Hi,
i have put this code to wireless tables - access list but it does not seem to work. I wanted to setup 'if the signal drops under -75 then this client should disconnect from wlan'.
Any other suggestion?
tx
korg
Disconnect if signal drops under -75 dB
You do not have the required permissions to view the files attached to this post.
-
-
AlainCasault
Trainer
- Posts: 632
- Joined:
- Location: Prévost, QC, Canada
- Contact:
Re: Disconnect if signal drops under -75 dB
Hello Korg,
I've never tried the way you did it in your 1st entry, but that field is a range. "Lowest accepted" to "highest accepted" RSSI.
-75dBm is what?? Lowest, highest? Your router doesn't know. You should write -75..-30, for example. It'll refuse clients that are lower or higher than those numbers.
I'm guessing your 2nd example is to kick out clients with low signal, but you don't need to do it if your 1st entry works. Don't forget to uncheck "Default authenticate" in your wlan interface parameters to enforce the use of your access list entries.
Ciao,
AC
I've never tried the way you did it in your 1st entry, but that field is a range. "Lowest accepted" to "highest accepted" RSSI.
-75dBm is what?? Lowest, highest? Your router doesn't know. You should write -75..-30, for example. It'll refuse clients that are lower or higher than those numbers.
I'm guessing your 2nd example is to kick out clients with low signal, but you don't need to do it if your 1st entry works. Don't forget to uncheck "Default authenticate" in your wlan interface parameters to enforce the use of your access list entries.
Ciao,
AC
Re: Disconnect if signal drops under -75 dB
Thank you, its working. So, no default authentication and Access list with those entries...
great
korg
great
korg
Re: Disconnect if signal drops under -75 dB
@Korg Are you aware that the configuration does not do what you asked in your first post (and title)? The access list only affects connecting clients. After the client is connected it won't be disconnected even if the signal drops below the threshold. If the client gets disconnected, he won't be allowed back, though.
-
-
AlainCasault
Trainer
- Posts: 632
- Joined:
- Location: Prévost, QC, Canada
- Contact:
Re: Disconnect if signal drops under -75 dB
Hello Petri,@Korg Are you aware that the configuration does not do what you asked in your first post (and title)? The access list only affects connecting clients. After the client is connected it won't be disconnected even if the signal drops below the threshold. If the client gets disconnected, he won't be allowed back, though.
I re-read https://wiki.mikrotik.com/wiki/Manual:I ... ccess_List and I must agree with you on this. It is written that AP checks as STA connects. But!!!
I just made some test with a range of -45..0 and when I place a metal box over my client, it gets kicked out because of weak signal. I changed the access-list to -120..0 and the STA stays on (RSSI about -60dBm).
Also, I read this:
Code: Select all
signal-range (NUM..NUM - both NUM are numbers in the range -120..120; Default: -120..120)
Rule matches if signal strength of the station is within the range.
If signal strength of the station will go out of the range that is specified in the rule, access point will disconnect that station.
And looking at the logs, it's not as if the client left and came back. I never left the AP.
Regards,
Re: Disconnect if signal drops under -75 dB
Apparently I stand corrected. Live and learn 
The wiki page also contains this example stating clearly that the client will be disconnected:
The authentication=no part is the most misleading part. Authentication happens when the client connects, not during the connection. I do think it is more useful this way, however.
The wiki page also contains this example stating clearly that the client will be disconnected:For example, if client's signal during connection is -41 and we have ACL rule
Then connection is not matched to any ACL rule and if signal drops to -70..-80, client will not be disconnected.Code: Select all/interface wireless access-list add authentication=yes forwarding=yes interface=wlan2 signal-range=-55..0
To make it work correctly it is required that client is matched by any of ACL rules.
If we modify ACL rules in previous example to:
Then if signal drops to -56, client will be disconnected.Code: Select all/interface wireless access-list add interface=wlan2 signal-range=-55 add authentication=no forwarding=no interface=wlan2 signal-range=-120..-56
The authentication=no part is the most misleading part. Authentication happens when the client connects, not during the connection. I do think it is more useful this way, however.
-
-
AlainCasault
Trainer
- Posts: 632
- Joined:
- Location: Prévost, QC, Canada
- Contact:
Re: Disconnect if signal drops under -75 dB
I think that page has some errors.
Unless I forgot everything my Math teacher showed me, -41 IS within the -55 to 0 range, so it WILL match. It think they got it mixed up with
Now THAT would NOT match -41. And I'm very surprised they give this as an example since that field is supposed to be a range. But I haven't tested that yet.
I agree with you on the authentication=no part. I like to use it on my kids when I'm angry at them...
Best regards,
For example, if client's signal during connection is -41 and we have ACL ruleThen connection is not matched to any ACL rule ....Code: Select all/interface wireless access-list add authentication=yes forwarding=yes interface=wlan2 signal-range=-55..0
Unless I forgot everything my Math teacher showed me, -41 IS within the -55 to 0 range, so it WILL match. It think they got it mixed up with
Code: Select all
add interface=wlan2 signal-range=-55
Now THAT would NOT match -41. And I'm very surprised they give this as an example since that field is supposed to be a range. But I haven't tested that yet.
I agree with you on the authentication=no part. I like to use it on my kids when I'm angry at them...
Best regards,
Re: Disconnect if signal drops under -75 dB
I think the page is mostly correct. It needs only slight rephrasing.
I believe the author meant that the -41dBm signal IS matched by the rule, but there is no rule to apply if the signal drops - assuming the default is to authenticate. In the second example there is a rule to NOT authenticate -120...-56dBm clients.
The text could be improved by just removing the AND:
I believe the author meant that the -41dBm signal IS matched by the rule, but there is no rule to apply if the signal drops - assuming the default is to authenticate. In the second example there is a rule to NOT authenticate -120...-56dBm clients.
The text could be improved by just removing the AND:
(I just wasn't aware this is applied to already connected clients as well.)Then connection is not matched to any ACL rule and if signal drops to -70..-80, client will not be disconnected.