Administering a network infrastructure requires flexibility, and situations often arise where it is necessary to temporarily or permanently disable the wireless module on equipment. MikroTikThis may be due to maintenance, the need to eliminate radio interference, or simply the desire to limit network access during certain hours. Unlike home routers, which have a single button, RouterOS The process has its own nuances, depending on the system version and interface type.
Disabling a radio interface doesn't always mean a complete loss of signal unless certain configuration conditions are met. Incorrect configuration may result in the device continuing to broadcast service packets or placing a strain on the processor. In this article, we'll cover all available methods in detail, from the graphical interface. WinBox to the command line so you can choose the one that best suits your situation.
Before making any changes, it is important to understand that Wireless in the ecosystem MikroTik — is a complex module that can operate in different modes. We'll look at how to properly stop the service without disrupting the wired network, and what parameters should be checked after making changes. This will help avoid common errors and ensure the stability of the rest of the infrastructure.
⚠️ Caution: Before making changes to the radio interface configuration, make sure you have access to the router via a wired connection (LAN), otherwise you may lose remote access to the device.
Disabling via the WinBox graphical interface
The most popular tool for equipment management MikroTik the utility remains WinBoxIt provides convenient access to all wireless network settings without having to remember complex commands. To get started, connect to the router using the device's MAC address or IP address.
After logging in, find the section in the menu on the left Wireless. The window that opens will display a list of all available radio interfaces (for example, wlan1, wifi1). To stop broadcasting, simply select the desired interface by double-clicking or using the edit button and uncheck the item. Enabled in the upper left corner of the window.
However, simply removing the enable flag may not be sufficient in some scenarios. If you want to completely block client connections but leave the interface active for monitoring, you can use an access list. Access List allows you to create a rule that denies connections for all MAC addresses by setting the parameter Allow in meaning false.
☑️ Check before disabling Wi-Fi
It is worth noting that in new versions RouterOS v7 The interface may have changed, and some settings have been moved to the section InterfacesAlways check the interface status: if there is a letter next to the name R (running), which means the radio is still active. Completely disabling it requires removing the flag. Enabled in the properties of the interface itself.
Using the CLI to manage radio
For experienced administrators and for automating processes, the command line is an indispensable tool. It can be accessed through the terminal in WinBox or via an SSH connection. This method is especially convenient when you need to quickly perform an action on multiple devices.
The basic command for disabling an interface is straightforward. First, you need to switch to the wireless settings context, although this isn't strictly necessary if you use the full path. The command for disabling a specific interface wlan1 will be next:
[admin@MikroTik] > wireless set wlan1 disabled=yesThis command instantly changes the interface status. If you need to disable all wireless interfaces at once, you can use a mask. *, but be careful not to affect virtual interfaces unless they require stopping. Alternatively, you can use the command disable, which is also effective:
[admin@MikroTik] > wireless disable wlan1How to get everything back?
To enable the interface, use the command: wireless set wlan1 disabled=no or wireless enable wlan1 . This will restore broadcasting with the previous settings.
Therefore, be careful when entering interface names. A single letter error can result in the wrong module being disabled, especially on devices with multiple radio modules (e.g., hAP ac³ or CCR with installed maps).
| Team | Description of action | Result |
|---|---|---|
set disabled=yes |
Setting the disable flag | The interface stops broadcasting |
disable |
Direct shutdown | Similar to set disabled=yes |
set disabled=no |
Removing the disable flag | The interface is activated |
enable |
Live broadcast | Similar to set disabled=no |
Setting up a Wi-Fi network schedule
Often, there's a need not to completely disable the network, but to limit its operation time. For example, in an office, Wi-Fi may only be needed during business hours, and it's best to disable it at night to reduce electromagnetic interference and improve security. MikroTik this is realized through Scheduler.
To create a schedule, go to the section System → Scheduler. Here you need to create two tasks: one for disabling (disabled=yes) and one for inclusion (disabled=no). The start time is specified in the format HH:MM:SSFor example, to turn off the network at 8:00 PM, a task named WifiOff and time 20:00:00.
In the field On Event A command is entered that will be executed at a specified time. To disable it, it would be: /interface wireless set wlan1 disabled=yes. Accordingly, to turn on in the morning at 08:00 a.m. a second task is created with the command /interface wireless set wlan1 disabled=no.
This method is reliable, but requires that your router has the correct time. Be sure to configure it NTP Client in the section System → SNTP Client, specifying the address of the time server (for example, pool.ntp.org), otherwise the schedule will be lost after a reboot. Without time synchronization, tasks may run incorrectly.
Completely delete wireless network configuration
In some cases, for example, when repurposing a router for wired ISP-only purposes, it's better to not just disable the Wi-Fi module, but completely remove it from the configuration. This will free up system resources and remove unnecessary processes from the system. logging.
Unlike simply disabling, removing the interface requires more drastic action. In the graphical interface WinBox in the list of wireless interfaces you can click the button Remove (minus). However, if the interface was created automatically during the first launch or update, the system may attempt to restore its default settings during the next reboot unless the corresponding profile is deleted.
A more radical method is to use the command default-configurationWhen resetting the settings, you can select the option No Default ConfigurationThis ensures that the router starts in a "clean" state with no WLAN interfaces (preset). If you only need to delete a profile, use the command:
[admin@MikroTik] > wireless security-profiles remove [find]⚠️ Warning: Deleting security profiles may prevent you from creating new access points without first setting up new encryption and password settings.
After deleting the interfaces, it is recommended to check the section BridgeWireless interfaces are often added to a bridge by default. If you remove a wireless interface but leave it in the bridge, you may encounter log errors or "hanging" ports. Clearing the bridge of non-existent ports is a sign of competent administration.
Hiding the network and restricting access
Sometimes a complete shutdown isn't necessary; it's enough to make the network invisible to outsiders or limit the number of connected devices. Hiding the SSID (network name) is a popular, but not the most reliable, method of "protection through invisibility," but it does reduce noise on the air for regular users.
To hide the network in the interface settings (Wireless → double-click on the interface) you need to find the parameter Hide SSID and install it in yesAfter this, the network will no longer appear in the list of available networks on phones and laptops, but will remain visible to those who know its name and enter it manually.
A more effective method is to configure Access List. In this list, you can set rules based on MAC addresses. For example, you can create a rule that denies all connections (MAC Address=00:00:00:00:00:00/00:00:00:00:00:00, Allow=false), and then add permission rules for specific devices of employees or family members.
- 🔒 Hide SSID - hides the network name, but does not protect data.
- 📜 Access List — allows you to filter devices by MAC addresses.
- 🛡️ WPA2/WPA3 — mandatory use of strong encryption.
- 🚫 Disable - complete software shutdown of the radio.
It's important to understand the difference between disabling the interface and hiding the SSID. In the former case, the radio module may enter power-saving mode or stop transmitting entirely; in the latter case, it continues to actively broadcast beacon frames, simply without the network name. For maximum resource savings, it's best to disable the interface completely.
Diagnosing and checking Wi-Fi status
After making changes, you need to make sure that they have been applied correctly. MikroTik There are several verification methods. The easiest is to look at the indicators on the device's body (if they are present and configured appropriately), but software verification is more reliable.
IN WinBox in the section Wireless status disabled will be highlighted in red, and in the column Running there will be no letter RYou can also use the tool Wireless Table (the button with the table image in the wireless network window), which will display a list of connected clients. If the network is disconnected correctly, the list will be empty.
For lovers of logic and detailed analysis, a section is available LogWhen an interface is disabled, a state change event may be logged. Filter logs by word. wireless will help track the history of on/off switches, which is useful for security audits.
If you use monitoring through SNMP or The Dude, don't forget to update the OIDs or port statuses so that the monitoring system doesn't send false alarms about the "down" of an interface that you intentionally disabled.
Frequently Asked Questions (FAQ)
Does turning off Wi-Fi affect wired internet speed?
Yes, it can have a positive effect. Disabling the wireless module frees up CPU time. CPU, which was previously spent processing wireless packets and managing the radio. On weaker router models, this may result in a slight increase in the speed and stability of a wired connection (NAT).
Is it possible to turn on Wi-Fi remotely if it was turned off?
Yes, if you have access to the router via a wired network (WAN/LAN) or a tunnel is set up. You can log in via WinBox or SSH and execute the power-on command. If the router is completely isolated and Wi-Fi is disabled, physical access or a reset button Reset will be the only option.
Do I need to reboot my router after disabling Wi-Fi?
No, there are changes in the interface status (disabled=yes) are applied immediately. A reboot is only required if you made changes to system configuration files or drivers, which are not required in the standard shutdown procedure.
Will Bluetooth work if I disable Wi-Fi on MikroTik?
On most devices MikroTik modules are separated. However, on some compact models (for example, the series hAP lite (or specific boards) radio parts can share the antenna or resources. In standard scenarios, disabling wlan The interface does not affect Bluetooth unless it has been software linked to Wi-Fi in the configuration.