Difference between revisions of "Template:Networking rutos manual wireless"

From Teltonika Networks Wiki
 
(144 intermediate revisions by 12 users not shown)
Line 1: Line 1:
 +
{{Template: Networking_device_manual_fw_disclosure
 +
| series = {{{series}}}
 +
| name  = {{{name}}}
 +
| fw_version ={{Template: Networking_device_manual_latest_fw
 +
| series = {{{series}}}
 +
| name  = {{{name}}}
 +
}}
 +
}}
 +
{{#ifeq: {{{series}}} | RUT9 |<br><i><b>Note</b>: <b>[[{{{name}}} Wireless (legacy WebUI)|click here]]</b> for the old style WebUI (FW version {{Template: Networking_device_manual_latest_fw | series = RUT9XX}} and earlier) user manual page.</i>|}}
 +
{{#ifeq: {{{series}}} | RUT2 |<br><i><b>Note</b>: <b>[[{{{name}}} Wireless (legacy WebUI)|click here]]</b> for the old style WebUI (FW version {{Template: Networking_device_manual_latest_fw | series = RUT2XX}} and earlier) user manual page.</i>|}}
 +
__TOC__
 
==Summary==
 
==Summary==
  
The '''Wireless''' section of the Network tab can be used to manage and configure WiFi Access Points and WiFi Stations (clients) . This chapter of the user manual is an overview of the Wireless section of {{{name}}} routers.
+
The <b>Wireless</b> section of the Network tab can be used to manage and configure WiFi Access Points and WiFi Stations (clients) . This chapter of the user manual provides an overview of the Wireless section for {{{name}}} devices.
 +
{{#switch: {{{series}}} | TAP100 | TAP200= | #default= {{Template:Networking_rutos_manual_basic_advanced_webui_disclaimer
 +
| series = {{{series}}}
 +
}}}}
  
==Wireless technology==
+
==Wireless ==
  
{{{name}}} routers support IEEE 802.11ac (WiFi 5) with data transmission rates up to 867 Mbps (Dual Band, MU-MIMO), 802.11r fast transition.
+
{{#switch: {{{wifi}}}
 +
| 2 = {{{name}}} devices support IEEE 802.11b/g/n and 802.11e_WMM wireless technologies.
 +
| 5 = {{{name}}} devices support IEEE 802.11ac (WiFi 5) with data transmission rates up to 867 Mbps (Dual Band, MU-MIMO), 802.11r fast transition.
 +
}}
  
==Wireless Overview==
+
===SSIDS===
 +
----
 +
The <b>SSIDs</b> section is used to configure your wireless access points (AP) and wireless clients (STA).
  
The '''Wireless Overview''' window provides you with the possibility to configure your wireless access points and wireless clients in both, 2.4GHz and 5GHz, bands. The Wireless Clients are needed to set up [[{{{name}}}<nowiki> WAN#Wireless WAN|Wireless WAN]] which will become active only when WiFi Client is already set up. </nowiki>
+
{{#switch:{{{name}}}
 +
|TCR100 = [[File:Networking_rutos_manual_wireless_wifi_5_tcr1_v4.png|border|class=tlt-border]]
 +
|TAP100 = [[File:Networking_rutos_manual_wireless_wifi_tap100_v1.png|border|class=tlt-border]]
 +
|TAP200 = [[File:Networking_rutos_manual_wireless_wifi_tap200_v1.png|border|class=tlt-border]]
 +
|RUT241|RUT200|RUT951|RUT956|RUT906|RUT901 = [[File:Networking rutos manual wireless wifi 2 v4 mixed.png|border|class=tlt-border]]
 +
|#default = [[File:Networking_rutos_manual_wireless_wifi_{{{wifi}}}_v4.png|border|class=tlt-border]]
 +
}}
  
[[Image:Networking_rutxxx_manual_wireless_overview_window_v1.png]]
+
Above is the overview of the SSIDS Overview window. It displays active access points{{#switch:{{{series}}}|TAP100|TAP200=.|#default=  and stations.}}
 +
Here you can turn on or off your WiFi interfaces, remove them or start configuring by clicking on
 +
<b>Edit</b> button on the right side of interface.{{#switch:{{{series}}}|TAP100|TAP200=|#default=  You can also configure your WiFi devices by clicking <b>Edit</b> button in the right side of each table header. To configure your Wireless device as Client press '''Scan''' button to scan the surrounding area and attempt to connect to a new wireless access point.}}
  
Above is the overview of the Wireless Overview window. It displays active access points and stations. Here you can turn on or off your WiFi interfaces, remove unwanted access points or stations or enter a configuration window for each WiFi interface, where you can configure it more thoroughly.
+
{{#ifeq: {{{series}}} | TCR1 |
 +
====Guest Network====
  
==Wireless Access Point==
+
Most of us are aware, that network security is extremely important. If your WiFi network is not properly secured, it makes you and all of your home or office resources vulnerable to a variety of security threats. To stay ahead of the curve, many companies and home users have guest WiFi. Unlike your regular WiFi network that you or your company members use, the guest WiFi network restricts what your guests can do in your network. It gives visitors access to the Internet connection, but nothing else making you or your company a lot more secure.
 +
|}}
  
The Wireless Access Point configuration window is used to make changes to different access points. It is divided into two main sections – device and interface. One is dedicated to configuring hardware parameters, the other – software. To access this window, simply click the '''edit''' [[File:Networking_rutx_manual_edit_button_v1.png]] button next to the WiFi interface that you wish to configure:
+
{{#switch:{{{series}}}|TAP100|TAP200= ===Radio Settings===|#default= ====Global Settings====}}
 +
----
 +
The <b>{{#switch:{{{series}}}|TAP100|TAP200=Radio|#default=Global}} Settings</b> section is used for configuring WiFi hardware parameters. You can find this section {{#switch:{{{series}}}|TAP100|TAP200=|#default=by clicking the 'Edit' button next to a wireless device (<u>not an interface</u>)}} in the Network → {{#switch:{{{series}}}|TAP100|TAP200=Wireless → Radio page.|#default=SSIDS page:}}
 +
{{#switch:{{{name}}}
 +
|TAP100 =
 +
|TAP200 =
 +
|TCR1 = [[File:Networking rutos manual wireless wifi 5 tcr1 v4.png|border|class=tlt-border]]
 +
|RUT241|RUT200|RUT951|RUT956|RUT906|RUT901 = [[File:Networking rutos manual wireless wifi 2 v4 mixed.png|border|class=tlt-border]]
 +
|#default = [[File:Networking_rutos_manual_wireless_wifi_{{{wifi}}}_v4.png|border|class=tlt-border]]
 +
}}
  
===Device Configuration===
+
{{#switch:{{{series}}}|TAP100|TAP200= ====General Setup====|#default= =====General Setup=====}}
----
 
The '''Device Configuration''' section is used for configuring WiFi hardware parameters.
 
  
====General Setup====
+
The <b>General Setup</b> section is used to turn a wireless device on or off, select the operating frequency (WiFi mode and channel), transmit power and define a country code.  
----
 
The '''General Setup''' tab is used to '''Enable''' or '''Disable''' an Access Point, to select the wireless channel used by the Access Point and its '''Transmit Power'''.  
 
  
Choose a WiFi channel according to the busyness of other channels. While RUT devices do not provide a function that lets you monitor the usage of nearby WiFi channels, you can download a free WiFi analyzer app on your phone, laptop or other WiFi device. In most countries there are 13 WiFi channels on the 2.4 GHz band (14 in Japan) to choose from. RUT routers' WiFi works on the 2.4 GHz band. A wireless 2.4 GHz WiFi channel requires a signaling band roughly 22 MHz wide, radio frequencies of neighboring channels numbers significantly overlap each other. Many home networks utilize routers that by default run on channel 6 on the 2.4 GHz band. Neighboring WiFi home networks that run over the same channel generate radio interference that can cause significant network performance slowdowns for users. Reconfiguring a network to run on a different wireless channel helps minimize these slowdowns. Therefore, pick a channel with no other active Access Points and preferably one that has no active Access Point on two adjacent channels on each side as well. If you don't feel like doing this, set the '''Channel''' field to '''Auto''' and the router will pick the least busy channel in your location automatically.  
+
A wireless 2.4 GHz WiFi channel requires a signaling band roughly 22 MHz wide, radio frequencies of neighboring channels numbers significantly overlap each other. Choose a WiFi channel according to the busyness of other channels. You can download a free WiFi analyzer app on your phone, laptop or other WiFi device and check which channel is the least populated.  
  
[[File:Networking_rutxxx_manual_wireless_device_configuration_general_setup_v1.png]]
+
Many home networks utilize routers that by default run on channel 6 on the 2.4 GHz band. Neighboring WiFi home networks that run over the same channel generate radio interference that can cause significant network performance slowdowns for users. Reconfiguring a network to run on a different wireless channel helps minimize these slowdowns. Therefore, pick a channel with no other active Access Points and preferably one that has no active Access Point on two adjacent channels on each side as well. If you don't feel like doing this, set the 'Channel' field to <i>Auto</i> and the device will pick the least busy channel in your location automatically.
 +
{{#switch:{{{series}}}
 +
|TAP100 = [[File:Networking_rutos_manual_wireless_global_settings_edit_button_tap100_v3.png|border|class=tlt-border]]
 +
|TAP200 = [[File:Networking_rutos_manual_wireless_global_settings_edit_button_tap200_v1.png|border|class=tlt-border]]
 +
|#default = [[File:Networking_rutos_manual_wireless_global_settings_general_setup_v3.png|border|class=tlt-border]]
 +
}}
  
 
<table class="nd-mantable">
 
<table class="nd-mantable">
 
     <tr>
 
     <tr>
         <th>field name</th>
+
         <th>Field</th>
       <th>value</th>
+
       <th>Value</th>
       <th>description</th>
+
       <th>Description</th>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
 
       <td>Enable</td>
 
       <td>Enable</td>
       <td>off {{!}} on; Default: '''on'''</td>
+
       <td>off | on; default: <b>on</b></td>
       <td>Toggle WiFi interface on or off</td>
+
       <td>Turns Wireless device on or off.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
       <th>'''Operating Frequency'''</th>
+
       <th>Operating Frequency (2.4 GHz)</th>
 
         <th></th>
 
         <th></th>
 
         <th></th>     
 
         <th></th>     
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
       <td>Mode (2.4 GHz)</td>
+
       <td>Mode</td>
       <td>N {{!}} Legacy; Default: '''N'''</td>
+
       <td>N | Legacy; default: <b>N</b></td>
       <td>Wireless N (802.11n) supports a maximum theoretical transfer rate of 300mbps with 2 antennas. It can reach up to 450mbps with 3 antennas. Though typical speeds are more accurately around 130mbps. The legacy standards include 802.11a, 802.11b, and 802.11g</td>
+
       <td>Wireless N (802.11n) supports a maximum theoretical transfer rate of 300mbps with 2 antennas. It can reach up to 450 Mbps with 3 antennas. Though typical speeds are more accurately around 130 Mbps. The legacy standards include 802.11a, 802.11b, and 802.11g.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
       <td>Mode (5 GHz)</td>
+
       <td>Channel</td>
       <td>N {{!}} AC; Default: '''AC'''</td>
+
       <td>Auto | 1 (2412 MHz) | 2 (2417 MHz) | 3 (2422 MHz) | 4 (2427 MHz) | 5 (2432 MHz) | 6 (2437 MHz) | 7 (2442 MHz) | 8 (2447 MHz) | 9 (2452 MHz) | 10 (2457 MHz) | 11 (2462 MHz); default: <b>Auto</b></td>
       <td>Choose between 802.11n and 802.11ac standards</td>
+
       <td>A wireless 2.4 GHz WiFi channel requires a signaling band roughly 22 MHz wide, radio frequencies of neighboring channels numbers significantly overlap each other. Therefore, pick a channel with no other active Access Points and preferably one that has no active Access Point on two adjacent channels on each side as well.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
      <td>Channel (2.4 GHz)</td>
+
        <td>Width</td>
      <td>Auto {{!}} 1(2412 MHz) {{!}} 2(2417 MHz) {{!}} 3(2422 MHz) {{!}} 4(2427 MHz) {{!}} 5(2432 MHz) {{!}} 6(2437 MHz) {{!}} 7(2442 MHz) {{!}} 8(2447 MHz) {{!}} 9(2452 MHz) {{!}} 10(2457 MHz) {{!}} 11(2462 MHz) {{!}}; Default: '''1(2412 MHz)'''</td>
+
        <td>20 MHz | 40 MHz; default: <b>20 MHz</b></td>
      <td>A wireless 2.4 GHz WiFi channel requires a signaling band roughly 22 MHz wide, radio frequencies of neighboring channels numbers significantly overlap each other. Therefore, pick a channel with no other active Access Points and preferably one that has no active Access Point on two adjacent channels on each side as well.</td>
+
        <td>A 40 MHz channel width bonds two 20 MHz channels together, forming a 40 MHz channel width; therefore, it allows for greater speed and faster transfer rates. But not if those channels are crowded with noise and interference. In crowded areas with a lot of frequency noise and interference, a single 20MHz channel will be more stable. 40MHz channel width allows for greater speed and faster transfer rates but it doesn’t perform as well in crowded areas.</td>
 +
    </tr>{{#ifeq: {{{wifi}}} | 5 |
 +
    <tr>
 +
      <th>Operating Frequency (5 GHz)</th>
 +
        <th></th>
 +
        <th></th>   
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
       <td>Channel (5 GHz)</td>
+
       <td>Mode</td>
       <td>Auto {{!}} 36(5180 MHz) {{!}} 40(5200 MHz) {{!}} 44(5220 MHz) {{!}} 48(5240 MHz) {{!}} 52(5260 MHz) {{!}} 56(5280 MHz) {{!}} 60(5300 MHz) {{!}} 64(5320 MHz) {{!}} 68(5340 MHz) {{!}} 72(5360 MHz) {{!}} 76(5380 MHz) {{!}} 80(5400 MHz) {{!}} 84(5420 MHz) {{!}} 88(5440 MHz) {{!}} 92(5460 MHz) {{!}} 96(5480 MHz) {{!}} 100(5500 MHz) {{!}} 104(5520 MHz) {{!}} 108(5540 MHz) {{!}} 112(5560 MHz) {{!}} 116(5580 MHz) {{!}} 120(5600 MHz) {{!}} 124(5620 MHz) {{!}} 128(5640 MHz) {{!}} 132(5660 MHz) {{!}} 136(5680 MHz) {{!}} 140(5700 MHz) | 144 (5720 MHz) | 149 (5745 MHz) | 153 (5765 MHz) |157 (5785 MHz) | 161 (5805 MHz) | 165 (5825 MHz); Default: '''36(5180 MHz)'''</td>
+
       <td>N <nowiki>|</nowiki> AC; default: <b>AC</b></td>
       <td>A wireless 5 GHz WiFi channel also requires a signaling band roughly 22 MHz wide, but since its channel with is 20 MHZ ir overlaps less with neighboring channels, but it is still recommended to pick a channel with no other active Access Points and preferably one that has no active Access Point on two adjacent channels on each side as well.</td>
+
       <td>Choose between 802.11n and 802.11ac standards.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
        <td>Width (2.4 GHZ)</td>
+
      <td>Channel</td>
        <td>20 MHz {{!}} 40MHz; Default: '''20MHZ'''</td>
+
      <td>Auto {{!}} 36(5180 MHz) {{!}} 40(5200 MHz) {{!}} 44(5220 MHz) {{!}} 48(5240 MHz) {{!}} 52(5260 MHz) {{!}} 56(5280 MHz) {{!}} 60(5300 MHz) {{!}} 64(5320 MHz) {{!}} 68(5340 MHz) {{!}} 72(5360 MHz) {{!}} 76(5380 MHz) {{!}} 80(5400 MHz) {{!}} 84(5420 MHz) {{!}} 88(5440 MHz) {{!}} 92(5460 MHz) {{!}} 96(5480 MHz) {{!}} 100(5500 MHz) {{!}} 104(5520 MHz) {{!}} 108(5540 MHz) {{!}} 112(5560 MHz) {{!}} 116(5580 MHz) {{!}} 120(5600 MHz) {{!}} 124(5620 MHz) {{!}} 128(5640 MHz) {{!}} 132(5660 MHz) {{!}} 136(5680 MHz) {{!}} 140(5700 MHz) {{!}} 144 (5720 MHz) {{!}} 149 (5745 MHz) {{!}} 153 (5765 MHz) {{!}}157 (5785 MHz) {{!}} 161 (5805 MHz) {{!}} 165 (5825 MHz); default: <b>36(5180 MHz)</b></td>
        <td>A 40 MHz channel width bonds two 20 MHz channels together, forming a 40 MHz channel width; therefore, it allows for greater speed and faster transfer rates. But not if those channels are crowded with noise and interference. In crowded areas with a lot of frequency noise and interference, a single 20MHz channel will be more stable. 40MHz channel width allows for greater speed and faster transfer rates but it doesn’t perform as well in crowded areas.</td>
+
      <td>A wireless 5 GHz WiFi channel also requires a signaling band roughly 22 MHz wide, but since its channel with is 20 MHZ ir overlaps less with neighboring channels, but it is still recommended to pick a channel with no other active Access Points and preferably one that has no active Access Point on two adjacent channels on each side as well.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
         <td>Width (5 GHz)</td>
+
         <td>Width</td>
         <td>20 MHz {{!}} 40 MHz {{!}} 80 MHz; Default: '''80MHZ'''</td>
+
         <td>20 MHz <nowiki>|</nowiki> 40 MHz <nowiki>|</nowiki> 80 MHz; default: <b>80MHz</b></td>
         <td>A 40 MHz channel width bonds two 20 MHz channels together, forming a 40 MHz channel width, 8 MHZ channel bonds four 20 MHz cannels; therefore, it allows for greater speed and faster transfer rates. But not if those channels are crowded with noise and interference. In crowded areas with a lot of frequency noise and interference, a single 20MHz channel will be more stable. 80 MHz width channel is faster than 40MHz which is faster than 20 MHz but it doesn’t perform as well in crowded areas.</td>
+
         <td>A 40 MHz channel width bonds two 20 MHz channels together, forming a 40 MHz channel width, 8 MHZ channel bonds four 20 MHz channels; therefore, it allows for greater speed and faster transfer rates. But not if those channels are crowded with noise and interference. In crowded areas with a lot of frequency noise and interference, a single 20MHz channel will be more stable. 80 MHz width channel is faster than 40MHz which is faster than 20 MHz but it doesn’t perform as well in crowded areas.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
Line 81: Line 125:
 
         <th></th>
 
         <th></th>
 
         <th></th>
 
         <th></th>
     </tr>
+
     </tr>|}}
 
     <tr>
 
     <tr>
 
         <td>Transmit Power</td>
 
         <td>Transmit Power</td>
         <td>[6%...100%]; Default: '''100%'''</td>
+
         <td>[{{#switch:{{{series}}}|TAP100|TAP200=13%|#default=5%}}...100%]; default: <b>100 %</b></td>
 
         <td>The transmit power of an access point radio is proportional to its effective range – the higher the transmit power, the more distance that a signal can travel, and/or the more physical materials that it can effectively penetrate and still have data successfully resolved at the receiver.</td>
 
         <td>The transmit power of an access point radio is proportional to its effective range – the higher the transmit power, the more distance that a signal can travel, and/or the more physical materials that it can effectively penetrate and still have data successfully resolved at the receiver.</td>
 +
    </tr>
 +
    <tr>
 +
    <td>Country code</td>
 +
        <td>country code; default: <b>{{#switch:{{{series}}}|TAP100|TAP200=00 - World|#default=US - United States}}</b></td>
 +
        <td>SO/IEC 3166 alpha2 country codes as defined in ISO 3166-1 standard.</td>
 
     </tr>
 
     </tr>
 
</table>
 
</table>
====Advanced Setup====
 
----
 
The '''Advanced Setup''' tab is used to configure how the wireless Access Point will work from a hardware perspective.
 
  
[[File:Networking_rutxxx_manual_wireless_device_configuration_advanced_settings_v1.png]]
+
{{#switch:{{{series}}}|TAP100|TAP200= ====Advanced Settings====|#default= =====Advanced Settings=====}}
 +
 
 +
The <b>Advanced Settings</b> section is used to configure how the wireless Access Point will work from a hardware perspective.
  
 +
{{#switch:{{{series}}}
 +
|TAP100|TAP200 = [[File:Networking_rutos_manual_wireless_global_settings_advanced_settings_tap100_v1.png|border|class=tlt-border]]
 +
|#default =[[File:Networking_rutos_manual_wireless_global_settings_advanced_settings_v2.png|border|class=tlt-border]]
 +
}}
 
<table class="nd-mantable">
 
<table class="nd-mantable">
 
     <tr>
 
     <tr>
         <th>field name</th>
+
         <th>Field</th>
       <th>value</th>
+
       <th>Value</th>
       <th>description</th>
+
       <th>Description</th>
 +
    </tr>
 +
    <tr>
 +
      <th>Operating Frequency (2.4 GHz)</th>
 +
        <th></th>
 +
        <th></th>   
 +
    </tr>
 +
<tr>
 +
      <td>Allow legacy 802.11b rates</td>
 +
      <td>off | on; default: <b>on</b></td>
 +
      <td>Turn on to enable connections that uses legacy 802.11b standard.</td>
 +
    </tr>
 +
    <tr>
 +
      <td>Distance Optimization</td>
 +
      <td>integer [0..65535]; default: <b>none</b> </td>
 +
      <td>HT Distance to farthest network member in meters.</td>
 +
    </tr>
 +
    <tr>
 +
    <td>Fragmentation threshold</td>
 +
        <td>integer [256..2346]; default: <b>none</b></td>
 +
        <td>The smallest packet size that can be fragmented and transmitted by multiple frames. In areas were interference is a problem, setting a lower fragment threshold might help reduce the probability of unsuccessful packet transfers, thus increasing speed</td>
 +
    </tr>
 +
    <tr>
 +
    <td>RTS/CTS threshold</td>
 +
        <td>integer [0..2347]; default: <b>none</b></td>
 +
        <td>RTS/CTS (Request to Send/Clear to Send) are mechanisms, used to reduce frame collisions introduced by the hidden node problem. It can help resolve problems arising when several access points are in the same area, contending</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
     <td>Country code</td>
+
     <td>Force 40MHz mode</td>
         <td>country code; Default: '''US - United States'''</td>
+
         <td>off | on; default: <b>off</b></td>
         <td>SO/IEC 3166 alpha2 country codes as defined in ISO 3166-1 standard</td>
+
        <td>Always use 40MHz channels even if the secondary channel overlaps. Using this option does not comply with IEEE 802.11n-2009!</td>
 +
    </tr>
 +
    <tr>
 +
    <td>Beacon interval</td>
 +
         <td>integer [15..65535]; default: <b>none</b></td>
 +
        <td>Beacon signal interval in seconds.</td>
 +
    </tr>{{#ifeq:{{{wifi}}}|5|
 +
    <tr>
 +
      <th>Operating Frequency (5 GHz)</th>
 +
        <th></th>
 +
        <th></th>   
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
 
       <td>Distance Optimization</td>
 
       <td>Distance Optimization</td>
       <td>integer [0..65535]; Default: " "</td>
+
       <td>integer [0..65535]; default: <b>none</b> </td>
 
       <td>HT Distance to farthest network member in meters.</td>
 
       <td>HT Distance to farthest network member in meters.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
 
     <td>Fragmentation threshold</td>
 
     <td>Fragmentation threshold</td>
         <td>integer [256..2346]; Default: " "</td>
+
         <td>integer [256..2346]; default: <b>none</b></td>
 
         <td>The smallest packet size that can be fragmented and transmitted by multiple frames. In areas were interference is a problem, setting a lower fragment threshold might help reduce the probability of unsuccessful packet transfers, thus increasing speed</td>
 
         <td>The smallest packet size that can be fragmented and transmitted by multiple frames. In areas were interference is a problem, setting a lower fragment threshold might help reduce the probability of unsuccessful packet transfers, thus increasing speed</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
 
     <td>RTS/CTS threshold</td>
 
     <td>RTS/CTS threshold</td>
         <td>integer [0..2347]; Default: " "</td>
+
         <td>integer [0..2347]; default: <b>none</b></td>
 
         <td>RTS/CTS (Request to Send/Clear to Send) are mechanisms, used to reduce frame collisions introduced by the hidden node problem. It can help resolve problems arising when several access points are in the same area, contending</td>
 
         <td>RTS/CTS (Request to Send/Clear to Send) are mechanisms, used to reduce frame collisions introduced by the hidden node problem. It can help resolve problems arising when several access points are in the same area, contending</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
 
     <td>Force 40MHz mode</td>
 
     <td>Force 40MHz mode</td>
         <td>off {{!}} on; Default: '''off'''</td>
+
         <td>off {{!}} on; default: <b>off</b></td>
 
         <td>Always use 40MHz channels even if the secondary channel overlaps. Using this option does not comply with IEEE 802.11n-2009!</td>
 
         <td>Always use 40MHz channels even if the secondary channel overlaps. Using this option does not comply with IEEE 802.11n-2009!</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
 
     <td>Beacon interval</td>
 
     <td>Beacon interval</td>
         <td>integer [0..65535]; Default: " "</td>
+
         <td>integer [15..65535]; default: <b>none</b></td>
         <td>Beacon signal interval in seconds</td>
+
         <td>Beacon signal interval in seconds.</td>
 
     </tr>
 
     </tr>
 +
<tr>
 +
      <td>ACS exclude DFS</td>
 +
      <td>off {{!}} on; default: <b>off</b></td>
 +
      <td>Turn this option on to exclude DFS channels from automatic channel selection.</td>
 +
    </tr>|}}
 
</table>
 
</table>
  
===Interface Configuration===
+
====Interface Configuration====
 
----
 
----
The '''Interface Configuration''' section is used to configure wireless Access Points from the software perspective.
+
The <b>Interface Configuration</b> section is used to configure the parameters of Wireless Access Points{{#switch:{{{series}}}|TAP100|TAP200=|#default= or Clients}}. You can find this section by clicking the 'Edit' button next to a wireless device (<u>not an interface</u>) in the Network → SSIDs page:
 
+
{{#switch: {{{name}}}
====General Setup====
+
|#default = [[File:Networking_rutos_manual_wireless_wifi_{{{wifi}}}_v4.png|border|class=tlt-border]]
 +
|TCR100 = [[File:Networking rutos manual wireless wifi 5 tcr1 v4.png|border|class=tlt-border]]
 +
|TAP100 = [[File:Networking_rutos_manual_wireless_interface_configuration_edit_button_tap100_v5.png|border|class=tlt-border]]
 +
|TAP200 = [[File:Networking_rutos_manual_wireless_wifi_tap200_v2.png|border|class=tlt-border]]
 +
|RUT241|RUT200|RUT951|RUT956|RUT906|RUT901 = [[File:Networking rutos manual wireless wifi 2 v4 mixed.png|border|class=tlt-border]]
 +
}}
 +
=====General Setup=====
 
----
 
----
The '''General Setup''' tab contains basic options for '''ESSID''' and network interface.
+
The <b>General Setup</b> tab contains basic options for SSID and network interface.
 
+
{{#switch: {{{series}}}
[[File:Networking_rutxxx_manual_wireless_interface_configuration_general_setup_v1.png]]
+
|#default = [[File:Networking_rutos_manual_wireless_interface_configuration_general_setup_v4.png|border|class=tlt-border]]
 
+
|TCR1 = [[File:Networking_rutos_manual_wireless_interface_configuration_general_setup_tcr1_v4.png|border|class=tlt-border]]
 +
|TAP100 = [[File:Networking_rutos_manual_wireless_interface_configuration_general_setup_tap100_v4.png|border|class=tlt-border]]
 +
|TAP200 = [[File:Networking_rutos_manual_wireless_interface_configuration_general_setup_tap200_v2.png|border|class=tlt-border]]
 +
}}
 
<table class="nd-mantable">
 
<table class="nd-mantable">
 
     <tr>
 
     <tr>
         <th>field</th>
+
         <th>Field</th>
         <th>value</th>
+
         <th>Value</th>
         <th>description</th>
+
         <th>Description</th>
 
     </tr>
 
     </tr>
 +
    <tr>
 +
        <td>Enable</td>
 +
        <td>off {{!}} on; default: <b>on</b></td>
 +
        <td>Enables or disables WiFi interface.</td>
 +
    </tr>{{#switch:{{{series}}}|TAP200=
 +
    <tr>
 +
        <td>Radios</td>
 +
        <td>2.4 GHz {{!}} 5GHz; default: <b>2.4 GHz</b></td>
 +
        <td>SSID will use these radios. Use one of them if you want seperate SSIDs for each radio or use all of them if you want combined SSID.</td>
 +
    </tr>|#default=}}{{#switch:{{{series}}}|TAP100|TAP200=|#default=
 
     <tr>
 
     <tr>
 
         <td>Mode</td>
 
         <td>Mode</td>
         <td>Access Point {{!}} Client; Default: '''Access Point'''</td>
+
         <td>Client {{!}} Access Point {{!}} Mesh {{!}} Multi AP; default: <b>Access Point</b></td>
         <td>Defines what role this interface will do, Access point to supply WiFi for other devices, or as Client to use other devices WiFi for WWAN</td>
+
         <td>Defines what role this interface will do, Access point to supply WiFi for other devices, Client to use other devices WiFi for WWAN and Mesh to act as mesh network gateway or a node in a mesh network.</td>
 +
    </tr>}}{{#switch:{{{series}}}|TAP100|TAP200=|#default=
 +
    <tr>
 +
      <th>Access Point mode</th>
 +
        <th></th>
 +
        <th></th>   
 +
    </tr>}}{{#ifeq:{{{wifi}}}|5|
 +
    <tr>
 +
        <td>Radios</td>
 +
        <td>2.4 GHz {{!}} 5GHz; default: <b>2.4 GHz or 5 GHz</b></td>
 +
        <td>SSID will use these radios. Use one of them if you want seperate SSIDs for each radio or use all of them if you want combined SSID.</td>
 +
    </tr>|}}
 +
    <tr>
 +
        <td>SSID</td>
 +
        <td>Factory SSID is different for every device; default: <b></b></td>
 +
        <td>{{#switch:{{{series}}}|TAP100|TAP200=Service Set Identifier.|#default=Extended Service Set Identifier is a name used to identify access point which is shown when client tries to connect to it.}}</td>
 +
    </tr>{{#switch:{{{series}}}|TAP200=
 +
    <tr>
 +
        <td>Chiper</td>
 +
        <td>Auto {{!}} Force CCMP (AES) {{!}}  Force TKIP {{!}} Force TKIP and CCMP (AES); default: <b>Auto</b></td>
 +
        <td> An algorithm for performing encryption or decryption.</td>
 +
    </tr>|#default=}}
 +
    <tr>
 +
        <td>Password</td>
 +
        <td>string; default: <b>none</b></td>
 +
        <td><li>Custom passphrase used for authentication (at least 8 characters long).</li><li>Another option is to use the 'Dice' icon, which generates random passwords.</li></td>
 +
    </tr>{{#switch:{{{series}}}|TAP100|TAP200=
 +
    <tr>
 +
      <td>Encryption</td>
 +
      <td>No encryption {{!}} WPA-PSK/WPA2-PSK Mixed Mode {{!}} WPA2-PSK {{!}} WPA2-EAP {{!}}
 +
WPA2-EAP/WPA3-EAP Mixed Mode {{!}} WPA3-EAP {{!}} WPA2-PSK/WPA3-SAE Mixed Mode
 +
{{!}} WPA3-SAE {{!}} OWE; default: <b>WPA2-PSK</b></td>
 +
      <td>The type of encryption used on this Wireless Interface.
 +
Opportunistic Wireless Encryption (<b>OWE</b>) - no password is required and
 +
all wireless traffic is encrypted (safer than <b>No Encryption</b>).</td>
 +
    </tr>
 +
    <tr>
 +
        <td>VLAN ID</td>
 +
        <td>integer [1..4094]; default: <b>Default</b></td>
 +
        <td>Choose default or define a network VLAN ID.</td>
 +
    </tr>|#default=}}{{#switch:{{{series}}}|TAP100|TAP200=|#default=
 +
    <tr>
 +
        <td>Network</td>
 +
        <td>network interfaces; default: <b>lan</b></td>
 +
        <td>Choose the network(s) you want to attach to this wireless interface or fill out the create field to define a new network.</td>
 +
    </tr>}}{{#ifeq:{{{series}}}|TCR1|
 +
    <tr>
 +
        <td>WPS</td>
 +
        <td>off {{!}} on; default: <b>on (2.4GHz) {{!}} off (5GHz)</b></td>
 +
        <td>Enable WPS push-button configuration method. It can only be enabled for a single wireless interface..</td>
 +
    </tr>|}}}}
 +
    <tr>
 +
    <td>802.11r Fast Transition</td>
 +
        <td>off {{!}} on; default: <b>off</b></td>
 +
        <td>Enables fast roaming among access points that belong to the same Mobility Domain  </td>
 +
    </tr>{{#switch:{{{series}}}|TAP100|TAP200=|#default=
 +
    <tr>
 +
      <th>Client mode</th>
 +
        <th></th>
 +
        <th></th>   
 +
    </tr>
 +
    <tr>
 +
        <td>Auto-reconnect</td>
 +
        <td>on {{!}} off; default: <b>on</b></td>
 +
        <td>Enables automatic reconnection to the configured access point on connection loss.</td>
 +
    </tr>{{#ifeq:{{{wifi}}}|5|
 +
    <tr>
 +
        <td>Radios</td>
 +
        <td>2.4 GHz {{!}} 5GHz; default: <b>2.4 GHz or 5 GHz</b></td>
 +
        <td>SSID will use these radios. Use one of them if you want seperate SSIDs for each radio or use all of them if you want combined SSID.</td>
 +
    </tr>|}}
 +
    <tr>
 +
        <td>SSID</td>
 +
        <td>Factory SSID is different for every device; default: <b></b></td>
 +
        <td>Extended Service Set Identifier is a name used to identify access point to which client will connect.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
         <td>ESSID</td>
+
         <td>BSSID</td>
         <td>Factorry ESSID is different for every device; Default " "</td>
+
         <td>mac address; default: <b>none</b></td>
         <td>Extended Service Set Identifier</td>
+
        <td>Basic service set identifier.</td>
 +
    </tr>
 +
    <tr>
 +
        <td>Password</td>
 +
        <td>string; default: <b>none</b></td>
 +
         <td><li>Custom passphrase used for authentication (at least 8 characters long).</li><li>Another option is to use the 'Dice' icon, which generates random passwords.</li></td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
 
         <td>Network</td>
 
         <td>Network</td>
         <td>lan {{!}} mobile wan {{!}} wan; Default: '''lan'''</td>
+
         <td>network interfaces; default: <b>Auto</b></td>
         <td>Choose the network(s) you want to attach to this wireless interface or fill out the create field to define a new network.</td>
+
         <td>Choose the network you want to attach to this wireless interface or fill out the Custom field to define a new network (you will be redirected to the newly created network configuration page).</td>
 +
    </tr>}}{{#switch:{{{series}}}|TAP100|TAP200=
 +
    <tr>
 +
        <th>Mesh mode</th>
 +
        <th></th>
 +
        <th></th>   
 +
    </tr>
 +
    <tr>
 +
        <td>Mesh ID</td>
 +
        <td>integer; default: <b>none</b></td>
 +
        <td>Mesh network identifier.</td>
 +
    </tr>{{#ifeq:{{{wifi}}}|5|
 +
    <tr>
 +
        <td>Radios</td>
 +
        <td>2.4 GHz {{!}} 5GHz; default: <b>2.4 GHz or 5 GHz</b></td>
 +
        <td>SSID will use these radios. Use one of them if you want seperate SSIDs for each radio or use all of them if you want combined SSID.</td>
 +
    </tr>|}}
 +
    <tr>
 +
        <td>Password</td>
 +
        <td>string; default: <b>none</b></td>
 +
        <td><li>Custom passphrase used for authentication (at least 8 characters long).</li><li>Another option is to use the 'Dice' icon, which generates random passwords.</li></td>
 +
    </tr>
 +
    |#default=
 +
    <tr>
 +
        <th>Mesh mode</th>
 +
        <th></th>
 +
        <th></th>   
 +
    </tr>
 +
    <tr>
 +
        <td>Mesh ID</td>
 +
        <td>integer; default: <b>none</b></td>
 +
        <td>Mesh network identifier.</td>
 +
    </tr>
 +
    <tr>
 +
        <td>Password</td>
 +
        <td>string; default: <b>none</b></td>
 +
        <td><li>Custom passphrase used for authentication (at least 8 characters long).</li><li>Another option is to use the 'Dice' icon, which generates random passwords.</li></td>
 
     </tr>
 
     </tr>
 +
        <tr>
 +
        <td>Network</td>
 +
        <td>network interfaces; default: <b>Auto</b></td>
 +
        <td>Choose the network you want to attach to this wireless interface or fill out the Custom field to define a new network (you will be redirected to the newly created network configuration page).</td>
 +
    </tr>}}{{#switch:{{{series}}}|TAP100|TAP200=|#default=
 
     <tr>
 
     <tr>
         <td>ESSID</td>
+
        <th>Multi AP</th>
         <td>off {{!}} on; Default: '''off'''</td>
+
        <th></th>
         <td>Hide extended Service Set Identifier</td>
+
        <th></th>   
 +
    </tr>{{#ifeq:{{{wifi}}}|5|
 +
    <tr>
 +
         <td>Radios</td>
 +
         <td>2.4 GHz {{!}} 5GHz; default: <b>2.4 GHz or 5 GHz</b></td>
 +
        <td>SSID will use these radios. Use one of them if you want seperate SSIDs for each radio or use all of them if you want combined SSID.</td>
 +
    </tr>|}}
 +
    <tr>
 +
        <td>Network</td>
 +
        <td>network interfaces; default: <b>Auto</b></td>
 +
         <td>Choose the network you want to attach to this wireless interface or fill out the Custom field to define a new network (you will be redirected to the newly created network configuration page).</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
         <td>WMM Mode</td>
+
         <td>Scan time (sec)</td>
         <td>off {{!}} on; Default: '''on'''</td>
+
         <td>number; default: <b>60</b></td>
         <td>Wi-Fi Multimedia (WMM), previously known as Wireless Multimedia Extensions (WME), is a subset of the 802.11e wireless LAN (WLAN) specification that enhances quality of service (QoS) on a network by prioritizing data packets according to four categories.</td>
+
         <td>Time between scans of available access points (minimum 30 sec.)</td>
 
     </tr>
 
     </tr>
 +
        <tr>
 +
        <td>Upload AP list</td>
 +
        <td>- (interactive button)</td>
 +
        <td>Uploads a list of access point configurations.</td>
 +
    </tr>}}
 
</table>
 
</table>
  
 
+
=====Additional Settings=====
====Wireless Security====
 
 
----
 
----
The '''Wireless Security''' tab is used to determine what kind of encryption your WLAN will use.
 
  
=====WPA (WPA-PSK, WPA2-PSK, WPA-PSK/WPA2-PSK Mixed Mode)=====
+
[[File:Networking rutos manual wireless interface configuration additional settings access point v1.png|border|class=tlt-border]]
----
 
[[File:Networking_rutxxx_manual_wireless_interface_configuration_wireless_security_v1.png]]
 
  
 
<table class="nd-mantable">
 
<table class="nd-mantable">
 
     <tr>
 
     <tr>
         <th>field name</th>
+
         <th>Field</th>
       <th>value</th>
+
       <th>Value</th>
       <th>description</th>
+
       <th>Description</th>
 +
    </tr>
 +
    <tr>
 +
      <th>Access point</th>
 +
        <th></th>
 +
        <th></th>   
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
      <td>Encryption*</td>
+
        <td>Hide SSID</td>
      <td>No encryption {{!}} WPA-PSK {{!}} WPA2-PSK {{!}} WPA-PSK/WPA2-PSK mixed mode; Default: '''WPA2-PSK'''</td>
+
        <td>on {{!}} off; default: <b>off</b></td>
      <td>The type of WiFi encryption used </td>
+
        <td>Hide Service Set Identifier </td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
       <td>Cipher</td>
+
       <td>Isolate Clients</td>
       <td>Auto {{!}} Force CCMP (AES) {{!}} Force TKIP {{!}} Force TKIP and CCMP (AES); Default: '''Force TKIP and CCMP (AES)'''</td>
+
       <td>off {{!}} on; default: <b>off</b></td>
      <td>An algorithm for performing encryption or decryption</td>
+
      <td>Prevents client to client communication on the same subnet.</td>
 +
    </tr>
 +
    <tr>
 +
        <td>802.11v BSS Transition Management</td>
 +
        <td>on {{!}} off; default: <b>off</b></td>
 +
        <td>A suggestion (or advice) given to a client, which the client can choose to follow or ignore</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
    <td>Key</td>
+
        <td>802.11k Radio Resource Measurement</td>
         <td>string; Default: " "</td>
+
         <td>on {{!}} off; default: <b>off</b></td>
         <td>A custom passphrase used for authentication (at least 8 characters long)</td>
+
         <td>Helps devices search quickly for nearby APs that are available as roaming targets by creating an optimized list of channels.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
         <td>Enable key reinstallation (KRACK) countermeasures</td>
+
         <td>Disassociate On Low Acknowledgement</td>
         <td>off {{!}} on; Default '''off'''</td>
+
         <td>off {{!}} on; default: <b>on</b></td>
         <td>Complicates key reinstallation attacks on the client side by disabling retransmission of EAPOL-Key frames that are used to install keys. This workaround might cause interoperability issues and reduced robustness of key negotiation especially in environments with heavy traffic load.</td>
+
         <td>Allow AP mode to disconnect stations/clients based on low Acknowledgement condition.</td>
 
     </tr>
 
     </tr>
 
</table>
 
</table>
 +
{{#switch:{{{series}}}|TAP100|TAP200=|#default=
 +
----
 +
[[File:Networking rutos manual wireless interface configuration additional settings client multi ap v2.png|border|class=tlt-border]]
  
=====WEP (WEP Open System, WEP Shared Key)=====
+
<table class="nd-mantable">
 +
    <tr>
 +
        <th>Field</th>
 +
      <th>Value</th>
 +
      <th>Description</th>
 +
    </tr>
 +
    <tr>
 +
      <th>Client & Multi AP</th>
 +
        <th></th>
 +
        <th></th>   
 +
    </tr>
 +
    <tr>
 +
        <td>Enable fast roaming</td>
 +
        <td>off {{!}} on; default: <b>off</b></td>
 +
        <td>Requests background scans for the purpose of roaming within an ESS.</td>
 +
    </tr>
 +
    </table>
 +
   
 
----
 
----
Wired Equivalent Privacy (WEP) is a security algorithm for IEEE 802.11 wireless networks. WEP was the only encryption protocol available to 802.11a and 802.11b devices built before the WPA standard.
 
  
[[File:Networking_rutxxx_manual_wireless_interface_configuration_wireless_security_wep_v1.png]]
+
[[File:Networking rutos manual wireless interface configuration mesh additional settings v2.png|border|class=tlt-border]]
 +
 
 +
<table class="nd-mantable">
 +
    <tr>
 +
        <th>Field</th>
 +
      <th>Value</th>
 +
      <th>Description</th>
 +
    </tr>
 +
    <tr>
 +
      <th>Mesh</th>
 +
        <th></th>
 +
        <th></th>   
 +
    </tr>
 +
    <tr>
 +
        <td>Forward mesh peer traffic </td>
 +
        <td>off {{!}} on; default: <b>off</b></td>
 +
        <td>Enables mesh peer traffic forwarding.</td>
 +
    </tr>
 +
    <tr>
 +
        <td>RSSI threshold for joining </td>
 +
        <td>integer [0..1]; default: <b>0</b></td>
 +
        <td>0 = not using RSSI threshold, 1 = do not change driver default.</td>
 +
    </tr>
 +
    </table>}}
 +
 
 +
{{#switch:{{{series}}}|TAP100|TAP200=|#default= =====Wireless Security=====
 +
----
 +
The <b>Wireless Security</b> tab is used to determine what kind of encryption your WLAN will use.
  
 +
[[File:Networking_rutos_manual_wireless_interface_configuration_wireless_security_v4.png|border|class=tlt-border]]
  
 
<table class="nd-mantable">
 
<table class="nd-mantable">
 
     <tr>
 
     <tr>
         <th>field name</th>
+
         <th>Field</th>
       <th>value</th>
+
      <th>Value</th>
      <th>description</th>
+
      <th>Description</th>
 +
    </tr>
 +
    <tr>
 +
      <td>Encryption</td>
 +
       
 +
      <td>No encryption {{!}} WPA-PSK {{!}} WPA2-PSK {{!}} WPA-PSK/WPA2-PSK Mixed Mode {{!}} WPA3-SAE  {{!}} WPA2-PSK/WPA3-SAE Mixed Mode
 +
{{!}} WPA-EAP {{!}} WPA2-EAP {{!}} OWE {{#switch:{{{name}}}|RUT241|RUT200|RUT951|RUT956|RUT906 =
 +
|#default = {{!}} WPA2-EAP/WPA3-EAP Mixed Mode {{!}} WPA3-EAP}}; default: {{#switch:{{{name}}}
 +
|RUT241|RUT200|RUT951|RUT956|RUT906|RUT901 = <b>WPA2-PSK/WPA3-SAE Mixed Mode</b>
 +
|#default = <b>WPA2-PSK</b>
 +
}}</td>
 +
      <td>The type of encryption used on this Wireless Interface.
 +
Opportunistic Wireless Encryption (<b>OWE</b>) - no password is required and
 +
all wireless traffic is encrypted (safer than <b>No Encryption</b>).</td>
 +
    </tr>
 +
    <tr>
 +
      <th>WPA-PSK, WPA2-PSK, WPA-PSK/WPA2-PSK Mixed Mode, WPA-EAP, WPA2-EAP, WPA3-EAP</th>
 +
        <th></th>
 +
        <th></th>   
 +
    </tr>
 +
    <tr>
 +
      <td>Cipher</td>
 +
      <td>Auto {{!}} Force CCMP (AES) {{!}} Force TKIP {{!}} Force TKIP and CCMP (AES); default: <b>Auto</b></td>
 +
       <td>An algorithm for performing encryption or decryption.</td>
 +
    </tr>
 +
    <tr>
 +
      <th>WPA-PSK, WPA2-PSK, WPA-PSK/WPA2-PSK Mixed Mode, WPA3-SAE, WPA2-PSK/WPA3-SAE Mixed Mode</th>
 +
        <th></th>
 +
        <th></th>   
 +
    </tr>
 +
    <tr>
 +
    <td>Password</td>
 +
        <td>string; default: <b>none</b> </td>
 +
        <td><li>Custom passphrase used for authentication (at least 8 characters long).</li><li>Another option is to use the 'Dice' icon, which generates random passwords.</li></td>
 +
    </tr>
 +
    <tr>
 +
      <th>WPA-EAP, WPA2-EAP, WPA2-EAP/WPA3-EAP Mixed Mode, WPA3-EAP</th>
 +
        <th></th>
 +
        <th></th>   
 +
    </tr>
 +
    <tr>
 +
    <td>Radius-Authentication-Server</td>
 +
        <td>string; default: <b>none</b> </td>
 +
        <td>Ip address of the authentification server.</td>
 +
    </tr>
 +
    <tr>
 +
    <td>Radius-Authentication-Port</td>
 +
        <td>string; default: <b>none</b> </td>
 +
        <td>Default port for the server is 1812.</td>
 +
    </tr>
 +
    <tr>
 +
    <td>Radius-Authentication-Secret</td>
 +
        <td>string; default: <b>none</b> </td>
 +
        <td>Server's shared secret.</td>
 +
    </tr>
 +
    <tr>
 +
    <td>Radius-Accounting-Server</td>
 +
        <td>string; default: <b>none</b> </td>
 +
        <td>Ip address of the accounting server.</td>
 +
    </tr>
 +
    <tr>
 +
    <td>Radius-Accounting-Port</td>
 +
        <td>string; default: <b>none</b> </td>
 +
        <td>Default port for the server is 1813.</td>
 +
    </tr>
 +
    <tr>
 +
    <td>Radius-Accounting-Secret</td>
 +
        <td>string; default: <b>none</b> </td>
 +
        <td>Server's shared secret.</td>
 +
    </tr>
 +
    <tr>
 +
    <td>NAS id</td>
 +
        <td>string; default: <b>none</b></td>
 +
        <td>Network access server identifier.</td>
 +
    </tr>
 +
    <tr>
 +
      <th><span style="color:red;">Client mode: WPA-EAP, WPA2-EAP, WPA2-EAP/WPA3-EAP Mixed Mode, WPA3-EAP</span></th>
 +
        <th></th>
 +
        <th></th>   
 +
    </tr>
 +
    <tr>
 +
    <td><span style="color:red;">EAP-Method</span></td>
 +
        <td><span style="color:brown;">TLS</span> {{!}} <span style="color:blue;">TTLS</span> {{!}} <span style="color:blue;">PEAP</span> {{!}} <span style="color:blue;">FAST</span>; default: <b><span style="color:brown;">TLS</span></b> </td>
 +
        <td>Network access server identifier.</td>
 +
    </tr>
 +
    <tr>
 +
    <td><span style="color:brown;">Use PKCS#12 format</span></td>
 +
        <td>off {{!}} <span style="color:green;">on</span>; default: <b>off</b> </td>
 +
        <td>Use PKCS#12 file format for client certificate.</td>
 +
    </tr>
 +
    <tr>
 +
    <td><span style="color:green;">PKCS#12 client certificate file</span></td>
 +
        <td>- (interactive button)</td>
 +
        <td>Use PKCS#12 file format for client certificate.</td>
 +
    </tr>
 +
    <tr>
 +
    <td><span style="color:green;">PKCS#12 passphrase</span></td>
 +
        <td>string; default: <b>none</b></td>
 +
        <td>Passphrase used to decrypt PKCS #12 certificates..</td>
 +
    </tr>
 +
    <tr>
 +
    <td>Certificate files from device</td>
 +
        <td>off {{!}} on; default: <b>off</b></td>
 +
        <td>Choose this option if you want to select certificate files from device.</td>
 +
    </tr>
 +
    <tr>
 +
    <td>CA-Certificate</td>
 +
        <td>.crt file; default: <b>none</b></td>
 +
        <td>This file can have one or more trusted CA certificates. If CA-Certificate is not included, server certificate will not be verified. This is insecure and a trusted CA-Certificate should always be configured when using EAP-TLS/TTLS/PEAP/FAST.</td>
 +
    </tr>
 +
    <tr>
 +
    <td><span style="color:brown;">Client-Certificate</span></td>
 +
        <td>.crt file; default: <b>none</b></td>
 +
        <td>Client certificate is a type of digital certificate that is used by client systems to make authenticated requests to a remote server. Client certificates play a key role in many mutual authentication designs, providing strong assurances of a requester's identity..</td>
 +
    </tr>
 +
    <tr>
 +
    <td><span style="color:brown;">Private Key</span></td>
 +
        <td>.key file; default: <b>none</b></td>
 +
        <td>TLS client key file.</td>
 +
    </tr>
 +
    <tr>
 +
    <td><span style="color:brown;">Password of Private Key</span></td>
 +
        <td>string; default: <b>none</b></td>
 +
        <td>Password of Private Key.</td>
 +
    </tr>
 +
    <tr>
 +
    <td><span style="color:blue;">Authentication</span></td>
 +
        <td>EAP-GTC {{!}} EAP-MD5 {{!}} EAP-MSCHAPv2 {{!}} <span style="color:olive;">EAP-TLS</span> {{!}} PAP {{!}} CHAP {{!}} MSCHAP {{!}} MSCHAPv2; default: <b>EAP-GTC</b> </td>
 +
        <td>Used as the username for authentication.</td>
 +
    </tr>
 +
    <tr>
 +
    <td><span style="color:olive;">Inner certificate files from device</span></td>
 +
        <td>off {{!}} on; default: <b>off</b></td>
 +
        <td>Choose this option if you want to select certificate files from device.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
      <td>Encryption*</td>
+
    <td><span style="color:olive;">Inner CA-Certificate</span></td>
      <td>Auto {{!}} Force CCMP (AES) {{!}} Force TKIP {{!}} Force TKIP and CCMP (AES); Default: '''Force TKIP and CCMP (AES)'''</td>
+
        <td>.crt file; default: <b>none</b></td>
      <td>The type of WiFi encryption used </td>
+
        <td>Inner CA-Certificate.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
      <td>Used Key Slot</td>
+
    <td><span style="color:olive;">Inner Client-Certificate</span></td>
      <td>Key #1 {{!}} Key #2 {{!}} Key #3 {{!}} Key #4; Default: '''Auto'''</td>
+
        <td>.crt file; default: <b>none</b></td>
      <td>Defines which Key will be used for comunication</td>
+
        <td>Inner Client-Certificate.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
     <td>Key #1</td>
+
     <td><span style="color:olive;">Inner Private Key</span></td>
         <td>string; Default: " "</td>
+
         <td>.key file; default: <b>none</b></td>
         <td>First WEP encryption key</td>
+
         <td>Inner Private Key.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
     <td>Key #2</td>
+
     <td><span style="color:olive;">Password of inner Private Key</span></td>
         <td>string; Default: " "</td>
+
         <td>string; default: <b>none</b></td>
         <td>Second  WEP encryption key</td>
+
         <td>Password of inner Private Key.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
     <td>Key #3</td>
+
     <td>Identity</td>
         <td>string; Default: " "</td>
+
         <td>string; default: <b>none</b> </td>
         <td>Third WEP encryption key</td>
+
         <td>Used as the username for authentication.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
     <td>Key #4</td>
+
     <td>Anonymous Identity</td>
         <td>string; Default: " "</td>
+
         <td>string; default: <b>none</b> </td>
         <td>Fourth WEP encryption key</td>
+
         <td>Shown as username outside the encrypted tunnel. Not used for authentication.</td>
 
     </tr>
 
     </tr>
</table>
+
    <tr>
 +
    <td><span style="color:blue;">Password</span></td>
 +
        <td>string; default: <b>none</b> </td>
 +
        <td>Used for authentication.</td>
 +
    </tr>
 +
</table>}}
  
====MAC Filter====
+
=====MAC Filter=====
 
----
 
----
The '''MAC Filter''' tab is used for setting up rules that allow or exclude devices with specified MAC addresses from connecting to your WiFi network.  
+
The <b>MAC Filter</b> tab is used for setting up rules that allow or exclude devices with specified MAC addresses from connecting to your WiFi network.  
 
+
This tab is only visible when Wireless interface Mode is set to <b>Access Point</b>.
[[File:Networking_rutxxx_manual_wireless_interface_configuration_mac_filter_v1.png]]
+
{{#switch:{{{series}}}
 +
|TAP100 = [[File:Networking_rutos_manual_wireless_interface_configuration_mac_filter_tap100_v1.png|border|class=tlt-border]]
 +
|#default = [[File:Networking_rutos_manual_wireless_interface_configuration_mac_filter_v3.png|border|class=tlt-border]]}}
  
 
<table class="nd-mantable">
 
<table class="nd-mantable">
 
     <tr>
 
     <tr>
         <th>field name</th>
+
         <th>Field</th>
       <th>value</th>
+
       <th>Value</th>
       <th>description</th>
+
       <th>Description</th>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
       <td>MAC address filter</td>
+
       <td>MAC-address filter</td>
       <td>Disable {{!}} Allow listed only {{!}} Allow all except listed; Default: '''Disable'''</td>
+
       <td>Disable {{!}} Allow listed only {{!}} Allow all except listed; default: <b>Disable</b></td>
       <td>'''Allow listed only''' – only allows devices with MAC addresses specified in the MAC list to connect to your WiFi network <br>
+
       <td>Defines how the MAC Filter should function.<br>
'''Allow all except listed''' - blocks devices with MAC addresses specified in the MAC list from connecting to your WiFi network</td>
+
            <ul>
 +
                <li><b><span style="color: red;">Allow listed only</span></b> – only allows devices with specified MAC addresses to connect to your Wireless Access Point.</li>
 +
                <li><b>Allow all except listed</b> -   blocks devices with specified MAC addresses from connecting to your Wireless Access Point.</li>
 +
            </ul>
 +
        </td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
 
       <td>MAC-List</td>
 
       <td>MAC-List</td>
       <td>MAC; Default: " "</td>
+
       <td>MAC; default: <b>none</b> </td>
       <td>List of MAC addresses to be included or excluded from connecting to your WiFi network</td>
+
       <td>List of MAC addresses to be included or excluded from connecting to your Wireless Access Point.</td>
 +
    </tr>
 +
    <tr>
 +
      <td><span style="color: red;">Remove from whitelist</span></td>
 +
      <td>off {{!}} on; default: <b>off</b> </td>
 +
      <td>Enables MAC removal from whitelist when device reaches IP block counter. </td>
 
     </tr>
 
     </tr>
 
</table>
 
</table>
  
====Advanced Settings====
+
=====Advanced Settings=====
 
----
 
----
[[File:Networking_rutxxx_manual_wireless_interface_configuration_advanced_settings_v1.png]]
+
{{#switch:{{{series}}}
 +
|TAP100 = [[File:Networking rutos manual wireless interface configuration advanced settings tap100_v1.png|border|class=tlt-border]]
 +
|TAP200 = [[File:Networking rutos manual wireless interface configuration advanced settings tap200_v1.png|border|class=tlt-border]]
 +
|#default = [[File:Networking rutos manual wireless interface configuration advanced settings access_point_v1.png|border|class=tlt-border]]}}
  
 
<table class="nd-mantable">
 
<table class="nd-mantable">
 
     <tr>
 
     <tr>
         <th>field name</th>
+
         <th>Field</th>
       <th>value</th>
+
       <th>Value</th>
       <th>description</th>
+
       <th>Description</th>
 +
    </tr>
 +
    <tr>
 +
      <th>Access point</th>
 +
        <th></th>
 +
        <th></th>   
 +
    </tr>
 +
    <tr>
 +
      <td>Short Preamble</td>
 +
      <td>off {{!}} on; default: <b>on</b></td>
 +
      <td>Uses Short Preamble, it uses shorter data strings that adds less data to transmit the error redundancy check which means that it is much faster.</td>
 +
    </tr>
 +
    <tr>
 +
        <td>DTIM interval</td>
 +
        <td>seconds; default: <b>none</b> </td>
 +
        <td>Delivery Traffic Indication Message Interval.</td>
 +
    </tr>
 +
    <tr>
 +
        <td>Time interval for rekeying GTK</td>
 +
        <td>seconds; default: <b>none</b> </td>
 +
        <td>Period of time in between automatic changes of the group key, which all devices on the network share.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
      <td>Isolate Clients</td>
+
        <td>Disable Inactivity Polling</td>
      <td>off {{!}} on; Default: '''of'''</td>
+
        <td>off {{!}} on; default: <b>off</b></td>
      <td>Prevents WiFi client to client communication on the same subnet</td>
+
        <td>Inactivity polling can be disabled to disconnect stations based on inactivity timeout so that idle stations are more likely to be disconnected even if they are still in range of the AP.</td>
 +
    </tr>
 +
    <tr>
 +
        <td>Station inactivity limit</td>
 +
        <td>seconds; default: <b>none</b> </td>
 +
        <td>Station inactivity limit in seconds. If a station/client does not send anything in st time frame, an empty data frame is sent to it in order to verify whether it is still in range. If this frame is not acknowledged, the station will be disassociated and then deauthenticated.</td>
 +
    </tr>
 +
    <tr>
 +
        <td>Maximum allowed Listen Interval</td>
 +
        <td>positive integer; default: <b>none</b> </td>
 +
        <td>Association will be refused if a client/station attempts to associate with a listen interval greater than this value.</td>
 +
    </tr>{{#switch:{{{series}}}|TAP100|TAP200=|#default=
 +
    <tr>
 +
        <td>WDS</td>
 +
        <td>off {{!}} on; default: <b>off</b></td>
 +
        <td>A Wireless Distribution System (WDS) is a system that enables the wireless interconnection of access points (APs) in a network</td>
 +
    </tr>}}
 +
    <tr>
 +
        <td>WMM Mode</td>
 +
        <td>off {{!}} on; default: <b>on</b></td>
 +
        <td>Wi-Fi Multimedia (WMM), previously known as Wireless Multimedia Extensions (WME), is a subset of the 802.11e wireless LAN (WLAN) specification that enhances quality of service (QoS) on a network by prioritizing data packets according to four categories. </td>
 +
    </tr>{{#switch:{{{series}}}|TAP100|TAP200=
 +
    <tr>
 +
        <td>Hide SSID</td>
 +
        <td>off {{!}} on; default: <b>off</b></td>
 +
        <td>Hide Service Set Identifier.</td>
 +
    </tr>|#default=}}
 +
</table>
 +
 
 +
{{#switch:{{{series}}}|TAP100|TAP200 =
 +
|#default = [[File:Networking rutos manual wireless interface configuration advanced settings client_v1.png|border|class=tlt-border]]
 +
<table class="nd-mantable">
 +
    <tr>
 +
        <th>Field</th>
 +
      <th>Value</th>
 +
      <th>Description</th>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
        <td>Interface name</td>
+
      <th>Client</th>
         <td>string; Default: " "</td>
+
         <th></th>
         <td>Override default interface name</td>
+
         <th></th>  
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
 
       <td>Short Preamble</td>
 
       <td>Short Preamble</td>
       <td>off {{!}} on; Default: '''on'''</td>
+
       <td>off {{!}} on; default: <b>on</b></td>
 
       <td>Uses Short Preamble, it uses shorter data strings that adds less data to transmit the error redundancy check which means that it is much faster.</td>
 
       <td>Uses Short Preamble, it uses shorter data strings that adds less data to transmit the error redundancy check which means that it is much faster.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
 
         <td>DTIM interval</td>
 
         <td>DTIM interval</td>
         <td>seconds; Default: " "</td>
+
         <td>seconds; default: <b>none</b> </td>
         <td>Delivery Traffic Indication Message Interval</td>
+
        <td>Delivery Traffic Indication Message Interval.</td>
 +
    </tr>
 +
    <tr>
 +
        <td>Time interval for rekeying GTK</td>
 +
        <td>seconds; default: <b>none</b> </td>
 +
        <td>Period of time in between automatic changes of the group key, which all devices on the network share.</td>
 +
    </tr>
 +
    <tr>
 +
        <td>Disable Inactivity Polling</td>
 +
        <td>off {{!}} on; default: <b>off</b></td>
 +
        <td>Inactivity polling can be disabled to disconnect stations based on inactivity timeout so that idle stations are more likely to be disconnected even if they are still in range of the AP.</td>
 +
    </tr>
 +
    <tr>
 +
        <td>Station inactivity limit</td>
 +
        <td>seconds; default: <b>none</b> </td>
 +
        <td>Station inactivity limit in seconds. If a station/client does not send anything in st time frame, an empty data frame is sent to it in order to verify whether it is still in range. If this frame is not acknowledged, the station will be disassociated and then deauthenticated.</td>
 +
    </tr>
 +
    <tr>
 +
        <td>Maximum allowed Listen Interval</td>
 +
        <td>positive integer; default: <b>none</b> </td>
 +
        <td>Association will be refused if a client/station attempts to associate with a listen interval greater than this value.</td>
 +
    </tr>
 +
    <tr>
 +
        <td>WDS</td>
 +
        <td>off {{!}} on; default: <b>off</b></td>
 +
        <td>A Wireless Distribution System (WDS) is a system that enables the wireless interconnection of access points (APs) in a network</td>
 +
    </tr>
 +
</table>}}
 +
 
 +
{{#switch:{{{series}}}|TAP100|TAP200 =
 +
|#default = [[File:Networking rutos manual wireless interface configuration mesh advanced settings v1.png|border|class=tlt-border]]
 +
<table class="nd-mantable">
 +
    <tr>
 +
        <th>Field</th>
 +
      <th>Value</th>
 +
      <th>Description</th>
 +
    </tr>
 +
    <tr>
 +
      <th>Mesh & Multi AP</th>
 +
        <th></th>
 +
        <th></th>   
 +
    </tr>
 +
    <tr>
 +
        <td>DTIM interval</td>
 +
        <td>seconds; default: <b>none</b> </td>
 +
         <td>Delivery Traffic Indication Message Interval.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
 
         <td>Time interval for rekeying GTK</td>
 
         <td>Time interval for rekeying GTK</td>
         <td>seconds; Default: " "</td>
+
         <td>seconds; default: <b>none</b> </td>
         <td>Period of time in between automatic changes of the group key, which all devices on the network share</td>
+
         <td>Period of time in between automatic changes of the group key, which all devices on the network share.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
 
         <td>Disable Inactivity Polling</td>
 
         <td>Disable Inactivity Polling</td>
         <td>off {{!}} on; Default: '''off'''</td>
+
         <td>off {{!}} on; default: <b>off</b></td>
 
         <td>Inactivity polling can be disabled to disconnect stations based on inactivity timeout so that idle stations are more likely to be disconnected even if they are still in range of the AP.</td>
 
         <td>Inactivity polling can be disabled to disconnect stations based on inactivity timeout so that idle stations are more likely to be disconnected even if they are still in range of the AP.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
 
         <td>Station inactivity limit</td>
 
         <td>Station inactivity limit</td>
         <td>seconds; Default: " "</td>
+
         <td>seconds; default: <b>none</b> </td>
         <td>Station inactivity limit in seconds: If a station/client does not send anything in st time frame, an empty data frame is sent to it in order to verify whether it is still in range. If this frame is not acknowledged, the station will be disassociated and then deauthenticated.</td>
+
         <td>Station inactivity limit in seconds. If a station/client does not send anything in st time frame, an empty data frame is sent to it in order to verify whether it is still in range. If this frame is not acknowledged, the station will be disassociated and then deauthenticated.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
 
         <td>Maximum allowed Listen Interval</td>
 
         <td>Maximum allowed Listen Interval</td>
         <td>integer [0..65535]; Default: " "</td>
+
         <td>positive integer; default: <b>none</b> </td>
 
         <td>Association will be refused if a client/station attempts to associate with a listen interval greater than this value.</td>
 
         <td>Association will be refused if a client/station attempts to associate with a listen interval greater than this value.</td>
 
     </tr>
 
     </tr>
 +
</table>}}
 +
 +
=====Fast Transition=====
 +
----
 +
The <b>Fast Transition</b> tab is only available when in <b>General setup</b> section <b>802.11r Fast Transition</b> option is enabled.
 +
 +
[[File:Networking rutos manual wireless interface configuration fast transition settings_v1.png|border|class=tlt-border]]
 +
 +
<table class="nd-mantable">
 
     <tr>
 
     <tr>
         <td>Disassociate On Low Acknowledgement</td>
+
         <th>Field</th>
         <td>off {{!}} on; Default: '''on'''
+
      <th>Value</th>
         <td>Allow AP mode to disconnect stations/clients based on low Acknowledgement condition</td>
+
      <th>Description</th>
 +
    </tr>
 +
    <tr>
 +
      <td>NAS id</td>
 +
      <td>string; default: <b>empty</b></td>
 +
      <td>Used for fast transition and Radius server.</td>
 +
    </tr>
 +
    <tr>
 +
      <td>Mobility Domain</td>
 +
      <td>HEX string; default: <b>empty</b></td>
 +
      <td>4-character hexadecimal ID</td>
 +
    </tr>
 +
    <tr>
 +
      <td>Reassociation Deadline </td>
 +
      <td>integer [1000..65535]; default: <b>empty</b></td>
 +
      <td>Time units (TUs / 1.024 ms)  </td>
 +
    </tr>
 +
    <tr>
 +
      <td>FT protocol</td>
 +
      <td>FT over DS {{!}} FT over Air; default: <b>FT over DS</b></td>
 +
      <td>Defines how nagotiation will happen using Fast Transition protocol.</td>
 +
    </tr>
 +
</table>
 +
 
 +
{{#switch:{{{series}}}|TAP100|TAP200=|#default= =====Fast Roaming=====
 +
----
 +
The <b>Fast Roaming</b> tab is only available when in <b>General setup</b> section <b>Client</b> mode is selected and in <b>Advanced settings</b> tab <b>Enable fast roaming</b> option is enabled.
 +
 
 +
[[File:Networking rutos manual wireless interface configuration fast roaming settings_v1.png|border|class=tlt-border]]
 +
 
 +
<table class="nd-mantable">
 +
    <tr>
 +
        <th>Field</th>
 +
      <th>Value</th>
 +
      <th>Description</th>
 +
    </tr>
 +
    <tr>
 +
      <td>Mode</td>
 +
         <td>Simple {{!}} Learn; default: <b>Simple</b></td>
 +
      <td>Defines how the MAC Filter should function.<br>
 +
            <ul>
 +
                <li><b>Simple:</b> Periodic background scans based on signal strengt</li>
 +
                <li><b>Learn:</b> Learns channels used by the network and tries to avoid scans on other channels</li>
 +
            </ul>
 +
        </td>
 +
    </tr>
 +
    <tr>
 +
      <td>Short interval</td>
 +
      <td>integer [5..86400]; default: <b>30</b></td>
 +
        <td>Defines the interval between background scans (in seconds) if the actual signal level of the currently connected access point is worse than signal threshold </td>
 +
    </tr>
 +
    <tr>
 +
      <td>Long interval</td>
 +
      <td>integer [5..86400]; default: <b>300</b></td>
 +
         <td>Defines the interval between background scans (in seconds) if the actual signal level of the currently connected access point is better than signal threshold</td>
 +
    </tr>
 +
    <tr>
 +
      <td>Signal threshold</td>
 +
      <td>integer [-90..-30]; default: <b>-70</b></td>
 +
        <td>Defines a threshold (in dBm) that determines if short interval or longer interval will be used</td>
 
     </tr>
 
     </tr>
</table>
+
</table>}}
  
==Wireless Client==
+
{{#switch:{{{series}}}|TAP100|TAP200=|#default=
 +
===Configuration examples===
 +
----
 +
====Client Mode====
  
 
{{{name}}} can also work as a WiFi client. Configuring client mode is nearly identical to Access Point, except for the fact that most of the options are dictated by the WiFi Access Point that the router is connecting to. Changing them can result in an interrupted connection to that router.
 
{{{name}}} can also work as a WiFi client. Configuring client mode is nearly identical to Access Point, except for the fact that most of the options are dictated by the WiFi Access Point that the router is connecting to. Changing them can result in an interrupted connection to that router.
  
To begin configuring WiFi Client first press '''Scan''' button under chosen band (2.4 GHZ or 5 GHZ) to scan the surrounding area and attempt to connect to a new wireless access point.
+
To begin configuring WiFi Client first click the 'Scan' button to scan the surrounding area and attempt to connect to a new wireless access point.
  
[[File:Networking_rutxxx_manual_wireless_wan_wireless_overview_v1.png]]
+
[[File:Networking_rutos_manual_wireless_scan_button_v1.png|border|class=tlt-border]]
  
 
After which you will be redirected to the window shown below, where you will see list of available WiFi Access Points in the area. Choose one according to your liking and press the '''Join Network''' button next to it.
 
After which you will be redirected to the window shown below, where you will see list of available WiFi Access Points in the area. Choose one according to your liking and press the '''Join Network''' button next to it.
  
[[File:Networking rutxxx manual wireless wan wireless scan v1.png]]
+
[[File:Networking_rutos_manual_wireless_scan_button_results_v2.png|border|class=tlt-border]]
 +
 
 +
You again will be redirected to following window, where you will need to enter WPA passphrase.
 +
 
 +
[[File:Networking_rutos_manual_wireless_scan_button_results_join_network_v2.png|border|class=tlt-border]]
 +
 
 +
Next window that opens will be '''Device Configuration'''. Values there, mostly, should be left unchanged to avoid connection problems, because they are dictated by Access Point. Other than that, only difference from Access Point settings are in ''Interface Configuration → General Setup'' section, where '''Mode''' is set to '''Client''', and '''Network''' attached to this wireless interface is '''wifi1''' instead of LAN
 +
 
 +
[[File:Networking_rutos_manual_wireless_scan_button_results_join_network_general_setup_v4.png|border|class=tlt-border]]
 +
 
 +
Click '''Save & Apply''' and if you configured correctly, you will have Wireless Client working.
 +
 
 +
====Mesh Mode====
 +
 
 +
{{{name}}} can also be configured as a mesh gateway or as a node (router) connecting to a mesh gateway.
 +
 
 +
When {{{name}}} is configured as '''mesh gateway''' it provides internet access to other mesh nodes. When configured as '''mesh node''' it acts as a mesh router which forwards traffic to and from mesh gateway. Nodes also connect other wireless devices to the network such as laptops and cellphones.
 +
 
 +
For complete wireless mesh network example please visit [[Wireless_Mesh_configuration_example|Wireless Mesh configuration example]].
 +
 
 +
=====Mesh Gateway=====
 +
 
 +
When configuring {{{name}}} as a '''mesh gateway''' internet connectivity is '''required'''.
 +
 
 +
To begin click the 'Add' button below of wireless interface in the Network → Wireless page:
 +
 
 +
[[File:Networking rutos manual wireless mesh gateway add button v5.png|border|class=tlt-border]]
  
You again will be redirected to following window, where you will need to enter WPA passphrase or other security password depending on AP that you are connecting to, name yours network (it will be name of your wireless WAN interface) and assign firewall rule.
+
In '''General Setup''' tab change '''Mode''' to '''Mesh''', set '''Mesh ID''' (this number has to be the same in all nodes that connect to this wireless mesh network) and select desired '''Network''' which will be attached to the interface. Click '''Save & Apply'''.
  
[[File:Networking_rutxxx_manual_wireless_wan_join_network_v2.png]]  
+
[[File:Networking rutos manual wireless mesh gateway 1_v3.png|Networking rutos manual wireless mesh gateway general settings|border|class=tlt-border]]
  
Next window that opens will be '''Device Configuration'''. Values there, mostly, should be left unchanged to avoid connection problems, because they are dictated by Access Point. Other than that, only difference from Access Point settings are in ''Interface Configuration → General Setup'' section, where '''Mode''' is set to '''Client''', and '''Network''' attached to this wireless interface is '''WAN''' instead of LAN
+
Next navigate to '''Wireless Security''' tab and select '''WPA3-SAE''' encryption to add authentication layer. The password must match in all devices within the mesh network.
  
[[File:Networking rutxxx manual wireless wan interface configuration general setup v1.png]]
+
[[File:Networking rutos manual wireless mesh gateway 2_v3.png|Networking rutos manual wireless mesh gateway security|border|class=tlt-border]]
  
Click '''Save & Apply'''. [[{{{name}}}_Wireless#Wireless_Overview|Wireless Overview]] window with added interface will open. And if you would go to [[{{{name}}} WAN#WAN|WAN]] section of your router you would see new WAN interface.
+
Lastly, in '''Advanced Settings''' tab enable '''Forward mesh peer traffic''' and set '''RSSI threshold for joining''' to -80. Leave the rest as set by default.
 +
 
 +
[[File:Networking rutos manual wireless mesh gateway 3_v4.png|Networking rutos manual wireless mesh gateway advanced settings|border|class=tlt-border]]
 +
 
 +
Click '''Save & Apply''' and if you configured correctly, you will have wireless mesh gateway ready.
 +
 
 +
=====Mesh Node=====
 +
 
 +
Mesh node is configured the same way as mesh gateway. Node has to match gateway's wireless mesh interface configuration. Additionally, WAN interface has to be setup as DHCP client:
 +
 
 +
1. Access router‘s WebUI. Navigate to Network → WAN.
 +
 
 +
2. Press edit button on the right of the WAN interface.
 +
 
 +
[[File:Networking rutx11 configuration example wireless mesh mesh node configuration 1 v5.png|border|class=tlt-border]]
 +
 
 +
3. Change Protocol to DHCP and select necessary device . Click '''Save & Apply''' and If everything was setup correctly, mesh node should be ready use.
 +
 
 +
====Multi AP====
 +
 
 +
The <b>Multi AP</b> feature is used to configure access to multiple wireless access points from one page. To create Multi AP wireless interface click the 'Add' button below of wireless interface in the Network → Wireless page:
 +
 
 +
[[File:Networking rutos manual wireless mesh gateway add button v5.png|border|class=tlt-border]]
 +
 
 +
In General Setup tab change Mode to Multi AP, select desired Network which will be attached to the interface. You can also select scan time and upload file with Access Points list.
 +
 
 +
[[File:Networking_rutos_manual_wireless_multi_ap_create_network_v3.png|border|class=tlt-border]]
 +
 
 +
=====Access Points=====
 +
----
 +
You can either configure multiple <b>access points</b> from this page of the WebUI or you can upload a file with a list of access point configurations. The file should contains WiFi access point configuration options and values, which should be defined as <b>option: value</b> (for example, <i>ssid: home_wifi</i>). The SSID option is mandatory.
 +
 
 +
[[File:Networking_rutos_manual_wireless_multi_ap_access_points_v1.png|border|class=tlt-border]]
 +
 
 +
<table class="nd-mantable">
 +
    <tr>
 +
        <th>Field</th>
 +
      <th>Value</th>
 +
      <th>Description</th>
 +
    </tr>
 +
    <tr>
 +
      <td>SSID</td>
 +
      <td>string; default: <b>none</b></td>
 +
      <td>SSID of an access point.</td>
 +
    </tr>
 +
    <tr>
 +
      <td>Key</td>
 +
      <td>string; default: <b>none</b></td>
 +
      <td>Pre-shared key, a custom passphrase used for user authentication (at least 8 characters long).</td>
 +
    </tr>
 +
    <tr>
 +
      <td>Enable</td>
 +
      <td>off {{!}} on; default: <b>off</b></td>
 +
      <td>Turns an access point configuration on or off.</td>
 +
    </tr>
 +
    <tr>
 +
      <td>Delete</td>
 +
      <td>- (interactive button)</td>
 +
      <td>Deletes the access point configuration next to the button.</td>
 +
    </tr>
 +
</table>
 +
 
 +
Option names in the file should be provided in lower case letters. AP list file example:
 +
 
 +
ssid: RUT_1
 +
enable: 1
 +
key: 12345678
 +
ssid: RUT_2
 +
enable: 0
 +
key: 87654321
 +
 
 +
Once uploaded, the contents of the file should become visible in the Access Points list.}}
 +
 
 +
===WiFi QR codes===
 +
----
 +
Each WiFi interface has a specially designed QR code that contains information about the SSID and password of the WiFi network. After pressing the button [[File:Networking_rutos_manual_wireless_qr_code_button.png]], a QR code appears with the network's SSID and password, which you can download locally by pressing the 'Download' button. If you only want a QR code without additional information, uncheck the 'Include credentials' box.
 +
 
 +
[[File:Networking_rutos_manual_wireless_qr_code_v1.png|border|class=tlt-border]]
 +
 
 +
{{#switch:{{{series}}}|TAP100|TAP200=|#default= ==Relay Configuration==
 +
 
 +
The <b>Relay Configuration</b> section is used to relay and dynamically redirect incoming connections to a target host. Its main purpose is extending the wireless network. For example, when the device is in Wireless Station (client) mode, it can be used to bridge WAN and LAN interfaces to create a larger wireless network.<br>You can find a detailed usage example <b>[[RUTOS relay / Wi-Fi extender / repeater / bridge configuration|here]]</b>.
 +
{{#switch: {{{series}}}
 +
  | #default =
 +
  | RUT36X|RUT9|TCR1 =
 +
<u><b>
 +
 
 +
Note:</b> Relay is additional software that can be installed from the <b>System → [[{{{name}}} Package Manager|Package Manager]]</b> page.</u>
 +
}}
 +
 
 +
[[File:Networking_rutos_manual_interfaces_interface_configuration_relay_configuration_v1.png|border|class=tlt-border]]
 +
 
 +
<table class="nd-mantable">
 +
    <tr>
 +
        <th>Field</th>
 +
      <th>Value</th>
 +
      <th>Description</th>
 +
    </tr>
 +
    <tr>
 +
      <td>Enabled</td>
 +
      <td>off <nowiki>|</nowiki> on; default: <b>off</b></td>
 +
      <td>Turns the relay configuration on or off.</td>
 +
    </tr>
 +
    <tr>
 +
    <td>Interface</td>
 +
        <td>network interface; default: <b>none</b></td>
 +
        <td>Network interface associated with the wireless interface.</td>
 +
    </tr>
 +
    <tr>
 +
    <td>Wireless interface</td>
 +
        <td>network interface; default: <b>none</b></td>
 +
        <td>Wireless interface associated with the relay configuration.</td>
 +
    </tr>
 +
</table>}}
  
[[Category:{{{name}}} WebUI]]
+
[[Category:{{{name}}} Network section]]

Latest revision as of 08:25, 23 April 2024

The information in this page is updated in accordance with firmware version .


Summary

The Wireless section of the Network tab can be used to manage and configure WiFi Access Points and WiFi Stations (clients) . This chapter of the user manual provides an overview of the Wireless section for {{{name}}} devices. If you're having trouble finding this page or some of the parameters described here on your device's WebUI, you should turn on "Advanced WebUI" mode. You can do that by clicking the "Advanced" button, located at the top of the WebUI.

Networking rutos manual webui basic advanced mode 75.gif

Wireless

SSIDS


The SSIDs section is used to configure your wireless access points (AP) and wireless clients (STA).

[[File:Networking_rutos_manual_wireless_wifi_{{{wifi}}}_v4.png|border|class=tlt-border]]

Above is the overview of the SSIDS Overview window. It displays active access pointsand stations. Here you can turn on or off your WiFi interfaces, remove them or start configuring by clicking on

Edit button on the right side of interface.You can also configure your WiFi devices by clicking Edit button in the right side of each table header. To configure your Wireless device as Client press Scan button to scan the surrounding area and attempt to connect to a new wireless access point.


Global Settings


The Global Settings section is used for configuring WiFi hardware parameters. You can find this section by clicking the 'Edit' button next to a wireless device (not an interface) in the Network → SSIDS page: [[File:Networking_rutos_manual_wireless_wifi_{{{wifi}}}_v4.png|border|class=tlt-border]]

General Setup

The General Setup section is used to turn a wireless device on or off, select the operating frequency (WiFi mode and channel), transmit power and define a country code.

A wireless 2.4 GHz WiFi channel requires a signaling band roughly 22 MHz wide, radio frequencies of neighboring channels numbers significantly overlap each other. Choose a WiFi channel according to the busyness of other channels. You can download a free WiFi analyzer app on your phone, laptop or other WiFi device and check which channel is the least populated.

Many home networks utilize routers that by default run on channel 6 on the 2.4 GHz band. Neighboring WiFi home networks that run over the same channel generate radio interference that can cause significant network performance slowdowns for users. Reconfiguring a network to run on a different wireless channel helps minimize these slowdowns. Therefore, pick a channel with no other active Access Points and preferably one that has no active Access Point on two adjacent channels on each side as well. If you don't feel like doing this, set the 'Channel' field to Auto and the device will pick the least busy channel in your location automatically. Networking rutos manual wireless global settings general setup v3.png

Field Value Description
Enable off | on; default: on Turns Wireless device on or off.
Operating Frequency (2.4 GHz)
Mode N | Legacy; default: N Wireless N (802.11n) supports a maximum theoretical transfer rate of 300mbps with 2 antennas. It can reach up to 450 Mbps with 3 antennas. Though typical speeds are more accurately around 130 Mbps. The legacy standards include 802.11a, 802.11b, and 802.11g.
Channel Auto | 1 (2412 MHz) | 2 (2417 MHz) | 3 (2422 MHz) | 4 (2427 MHz) | 5 (2432 MHz) | 6 (2437 MHz) | 7 (2442 MHz) | 8 (2447 MHz) | 9 (2452 MHz) | 10 (2457 MHz) | 11 (2462 MHz); default: Auto A wireless 2.4 GHz WiFi channel requires a signaling band roughly 22 MHz wide, radio frequencies of neighboring channels numbers significantly overlap each other. Therefore, pick a channel with no other active Access Points and preferably one that has no active Access Point on two adjacent channels on each side as well.
Width 20 MHz | 40 MHz; default: 20 MHz A 40 MHz channel width bonds two 20 MHz channels together, forming a 40 MHz channel width; therefore, it allows for greater speed and faster transfer rates. But not if those channels are crowded with noise and interference. In crowded areas with a lot of frequency noise and interference, a single 20MHz channel will be more stable. 40MHz channel width allows for greater speed and faster transfer rates but it doesn’t perform as well in crowded areas.
Transmit Power [5%...100%]; default: 100 % The transmit power of an access point radio is proportional to its effective range – the higher the transmit power, the more distance that a signal can travel, and/or the more physical materials that it can effectively penetrate and still have data successfully resolved at the receiver.
Country code country code; default: US - United States SO/IEC 3166 alpha2 country codes as defined in ISO 3166-1 standard.
Advanced Settings

The Advanced Settings section is used to configure how the wireless Access Point will work from a hardware perspective.

Networking rutos manual wireless global settings advanced settings v2.png

Field Value Description
Operating Frequency (2.4 GHz)
Allow legacy 802.11b rates off | on; default: on Turn on to enable connections that uses legacy 802.11b standard.
Distance Optimization integer [0..65535]; default: none HT Distance to farthest network member in meters.
Fragmentation threshold integer [256..2346]; default: none The smallest packet size that can be fragmented and transmitted by multiple frames. In areas were interference is a problem, setting a lower fragment threshold might help reduce the probability of unsuccessful packet transfers, thus increasing speed
RTS/CTS threshold integer [0..2347]; default: none RTS/CTS (Request to Send/Clear to Send) are mechanisms, used to reduce frame collisions introduced by the hidden node problem. It can help resolve problems arising when several access points are in the same area, contending
Force 40MHz mode off | on; default: off Always use 40MHz channels even if the secondary channel overlaps. Using this option does not comply with IEEE 802.11n-2009!
Beacon interval integer [15..65535]; default: none Beacon signal interval in seconds.

Interface Configuration


The Interface Configuration section is used to configure the parameters of Wireless Access Pointsor Clients. You can find this section by clicking the 'Edit' button next to a wireless device (not an interface) in the Network → SSIDs page: [[File:Networking_rutos_manual_wireless_wifi_{{{wifi}}}_v4.png|border|class=tlt-border]]

General Setup

The General Setup tab contains basic options for SSID and network interface. Networking rutos manual wireless interface configuration general setup v4.png

}}
Field Value Description
Enable off | on; default: on Enables or disables WiFi interface.
Mode Client | Access Point | Mesh | Multi AP; default: Access Point Defines what role this interface will do, Access point to supply WiFi for other devices, Client to use other devices WiFi for WWAN and Mesh to act as mesh network gateway or a node in a mesh network.
Access Point mode
SSID Factory SSID is different for every device; default: Extended Service Set Identifier is a name used to identify access point which is shown when client tries to connect to it.
Password string; default: none
  • Custom passphrase used for authentication (at least 8 characters long).
  • Another option is to use the 'Dice' icon, which generates random passwords.
  • Network network interfaces; default: lan Choose the network(s) you want to attach to this wireless interface or fill out the create field to define a new network.
    802.11r Fast Transition off | on; default: off Enables fast roaming among access points that belong to the same Mobility Domain
    Client mode
    Auto-reconnect on | off; default: on Enables automatic reconnection to the configured access point on connection loss.
    SSID Factory SSID is different for every device; default: Extended Service Set Identifier is a name used to identify access point to which client will connect.
    BSSID mac address; default: none Basic service set identifier.
    Password string; default: none
  • Custom passphrase used for authentication (at least 8 characters long).
  • Another option is to use the 'Dice' icon, which generates random passwords.
  • Network network interfaces; default: Auto Choose the network you want to attach to this wireless interface or fill out the Custom field to define a new network (you will be redirected to the newly created network configuration page).
    Mesh mode
    Mesh ID integer; default: none Mesh network identifier.
    Password string; default: none
  • Custom passphrase used for authentication (at least 8 characters long).
  • Another option is to use the 'Dice' icon, which generates random passwords.
  • Network network interfaces; default: Auto Choose the network you want to attach to this wireless interface or fill out the Custom field to define a new network (you will be redirected to the newly created network configuration page).
    Multi AP
    Network network interfaces; default: Auto Choose the network you want to attach to this wireless interface or fill out the Custom field to define a new network (you will be redirected to the newly created network configuration page).
    Scan time (sec) number; default: 60 Time between scans of available access points (minimum 30 sec.)
    Upload AP list - (interactive button) Uploads a list of access point configurations.
    Additional Settings

    Networking rutos manual wireless interface configuration additional settings access point v1.png

    Field Value Description
    Access point
    Hide SSID on | off; default: off Hide Service Set Identifier
    Isolate Clients off | on; default: off Prevents client to client communication on the same subnet.
    802.11v BSS Transition Management on | off; default: off A suggestion (or advice) given to a client, which the client can choose to follow or ignore
    802.11k Radio Resource Measurement on | off; default: off Helps devices search quickly for nearby APs that are available as roaming targets by creating an optimized list of channels.
    Disassociate On Low Acknowledgement off | on; default: on Allow AP mode to disconnect stations/clients based on low Acknowledgement condition.

    Networking rutos manual wireless interface configuration additional settings client multi ap v2.png

    Field Value Description
    Client & Multi AP
    Enable fast roaming off | on; default: off Requests background scans for the purpose of roaming within an ESS.

    Networking rutos manual wireless interface configuration mesh additional settings v2.png

    Field Value Description
    Mesh
    Forward mesh peer traffic off | on; default: off Enables mesh peer traffic forwarding.
    RSSI threshold for joining integer [0..1]; default: 0 0 = not using RSSI threshold, 1 = do not change driver default.
    Wireless Security

    The Wireless Security tab is used to determine what kind of encryption your WLAN will use.

    Networking rutos manual wireless interface configuration wireless security v4.png

    Field Value Description
    Encryption No encryption | WPA-PSK | WPA2-PSK | WPA-PSK/WPA2-PSK Mixed Mode | WPA3-SAE | WPA2-PSK/WPA3-SAE Mixed Mode | WPA-EAP | WPA2-EAP | OWE | WPA2-EAP/WPA3-EAP Mixed Mode | WPA3-EAP; default: WPA2-PSK The type of encryption used on this Wireless Interface.

    Opportunistic Wireless Encryption (OWE) - no password is required and

    all wireless traffic is encrypted (safer than No Encryption).
    WPA-PSK, WPA2-PSK, WPA-PSK/WPA2-PSK Mixed Mode, WPA-EAP, WPA2-EAP, WPA3-EAP
    Cipher Auto | Force CCMP (AES) | Force TKIP | Force TKIP and CCMP (AES); default: Auto An algorithm for performing encryption or decryption.
    WPA-PSK, WPA2-PSK, WPA-PSK/WPA2-PSK Mixed Mode, WPA3-SAE, WPA2-PSK/WPA3-SAE Mixed Mode
    Password string; default: none
  • Custom passphrase used for authentication (at least 8 characters long).
  • Another option is to use the 'Dice' icon, which generates random passwords.
  • WPA-EAP, WPA2-EAP, WPA2-EAP/WPA3-EAP Mixed Mode, WPA3-EAP
    Radius-Authentication-Server string; default: none Ip address of the authentification server.
    Radius-Authentication-Port string; default: none Default port for the server is 1812.
    Radius-Authentication-Secret string; default: none Server's shared secret.
    Radius-Accounting-Server string; default: none Ip address of the accounting server.
    Radius-Accounting-Port string; default: none Default port for the server is 1813.
    Radius-Accounting-Secret string; default: none Server's shared secret.
    NAS id string; default: none Network access server identifier.
    Client mode: WPA-EAP, WPA2-EAP, WPA2-EAP/WPA3-EAP Mixed Mode, WPA3-EAP
    EAP-Method TLS | TTLS | PEAP | FAST; default: TLS Network access server identifier.
    Use PKCS#12 format off | on; default: off Use PKCS#12 file format for client certificate.
    PKCS#12 client certificate file - (interactive button) Use PKCS#12 file format for client certificate.
    PKCS#12 passphrase string; default: none Passphrase used to decrypt PKCS #12 certificates..
    Certificate files from device off | on; default: off Choose this option if you want to select certificate files from device.
    CA-Certificate .crt file; default: none This file can have one or more trusted CA certificates. If CA-Certificate is not included, server certificate will not be verified. This is insecure and a trusted CA-Certificate should always be configured when using EAP-TLS/TTLS/PEAP/FAST.
    Client-Certificate .crt file; default: none Client certificate is a type of digital certificate that is used by client systems to make authenticated requests to a remote server. Client certificates play a key role in many mutual authentication designs, providing strong assurances of a requester's identity..
    Private Key .key file; default: none TLS client key file.
    Password of Private Key string; default: none Password of Private Key.
    Authentication EAP-GTC | EAP-MD5 | EAP-MSCHAPv2 | EAP-TLS | PAP | CHAP | MSCHAP | MSCHAPv2; default: EAP-GTC Used as the username for authentication.
    Inner certificate files from device off | on; default: off Choose this option if you want to select certificate files from device.
    Inner CA-Certificate .crt file; default: none Inner CA-Certificate.
    Inner Client-Certificate .crt file; default: none Inner Client-Certificate.
    Inner Private Key .key file; default: none Inner Private Key.
    Password of inner Private Key string; default: none Password of inner Private Key.
    Identity string; default: none Used as the username for authentication.
    Anonymous Identity string; default: none Shown as username outside the encrypted tunnel. Not used for authentication.
    Password string; default: none Used for authentication.
    MAC Filter

    The MAC Filter tab is used for setting up rules that allow or exclude devices with specified MAC addresses from connecting to your WiFi network. This tab is only visible when Wireless interface Mode is set to Access Point. Networking rutos manual wireless interface configuration mac filter v3.png

    Field Value Description
    MAC-address filter Disable | Allow listed only | Allow all except listed; default: Disable Defines how the MAC Filter should function.
    • Allow listed only – only allows devices with specified MAC addresses to connect to your Wireless Access Point.
    • Allow all except listed - blocks devices with specified MAC addresses from connecting to your Wireless Access Point.
    MAC-List MAC; default: none List of MAC addresses to be included or excluded from connecting to your Wireless Access Point.
    Remove from whitelist off | on; default: off Enables MAC removal from whitelist when device reaches IP block counter.
    Advanced Settings

    Networking rutos manual wireless interface configuration advanced settings access point v1.png

    Field Value Description
    Access point
    Short Preamble off | on; default: on Uses Short Preamble, it uses shorter data strings that adds less data to transmit the error redundancy check which means that it is much faster.
    DTIM interval seconds; default: none Delivery Traffic Indication Message Interval.
    Time interval for rekeying GTK seconds; default: none Period of time in between automatic changes of the group key, which all devices on the network share.
    Disable Inactivity Polling off | on; default: off Inactivity polling can be disabled to disconnect stations based on inactivity timeout so that idle stations are more likely to be disconnected even if they are still in range of the AP.
    Station inactivity limit seconds; default: none Station inactivity limit in seconds. If a station/client does not send anything in st time frame, an empty data frame is sent to it in order to verify whether it is still in range. If this frame is not acknowledged, the station will be disassociated and then deauthenticated.
    Maximum allowed Listen Interval positive integer; default: none Association will be refused if a client/station attempts to associate with a listen interval greater than this value.
    WDS off | on; default: off A Wireless Distribution System (WDS) is a system that enables the wireless interconnection of access points (APs) in a network
    WMM Mode off | on; default: on Wi-Fi Multimedia (WMM), previously known as Wireless Multimedia Extensions (WME), is a subset of the 802.11e wireless LAN (WLAN) specification that enhances quality of service (QoS) on a network by prioritizing data packets according to four categories.

    Networking rutos manual wireless interface configuration advanced settings client v1.png

    Field Value Description
    Client
    Short Preamble off | on; default: on Uses Short Preamble, it uses shorter data strings that adds less data to transmit the error redundancy check which means that it is much faster.
    DTIM interval seconds; default: none Delivery Traffic Indication Message Interval.
    Time interval for rekeying GTK seconds; default: none Period of time in between automatic changes of the group key, which all devices on the network share.
    Disable Inactivity Polling off | on; default: off Inactivity polling can be disabled to disconnect stations based on inactivity timeout so that idle stations are more likely to be disconnected even if they are still in range of the AP.
    Station inactivity limit seconds; default: none Station inactivity limit in seconds. If a station/client does not send anything in st time frame, an empty data frame is sent to it in order to verify whether it is still in range. If this frame is not acknowledged, the station will be disassociated and then deauthenticated.
    Maximum allowed Listen Interval positive integer; default: none Association will be refused if a client/station attempts to associate with a listen interval greater than this value.
    WDS off | on; default: off A Wireless Distribution System (WDS) is a system that enables the wireless interconnection of access points (APs) in a network

    Networking rutos manual wireless interface configuration mesh advanced settings v1.png

    Field Value Description
    Mesh & Multi AP
    DTIM interval seconds; default: none Delivery Traffic Indication Message Interval.
    Time interval for rekeying GTK seconds; default: none Period of time in between automatic changes of the group key, which all devices on the network share.
    Disable Inactivity Polling off | on; default: off Inactivity polling can be disabled to disconnect stations based on inactivity timeout so that idle stations are more likely to be disconnected even if they are still in range of the AP.
    Station inactivity limit seconds; default: none Station inactivity limit in seconds. If a station/client does not send anything in st time frame, an empty data frame is sent to it in order to verify whether it is still in range. If this frame is not acknowledged, the station will be disassociated and then deauthenticated.
    Maximum allowed Listen Interval positive integer; default: none Association will be refused if a client/station attempts to associate with a listen interval greater than this value.
    Fast Transition

    The Fast Transition tab is only available when in General setup section 802.11r Fast Transition option is enabled.

    Networking rutos manual wireless interface configuration fast transition settings v1.png

    Field Value Description
    NAS id string; default: empty Used for fast transition and Radius server.
    Mobility Domain HEX string; default: empty 4-character hexadecimal ID
    Reassociation Deadline integer [1000..65535]; default: empty Time units (TUs / 1.024 ms)
    FT protocol FT over DS | FT over Air; default: FT over DS Defines how nagotiation will happen using Fast Transition protocol.
    Fast Roaming

    The Fast Roaming tab is only available when in General setup section Client mode is selected and in Advanced settings tab Enable fast roaming option is enabled.

    Networking rutos manual wireless interface configuration fast roaming settings v1.png

    Field Value Description
    Mode Simple | Learn; default: Simple Defines how the MAC Filter should function.
    • Simple: Periodic background scans based on signal strengt
    • Learn: Learns channels used by the network and tries to avoid scans on other channels
    Short interval integer [5..86400]; default: 30 Defines the interval between background scans (in seconds) if the actual signal level of the currently connected access point is worse than signal threshold
    Long interval integer [5..86400]; default: 300 Defines the interval between background scans (in seconds) if the actual signal level of the currently connected access point is better than signal threshold
    Signal threshold integer [-90..-30]; default: -70 Defines a threshold (in dBm) that determines if short interval or longer interval will be used

    Configuration examples


    Client Mode

    {{{name}}} can also work as a WiFi client. Configuring client mode is nearly identical to Access Point, except for the fact that most of the options are dictated by the WiFi Access Point that the router is connecting to. Changing them can result in an interrupted connection to that router.

    To begin configuring WiFi Client first click the 'Scan' button to scan the surrounding area and attempt to connect to a new wireless access point.

    Networking rutos manual wireless scan button v1.png

    After which you will be redirected to the window shown below, where you will see list of available WiFi Access Points in the area. Choose one according to your liking and press the Join Network button next to it.

    Networking rutos manual wireless scan button results v2.png

    You again will be redirected to following window, where you will need to enter WPA passphrase.

    Networking rutos manual wireless scan button results join network v2.png

    Next window that opens will be Device Configuration. Values there, mostly, should be left unchanged to avoid connection problems, because they are dictated by Access Point. Other than that, only difference from Access Point settings are in Interface Configuration → General Setup section, where Mode is set to Client, and Network attached to this wireless interface is wifi1 instead of LAN

    Networking rutos manual wireless scan button results join network general setup v4.png

    Click Save & Apply and if you configured correctly, you will have Wireless Client working.

    Mesh Mode

    {{{name}}} can also be configured as a mesh gateway or as a node (router) connecting to a mesh gateway.

    When {{{name}}} is configured as mesh gateway it provides internet access to other mesh nodes. When configured as mesh node it acts as a mesh router which forwards traffic to and from mesh gateway. Nodes also connect other wireless devices to the network such as laptops and cellphones.

    For complete wireless mesh network example please visit Wireless Mesh configuration example.

    Mesh Gateway

    When configuring {{{name}}} as a mesh gateway internet connectivity is required.

    To begin click the 'Add' button below of wireless interface in the Network → Wireless page:

    Networking rutos manual wireless mesh gateway add button v5.png

    In General Setup tab change Mode to Mesh, set Mesh ID (this number has to be the same in all nodes that connect to this wireless mesh network) and select desired Network which will be attached to the interface. Click Save & Apply.

    Networking rutos manual wireless mesh gateway general settings

    Next navigate to Wireless Security tab and select WPA3-SAE encryption to add authentication layer. The password must match in all devices within the mesh network.

    Networking rutos manual wireless mesh gateway security

    Lastly, in Advanced Settings tab enable Forward mesh peer traffic and set RSSI threshold for joining to -80. Leave the rest as set by default.

    Networking rutos manual wireless mesh gateway advanced settings

    Click Save & Apply and if you configured correctly, you will have wireless mesh gateway ready.

    Mesh Node

    Mesh node is configured the same way as mesh gateway. Node has to match gateway's wireless mesh interface configuration. Additionally, WAN interface has to be setup as DHCP client:

    1. Access router‘s WebUI. Navigate to Network → WAN.

    2. Press edit button on the right of the WAN interface.

    Networking rutx11 configuration example wireless mesh mesh node configuration 1 v5.png

    3. Change Protocol to DHCP and select necessary device . Click Save & Apply and If everything was setup correctly, mesh node should be ready use.

    Multi AP

    The Multi AP feature is used to configure access to multiple wireless access points from one page. To create Multi AP wireless interface click the 'Add' button below of wireless interface in the Network → Wireless page:

    Networking rutos manual wireless mesh gateway add button v5.png

    In General Setup tab change Mode to Multi AP, select desired Network which will be attached to the interface. You can also select scan time and upload file with Access Points list.

    Networking rutos manual wireless multi ap create network v3.png

    Access Points

    You can either configure multiple access points from this page of the WebUI or you can upload a file with a list of access point configurations. The file should contains WiFi access point configuration options and values, which should be defined as option: value (for example, ssid: home_wifi). The SSID option is mandatory.

    Networking rutos manual wireless multi ap access points v1.png

    Field Value Description
    SSID string; default: none SSID of an access point.
    Key string; default: none Pre-shared key, a custom passphrase used for user authentication (at least 8 characters long).
    Enable off | on; default: off Turns an access point configuration on or off.
    Delete - (interactive button) Deletes the access point configuration next to the button.

    Option names in the file should be provided in lower case letters. AP list file example:

    ssid: RUT_1
    enable: 1
    key: 12345678
    ssid: RUT_2
    enable: 0
    key: 87654321
    

    Once uploaded, the contents of the file should become visible in the Access Points list.

    WiFi QR codes


    Each WiFi interface has a specially designed QR code that contains information about the SSID and password of the WiFi network. After pressing the button Networking rutos manual wireless qr code button.png, a QR code appears with the network's SSID and password, which you can download locally by pressing the 'Download' button. If you only want a QR code without additional information, uncheck the 'Include credentials' box.

    Networking rutos manual wireless qr code v1.png

    Relay Configuration

    The Relay Configuration section is used to relay and dynamically redirect incoming connections to a target host. Its main purpose is extending the wireless network. For example, when the device is in Wireless Station (client) mode, it can be used to bridge WAN and LAN interfaces to create a larger wireless network.
    You can find a detailed usage example here.


    Networking rutos manual interfaces interface configuration relay configuration v1.png

    Field Value Description
    Enabled off | on; default: off Turns the relay configuration on or off.
    Interface network interface; default: none Network interface associated with the wireless interface.
    Wireless interface network interface; default: none Wireless interface associated with the relay configuration.

    [[Category:{{{name}}} Network section]]