The device-mode is a feature in RouterOS that , which sets specific limitations to on a device for accessing specific configurations, or limits access to specific configuration options.
There are two available modes: enterprise and home. By default, all devices have a mode: enterpriseuse the mode enterprise, which allows all funtionality.
| Code Block | ||
|---|---|---|
| ||
[admin@MikroTik] > system/device-mode/print mode: enterprise |
enterprise is a mode that allows all functions on the device. Currently, the only additional mode is home, which implies limited functionality. The device mode can be changed by the user, but remote access to the device is not enough to change it. After changing the device-mode, using the update command, you need to confirm it, by pressing a button on the device itself, or perform a "cold reboot" - that is, unplug the power:
...
If no power off or button press is performed within the specified time, the mode change is canceled. If another update command is run in parallel, both will be canceled.
| Note |
|---|
It is possible that in the future there will be a number of devices that will be set to mode home at the factory, which means that they will reach users with limited functionality, and then if you want advanced features, you will have to change it yourselfto enterprise manually. |
Properties
Following The following properties are available in thesystem/device-mode/console path menu.
| Property | Description |
|---|---|
get | Returns value that you can assign to variable or print on the screen. |
| Shows the active mode and its properties. | |
| update | Updates selected properties. |
...
Property | Description |
|---|---|
| container, fetch, scheduler, traffic-gen, ipsec, pptp, smb, l2tp, proxy, sniffer, zerotier, bandwidth-test, email, hotspot, romon, socks. (yes | no; Default: yes, for enterprise mode) | The list of available features, which can be disabled controlled with the device-mode option. |
| activation-timeout (default: 5m); | The reset button or power off activation timer can be set in range ( 00:00:10 .. 1d00:00:00). |
| flagging-enabled (yes | no; Default: yes) | Enable or disable the flagging feature flagged status. See Flagged notice below for a detailed description. |
| flagged (yes | no; Default: no) | If RouterOS employs various mechanisms to detect tampering with it's system files. If the system has detected unauthorized access to RouterOS, the status "flagged" is set to yes. If "flagged" is set to yes, for your safety, certain limitations are put in place. See below chapter for more information. |
| mode: (home, enterprise; default: enterprise); | Allows choosing from available modes that will limit device functionality. In the future, various modes can be added. By default, enterprise mode allows all options except container. So to use the container feature, you will need to turn it on by performing a device-mode update. By default, home mode disables the following features: scheduler, socks, fetch, bandwidth-test, traffic-gen, sniffer, romon, proxy, hotspot, email, zerotier, container. |
...