wifi cfg not applied to wifi interface?

Hi,

Followed this guide:
https://tangentsoft.com/mikrotik/wiki?name=Isolated%20Guest%20WiFi%20Sans%20VLANs

/interface wifi configuration add
name=guestcfg ssid=“Guest”
datapath.client-isolation=yes
security.authentication-types=wpa2-psk
.passphrase=yourGuestPSKgoesHere

/interface wifi add
name=wifi2g configuration=guestcfg
master-interface=wifi

Created these in GUI.
When Creating Config with passphrase an authentication type. Then creating the WiFi Interface the new interface shows up in device as no authentication requiered.

You need to show your complete wifi config for anyone to be able to tell where the problem is.

Terminal
/interface wifi
export file=anynameyouwish

Remove serial and passwds (just replace them so we know it’s there)
Then post contents between [__code] [/__code] quotes

# 2024-10-15 13:03:39 by RouterOS 7.16.1
# software id = F38L-N3QP
#
# model = C52iG-5HaxD2HaxD
/interface wifi
set [ find default-name=wifi1 ] channel.skip-dfs-channels=10min-cac \
    configuration.country=Estonia .mode=ap .ssid=home_5G disabled=\
    no
set [ find default-name=wifi2 ] channel.skip-dfs-channels=10min-cac \
    configuration.country=Estonia .mode=ap .ssid=home disabled=no
add configuration.mode=ap .ssid=Guest2 disabled=no mac-address=\
    1A:FD:74:C3:5C:2B master-interface=wifi1 name=wifi3 \
    security.connect-priority=0
add configuration.mode=ap .ssid=Guest2 disabled=no mac-address=\
    1A:FD:74:C3:5C:2C master-interface=wifi2 name=wifi4 \
    security.connect-priority=0
/interface wifi configuration
add datapath.client-isolation=yes disabled=no name=guestcfg \
    security.authentication-types=wpa2-psk .encryption="" ssid=Guest
/interface wifi
add configuration=guestcfg configuration.mode=ap datapath.client-isolation=no \
    disabled=no mac-address=1A:FD:74:C3:5C:2D master-interface=wifi2 name=\
    Guest security.authentication-types=wpa2-eap .encryption=""

Either apply settings on interface, either on configuration.
You have security defined in both places and different too.


/interface wifi configuration
add datapath.client-isolation=yes disabled=no name=guestcfg
security.authentication-types=wpa2-psk .encryption=“” ssid=Guest
/interface wifi
add configuration=guestcfg configuration.mode=ap datapath.client-isolation=no
disabled=no mac-address=1A:FD:74:C3:5C:2D master-interface=wifi2 name=
Guest security.authentication-types=wpa2-eap .encryption=“”

That is because i tested what happens if i add but removed now and still logs in. I see the output does not have passphrase defined but in gui it shows passphrase defined.

Created new Configuration and Wifi in WebFig.
Still .passphrase= option does not show when looking at config in terminal.
Is this a bug?

Be careful with webfig/winbox, an option folded open but not filled in, is something else then an option fold in.
The former is used but blank, the latter is not used.

Export should show you what’s being used and what value is applied.

You can see it in WebFig? You did set the passphrase in WebFig?

If you add the configuration through terminal (either directly or through Winbox/WebFig), is it there?

You can see it in WebFig? Yes
You did set the passphrase in WebFig? Yes
If you add the configuration through terminal (either directly or through Winbox/WebFig), is it there? Not sure how to add only passphrase.

I realize this is an old post - but Google led me to it today, when I discovered the same thing.
And, I think it's potentially a WinBox (or webfig) bug.

I always try and use config files, to simplify common items, and give myself "one place to adjust", right? That's what they are for.

I grew up on an Amiga, and not DOS or 'nix, and so you'll forgive me that I like the laid out nature of WinBox, where I can "see it all at a glance".

I would suggest, that when setting up wifi, the configuration file where I should be able to select WPA2/PSK, and put in the passphrase, is only passing the passphrase to the wifi interface it is attached to.

While I agree, that perhaps the wifi interface, via WinBox is saving a "no security" setting rather than NULL, that also would be a bug. I did try an "empty system" just now, enabling the wifi ONLY using the config file (config file attach, hit blue check) but that was no better. Just as ed28 said above... you get a passphrase attached, but you get a wifi interface with no security at all. :slight_smile:

Or if you don't WANT people to be able to set the security type in the config file... grey it out. Right?

I call bug... :wink:

OR - maybe the webfig/WinBox, needs another checkbox, for "No Secuity", rather than assuming that no checkboxes, means no security? I even tried rolling up the selection pane to see if that would help - no joy.