Managing a wireless network in a business or home environment requires flexibility, especially when it comes to routers. MikrotikSituations often arise when it is necessary to temporarily or completely restrict access to an access point, whether for maintenance, increased security, or simply to maintain quiet hours at night. Understanding how to do this correctly deactivate the WiFi interface, is a basic skill for a network administrator.
There are several ways to accomplish this, from a simple toggle in a graphical interface to writing complex automation scripts. The choice of method depends on your ultimate goal: whether you need to turn off the radio for a couple of minutes or set up an automatic network schedule for a week in advance. It's important not just to press a button but to understand the consequences of this action for connected clients.
In this article, we'll take a detailed look at all the available options for managing the wireless module's status. We'll also cover using the utility. WinBox, command line TerminalWe'll also cover security and energy optimization. Proper setup will allow you to control your airwaves without any complications.
Managing the wireless interface via WinBox
The most popular and convenient tool for setting up equipment Mikrotik is a utility WinBoxIt provides a graphical interface that allows you to visually monitor the status of all router services. To get started, connect to the device via its MAC address or IP address and enter administrator credentials. After successful authorization, the main management window will open.
To turn off WiFi, go to the menu on the left and select WirelessIn the window that opens, you'll see a list of all wireless interfaces available on your device. They're usually labeled as wlan1, wifi1 or similar names depending on your router model. Select the desired interface by double-clicking or using the button with the blue wrench.
In the interface properties window that opens, find the button Disable in the upper left corner of the dialog box. Clicking this button will immediately stop the wireless network broadcast. The interface status will change, making it unavailable for new connections, and current sessions will be terminated. This is the fastest way if you urgently need to stop broadcasting a signal.
⚠️ Attention: After disabling the interface via the button
DisableAll connected devices will lose network connectivity immediately. Ensure this action does not disrupt critical processes in your organization.
To re-enable the network, simply open the interface properties again and click the button EnableThe interface will return to its active state, and the router will begin broadcasting the SSID. This method is convenient for manual control, but requires the administrator to be present at the computer at all times.
Using the Terminal command line
For experienced users and system administrators who prefer speed and accuracy, working through TerminalThis method allows you to manage settings remotely via SSH or directly on the device without overloading the graphical interface. Command line Mikrotik (CLI) has a powerful syntax that allows you to perform complex operations in a single line.
To turn off WiFi via terminal, use the command disable in the context of the menu interface wirelessFirst, you need to navigate to the desired section or specify the full path to the command. For example, to disable the interface wlan1 the command will look like this:
/interface wireless disable wlan1If you need to disable all wireless interfaces at once, you can use wildcards or a loop. This is especially useful on devices with multiple radio modules, such as the CCR or hAP ax3. Team /interface wireless disable [find] Deactivates all found wireless interfaces on the router.
To turn the network back on, use the command enable with the interface name specified. The command syntax in Mikrotik It's logical and predictable, reducing the risk of input errors. Using the terminal also allows for automation of the process through scripts, which will be discussed in the following sections.
List of all interfaces
To quickly view the status of all interfaces, enter the /interface print command. The R (Running) column will display the status: R means the interface is running, and no letter means it is stopped.
Setting up an automatic WiFi schedule
One of the most popular features in offices and educational institutions is the automatic, scheduled Wi-Fi on/off switch. This saves energy, reduces electromagnetic radiation during off-hours, and improves network security at night. Task Scheduler (Scheduler) in Mikrotik copes with this task perfectly.
To set up automation, you'll need to create two scripts: one to turn on and one to turn off WiFi. Scripts are created in the section System → ScriptsIn the field Name Please provide a friendly name, for example WifiOn, and in the field Source Enter the command to enable the interface. The script is created in the same way. WifiOff with the shutdown command.
After creating the scripts, go to the section System → SchedulerHere we'll create two new tasks. The first task will run the WiFi shutdown script at a specific time, say, 8:00 PM. The second task will activate the startup script at 8:00 AM:
00. The interval can be specified in the format 1d, 08:00:00, which means launching every 24 hours at 8 am.
| Parameter | Value to include | Value for shutdown | Description |
|---|---|---|---|
| Name | StartWiFi | StopWiFi | Scheduler task name |
| Start Date | 2026-01-01 | 2026-01-01 | Effective Date |
| Start Time | 08:00:00 | 20:00:00 | lead time |
| Interval | 1d, 00:00:00 | 1d, 00:00:00 | Repeat every 24 hours |
| On Event | /interface wireless enable wlan1 | /interface wireless disable wlan1 | Executable command |
This setup ensures that the network is accessible only during business hours. It also helps prevent unauthorized access at night, when physical perimeter security may be relaxed. The system will operate autonomously even after a router reboot, as the settings are saved in the device's memory.
Network Hiding vs. Complete Disconnection
Users often confuse completely disabling the WiFi interface with hiding the network name (SSID). These two actions have fundamentally different effects. When you disable the interface, the radio stops emitting a signal, making the device undetectable by network scanners. This is a complete "lights out."
In the case of hiding the SSID (parameter hide-ssid=yes), the router continues to broadcast a signal and send beacon frames, but does not broadcast the network name openly. Client devices do not see the network in the list of available ones, but can connect to it if they know the exact name and password. is not a security method, since traffic and the presence of an access point are easily detected by special utilities.
Hiding the SSID can be useful in corporate environments to reduce visual noise in employee network lists, but it's ineffective for true data protection. Completely disabling the interface mentioned earlier is the only way to ensure that no one connects through this module.
If your goal is to simply remove a network from the lists on guests' phones, use the setting hide-ssid in the wireless security profile or interface. However, remember that this won't stop an attacker using a packet sniffer. For reliable protection, use complex WPA2/WPA3 passwords and MAC address filtering.
⚠️ Note: Hiding the SSID may cause connection issues for some older devices and smartphones that constantly scan the airwaves for "known" hidden networks, which increases their battery drain.
Optimization and security when WiFi is disconnected
When managing wireless networks, it's important to consider not only the actual act of turning them on or off, but also overall security. If you turn off WiFi for an extended period, it makes sense to also disable related services, such as DHCP server for a guest network or firewall rules allowing access from the wireless interface.
This will prevent situations where the interface was accidentally enabled but the security rules were left inactive or, conversely, too open. Mikrotik Firewall rules are often tied to the interface name (in-interface=wlan1). If the interface is removed or renamed, the rules may no longer work correctly.
It's also worth considering using separate VLANs for guest WiFi. This way, disabling the guest network won't affect the main office infrastructure. Separating traffic into logical layers is a network administration best practice. Even if the guest network is compromised or requires shutdown, the main network will remain protected.
Check your router logs regularly (Log) after manipulating wireless interfaces. Errors in scheduler scripts or setting conflicts can lead to unstable device operation. Timely detection of problematic log entries will help avoid network downtime.
☑️ Safety check before shutdown
Common problems and their solutions
During the setup process, situations may arise where the interface doesn't shut down or behaves unpredictably. One common cause is the presence of dependent services or scripts that attempt to force the interface to turn on. Check the task list in System → Scheduler for the presence of conflicts.
Another issue is related to drivers and hardware compatibility, especially on older models. MikrotikAfter the update RouterOS Some settings may reset or change behavior. Always check the changelog of the new version before updating to ensure compatibility with your configuration.
If the interface is stuck in the disabled state and does not turn on, try rebooting the device with the command /system rebootIn rare cases, reflashing the device or resetting the configuration to factory settings followed by manual configuration helps. Remember to back up the configuration before making any major changes.
⚠️ Note: Interfaces and available commands may vary depending on the RouterOS version (v6, v7) and device model (MIPS, ARM, Tile). Always consult the official documentation for your specific software version.
Is it possible to turn off WiFi for only certain clients?
No, disabling an interface affects all users. To restrict access for specific clients, use MAC address filters in the section Wireless → Access List or set up firewall rules to block traffic from specific IP addresses.
Does frequently turning WiFi on and off affect the lifespan of a router?
Modern equipment Mikrotik The device is designed for thousands of on/off cycles, programmed to withstand this. This has no negative impact. However, sudden power surges during physical power cycling can be harmful.
What should I do if I lose access to my router after turning off WiFi?
If you've disabled WiFi and lost remote access, the only solution is to connect physically via a LAN cable or console port. Make sure you always have wired access to the management device.
How to check if WiFi is really turned off?
Use a smartphone or laptop with a network scanner enabled. If the network doesn't appear in the list of available networks, and the utility WinBox interface status shows disabled, then WiFi is successfully disabled. You can also use the command /interface wireless monitor wlan1.