area-prefix ( text ) - a string that indicates the beginning from the area string of the AP. If the AP's
area begins with area-prefix, then this parameter returns true
connect ( yes | no ) - whether to connect to AP that matches this rule
interface ( name ) - name of the wireless interface
mac-address ( MAC address ) - MAC address of the AP. If set to 00:00:00:00:00:00, all APs are
accepted
min-signal-strength ( integer ) - signal strength in dBm. Rule is matched, if the signal from AP is
stronger than this
security-profile ( name ; default: none ) - name of the security profile, used to connect to the AP.
If none, then those security profile is used which is configured for the respective interface
ssid ( text ) - the ssid of the AP. If none set, all ssid's are accepted. Different ssids will be
meaningful, if the ssid for the respective interface is set to ""
Access List
Home menu level: /interface wireless access-list
Description
The access list is used by the Access Point to restrict associations of clients. This list contains MAC
addresses of clients and determines what action to take when client attempts to connect. Also, the
forwarding of frames sent by the client is controlled.
The association procedure is as follows: when a new client wants to associate to the AP that is
configured on interface wlanN, an entry with client's MAC address and interface wlanN is looked
up in the access-list. If such entry is found, action specified in the access list is performed, else
default-authentication and default-forwarding arguments of interface wlanN are taken.
Property Description
ap-tx-limit ( integer ; default: 0 ) - limits data rate for this wireless client (in bps)
• 0 - no limits
authentication ( yes | no ; default: yes ) - whether to accept or to reject this client when it tries to
connect
client-tx-limit ( integer ; default: 0 ) - limits this client's transmit data rate (in bps). Works only if
the client is also a MikroTik Router
• 0 - no limits
forwarding ( yes | no ; default: yes ) - whether to forward the client's frames to other wireless
clients
interface ( name ) - name of the respective interface
mac-address ( MAC address ) - MAC address of the client
private-algo ( 104bit-wep | 40bit-wep | none ) - which encryption algorithm to use
private-key ( text ; default: "" ) - private key of the client. Used for private-algo
skip-802.1x ( yes | no ) - not implemented, yet
Page 261 of 695
Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.
Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
