; default: none Period of time in between automatic changes of the group key, which all devices on the network share.
Disable Inactivity Polling off | on; default: off Inactivity polling can be disabled to disconnect stations based on inactivity timeout so that idle stations are more likely to be disconnected even if they are still in range of the AP.
Station inactivity limit seconds; default: none Station inactivity limit in seconds. If a station/client does not send anything in st time frame, an empty data frame is sent to it in order to verify whether it is still in range. If this frame is not acknowledged, the station will be disassociated and then deauthenticated.
Maximum allowed Listen Interval positive integer; default: none Association will be refused if a client/station attempts to associate with a listen interval greater than this value.
Disassociate On Low Acknowledgement off | on; default: on Allow AP mode to disconnect stations/clients based on low Acknowledgement condition.

Client Mode

{{{name}}} can also work as a WiFi client. Configuring client mode is nearly identical to Access Point, except for the fact that most of the options are dictated by the WiFi Access Point that the router is connecting to. Changing them can result in an interrupted connection to that router.

To begin configuring WiFi Client first click the 'Scan' button to scan the surrounding area and attempt to connect to a new wireless access point.


After which you will be redirected to the window shown below, where you will see list of available WiFi Access Points in the area. Choose one according to your liking and press the Join Network button next to it.

Networking rutos manual wireless scan button results.png

You again will be redirected to following window, where you will need to enter WPA passphrase or other security password depending on AP that you are connecting to, name yours network (it will be name of your wireless WAN interface) and assign firewall rule.

Networking rutos manual wireless scan button results join network.png

Next window that opens will be Device Configuration. Values there, mostly, should be left unchanged to avoid connection problems, because they are dictated by Access Point. Other than that, only difference from Access Point settings are in Interface Configuration → General Setup section, where Mode is set to Client, and Network attached to this wireless interface is WAN instead of LAN

Networking rutos manual wireless scan button results join network general setup.png

Click Save & Apply and if you configured correctly, you will have Wireless Client working.

Multi AP

The Multi AP feature is used to configure access to multiple wireless access points from one page. To enter Multi AP configuration, click the 'Multi AP' button below other Wireless configurations:

Networking rutos manual wireless multi ap button.png

Next, enter a name for the Multi AP network and assign a firewall zone (default: wan).

Networking rutos manual wireless multi ap create network.png

You may then start to configure General Settings for the Multi AP feature.

General Settings


The General Settings section for Multi AP is used to turn it on or off and to change the frequency of scanning for WiFi APs.

Networking rutos manual wireless multi ap general settings.png

Field Value Description
Enable off | on; default: off Turns Multi AP configuration on or off.
Scan Time (sec) integer (30+); default: 60 Frequency (in seconds) of scans for WiFi access point availability.
Upload AP list - (interactive button) Uploads a list of access point configurations.

Access Points


You can either configure multiple access points from this page of the WebUI or you can upload a file with a list of access point configurations. The file should contains WiFi access point configuration options and values, which should be defined as option: value (for example, ssid: home_wifi). The SSID option is mandatory.

Networking rutos manual wireless multi ap access points.png

Field Value Description
SSID string; default: none SSID of an access point.
Key string; default: none Pre-shared key, a custom passphrase used for user authentication (at least 8 characters long).
Enable off | on; default: off Turns an access point configuration on or off.
Delete - (interactive button) Deletes the access point configuration next to the button.

Option names in the file should be provided in lower case letters. AP list file example:

ssid: RUT_1
enable: 1
key: 12345678
ssid: RUT_2
enable: 0
key: 87654321

Once uploaded, the contents of the file should become visible in the Access Points list.

[[Category:{{{name}}} Network section]]