Administering a home or corporate network is impossible without a clear understanding of who's on the air. If you're wondering how to view devices connected to Mikrotik WiFi, you're likely faced with the need to audit traffic or identify uninvited guests. RouterOS Provides powerful monitoring tools that far exceed the functionality of standard home routers, but require a competent approach to setup.
Unlike simple consumer routers, the equipment Mikrotik Shows not just a list of IP addresses, but detailed information about each network node. You can see the MAC address, DHCP lease time, connection speed, and even the volume of data transferred. This allows the administrator to instantly assess the channel load and identify traffic anomalies, which is critical for the stable operation of the entire infrastructure.
Let's look at three main ways to obtain this information: through the WinBox graphical interface, through the web interface (WebFig), and using the command line (CLI). Each method has its advantages, depending on whether you're at your desk with a laptop or managing the network remotely through a browser.
⚠️ Note: The interface and menu layout may vary slightly depending on the installed RouterOS version (v6 or v7) and the device's license type. Always check the official releases before updating the firmware.
Analyzing Clients via DHCP Server Leases
The fastest and most reliable way to see everyone who has received an IP address automatically is to view the DHCP lease list. RouterOS This tool is essential for initial network diagnostics. Go to the menu IP → DHCP Server and open the tab Leases (or DHCP Leases in the new version of the interface).
This displays a table of all devices that have requested an address from the router. Note the status of the entries: Bound means that the device is active and using the assigned address right now. Status Waiting Indicates that the device was online but is now unresponsive, even though the address is reserved for it. This allows us to distinguish between truly connected devices and those that were simply online previously.
For ease of administration, you can statically bind an IP address to a MAC address directly from this window. Double-clicking an entry or using the "Make Static" button will permanently assign the IP address to a specific device. This is especially useful for printers, CCTV cameras, and servers, which require a permanent address for port forwarding to function correctly.
Don't ignore the "Client ID" or "Hostname" column if it's filled in. It often displays the device name specified by the manufacturer or user, which helps identify unnamed devices without having to guess by MAC address.
Monitoring active connections in the Interfaces menu
If the DHCP server is disabled or devices are using static IP addresses, the lease method won't provide the full picture. In this case, the interfaces menu comes to the rescue. Go to the section Interfaces and select your wireless interface (usually it's called wlan1, wifi1 or wlan-ac). Double-clicking will open the properties window, where we are interested in the tab Registration (or Clients in older versions).
Unlike the DHCP list, this only displays devices that are physically connected to the access point right now, regardless of how they obtained their IP address. You'll see the signal strength (Rx/Tx Rate), frequency, and security protocol. This is a "live" list that updates in real time and shows the current state of the radio airwaves.
- 📶 Rx Rate — the speed at which the client receives data from the router, an indicator of the connection quality at the moment.
- 📤 Tx Rate — the data transfer speed from the client to the router is often lower than the reception speed due to limitations of mobile devices.
- ⏱️ Uptime — the time the device spent online without losing connection, useful for finding unstable clients.
- 🔒 Authorized — authorization status, shows whether the client has passed all stages of security verification (WPA2/WPA3).
It's important to note that this list may include devices that haven't yet received an IP address (association stage), but have already established a WiFi connection. If you see many devices with low signal strength, you may need to consider expanding your coverage or adjusting your settings. Roaming.
Using WinBox for detailed analysis
Program WinBox remains the "gold standard" for configuring Mikrotik equipment. It provides deeper access to data than the web interface. To view connected devices, launch the utility, connect to the router, and use the keyboard shortcut. Ctrl + Shift + H (or go to the menu Tools → Profile), but it will be more informative to use the window Wireless.
Open the window Wireless, select your interface and click the button Registration TableHere you'll see a detailed table with all connected clients. Double-clicking on a row will open the client properties, where you can see not only the MAC address but also the AP MAC (access point address, if there are multiple), as well as detailed packet statistics.
| Parameter | Description | Diagnostic significance |
|---|---|---|
| MAC Address | Unique identifier of the network card | Master key for filtering and blocking |
| IP Address | The client's current IP address | Required to configure firewall rules |
| Uptime | Session hours | Helps find devices that frequently reconnect |
| Bytes In/Out | Volume of transferred data | Identifying "heavy" users who are loading the channel |
One of WinBox's powerful features is the ability to sort columns. Click the "Bytes Out" column header to sort clients by their traffic volume. This will instantly show you who's consuming your bandwidth right now, whether it's torrents, game updates, or video streaming.
☑️ Network security check
⚠️ Note: If you see a device you can't identify, don't rush to block it. First, try disabling WiFi on your known devices one by one to determine whose connection has disappeared from the list.
Viewing clients via the command line (CLI)
For experienced users and scripters, the most efficient way is to use the CLI. It can be accessed via SSH, Telnet, or the built-in terminal in WinBox (the button New Terminal). Teams in RouterOS logical and structured, allowing you to quickly extract the necessary information.
To see the list of leased addresses, use the command:
/ip dhcp-server lease printThis command will display the full list. To filter only active connections, you can add the parameter where dynamic=yes or sort the output. However, for WiFi clients, the wireless interface command is more useful:
/interface wireless registration-table printIf you have RouterOS v7 installed with the new package wifi (instead of the old wireless), the command will change to:
/interface wifi station printThe command output can be formatted to show only the columns you need, such as the MAC address and IP. This is convenient for inserting into monitoring or logging scripts. You can also use the command watch (in the WinBox terminal, this is the button with the clock) so that the data is updated in real time without constantly retyping the command.
Secret command for quick search
In the terminal, enter /interface wireless registration-table print where mac-address=XX:XX:XX:XX:XX:XX to check if a specific device is on the network without scrolling through huge lists.
Identifying unknown devices by MAC address
Often, the list of connected devices contains lines with unknown names or no names at all. The only reliable identifier in this case is MAC addressThis is a unique code consisting of 12 hexadecimal digits that is assigned to the network interface during manufacturing.
The first six characters of a MAC address (OUI - Organizationally Unique Identifier) identify the device manufacturer. There are many online services and databases where you can enter these six characters and find out the brand. For example, if the address begins with 00:1A:2B, the search engine will say that this is an Apple device.
- 🍎 Apple — iPhone, iPad, MacBook devices (often have random MAC addresses in new iOS).
- 📱 Samsung/Huawei/Xiaomi — popular manufacturers of Android smartphones and tablets.
- 🖥️ Dell/HP/Lenovo - laptops and desktop computers.
- 📷 Hikvision/Dahua — video surveillance systems and IP cameras.
Knowing the manufacturer allows you to quickly match information with your existing devices. If you don't have equipment of a certain brand, but it's still online, that's cause for concern. In Mikrotik, you can add a comment directly to a DHCP entry or address list to avoid guessing what device it is in the future.
Restricting access and blocking unwanted clients
Once you've identified the unwanted device, it needs to be disabled. Mikrotik has several levels of protection. The simplest is to disable the device using the button. Disconnect in the registration table. However, this is a temporary measure: the user can reconnect if they know the password.
For reliable protection, use Access List (Access List) Go to Wireless → Access List (or Wifi → Access List). Create a new (rule) by specifying the MAC address of the intruder and selecting the action Reject or DropNow, even if you know the password, this device won't be able to connect to your network.
A more advanced method is to create a "Guest Network" (Guest VLAN). Assign a separate SSID to guests, isolate it from the main network with firewall rules, and limit the speed. Then, even if someone connects, they won't have access to your files and printers.
Is it possible to hide the network name (SSID) so that my neighbors can't see it?
Yes, there is an option in the wireless interface settings Hide SSIDHowever, this offers weak protection: the network name is easily intercepted by sniffers when a legitimate client connects. It's better to use a strong WPA2/WPA3 password and MAC address filtering.
Why are there devices with the "Waiting" status in the DHCP list?
The "Waiting" status means that the device previously received an address, but is currently offline or asleep. The router remembers this lease so that when the device returns to the coverage area, it can quickly assign it the same IP address. After a certain amount of time (the lease time), the entry will disappear or be updated.
How do I know how many devices my Mikrotik can handle?
This depends on the processor model and RAM capacity. Budget models (such as the hAP lite) may be unstable with 15-20 active clients. The RB4011 or CCR series can easily handle hundreds of connections. Monitor the CPU load in the menu. Resources.
What should I do if my client list is not updating?
Try refreshing the page (F5) or reconnecting in WinBox. If the problem is in the CLI, check if the log is full. In rare cases, restarting the DHCP service helps (/ip dhcp-server lease renew-all), but this will temporarily break the connection for all clients.
Can Mikrotik show the browsing history of connected devices?
By itself, no; it only shows connections. Viewing URL history requires setting up complex Firewall Log rules with HTTP request logging enabled or using external systems (proxy, DNS filters), which requires high skill levels and powerful hardware.