hAP ax3 - /Interface/Wireless over to /interface/WiFi

hAP ax3 - Lastest firmware :mrgreen:

Since RouterOS 7.13 , they had added that /interface/Wifi section.

My router’s wireless was setup directly from the wireless interface.

What would my best way to stop using the interface directly, and take advantage of Wifi ? Would best be just to Reset the wireless interfaces , and setup wireless from the wifi panel ?

Seems to be alot more options under /interface wifi. than /interface/wireless .


Here is my current config

# 2025-02-20 12:36:00 by RouterOS 7.17.2


#

# model = RBD53iG-5HacD2HnD



/interface bridge

add admin-mac=DC:2C:6E:5A:56:A8 auto-mac=no comment=defconf name=bridge port-cost-mode=short

add name=bridge2 port-cost-mode=short

/interface ethernet

set [ find default-name=ether1 ] rx-flow-control=auto tx-flow-control=auto

set [ find default-name=ether2 ] rx-flow-control=on tx-flow-control=on

set [ find default-name=ether3 ] comment=xbox rx-flow-control=auto tx-flow-control=auto

set [ find default-name=ether4 ] rx-flow-control=auto tx-flow-control=auto

set [ find default-name=ether5 ] rx-flow-control=on tx-flow-control=on

/interface list

add comment=defconf name=WAN

add comment=defconf name=LAN

/interface lte apn

set [ find default=yes ] ip-type=ipv4 use-network-apn=no

/interface wifi channel

add band=5ghz-ax disabled=no name=wifi6AX width=20/40/80mhz

/interface wireless security-profiles

set [ find default=yes ] supplicant-identity=MikroTik

add authentication-types=wpa2-psk mode=dynamic-keys name=wpa2 supplicant-identity=MikroTik

/interface wireless

set [ find default-name=wlan1 ] adaptive-noise-immunity=ap-and-client-mode antenna-gain=1 band=2ghz-b/g/n channel-width=20/40mhz-XX country="united states3" disabled=no installation=indoor mode=\

    ap-bridge security-profile=wpa2 ssid=homenet2 wireless-protocol=802.11

set [ find default-name=wlan2 ] adaptive-noise-immunity=ap-and-client-mode antenna-gain=0 band=5ghz-a/n/ac channel-width=20/40/80mhz-XXXX disabled=no frequency=auto installation=indoor mode=ap-bridge \

    security-profile=wpa2 ssid=homenet5 wireless-protocol=802.11

/ip pool

add name=default-dhcp ranges=192.168.88.10-192.168.88.254

add name=wired-pool ranges=10.0.0.2-10.0.0.254

/ip dhcp-server

add address-pool=wired-pool interface=bridge2 lease-time=10m name=dhcp2

/ip smb users

set [ find default=yes ] disabled=yes

/queue tree

add disabled=yes name=eth-cakewalk parent=ether2

/queue type

add kind=cake name=cakekind

add kind=pcq name=download-test-pcq

add kind=fq-codel name=fq-codel

/queue interface

set ether1 queue=default

set ether2 queue=cakekind

set ether3 queue=cakekind

set wlan1 queue=cakekind

set wlan2 queue=cakekind

/queue simple

add max-limit=10M/900M name=openthrottle queue=cakekind/cakekind target=wlan2 total-queue=cakekind

add max-limit=5M/900M name=cake queue=cakekind/cakekind target=wlan1 total-queue=cakekind

add max-limit=50M/900M name=bufferbloat-test-cake queue=cakekind/cakekind target=ether2 total-queue=cakekind

add disabled=yes name=xbox- queue=cakekind/cakekind target=ether3 total-queue=cakekind

/ip dhcp-server

add address-pool=default-dhcp insert-queue-before=cake interface=bridge lease-time=10m name=defconfdhcp1

/queue tree

add disabled=yes name=queue1-fq-ocodel parent=wlan2 queue=fq-codel

add disabled=yes name=wlan2-cakewalk parent=wlan1 queue=cakekind

add disabled=yes name=global-que parent=global queue=fq-codel

/snmp community

set [ find default=yes ] addresses=0.0.0.0/0 authentication-protocol=SHA1 encryption-protocol=AES security=private write-access=yes

add addresses=::/0 disabled=yes name=PRTG

/system logging action

set 3 remote=10.0.0.2

/interface bridge port

add bridge=bridge2 comment=defconf ingress-filtering=no interface=ether2 internal-path-cost=10 path-cost=10

add bridge=bridge comment=defconf ingress-filtering=no interface=ether3 internal-path-cost=10 path-cost=10

add bridge=bridge comment=defconf ingress-filtering=no interface=ether4 internal-path-cost=10 path-cost=10

add bridge=bridge comment=defconf ingress-filtering=no interface=ether5 internal-path-cost=10 path-cost=10

add bridge=bridge comment=defconf ingress-filtering=no interface=wlan1 internal-path-cost=10 path-cost=10

add bridge=bridge comment=defconf ingress-filtering=no interface=wlan2 internal-path-cost=10 path-cost=10

/interface bridge settings

set use-ip-firewall=yes

/ip firewall connection tracking

set udp-timeout=10s

/ip neighbor discovery-settings

set discover-interface-list=LAN

/ipv6 settings

set disable-ipv6=yes max-neighbor-entries=8192

/interface detect-internet

set detect-interface-list=all internet-interface-list=all lan-interface-list=all

/interface list member

add comment=defconf interface=bridge list=LAN

add comment=defconf interface=ether1 list=WAN

add comment=defconf2 interface=bridge2 list=LAN

/interface ovpn-server server

add auth=sha1,md5 mac-address=FE:3D:CF:FD:92:58 name=ovpn-server1

/ip address

add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0

add address=10.0.0.1/24 comment=hardwiredpcs interface=bridge2 network=10.0.0.0

add address=98.164.6.235/22 interface=ether1 network=98.164.4.0

/ip dhcp-client

add comment=defconf interface=ether1

/ip dhcp-server lease

add address=192.168.88.240 client-id=1:d8:e2:df:19:c3:9f mac-address=D8:E2:DF:19:C3:9F server=defconfdhcp1

/ip dhcp-server network

add address=10.0.0.0/24 comment=wiredpcsnet gateway=10.0.0.1 netmask=24

add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1

/ip dns

set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4

/ip dns static

add address=192.168.88.1 comment=defconf name=router.lan type=A

/ip firewall filter

add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked

add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid

add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp

add action=accept chain=input comment="defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1

add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN

add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec

add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec

add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related hw-offload=yes

add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked

add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid

add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN

/ip firewall nat

add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN

/ip hotspot profile

set [ find default=yes ] html-directory=hotspot

/ip ipsec profile

set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5

/ip service

set ssh disabled=yes

set www-ssl disabled=no

/ip smb shares

set [ find default=yes ] directory=/pub

/ip traffic-flow

set active-flow-timeout=1m interfaces=wlan2,ether3

/ip traffic-flow target

add dst-address=10.0.0.2 v9-template-refresh=30 v9-template-timeout=30s version=ipfix

/routing bfd configuration

add disabled=no

/snmp

set contact=brandontict@gmail.com enabled=yes location=Kansas trap-version=3

/system clock

set time-zone-name=America/Chicago

/system identity

set name=RouterOS

/system leds

set 4 interface=wlan2 type=interface-status

set 5 interface=wlan2 type=wireless-signal-strength

/system note

set show-at-login=no

/tool graphing interface

add

/tool graphing queue

add

/tool graphing resource

add

/tool mac-server

set allowed-interface-list=LAN

/tool mac-server mac-winbox

set allowed-interface-list=LAN

/tool traffic-monitor

add interface=bridge name=trafficmon

/interface wireless

/interface wireless security-profiles

set [ find default=yes ] supplicant-identity=MikroTik

add authentication-types=wpa2-psk mode=dynamic-keys name=wpa2 supplicant-identity=MikroTik

/interface wireless

set [ find default-name=wlan1 ] adaptive-noise-immunity=ap-and-client-mode antenna-gain=1 band=2ghz-b/g/n channel-width=20/40mhz-XX country="united states3" disabled=no installation=indoor mode=\

    ap-bridge security-profile=wpa2 ssid=homenet2 wireless-protocol=802.11

set [ find default-name=wlan2 ] adaptive-noise-immunity=ap-and-client-mode antenna-gain=0 band=5ghz-a/n/ac channel-width=20/40/80mhz-XXXX disabled=no frequency=auto installation=indoor mode=ap-bridge \

    security-profile=wpa2 ssid=homenet5 wireless-protocol=802.11

[admin@RouterOS] /interface/wireless>

/interface wifi - I had added a channel / band , and nothing else

[admin@RouterOS] /interface/wifi> export 

/interface wifi channel

add band=5ghz-ax disabled=no name=wifi6AX width=20/40/80mhz

[admin@RouterOS] /interface/wifi>

Does this make sense?

My router did not have the wifi " configuration " menu when I had setup.

I will reset my wireless interfaces and then setup shop over at the wifi menu.


Perhaps I’ll write a script to use the values from the interface config over to wifi config , Such as SSID, Mode , Band , Country , Security , etc.

  1. Thats an ac3 :smiley:
    ax3 is a different device

  2. WiFi is the “new” driver and to use it you will need to install “wifi-qcom-ac”. To stop using “wireless” you also must uninstall the package.

  3. You should remove software-id and serial from config when you post here.
    Maybe also remove more sensitive information if present (didnt check the config other than wireless)

Otherwise yes you can configure wifi (mostly) like wireless and it will (should) work.
Keep in mind theres no “ap-bridge” mode on wifi. Just ap. Which covers ap-bridge too

did not know how to exactly explain my situation.

I noticed that that they now have that separate wifi package. I’ll swap it out for wifi-qcom-ac .

Thank you for the explanation , and the tip about excluding info.

How big of impact switching to those drivers?

I did not know the chip set supported 5ghz-ax band. Thats the band I should use, if I want most squeeze right?

The hAP Ax3 product page mentions WiFi 5 , WiFi 6.

What are you talking about? You don’t have hAP ax3, you have hAP ac3! Take a look on model in export - RBD53iG-5HacD2HnD means hAP ac3

But I definitely recommend installing the new drivers, they are much better (unless you need specific features they don’t support).

https://help.mikrotik.com/docs/spaces/ROS/pages/224559120/WiFi#WiFi-Replacing’wireless’package