Skip to main content
Version: 7.26

device-mode


system/device-mode​

Type: Settings Directory

Current device-mode settings. The mode and the per-feature switches apply at startup and can be changed only with update, which requires physical confirmation. See the Device mode guide.

Read-only ArgumentTypeDescription
modeenum

Current device mode.

  • advanced - For CCR and 1100 series devices; previously called enterprise.
  • basic - For most other devices.
  • home - For home routers.
  • rose - For RDS and similar devices with wide disk use.
allowed-versionsstringComma-separated list of RouterOS versions considered secure, used to block downgrades to vulnerable releases (for example 7.13+,6.49.8+). An upgrade to a release that ships a newer list updates it; a downgrade does not. Ignored when install-any-version is enabled.
flaggedboolWhether the device is in the flagged state: the startup configuration analysis found signs of unauthorized access and disabled the suspicious configuration. Reviewed and cleared with update flagged=no.
flagging-enabledboolWhether the configuration analysis for signs of unauthorized access runs at startup. Default: yes.
schedulerboolWhether /system/scheduler is allowed to perform actions.
socksboolWhether the SOCKS proxy in /ip/socks is allowed.
fetchboolWhether /tool/fetch is allowed.
pptpboolWhether /interface/pptp-client and /interface/pptp-server are allowed.
l2tpboolWhether /interface/l2tp-client and /interface/l2tp-server are allowed.
bandwidth-testboolWhether /tool/bandwidth-test, /tool/bandwidth-server and /tool/speed-test are allowed.
traffic-genboolWhether /tool/traffic-generator, /tool/flood-ping and /tool/ping-speed are allowed.
snifferboolWhether /tool/sniffer is allowed.
ipsecboolWhether /ip/ipsec is allowed.
romonboolWhether /tool/romon is allowed.
proxyboolWhether the web proxy in /ip/proxy is allowed.
hotspotboolWhether /ip/hotspot is allowed.
smbboolWhether /ip/smb is allowed.
emailboolWhether /tool/e-mail is allowed.
zerotierboolWhether /zerotier is allowed.
containerboolWhether container functionality (/container) is allowed.
install-any-versionboolWhether installing RouterOS versions outside the allowed-versions list is permitted.
partitionsboolWhether changing the partition count (/partitions) is allowed.
routerboardboolWhether changing /system/routerboard/settings options (except auto-upgrade) and the SwOS/RouterOS transition on dual-boot devices is allowed.
attempt-countnumNumber of unsuccessful device-mode update attempts since the last reset; a request that cancels a pending update does not count. After three, an update is refused and a reset window opens for the time set by the last activation-timeout; a button press or power cycle inside the window resets the counter. A confirmed update also resets it. Default: 0.