RouterOS manual

Webserver



ip/service/webserver

Type: Settings Directory

Turns individual parts of the router's web server on or off, separately for HTTP (the -plain settings, served by the www service) and HTTPS (the -secure settings, served by www-ssl). All parts are enabled by default. A disabled part answers 403 Forbidden, and the other parts keep working, so you can, for example, offer the REST API over HTTPS without WebFig. The port, allowed addresses and certificate of the web server are set in /ip/service. For the REST API, see REST API.

<ArgTableRow arg="index-plain" typ="bool">Home page (login page) and static files such as /favicon.png over HTTP. Takes effect only when webfig-plain and graphs-plain are also no; then the home page, static files and unknown paths answer 403 over HTTP, and the REST API keeps working. Default: yes.</ArgTableRow> <ArgTableRow arg="webfig-plain" typ="bool">WebFig at /webfig/ over HTTP. Default: yes.</ArgTableRow> <ArgTableRow arg="graphs-plain" typ="bool">Graphs at /graphs/ over HTTP. Default: yes.</ArgTableRow> <ArgTableRow arg="rest-plain" typ="bool">REST API at /rest over HTTP. With no, REST requests over HTTP answer 403, and HTTPS is not affected. Default: yes.</ArgTableRow> <ArgTableRow arg="crl-plain" typ="bool">Certificate revocation list downloads at /crl/ over HTTP. Default: yes.</ArgTableRow> <ArgTableRow arg="scep-plain" typ="bool">SCEP server at /scep/ over HTTP. Default: yes.</ArgTableRow> <ArgTableRow arg="acme-plain" typ="bool">Answers to ACME HTTP-01 challenge requests at /.well-known/acme-challenge/ over HTTP. Default: yes.</ArgTableRow> <ArgTableRow arg="index-secure" typ="bool">Home page (login page) and static files such as /favicon.png over HTTPS. Takes effect only when webfig-secure and graphs-secure are also no; then the home page and static files answer 403 over HTTPS, and the REST API keeps working. Default: yes.</ArgTableRow> <ArgTableRow arg="webfig-secure" typ="bool">WebFig at /webfig/ over HTTPS. Default: yes.</ArgTableRow> <ArgTableRow arg="graphs-secure" typ="bool">Graphs at /graphs/ over HTTPS. Default: yes.</ArgTableRow> <ArgTableRow arg="rest-secure" typ="bool">REST API at /rest over HTTPS. With no, REST requests over HTTPS answer 403, and HTTP is not affected. Default: yes.</ArgTableRow>

Source

Looking for how the configurator itself works? Configurator manual

Updated 2026-10-01.