WiFi Authentication Methods

PSK using WPA2

/interface wifi security
add authentication-types=wpa2-psk disabled=no encryption=ccmp name=sec-psk passphrase=helloworld123
/interface wifi configuration
add datapath=datapath-20 disabled=no mode=ap name=cfg-main security=sec-psk ssid=MikroTikMasters

PSK using WPA3

/interface wifi security
add authentication-types=wpa3-psk disabled=no encryption=gcmp name=sec-psk-wpa3 passphrase=helloworld123
/interface wifi configuration
add datapath=datapath-20 disabled=no mode=ap name=cfg-main security=sec-psk-wpa3 ssid=MikroTikMasters

PSK using WPA2 & WPA3

/interface wifi security
add authentication-types=wpa2-psk,wpa3-psk disabled=no encryption=ccmp,gcmp management-protection=allowed name=sec-psk passphrase=helloworld123
/interface wifi configuration
add datapath=datapath-20 disabled=no mode=ap name=cfg-main security=sec-psk ssid=MikroTikMasters

PPSK (personal PSK) with VLANs

/interface wifi security
add authentication-types=wpa2-psk disabled=no multi-passphrase-group=sec-ppsk name=sec-ppsk

/interface wifi security multi-passphrase
add disabled=no group=sec-ppsk passphrase=helloworld20 vlan-id=20
add disabled=no group=sec-ppsk passphrase=helloworld30 vlan-id=30

/interface wifi configuration
add datapath.bridge=lan_bridge disabled=no mode=ap name=cfg-main security=sec-ppsk ssid=MikroTikMasters

OWE (Opportunistic Wireless Encryption)

/interface wifi security
add authentication-types=owe disabled=no name=sec-owe owe-transition-interface=auto
add disabled=no name=sec-open owe-transition-interface=auto

/interface wifi configuration
add datapath=datapath-20 disabled=no mode=ap name=cfg-main security=sec-open ssid=MikroTikMasters
add datapath=datapath-20 disabled=no hide-ssid=yes name=cfg-owe security=sec-owe ssid=MM-owe

/interface wifi
set [ find default-name=wifi1 ] channel=5GHZ::NON-DFS configuration=cfg-main configuration.mode=ap
set [ find default-name=wifi2 ] channel=2GHZ::AUTO  configuration=cfg-main configuration.mode=ap
add configuration=cfg-owe configuration.mode=ap master-interface=wifi1 name=wifi3
add configuration=cfg-owe configuration.mode=ap master-interface=wifi2 name=wifi4

Enterprise EAP (with RADIUS)

/interface wifi security
add authentication-types=wpa2-eap disabled=no eap-certificate-mode=no-certificates name=sec-eap

/interface wifi configuration
add datapath=datapath-20 disabled=no mode=ap name=cfg-mainsecurity=sec-eap ssid=MikroTikMasters

/radius
add address=<radius server IP> secret=helloworld123 service=hotspot,wireless

Hotspot (with RADIUS)

/interface wifi configuration
add datapath=datapath-30 disabled=no mode=ap name=cfg-guest security=sec-open ssid=MikroTikMasters

More related content