How to Change MikroTik Wi-Fi Router Settings: A Complete Guide with Examples

Routers MikroTik have long established themselves as reliable and flexible devices for organizing networks—from home access points to corporate infrastructures. However, their main advantage—extensive customization options—often becomes the main difficulty for users. If you're opening the web interface for the first time RouterOS or are you trying to figure out why your hAP ac² If you're distributing internet at dial-up speed, this article will help you take a systematic approach to changing the settings.

Unlike household routers with simplified menus, MikroTik Requires an understanding of networking principles: there's no magic "Boost Wi-Fi" button, but there are tools for fine-tuning optimization. We'll cover not only basic settings like changing the password or network name, but also advanced features— Speed ​​Limit for devices, setup CAPsMAN for managing multiple points, as well as diagnosing connection issues. Let's get to practice: from simple to complex.

Preparing to change settings: logging into the router and backing up

Before making changes, make sure you have access to the admin panel. MikroTikBy default, the device is accessible by IP address. 192.168.88.1 (if you haven't changed it before). To log in, use:

• 🔑 Login: admin (no password for new devices)
• 🔐 Password: leave the field blank or enter the one you set earlier

If the router is already configured, but you don’t remember the login details, you will have to perform hard reset (button Reset on the back panel is held for 5+ seconds). After resetting, all settings, including Wi-Fi passwords and firewall rules, will return to factory defaults—this is irreversible without a backup.

To avoid losing your configuration:

1. Go to System → Backup.
2. Click Backup and save the file to your computer.
3. To restore, use Restore in the same menu.

Basic Wi-Fi settings: network name, password, and channel

The most popular action is changing the network name (SSID) and password. In MikroTik This is done through the section Wireless:

1. Open Wireless → Security Profiles.
2. Select a profile (usually default) and in the field WPA2 Pre-Shared Key Enter a new password (minimum 8 characters, we recommend using password generator).
3. Go to Wireless → Interfaces, select your Wi-Fi interface (for example, wlan1).
4. Tab General: change SSID (network name) and make sure that in Security Profile The updated profile has been selected.

To optimize speed and stability:

• 📶 Tab Advanced: install Frequency manually (for example, 2412 for channel 1 or 5180 for 5 GHz). Automatic selection (auto) often chooses congested channels.
• 🔄 In Wireless → Country Select your country - this will unlock additional channels (for example, channels 12-13 in 2.4 GHz are available for Russia).
• 🚀 In HT (High Throughput) set chain0/chain1 to use both antennas (if available).

Security settings: firewall, MAC filtering, and guest access

By default MikroTik Doesn't block Wi-Fi connections, which can be unsafe. We recommend:

1. Disable WPS: V Wireless → Security Profiles make sure that WPS disabled (brute force vulnerability).
2. MAC filtering: V Wireless → Access List Add an allow rule for the MAC addresses of your devices (format: 00:1A:2B:3C:4D:5E).
3. Guest Wi-Fi: create a separate network with limited access to local resources:

   /interface wireless security-profiles add name=guest_profile mode=dynamic-keys
   /interface wireless add name=guest_wifi master-interface=wlan1 security-profile=guest_profile ssid=Guest_Network

To block unwanted connections:

• 🛡️ In IP → Firewall Add a rule that restricts access to the admin panel only for your IP:

  /ip firewall filter add chain=input src-address=!192.168.88.0/24 action=drop

• 🔍 Enable connection attempt logging: Wireless → Interfaces → [your Wi-Fi] → Advanced → Log=yes.

What to do if you forgot your Wi-Fi password?

If you haven't changed your security settings, your password can be found in Wireless → Security Profiles → [profile] → WPA2 Pre-Shared KeyIf access to the router is lost, a hard reset will be required (see the "Preparation" section).

Speed ​​Optimization: Bandwidth Limiting, QoS, and Scheduler

If the internet is slow on some devices, the cause may be uneven bandwidth distribution. MikroTik this is solved through Queue Tree:

1. Go to Queues → Queue Tree.
2. Add a new rule (Add New), select Simple Queue.
3. Please specify Target Address (IP devices) and limit Max Limit (For example, 10M/10M for 10 Mbps for download and upload).

To prioritize traffic (for example, for Zoom or online games):

• 🎮 In Queues → Queue Types create a type with priority 8 (maximum).
• 📊 In Mangle (IP → Firewall → Mangle) mark packets for prioritization:

  /ip firewall mangle add chain=prerouting dst-port=5060-5080 action=mark-packet new-packet-mark=voip passthrough=yes

  ( Here 5060-5080 — ports for VoIP).

For automatic lane allocation according to a schedule (for example, limit the speed at night):

1. Create Schedule V System → Scheduler (For example, night_limit from 23:00 to 7:00).
2. IN Queues add a rule with a condition Time=night_limit.

Make sure your overall internet speed is known (test at speedtest.net)

Write down the IP addresses of the devices for which restrictions are required

Check that there are no firewall rules that conflict with Queue Tree.

Create a backup copy of the settings-->

Sharing the Internet via Wi-Fi: Configuring DHCP and NAT

If the router does not distribute the Internet, the problem most often lies in NAT or DHCP. Check:

1. IP → DHCP Server: the server with the network must be turned on (for example, 192.168.88.0/24).
2. IP → Firewall → NAT: there must be a rule with action=masquerade for the WAN interface (e.g. ether1).

If devices receive an IP address but do not have internet access:

• 🌍 Check it out DNS V IP → DNS: Specify public DNS (eg. 8.8.8.8 And 1.1.1.1).
• 🔌 Make sure the WAN port (ether1) is connected to the provider and receives an IP (checked in IP → Addresses).

To distribute the Internet with MikroTik to other devices (for example, via Wi-Fi repeater):

1. Turn on WDS V Wireless → Interfaces → [your Wi-Fi] → WDS.
2. Add neighboring access points to the list WDS Peers.

Multiple Access Point Management (CAPsMAN)

If you have several MikroTik access points, CAPsMAN (Controlled Access Point Manager) allows you to manage them centrally. Configuration:

1. Turn on CAPsMAN V Wireless → CAPsMAN.
2. Create Security And Datapath profiles (similar to a single point).
3. On slave devices in Wireless → CAP Specify the IP of the main router.

Advantages of CAPsMAN:

• 🔄 Automatic roaming between points (devices switch without breaking the connection).
• 📊 Centralized logs and statistics for all points.
• 🔒 Unified security settings for the entire network.

To diagnose problems with CAPsMAN:

• Check that on the slave devices in Wireless → Registration Table The main router is displayed.
• Make sure the ports UDP 5246-5247 are not blocked by the firewall.

Troubleshooting: No connection, low speed, disconnections

If your Wi-Fi is unstable, use built-in tools MikroTik:

Typical solutions:

• 📉 If the speed drops over long distances: reduce TX Power V Wireless → Interfaces (meaning 17 dBm often optimal for home use).
• 🔄 If there are frequent interruptions: turn it off 802.11r (Fast Transition) in security settings - it may conflict with older devices.
• 🛠️ If your router is overheating: check the temperature in System → Health (critically higher 70°C).

Additional features: VPN, HotSpot, and monitoring

Routers MikroTik support advanced scenarios:

• 🔐 VPN server: set up PPTP or L2TP V PPP for secure remote access.
• ☕ HotSpot: guest portal with authorization (configured in IP → HotSpot).
• 📈 Monitoring: export statistics to Graphing or connect SNMP for integration with Zabbix.

Example of setup PPTP VPN:

/interface pptp-server server set enabled=yes
/ppp secret add name=user password=12345 service=pptp

For HotSpot:

1. Create a server in IP → HotSpot → Setup.
2. Set up a login page in IP → HotSpot → HTML.
3. Limit speed for guest users via Queues.

How to update MikroTik firmware without losing settings?

1. Download the latest version of RouterOS from the official website.

2. In System → Packages click Check For Updates.

3. If an update is available, select Download & Install.

4. After rebooting, the settings will be saved, but we recommend making a backup first (see the "Preparation" section).

FAQ: Answers to frequently asked questions

Can MikroTik be used as a repeater for another router?

Yes, but it requires some configuration. WDS or regime Station PseudobridgeIn the first case, both routers must support WDS, in the second case, MikroTik Connects to the primary access point as a client and distributes the internet further. Learn more:

1. IN Wireless → Interfaces create a new interface in mode station-pseudobridge.
2. Connect to the main network by specifying it SSID and password.
3. Set up NAT And DHCP to distribute the Internet to local devices.

Why don't devices connect after changing the Wi-Fi password?

Possible reasons:

• The password contains invalid characters (e.g., Cyrillic characters or spaces). Use only Latin characters and numbers.
• Changes not applied: after changing the password in Security Profiles click Apply and reboot the router.
• Devices cache old settings: on the client, "forget the network" and reconnect.

How to restrict access to certain websites?

Use Layer7 Filter or DNS-redirect:

1. Download regular expressions for blocking (for example, for social networks) in IP → Firewall → Layer7 Protocols.
2. Add a rule to IP → Firewall → Filter Rules with action drop for traffic.

Alternative: Redirect DNS queries to blocking servers (eg. 94.140.14.14 For AdGuard DNS).

Which MikroTik model should I choose for a home with 50 devices?

Recommended models (2026):

• hAP ac² (RB962UiGS-5HacT2HnT) — optimal for apartments (dual range, 5 Gigabit ports).
• Audience (RB412UAR-RM) — for large homes (powerful antennas, support for 802.11ac wave2).
• Hex S (RB760iGS) is a budget option without Wi-Fi (a separate access point is required).

Selection criteria: for 50 devices, a dual-band router with support is sufficient MU-MIMO (For example, hAP ac²).

How to reset MikroTik to factory settings if you forgot the password?

Do it hard reset:

1. Turn off the power of the router.
2. Press and hold the button Reset (usually next to the Ethernet port).
3. Without releasing the button, connect the power and hold for 10-15 seconds until the indicator flashes ACT.
4. Release the button - the router will reset and reboot with factory settings (IP 192.168.88.1, login admin, the password is empty).

⚠️ Please note: After resetting, all settings, including firewall and Wi-Fi rules, will be lost. If your router was configured by your ISP, you may need to reconfigure PPPoE or VLAN settings.