Establishing a wireless connection from a MikroTik router to an existing network is often the only way to provide internet access to remote rooms or sites where cable installation is impossible. Unlike standard home routers, this brand's equipment features the flexible RouterOS operating system, which allows the device to become a powerful signal receiver. Client mode It allows you to receive Internet over the air and distribute it further through LAN ports or create a new access point.
The setup process requires careful attention, as the WinBox and WebFig interfaces may seem complex to a beginner. However, once you understand the interface logic, you'll have a stable connection that, in many cases, is more reliable than standard USB dongles. We'll cover two main scenarios: creating a simple NAT client and setting up a transparent bridge Station Bridge.
Before you begin, make sure your MikroTik router has a built-in wireless module, which is typical for most models in the hAP, cAP, and wAP series. You'll also need a computer with the WinBox utility installed or access to the router's web interface. Wireless The protocols can operate at 2.4 GHz and 5 GHz frequencies, the choice depends on the airwave congestion and equipment capabilities.
⚠️ Attention: When updating the firmware or resetting the settings, make sure you are in an area with a strong signal from the main router; otherwise, after rebooting, the device may lose connection with the administrator.
Preparing equipment and resetting settings
The first step should always be to clear the configuration of previous experiments. Old firewall rules or incorrect IP addresses can prevent you from connecting to a Wi-Fi network. It is recommended to do this. Hard Reset or reset via the Reset button on the device body, holding it until the ACT indicator flashes.
After booting into a clean RouterOS, you need to access the device. By default, the IP address is usually 192.168.88.1, and the login is admin without a password. Connect the computer with a cable to any LAN port (except the first one, if it's marked as WAN, although in a clean configuration this often doesn't matter) and launch WinBox. Go to the tab Neighbors and find your router in the list.
It's important to update your firmware to the latest version immediately, as older builds may contain bugs affecting the wireless module. Go to the menu System → Packages and press the button Check for UpdatesIf a new version is available, click Download & InstallAfter the update, the device will reboot.
- 🔌 Connect your computer to MikroTik using a network cable.
- 📟 Reset the router to factory settings if it has been in use.
- 📡 Make sure the wireless module antennas are securely screwed in.
- 💻 Install the latest version of the WinBox utility from the official website.
Scanning the air and selecting a frequency
Before setting up a connection, you need to find the target network and assess the signal quality. In the menu Wireless go to the tab Interfaces and double-click on the interface wlan1 (or similar). Go to the tab Wireless and press the button Scan.
The window that opens will display a list of all available networks within range. Please note the column Signal StrengthFor stable operation, it's recommended to choose a network with a signal strength of at least -75 dBm. If the signal is weaker than -80 dBm, the connection speed will be low and the ping will be high, making internet use uncomfortable.
It's also important to pay attention to the channel the target network is using. If you're in an apartment building, the airwaves may be heavily polluted. In this case, it might be worth trying to connect to a network operating on a less crowded frequency or switching your router to 5 GHz mode if the target access point supports this standard.
Select the desired network from the scan list and click the button Connect (or Connect To). The system will automatically enter the SSID and frequency into the interface settings. Do not close the scanning window until you are sure the parameters have been transferred correctly.
Setting up Station Bridge mode (Transparent Bridge)
Mode Station Bridge This is the most technically correct connection method. In this case, your MikroTik becomes transparent to the network: all devices connected to it will receive IP addresses from the main router while being on the same subnet. This is ideal for extending Wi-Fi coverage or merging network segments.
To implement this scheme, WDS or Station Bridge mode must also be enabled on the main router (access point). If the main router is a provider device with restricted access, this method may not work. In the menu Wireless on the tab Interfaces set the parameter Mode in meaning station-bridge.
Next, you need to create a virtual bridge interface. Go to the menu Bridges, create a new bridge (for example, bridge1) and add ports to it: your LAN (for example, ether2-ether5) and wireless interface wlan1Important: In Station Bridge mode, you can't simply add wlan1 to the bridge; you need to use WDS or settings. However, in modern versions of RouterOS v7, it's easy enough to add interfaces to the Bridge if wlan1 mode is set correctly.
| Parameter | Value for Station | Value for AP | Description |
|---|---|---|---|
| Mode | station-bridge | ap-bridge | Radio card operating mode |
| SSID | Network name | Network name | Must match |
| WDS Mode | dynamic | dynamic | For the transparency of the bridge |
| Security | WPA2 | WPA2 | Encryption type |
⚠️ Attention: Station Bridge mode only works with MikroTik equipment or compatible devices on the access point side. Connecting directly to a provider's router (e.g., TP-Link or ASUS) in Station Bridge mode is often impossible without configuring WDS on the AP side.
After adding interfaces to the bridge, ensure that IP addressing is configured correctly. In bridge mode, the MikroTik router itself and all clients connected to it must receive IP addresses from the main DHCP server. To do this, go to the menu IP → DHCP Client add a client to the interface bridge1 and make sure the box is checked Add Default Route.
Configuring Station mode (NAT client)
If the bridge mode is not available or not required (for example, you want to isolate your network from the main one), the bridge mode is used. Station With NAT enabled. In this case, MikroTik creates its own subnet. All devices behind it will see the internet, but will be hidden behind double NAT.
In the interface wlan1 change the mode to stationUnlike bridge, it is not necessary (and often not necessary) to add wlan1 to the bridge along with the LAN ports, although a bridge is often created for ease of management. bridge-local, which connects all LAN ports. The wireless interface in this case acts as a WAN port.
The key here is to configure the DHCP Client. Go to IP → DHCP Client, click "+" and select the interface wlan1. Make sure the option is Use Peer DNS And Add Default Route active. This will allow the router to automatically obtain an IP address, DNS, and gateway from the main network.
☑️ Checking NAT settings
Now you need to set up Network Address Translation (NAT). Go to IP → Firewall, tab NAT. Add a new rule: Chain: srcnat, Out. Interface: wlan1, Action: masqueradeWithout this rule, devices on your local network will not be able to access the Internet.
Wireless Security and Profiles
Most modern networks are password protected. To enter the encryption key, go to the menu Wireless, tab Security ProfilesCreate a new profile or edit an existing one. defaultIn the field WPA Pre-Shared Key Enter the password for the Wi-Fi network you are connecting to.
It is important to choose the right authentication modes. The most commonly used ones are WPA2 and encryption AES CCMPIf you are connecting to an older network, you may need to TKIP, but this reduces security and speed. Make sure that in the interface settings wlan1 in the field Security Profile The profile you entered the password for is selected.
To enhance the security of your own network (if you share Wi-Fi), we recommend disabling WPS and using a strong passphrase. It's also a good idea to hide your network's SSID if it's not intended for guests, although this isn't a complete defense against hacking.
- 🔐 Use complex passwords longer than 12 characters.
- 🛡️ Give preference to the WPA2/WPA3 protocol.
- 🚫 Disable unused management services (Telnet, FTP).
- 📝 Regularly change your router admin panel passwords.
Connection diagnostics and typical errors
If the connection fails, first check the logs. In WinBox, go to Log and filter messages by word wireless. You can often see the reason for the refusal there: "disconnected: received disassoc: sending station leaving" or authentication errors.
One common issue is a mismatch of frequency bands. If your MikroTik only supports 2.4 GHz (802.11b/g/n), it won't physically detect a 5 GHz network (802.11ac/ax). Check the specifications for your model in the section System → Resources or on the device box.
What to do if you see a signal but there is no internet?
If the connection status is "Connected" but the internet isn't working, check the NAT rule in your firewall and the DHCP Client status. Often, the problem is that the main router has assigned an address but hasn't passed on the DNS servers. Try manually entering the DNS in IP -> DNS.
It's also worth checking whether the main router is blocking new devices by MAC address. If filtering is used, you need to whitelist the MAC address of the MikroTik wireless interface on the access point. You can find the MAC address in the interface status. wlan1.
⚠️ Attention: Interfaces and menu names may differ slightly depending on the RouterOS version (v6 or v7). Version 7 has changed the Wireless menu structure and driver management methods.
For in-depth diagnostics, use the built-in tools. Team /tool ping will help check the gateway's availability. The utility /tool traceroute will show the packet's path. If the ping to the gateway is high, the problem is in the radio channel (interference, distance).
Speed and stability optimization
After a successful connection, it's time to perform optimization. Make sure the channel width matches the hardware capabilities. For 2.4 GHz, it's often better to use 20MHz instead of 40 MHz to avoid interference from neighboring networks, which paradoxically can increase the actual speed.
Enable protocol NV2 or TDMAIf both devices are MikroTik and in point-to-point mode, this will significantly reduce latency and increase throughput compared to standard 802.11. However, to connect to a regular router, leave the standard protocols.
The final step is to save the configuration. Although RouterOS saves changes immediately, it is recommended to make a backup. Go to Files and press BackupSave the file to your computer. This will allow you to quickly restore network functionality in the event of a hardware failure.
Is it possible to connect MikroTik to Wi-Fi with authorization via a web page (Captive Portal)?
Yes, this is possible, but it requires additional configuration. The standard client doesn't automatically authenticate via web authentication. You need to set up an HTTP proxy or use scripts that emulate data entry. The easiest way is to connect a computer to such a router, authenticate, and then clone the computer's MAC address to the wlan1 interface of the MikroTik router.
What is the maximum operating range in client mode?
Range depends on the antennas and frequency. At 2.4 GHz, reliable reception is possible with the standard antennas at ranges of up to 30-50 meters with a direct line of sight. For ranges of several kilometers, directional antennas and operation in the 5 GHz band or specialized SXT/LHG series devices are required.
Will my internet speed decrease when connecting via a Wi-Fi client?
Yes, a wireless connection always incurs overhead costs. Actual speed will be approximately 50-70% of the theoretical speed of the plan, depending on the signal strength, airborne noise, and the Wi-Fi's half-duplex mode.
Does MikroTik support repeater mode?
Technically, MikroTik doesn't have a "Repeater" mode in the classic sense (simultaneously receiving and transmitting on the same frequency and channel, expanding the network without speed loss). WDS Bridge mode allows for similar functionality, but requires configuration on both ends. Simple network expansion is only possible at half the speed (Station + AP mode on different frequencies or WDS).