Setting up Wi-Fi on MikroTik: From Enablement to Fine-Tuning

• 📡 Chain — 0 And 1 (for dual-antenna models)
• 🔄 HT Supported MCS - leave as default or select 1-23 for maximum compatibility
• Click OK And Apply

After creating the interface, don't forget to activate it by checking the box in the main window. Wireless. Now yours MikroTik It should distribute Wi-Fi, but without protection - this is a temporary solution to test the functionality.

Creating a security profile

An open network is convenient for testing, but it's not secure. Setting up security is a must. RouterOS this is done through security profiles, which are then linked to the Wi-Fi interface.

To create a secure profile:

1. Go to Wireless → Security Profiles
2. Click + to add a new profile
3. In the field Name Please enter a custom name (eg. MyWiFiSecurity)
4. Tab General:
   • 🔐 Mode — dynamic keys
   • 🔑 Authentication Types - only WPA2 PSK (the most reliable option)
   • 🔢 Unicast Ciphers And Group Ciphers — aes ccm

• 🔑 Enter a password of at least 8 characters (12+ recommended, including letters, numbers, and special characters)
• Click OK

Now go back to the Wi-Fi interface settings (Wireless → your_interface → Wireless) and in the field Security Profile Select the created profile. Save changes.

⚠️ Warning: Use of outdated security standards (WEP or WPA) makes your network vulnerable to hacking. WPA2 PSK with encryption AES — minimum acceptable level of protection.

For additional security, you can:

• 🔄 Change your password regularly (every 3-6 months)
• 📵 Turn off Wi-Fi at night Scheduler (if the network is not in use)
• 👤 Use MAC filtering to restrict access (but this is no substitute for a good password!)

Coverage and speed optimization

Even after successful setup, Wi-Fi may still be unstable. This may be due to interference, incorrect channel selection, or suboptimal settings. Let's look at key settings for improving performance.

Channel selection — one of the most important parameters. By default, the router selects a channel automatically, but this isn't always optimal. For manual configuration:

1. IN Wireless open the tab Scan
2. See what channels neighboring networks are using
3. Choose the least crowded channel (for example, if everyone is using 1, 6, 11 - try 3 or 9)
4. In the interface settings (Wireless → your_interface → Advanced) set the selected channel in the field Frequency

Transmission power also affects coverage. Too much power can create interference, too little can reduce coverage. Optimal values:

You can change the power in Wireless → your_interface → Advanced → Tx PowerStart with the minimum value and gradually increase it, checking the connection quality.

Channel width affects speed, but not always for the better:

• 📶 20 MHz - the most stable operation, minimal interference
• 📶 40 MHz - high speed, but may conflict with other networks
• 📶 80 MHz - maximum speed, suitable only for 5 GHz in conditions of minimal interference

For most home networks, it is optimal to use 20 MHz on 2.4 GHz and 40 MHz at 5 GHz. You can change the channel width in Wireless → your_interface → HT.

Internet sharing via Wi-Fi

Now that Wi-Fi is configured and secured, the final step is to provide internet access to connected devices. To do this, you need to bind the wireless interface to the local network and configure NAT.

If you have a standard configuration (the Internet comes to ether1, and the local network is on bridge-local), follow these steps:

1. Go to IP → Firewall → NAT
2. Add a new rule (+)
3. Tab General:
   • 🔄 Chain — srcnat
   • 📡 Out. Interface - select the interface through which the Internet comes (usually ether1)

• 🔄 Action — masquerade
• Click OK

Next, you need to add a Wi-Fi interface to the local bridge:

1. Go to Bridge → Ports
2. Add a new port (+)
3. In the field Interface select your Wi-Fi interface (for example, wlan1)
4. In the field Bridge select bridge-local (or another bridge if you are using a non-standard configuration)
5. Click OK

After this, devices connected to Wi-Fi should be able to access the internet. If this doesn't happen, check the following:

• 🔌 Correct connection of the cable from the provider
• 🔄 Settings DHCP servers (must distribute IP addresses on the same subnet as wired devices)
• 📡 No filters in Firewall, blocking traffic from Wi-Fi

⚠️ Warning: If you use PPPoE To connect to the internet, make sure the settings are configured on the router and not on a separate device. Otherwise, Wi-Fi clients will not be able to access the network.

Troubleshooting common problems

Even with proper setup, problems can still arise. Let's look at the most common ones and how to solve them.

Devices do not see the network:

• 🔌 Check if the Wi-Fi interface is enabled (check mark in the list) Wireless)
• 📡 Make sure you have selected the correct one Country - some countries limit available channels
• 🔄 Reboot the router with the command /system reboot

Slow speed or dropped connections:

• 📶 Check your channel load using Wireless → Scan
• 🔌 Reduce the channel width to 20 MHz (especially at 2.4 GHz)
• 📡 Try changing the standard (802.11) on n instead of acif the devices do not support modern protocols

Internet access is not working:

• 🔌 Check that the Wi-Fi interface is added to the bridge (Bridge → Ports)
• 📡 Make sure the rule NAT applied to the correct output interface
• 🔄 Check your settings DHCP servers V IP → DHCP Server

Wi-Fi works, but only at a short distance:

• 📡 Increase the transmit power (Tx Power) by 2-3 dBm
• 🔌 Check the antenna placement - they should be vertical for best indoor coverage
• 📶 Try changing the channel to a less crowded one
What to do if you forgot your Wi-Fi password?

If you have forgotten your password but still have access to Winbox, go to Wireless → Security Profiles, open your profile and look at the password in the field WPA Pre-Shared KeyIf there is no access, reset the router settings using the button Reset (hold for 5 seconds when turning on).

Additional Wi-Fi features on MikroTik

Besides the basic setup, RouterOS offers a number of advanced features for managing your wireless network. Let's look at the most useful ones.

Guest access Allows you to create a separate network for visitors with limited rights:

1. Create a new bridge (Bridge → +) with the name guest-bridge
2. Add a new Wi-Fi interface with a separate SSID (For example, GuestWiFi)
3. Set up FirewallTo restrict guests' access to the local network:

   /ip firewall filter add chain=forward src-address=192.168.89.0/24 \
   dst-address=192.168.88.0/24 action=drop comment="Block Guest to LAN"

Time limit Useful for monitoring Wi-Fi usage by children or employees:

1. Go to IP → Hotspot → Users (or create a profile in PPP)
2. Set time limits in the field Limit Uptime
3. Link users to specific MAC addresses through IP → DHCP Server → Leases

Monitoring connected devices helps track online activity:

• 📊 In Wireless → Registration Table all connected devices are displayed
• 📈 For detailed statistics use Tools → Graphing or Tools → Torch
• 📡 To block a device, add a rule to IP → Firewall → Filter according to him MAC address

Automatic Channel Selection (ACS) automatically selects the least loaded channel:

/interface wireless set wlan1 adaptive-noise-immunity=ap-and-client-mode \
country=russia frequency=auto

⚠️ Note: Advanced features like Hotspot or CAPsMAN These require additional configuration and may conflict with your default Wi-Fi settings. Before activating them, back up your configuration.

MikroTik Wi-Fi FAQ

My MikroTik isn't detecting the Wi-Fi module. What should I do?

If in the section Wireless no interfaces, check:

• 🔌 Physical connection of the module (for external adapters)
• 🔧 Check the module's compatibility with your router model (a list of supported devices is available on the MikroTik website)
• 📡 Availability of drivers in the firmware (update RouterOS to the latest version)

To diagnose, run the command:

/system routerboard print

If the module is detected but does not work, try resetting its settings:

/interface wireless reset-configuration wlan1

How to increase Wi-Fi range?

To increase coverage:

1. Enlarge Tx Power up to 23-27 dBm (but not more, so as not to exceed local standards)
2. Use external antennas with high gain (eg. MikroTik R11e-5HacD with 5 dBi antennas)
3. Place the router in the center of the room, away from metal surfaces and household appliances
4. Set up WDS to create a network of multiple access points

Remember: at 5 GHz the signal propagates worse than at 2.4 GHz, but is less susceptible to interference.

Is it possible to configure Wi-Fi via the web interface?

Yes, but the functionality of the web interface (WebFig) is limited compared to WinboxTo enable Wi-Fi via the web:

1. Open in browser http://[router_IP_address]
2. Log in (the default login is usually admin, the password is empty)
3. Go to Wireless and configure the interface similarly to the instructions for Winbox

Please note: the web interface may not have some advanced settings (for example, fine-tuning HT or ACS).

How to reset Wi-Fi settings to factory settings?

To reset only the Wi-Fi settings (without completely resetting the router), follow these steps:

/interface wireless reset-configuration wlan1

To completely reset all settings (including Wi-Fi):

/system reset-configuration no-defaults=yes skip-backup=yes

After the reset, the router will reboot and you will need to configure it again.

Does MikroTik support Wi-Fi 6 (802.11ax)?

At the time of writing (2026) MikroTik does not release devices with support Wi-Fi 6 (802.11ax). The highest available standard is 802.11ac Wave 2 (in models like RB4011 or hAP ac³).

For use Wi-Fi 6 You will need a third-party external adapter, but it is compatible with RouterOS Not guaranteed. Stay tuned for announcements on official website.