RouterOS manual

Security



interface/wifi/security

Type: Directory

ParameterTypeDescription
Xdisableddisabled
ParameterTypeDescription
name (mandatory)string
authentication-types (unset)ubit (wpa-psk, wpa2-psk, wpa2-psk-sha2, wpa-eap, wpa2-eap, wpa3-psk, wpa3-psk-gd, owe, wpa3-eap, wpa3-eap-192, dpp)
encryption (unset)ubit (tkip, ccmp, gcmp, ccmp-256, gcmp-256)
group-encryption (unset)enum (tkip | ccmp | gcmp | ccmp-256 | gcmp-256)
group-key-update (unset)time
passphrase (unset)string
multi-passphrase-group (unset)enum
disable-pmkid (unset)bool
management-protection (unset)enum (disabled | allowed | required)
beacon-protection (unset)enum (disabled | enabled)
management-encryption (unset)enum (cmac | gmac | cmac-256 | gmac-256)
wps (unset)enum (disable | push-button)
dh-groups (unset)ubit (19, 20, 21)
sae-anti-clogging-threshold (unset)num
sae-max-failure-rate (unset)num
sae-pwe (unset)enum (hunting-and-pecking | hash-to-element | both)
owe-transition-interface (unset)iface_enum { auto }
eap-methods (unset)
eap-certificate-mode (unset)enum (verify-certificate | dont-verify-certificate | no-certificates | verify-certificate-with-crl)
eap-tls-certificate (unset)enum
eap-username (unset)string
eap-anonymous-identity (unset)string
eap-password (unset)string
eap-accounting (unset)bool
ft (unset)bool
ft-mobility-domain (unset)num
ft-over-ds (unset)bool
ft-reassociation-deadline (unset)time
ft-nas-identifier (unset)string
ft-r0-key-lifetime (unset)time
ft-preserve-vlanid (unset)bool
connect-group (unset)string
connect-priority (unset)

Source

Updated 2026-08-22.