Organizing wireless coverage in a local network is one of the primary tasks when deploying an IT infrastructure of any scale. Mikrotik RouterOS Provides flexible tools for creating both simple access points and complex systems with guest portals and authorization. Enabling the Wi-Fi interface is a basic step, without which further security and routing configuration is impossible.
The process of activating the radio interface depends on the device type: built-in (e.g., in the hAP or cAP series) or an external USB adapter. Built-in modules require activating the appropriate package and configuring a wireless network profile, while external devices may require additional drivers. WinBox is the most convenient tool for initial setup, allowing you to visually monitor the status of interfaces.
Before changing the configuration, you must ensure the physical integrity of the antennas and their proper connections. Errors at this stage can lead not only to a lack of signal but also to failure of the radio module due to impedance mismatch. Below, we'll detail the steps required to set up a wireless network.
Checking hardware compatibility and packages
The first step in setup is verifying that you have the necessary hardware and software. Not all router models Mikrotik are equipped with a built-in radio module, so RB (RouterBOARD) series devices without the "w" in the name will require an external USB adapter or a miniPCIe card. It's important to understand that support for standards 802.11ac And 802.11ax depends on the specific chipset model.
In the RouterOS operating system, Wi-Fi functionality is provided by the package wireless for older versions or wifiwave2 And wifi-qcom For new devices with Qualcomm chips. You can check installed packages through the menu. System -> PackagesIf the required package is not listed, download it from the official website and upload it to the router's file system, then reboot.
β οΈ Warning: Installing packages from untrusted sources or incompatible RouterOS versions may result in unstable device operation or complete loss of control. Always use official firmware files.
For new generation devices such as hAP ax2 or ax3, a fundamentally different approach to configuration via a package is used wifi, which completely redesigns the wireless interface's operating logic. In this case, the old interface wireless It may not even be available. Therefore, it is critical to determine the exact model of your device before starting work.
How to find out the exact chipset model?
To obtain chipset information, run the command: /system resource print . The board name line will list the model, which can be used to determine the type of radio module installed in the documentation on the manufacturer's website.
Activating the wireless interface
After confirming the presence of the equipment, you need to proceed directly to activating the interface. In the classic configuration scheme, via a package wireless you should open the section Wireless in the main menu. This will display a list of available radio interfaces, usually designated as wlan1, wlan2 or wifi1.
If the interface is displayed with a red icon or status disabled, it needs to be activated. Double-clicking the interface will open the properties window, which has a power button at the top. However, simply pressing the button isn't enoughβyou need to correctly configure the basic operating mode parameters.
- π‘ Mode: select value
ap bridgeso that the device works as an access point distributing the Internet. - πΆ Band: set the appropriate frequency range, for example,
5ghz-a/n/acor2ghz-b/g/n. - π Security Profile: is used by default
default, but for security reasons it is better to create a new profile. - π‘ Frequency: Specify a specific channel frequency or leave it
0for automatic selection (scan-list).
It's important to note that switching between the 2.4 GHz and 5 GHz bands may require changing the Country, as regulators in different countries have different power limits and available channels. country is located in the tab Wireless and must be relevant to your geographic location to comply with the law.
Setting up security and access profiles
A key step is ensuring wireless network security. Using an open network or outdated encryption protocols like WEP is unacceptable in today's environment. RouterOS offers robust security mechanisms through Security Profiles, which allow flexible management of encryption keys and authentication methods.
To create a secure connection, go to the menu Wireless -> Security Profiles. Create a new profile, giving it a descriptive name, for example, "Home-Secure". In the field Mode select dynamic keys, which will allow the use of individual keys for each client or a shared access key. For home and small office use, the protocol WPA2 or WPA3.
You need to fill in the fields in your profile settings. WPA Pre-Shared Key And WPA2 Pre-Shared KeyThis is the character string that users will enter when connecting to the network. The password must be at least 8 characters long, but it is recommended to use complex combinations of letters, numbers, and special characters to protect against brute-force attacks.
| Parameter | Recommended value | Description |
|---|---|---|
| Authentication Types | wpa2-psk | The most compatible and secure authentication type |
| Group Encryption | aes-ccm | Group traffic encryption algorithm |
| Group Key Update | 1h | Group encryption key lifetime |
| WPA Pre-Shared Key | Complex password | Access key for WPA clients |
Once you've created a profile, you need to apply it to the wireless interface itself. Open Settings wlan1, find the field Security Profile and select the previously created profile from the drop-down list. The changes will take effect immediately, and the interface will begin broadcasting the network with the new security level.
DHCP and NAT configuration for clients
Enabling the radio interface alone won't provide internet access to clients. For full functionality, connecting devices must automatically obtain IP addresses and be able to pass through the gateway. This requires server configuration. DHCP and routing rules.
Create a pool of addresses that will be issued to wireless clients. Go to IP -> Pool and add a new range, for example, 192.168.88.10-192.168.88.50If the primary gateway is on a different subnet, or use an existing pool for the local network. This will isolate Wi-Fi clients or combine them with wired ones, depending on your architecture.
Next, you need to configure the DHCP server. In the menu IP -> DHCP Server press the button DHCP SetupThe setup wizard will automatically detect the interface (select yours) wlan1 (or a created bridge) will prompt you to select an address pool and specify the gateway (usually the router's IP address). Also, specify the DNS servers that will be issued to clients.
Don't forget the rule NAT (Masquerade), which allows private network clients to access the global network through the external interface. Check for the presence of the rule in IP -> Firewall -> NatIf it doesn't exist, create a new rule: Chain srcnat, Out. Interface - your WAN (for example, ether1), Action masquerade.
βοΈ Checking network settings
Optimization of radio channel and power
The quality of a wireless connection directly depends on the selected frequency and transmitter power level. In apartment buildings, the 2.4 GHz band is often heavily polluted by neighboring routers and household appliances. Using a spectrum analyzer or built-in scanner Mikrotik helps to find a free channel.
To start scanning, go to the wireless interface settings, tab Wireless, and press the button Scan. The system will show a list of available networks and their signal strength (signal strength) and the channels used. It is recommended to choose the channel that is least used by neighbors or the channel with the lowest noise level.
Parameter Tx Power Adjusts the transmit power. Setting the maximum value isn't always the best solution, as it can cause the module to overheat and increase interference. The optimal power is determined experimentally: start with 15-17 dBm and increase only if coverage is insufficient.
β οΈ Caution: Excessive increase in transmission power may lead to a situation where the client "sees" the router, but the router does not hear the client due to low transmitter power in the smartphone (channel asymmetry).
For the 5 GHz band, it is recommended to use channel width 20/40/80MHz to achieve maximum standard speeds ACHowever, in high-interference environments, narrowing the channel to 20 or 40 MHz can improve connection stability. Experiment with channel widths depending on the building density.
Creating a bridge to connect networks
In a modern configuration Mikrotik It's common to combine all interfaces (LAN ports and Wi-Fi) into a single logical bridge. This simplifies IP addressing and firewall rule management, as the router sees all devices as being on the same local network.
Go to the menu Bridges and create a new bridge if one is not already created by default (usually called bridge). Then go to the tab Ports and add all the necessary interfaces there: physical ports ether2-ether5 and wireless interface wlan1. Make sure the parameter HW active, which means hardware acceleration of switching.
After adding a Wi-Fi interface to the bridge, the router's IP address must be assigned to the interface. bridge, not a physical port. The DHCP server must also be bound to the bridge. This ensures transparent transmission of broadcast requests between wired and wireless clients.
Diagnostics and troubleshooting
If Wi-Fi still doesn't work after all the settings, you need to run diagnostics. First, check the system logs (Log), which may contain messages about interface activation errors or driver issues. Often, the cause is incompatibility between regional settings and the selected frequency.
Use the command /interface wireless monitor wlan1 in the terminal to view statistics in real time. The number of registered clients is displayed here (registered-clients), noise level, and current connection speed. If the client counter remains zero, check whether the devices can see the network's SSID.
If you have connection problems but the network is visible, check your settings Firewall. Input rule (input) should allow the necessary service protocols but block unauthorized access to router management. Also, make sure the wireless interface settings are unchecked. Hide SSID, if you want the network to be visible.
Why doesn't the router detect the USB Wi-Fi adapter?
RouterOS has a limited list of supported USB adapters. Check the compatibility list on the official Mikrotik website. This issue is often resolved by updating the firmware or installing a package. usb and the necessary drivers. The adapter may also require more power than the router's USB port can provide, requiring power supply through a USB hub.
How to reset Wi-Fi settings to factory settings?
To reset your wireless network settings, you can use the command /interface wireless reset in the terminal. If you need to completely reset the router, use the physical Reset button on the case when turning on the power or the command /system reset-configurationPlease note that this will delete all settings.
Is it possible to share Wi-Fi from the main router to a Mikrotik?
Yes, you need to configure the interface for this. wlan1 in mode station (or station-bridge). In this mode, Mikrotik will connect to the external Wi-Fi network as a client and distribute internet through its ports or another access point. This is a popular setup for setting up a wireless bridge.