Setting up Wi-Fi on MikroTik: A Complete Guide from Basic Configuration to Advanced Optimization

• Create a new profile with a name like, home_wifi.
• In the field Mode select dynamic keys.
• In the field Authentication Types leave only WPA2 PSK (or add WPA3 PSK, if supported).
• In the field WPA2 Pre-Shared Key Enter your password (minimum 8 characters, recommended 12+ with numbers and special characters).
• Return to the tab Wireless and in the field Security Profile Select the created profile.
• Click OK and apply the settings.

After applying the settings, your network should appear in the list of available devices. Try connecting from your phone or laptop to check if it's working. If the network isn't visible, check that its name doesn't conflict with neighboring networks (use a unique SSID) and that the band isn't blocked in your country settings.

📊 What type of security do you use for Wi-Fi?
WPA2-PSK
WPA3-PSK
WPA/WPA2 Mixed
Open network (no password)
Don't know

3. Selecting the optimal channel and transmission power

One of the key causes of unstable Wi-Fi is overcrowded channels. In apartment buildings, many routers operate on standard channels (for example, 6 or 11 in the 2.4 GHz band), which creates interference. Choosing the right channel can increase network speed and stability by 30-50%.

To analyze channel load:

1. IN Winbox go to Tools → Wireless Scan.
2. Select your Wi-Fi interface and click Start.
3. After 10-15 seconds, you'll see a list of networks and the signal strength for each channel. Pay attention to the columns. Frequency And Signal Strength.

Optimal channels:

• 📶 2.4 GHz: In Russia, channels 1-13 are allowed. Choose the least crowded one. 1, 6 or 11 (They don't overlap.) Avoid channels 12-13 if you have older devices nearby that don't support them.
• 🚀 5 GHz: There are more channels here, but they may require some tuning. DFS (Dynamic Frequency Selection) to avoid radar interference. Channels 36-48 and 149-165 are usually clear.

To change the channel:

1. Go to Wireless → Interfaces, select your interface.
2. On the tab Wireless in the field Frequency Please specify the desired channel (for example, 2412 for channel 1 in 2.4 GHz or 5180 for channel 36 in 5 GHz).
3. In the field Tx Power Set the transmit power. For a home, it is usually enough 17-20 dBm (100 mW). Increasing power does not always improve coverage, but it does increase interference to neighbors.

Range	Optimal Channels (Russia)	Max. power (dBm)	Notes
2.4 GHz	1, 6, 11	20	Channels 12-13 may not be supported by some devices.
5 GHz (lower)	36, 40, 44, 48	23 (with DFS)	Requires configuration DFS for channels 52-144
5 GHz (upper)	149, 153, 157, 161	30	Least loaded, but shorter range

⚠️ Attention: If you use channels 52-144 in the 5 GHz range, the router must support DFSOtherwise, the network will periodically disconnect (for up to 10 minutes) when radar signals are detected. Check your model's specifications for DFS support.

4. Security settings: MAC filtering, guest network and VLAN

Basic password WPA2-PSK is often insufficient to protect a network, especially in offices or public places. MikroTik allows you to implement advanced security scenarios:

• 🔐 MAC address filtering — allows connection only to certain devices.
• 🏨 Guest network - isolated Wi-Fi with limited access to the local network.
• 🌐 VLAN — dividing traffic into virtual networks (for example, for IoT devices).
• 🕒 Time limit - Wi-Fi access only during certain hours.

Creating a guest network:

1. Create a new one Security Profile (For example, guest_wifi) with a separate password.
2. IN IP → Firewall Add a rule blocking access from the guest network to local resources:

   /ip firewall filter add chain=forward src-address=192.168.90.0/24 dst-address=192.168.88.0/24 action=drop

   (Where 192.168.90.0/24 — guest network subnet, 192.168.88.0/24 — main network).

3. IN IP → DHCP Server Set up a separate address pool for guests.

MAC filtering:

1. IN Wireless → Access List add a rule with an action allow and specify the MAC addresses of allowed devices.
2. In the Wi-Fi interface settings on the tab Wireless in the field Access List Select the created list.

⚠️ Attention: MAC filtering isn't foolproof—MAC addresses are easily spoofed. Use it only as an additional layer of security, along with WPA3 and firewall.

Password is ≥12 characters long|WPS is disabled|Guest network is isolated from LAN|RouterOS firmware is updated|Firewall is enabled to block attacks-->

5. Speed ​​Optimization: Channel Width, MIMO, and Wi-Fi Standards

Wi-Fi speed depends not only on your provider's plan but also on proper router settings. Here are the key parameters to adjust:

• 📊 Channel Width — the wider the band, the higher the speed, but the less stable it is. Recommended for 2.4 GHz 20 MHz, for 5 GHz - 40 MHz or 80 MHz (if the network is not overloaded).
• 🔄 MIMO — the number of antennas for transmission/reception. Set in Wireless → Interfaces → HT (For example, 2x2 for two antennas).
• 🚀 Wi-Fi standard - if all devices support 802.11ac or 802.11ax, disable outdated standards (802.11b) to reduce interference.
• 📡 Beamforming — technology for focusing the signal on devices. Included in Wireless → Interfaces → HT (Tx Beamforming And Rx Beamforming).

An example of optimal settings for MikroTik hAP ac² (5 GHz):

/interface wireless set wlan2 band=5ghz-onlyn channel-width=20/40/80mhz-Ceee \
country=russia disabled=no frequency=auto ht-ampdu-priorities=0 \
ht-guard-interval=any ht-supported-mcs=\
mcs-0,mcs-1,mcs-2,mcs-3,mcs-4,mcs-5,mcs-6,mcs-7,mcs-8,mcs-9 \
ht-txchains=0,1 mode=ap-bridge security-profile=home_wifi \
wireless-protocol=802.11

To check the actual speed, use the utility Bandwidth Test V Winbox (Tools → Bandwidth Test). Test the speed between the router and the device at different points in the room to identify areas with a weak signal.

What is MU-MIMO and should you enable it?

MU-MIMO (Multi-User MIMO) allows the router to simultaneously communicate with multiple devices. This is useful if you have many clients (for example, in an office), but requires device support (most modern smartphones and laptops support MU-MIMO). It can be enabled in the settings. Wireless → Interfaces → HT (Mu-Mimo). However, in practice, the speed increase is only noticeable under ideal conditions (little interference, all devices support the standard).

6. Troubleshooting: No connection, low speed, frequent disconnections

Even after proper setup, problems may still arise. Here are typical scenarios and their solutions:

Problem	Possible cause	Solution
The Wi-Fi network is not visible	Wi-Fi module is disabled or the country is incorrect.	Check it out Wireless → Interfaces (must be Running). Set the correct country in Country.
Low speed	Congested channel or outdated standard	Change the channel in Frequency. Turn it off. 802.11b V Wireless → Interfaces → HT.
Frequent outages	Interference from neighbors or unstable power supply	Reduce Channel Width up to 20 MHz. Check the power supply (must be original).
Some devices do not connect	Incompatible safety standard	Try it WPA2-PSK instead of WPA3Disable MAC filtering.

If the problem is not resolved, check the router logs in LogsPlease pay attention to messages like:

• wireless,info wlan1: connected [MAC address] - successful connection.
• wireless,error wlan1: authentication failed — authentication error (incorrect password or security standard).
• wireless,warning wlan1: too many retries - weak signal or interference.

For diagnostics it is useful to use the command:

/interface wireless registration-table print

It will show all connected devices, signal level (signal-strength) and speed (tx-rate/rx-rate).

⚠️ Attention: If after the update RouterOS Wi-Fi has stopped working. Check the firmware compatibility with your model. Some older devices (e.g., RB751U-2HnD) do not support versions RouterOS 7+In this case, roll back to the latest stable version. RouterOS 6.49.x.

7. Advanced Scenarios: CAPsMAN, Mesh, and Roaming

For large networks (offices, hotels, apartment buildings), one access point is not enough. MikroTik offers tools for organizing a distributed Wi-Fi network:

• 🏢 CAPsMAN — centralized management of multiple access points (for example, in an office with 5+ routers).
• 🔄 Mesh — a self-organizing network where devices connect to each other wirelessly.
• 📡 Roaming — automatic switching of clients between access points without interrupting the connection.

Setting up CAPsMAN:

1. Enable the CAPsMAN service: /caps-man manager set enabled=yes.
2. Create a configuration for access points:

   /caps-man datapath add local-forwarding=yes name=datapath1
   /caps-man security add authentication-types=wpa2-psk encryption=aes-ccm name=security1 passphrase="your_password"
   /caps-man channel add band=2ghz-b/g/n control-channel-width=20mhz name=channel1

3. Create a configuration profile:

   /caps-man configuration add country=russia datapath=datapath1 name=config1 security=security1 ssid=MyMesh

4. Configure the access point interfaces as follows caps-man:

   /interface wireless set wlan1 master-configuration=config1

For the organization roaming between several MikroTik necessary:

• Use the same one SSID And Security Profile at all points.
• Set up different channels for the pine points (for example, 1, 6, 11 in 2.4 GHz).
• Turn on 802.11r (Fast Transition) in the settings Security Profile.

⚠️ Attention: For work Mesh standard support required 802.11s, which is not available on all models MikroTikBefore setting up, check your device's specifications. In a mesh network, the speed between nodes is halved due to traffic relaying.

8. Monitoring and maintaining Wi-Fi networks

To ensure stable operation of the network, it needs to be monitored periodically. MikroTik provides tools for monitoring:

• 📈 Load charts - V Winbox go to Tools → Graphing and select Wi-Fi interface.
• 📊 Connection statistics — Wireless → Registration Table shows all connected devices.
• 🔍 Logs — Logs Contains records of authentication errors and other problems.
• 📡 Ether scanner — Tools → Wireless Scan to analyze neighbors.

To be automatically notified of problems, set up notifications:

1. IN System → Scripts Create a script that checks for Wi-Fi availability:

   :if ([/interface wireless get wlan1 running] = false) do={
   /tool e-mail send to="admin@example.com" subject="Wi-Fi Down" body="Interface wlan1 is not running!"
   }

2. Add the script to the scheduler (System → Scheduler) to be performed every 5 minutes.

Recommended once every 3-6 months:

• Update firmware RouterOS.
• Change your Wi-Fi password (especially if it was shared with guests).
• Check the relevance of the list of allowed MAC addresses (if filtering is used).

FAQ: Frequently asked questions about setting up Wi-Fi on MikroTik

Is it possible to create two Wi-Fi networks with different passwords on one MikroTik?

Yes, for this you need to create two Security Profile with different passwords and bind them to different virtual interfaces. For example:

1. Duplicate the physical interface: /interface wireless add master-interface=wlan1 name=wlan1-guest.
2. Set up for wlan1-guest separate Security Profile And SSID.

Please note that both interfaces will run on the same physical module, so the total speed will be split between the networks.

How to increase the Wi-Fi range on a MikroTik?

The range depends on the transmission power (Tx Power), antenna types and interference. Recommendations:

• Enlarge Tx Power to the maximum (for example, 27 dBm For RB4011), but this may violate local regulations.
• Replace standard antennas with directional ones (for example, MikroTik R11e-5HacD with 10 dBi antennas).
• Use the 5 GHz band - it is less susceptible to interference, but has a harder time passing through walls.
• Set up Wireless → Interfaces → Advanced → Frame Lifetime for meaning 3000 to improve stability over long distances.

Please note that increasing power may cause interference to your neighbors and is not always legal (check restrictions for your country).

Why is Wi-Fi speed slower than cable?
This is normal - Wi-Fi is always slower due to:
• Interference from other networks (check in Tools → Wireless Scan).
• Limitations of the standard (for example, 802.11n maximum 300 Mbps, 802.11ac — up to 1 Gbit/s).
• Distances to the router and obstacles (walls, furniture).
• Limitations of the client device (an older smartphone may not support high speeds).
To get the speed closer to cable:
• Use the 5 GHz band with channel width 80 MHz.
• Turn on WMM (Wi-Fi Multimedia) in the settings Wireless → Interfaces.
• Disable legacy standards (802.11b) V HT.
How to set up Wi-Fi on MikroTik via the command line (CLI)?

Basic commands for configuration:

# Set country and mode
/interface wireless set wlan1 country=russia mode=ap-bridge

Set up security
/interface wireless security-profiles add name=home_wifi mode=dynamic-keys authentication-types=wpa2-psk wpa2-pre-shared-key="your_password"

Apply security profile
/interface wireless set wlan1 security-profile=home_wifi

Set SSID and channel
/interface wireless set wlan1 ssid="MyWiFi" frequency