WiFi channel not allowed for your country or installation type

What the audit found

A wireless interface on your router is set to a fixed frequency whose channel is not allowed for the country and installation type you selected when running the audit. The finding names the channel and frequency and says whether it assumed an indoor or outdoor installation.

There are three variants. A channel can be forbidden in your regulatory domain — channels 149–165 at 5 GHz across most of Europe, or channels 12–14 at 2.4 GHz in the United States. It can be limited to indoor use only — in Europe, channels 36–48 may not be used outdoors. Or it can require DFS (radar detection): the channel is allowed, but the radio must be able to detect radar and move away. The audit reports the first two as high or medium and the DFS reminder as informational.

Why it matters

Each block of the 5 GHz band is shared with something: weather and aviation radar, satellite services, in some regions military systems. The limits on where and how a channel may be used exist to keep WiFi from interfering with them.

The failure mode is concrete. An outdoor point-to-point link on channel 40 in Europe transmits on a frequency reserved for indoor use, where walls are assumed to contain the signal; outdoors it can travel for kilometres and interfere with satellite uplinks. A radio on channel 153 in Europe operates in a band not allocated to WiFi there at all. In both cases the operator — you — is responsible, and national regulators do investigate interference complaints, particularly from airports and weather services.

There is a practical side too: clients follow their own firmware's regulatory domain, so a phone sold in Europe will not connect to an access point on channel 157. A forbidden channel often shows up as devices that mysteriously cannot see your network.

To keep the scale honest: this is a compliance and reliability finding, not a security one. Nobody breaks in because of the channel. But it is a real legal exposure and an easy one to remove.

What it looks like in Winbox

Open Wireless → WiFi Interfaces and double-click the interface. On the Wireless tab, Frequency shows a fixed value (for example 5200) rather than auto, Country shows the regulatory domain the radio believes it is in, and Installation — indoor, outdoor or any — tells the driver which limits to apply.

On RouterOS 7 with the wifi package, the same settings live under WiFi → WiFi on the Channel and Configuration tabs.

How to fix it

The simplest correct fix is to set the country and installation type and let the radio choose. Open the interface under Wireless → WiFi Interfaces, set Country to the country where the router actually operates, set Installation to indoor or outdoor as appropriate, and change Frequency from the fixed value to auto. The radio then only picks channels legal for that combination, handles DFS by itself, and prefers the least congested option. On the RouterOS 7 wifi driver, set the country in the Configuration tab and clear the fixed frequency in the Channel tab.

If you need a fixed channel — for a point-to-point link, or to avoid a neighbouring access point — choose one allowed for your installation. In Europe that means channels 36–140 indoors (DFS from channel 52 up) and 100–140 outdoors; in the United States, 36–48 and 149–165 avoid DFS entirely. Never use the superchannel frequency mode to get around a limit; that switches off the regulatory checks altogether and is a separate finding.

Changing the frequency briefly disconnects wireless clients, so do it out of hours — and if you manage the router over that same WiFi, use Safe Mode so a channel the clients cannot follow does not lock you out.

Afterwards, open the interface's Status tab: the channel shown should be a permitted one. With automatic selection the radio may take a minute — longer on DFS channels, where it must listen for radar first — before it starts transmitting. Confirm clients reconnect, then re-run the audit with the same country and installation type.

The full MKRouterKit report gives the exact commands for your configuration — with your interface names and subnets filled in, in the order that will not lock you out.

FAQ

I run an outdoor link and the audit says my channel is indoor-only. What are my options?

Move to the outdoor-permitted block — in Europe, channels 100–140, which require DFS. RouterOS handles DFS automatically when the country is set correctly, though the link drops briefly if radar is detected. If you need a DFS-free channel outdoors, the 2.4 GHz band or a licensed link are the alternatives.

The channel works fine and clients connect. Is it still a problem?

Yes. The router transmits on whatever you tell it; working is not the same as permitted. Interference with radar or satellite services is not something you notice from your side — the regulator's investigation starts from the other end.

Why does the audit ask for my country instead of reading it from the config?

The country in the configuration is what the router thinks, and it can be wrong — a device bought abroad, a template copied from another site. The audit compares the channel against where the router actually operates, which only you know.