802.1X — Client

ToolsCopy Anchor Link

• Add 802.1X Supplicant Client
• List 802.1X Supplicant Clients
• Get 802.1X Supplicant Client Detail
• Update 802.1X Supplicant Client
• Remove 802.1X Supplicant Client

add_dot1x_clientCopy Anchor Link

Add 802.1X Supplicant Client · Risk: write

Adds an 802.1X supplicant client entry on a specific interface (/interface dot1x client add) so the router authenticates itself to an upstream 802.1X authenticator (e.g. a managed switch or wireless AP). Use this when the MikroTik device is the supplicant (client) side of 802.1X — not the server/authenticator side. eap_methods is a comma-separated list, e.g. 'eap-tls', 'eap-peap', 'eap-mschapv2', 'eap-ttls'; certificate is required for eap-tls; identity/password are required for password-based EAP methods. Returns the created entry's full detail (including its .id) which is used by update_dot1x_client, get_dot1x_client, and remove_dot1x_client.

list_dot1x_clientsCopy Anchor Link

List 802.1X Supplicant Clients · Risk: read

Lists all 802.1X supplicant client entries configured on the device (/interface dot1x client print). Optionally filters by interface name (interface_filter), authentication status string (status_filter, e.g. 'authenticated', 'authenticating'), or disabled state (disabled_only). Returns a table of all matching supplicant entries with their interface, EAP method, and status; for full detail on a single entry use get_dot1x_client.

get_dot1x_clientCopy Anchor Link

Get 802.1X Supplicant Client Detail · Risk: read

Fetches full detail for a single 802.1X supplicant client entry (/interface dot1x client print detail). Accepts either an interface name (e.g. 'ether3') or a RouterOS .id string (e.g. '*1') from list_dot1x_clients as client_id — tries .id lookup first, then falls back to interface name. Returns the complete supplicant configuration including EAP method, identity, certificate, and current authentication status. For a bulk view of all entries use list_dot1x_clients.

update_dot1x_clientCopy Anchor Link

Update 802.1X Supplicant Client · Risk: write-idempotent

Modifies an existing 802.1X supplicant client entry (/interface dot1x client set) identified by interface name or RouterOS .id from list_dot1x_clients. client_id accepts an interface name (e.g. 'ether3') or a .id string starting with '*'. Only supplied fields are changed; pass comment="" to clear the comment. Returns the updated entry's full detail after the change. To add a new supplicant entry use add_dot1x_client; to delete one use remove_dot1x_client.

remove_dot1x_clientCopy Anchor Link

Remove 802.1X Supplicant Client · Risk: destructive

Removes an 802.1X supplicant client entry (/interface dot1x client remove) identified by interface name or RouterOS .id from list_dot1x_clients. client_id accepts an interface name (e.g. 'ether3') or a .id string starting with '*'. Verifies the entry exists with a count-only check before deletion and returns an error if not found. Permanently stops 802.1X authentication on that interface; to temporarily halt authentication without deleting the entry use update_dot1x_client with disabled=true.