device-mode
system/device-mode
Type: Settings Directory
Current device-mode settings. The mode and the per-feature switches apply at startup and can be changed only with update, which requires physical confirmation. See the Device mode guide.
| Read-only Argument | Type | Description |
|---|---|---|
| mode | enum | Current device mode.
|
| allowed-versions | string | Comma-separated list of RouterOS versions considered secure, used to block downgrades to vulnerable releases (for example 7.13+,6.49.8+). An upgrade to a release that ships a newer list updates it; a downgrade does not. Ignored when install-any-version is enabled. |
| flagged | bool | Whether the device is in the flagged state: the startup configuration analysis found signs of unauthorized access and disabled the suspicious configuration. Reviewed and cleared with update flagged=no. |
| flagging-enabled | bool | Whether the configuration analysis for signs of unauthorized access runs at startup. Default: yes. |
| scheduler | bool | Whether /system/scheduler is allowed to perform actions. |
| socks | bool | Whether the SOCKS proxy in /ip/socks is allowed. |
| fetch | bool | Whether /tool/fetch is allowed. |
| pptp | bool | Whether /interface/pptp-client and /interface/pptp-server are allowed. |
| l2tp | bool | Whether /interface/l2tp-client and /interface/l2tp-server are allowed. |
| bandwidth-test | bool | Whether /tool/bandwidth-test, /tool/bandwidth-server and /tool/speed-test are allowed. |
| traffic-gen | bool | Whether /tool/traffic-generator, /tool/flood-ping and /tool/ping-speed are allowed. |
| sniffer | bool | Whether /tool/sniffer is allowed. |
| ipsec | bool | Whether /ip/ipsec is allowed. |
| romon | bool | Whether /tool/romon is allowed. |
| proxy | bool | Whether the web proxy in /ip/proxy is allowed. |
| hotspot | bool | Whether /ip/hotspot is allowed. |
| smb | bool | Whether /ip/smb is allowed. |
| bool | Whether /tool/e-mail is allowed. | |
| zerotier | bool | Whether /zerotier is allowed. |
| container | bool | Whether container functionality (/container) is allowed. |
| install-any-version | bool | Whether installing RouterOS versions outside the allowed-versions list is permitted. |
| partitions | bool | Whether changing the partition count (/partitions) is allowed. |
| routerboard | bool | Whether changing /system/routerboard/settings options (except auto-upgrade) and the SwOS/RouterOS transition on dual-boot devices is allowed. |
| attempt-count | num | Number of unsuccessful device-mode update attempts since the last reset; a request that cancels a pending update does not count. After three, an update is refused and a reset window opens for the time set by the last activation-timeout; a button press or power cycle inside the window resets the counter. A confirmed update also resets it. Default: 0. |