Enabling a wireless network on MikroTik equipment is a basic but critical task for any system administrator or advanced user. Unlike home routers, where the function is activated with a single button, this requires careful configuration of interfaces and security protocols. Correct setting will ensure a stable connection and protect your traffic from outsiders.
The process involves working with physical interfaces, configuring a bridge, and creating a security profile. Even if the device comes with factory settings, it's often necessary to change the default parameters or activate the radio interface from scratch. MikroTik RouterOS provides flexible tools for radio channel management.
In this article, we'll walk you through a detailed process that will allow you to set up a working access point. We'll cover both the graphical interface and the basic principles of working with wireless interfacesso that you understand the essence of what is happening, and not just copy the commands.
Preparing equipment and accessing settings
Before configuring the radio module, you need to ensure you have access to the router's management system. This can be done through the web interface. WebFig or a specialized utility WinBoxThe second option is preferable for initial setup, as it works even without an IP address, using the device's MAC address.
Connect your computer to any available MikroTik LAN port using a patch cord. If the device is new or reset to factory settings, it typically does not require a password for initial login. admin, the password is empty). If the router has been used previously, a full reset via the button may be required. Reset on the body.
⚠️ Warning: If you are configuring a working router on a live network, changing bridge or interface settings may temporarily interrupt your internet connection. Schedule your work during off-peak hours.
Once successfully connected, you'll see a list of all available interfaces in the left-hand menu. We're interested in the section WirelessThis is where the radio modules are controlled. Make sure the physical antenna is screwed into the connector, otherwise you risk damaging the transmitter when powering on.
Activating the wireless interface
Go to the menu WirelessYou will see a list of available radio interfaces, for example, wlan1 or wifi1, depending on the model of your device (for example, hAP ac2 or cAP ax). By default, the interface may be disabled, which is indicated by a red "X" in the status column or the absence of the "R" (running) flag.
To activate, double-click the interface bar. In the window that opens, find the button Enable (or a key combination). After pressing this button, the interface should enter the operating mode, indicated by a green indicator. Devices will now begin scanning the airwaves, even though they don't yet have network access.
In the same interface settings window, pay attention to the field ModeTo create your own network, select a value ap bridgeThis mode allows the device to act as an access point to which client devices can connect. Mode station is used to receive the signal, and bridge necessary for distribution.
It is important to choose the right frequency and channel width. In the 2.4 GHz band, it is better to use a width 20/40MHz Ce, and for 5 GHz - 20/40/80MHz eCee. Frequency selection (Frequency) it is better to leave it automatic or select the least loaded channel after scanning the environment.
Setting up a bridge to combine ports
Enabling the wireless interface alone won't give clients access to the local network and the internet. It's necessary to combine the wireless interface with the physical LAN ports into a single logical switch. In MikroTik terminology, this is called Bridge.
Go to the menu Bridge and create a new bridge if it hasn't already been created (usually it's called bridge1). Add your wireless interface to this bridge (wlan1) and the required Ethernet ports. This is done in the tab Ports inside the Bridge menu.
Adding an interface to a bridge makes it part of a single broadcast domain. Now devices connected via Wi-Fi will see devices connected via cable and receive IP addresses from the same pool. Without this step, the wireless network will be isolated.
| Parameter | Default value | Recommended value | Description |
|---|---|---|---|
| Interface | wlan1 | wlan1 | Wireless interface name |
| Bridge | - | bridge1 | Name of the created bridge |
| HW | yes | yes | Using hardware acceleration |
| Horizon | none | none | Parameter to prevent loops |
After adding ports to the bridge, the system may automatically reconfigure firewall rules, but it's best to verify that traffic between the bridge interfaces isn't being blocked. In modern versions RouterOS v7 The bridge configuration has become more stringent in terms of safety.
Setting up a network name (SSID) and security profile
Now you need to make the network visible and secure. Return to the menu. Wireless, open the interface settings and go to the tab Wireless (or Security depending on the OS version). In the field SSID Enter the name of your network that users will see.
To protect your data, you need to set up a security profile. Go to the tab Security Profiles in the Wireless menu. Create a new profile or edit an existing one. defaultIn the field Mode select dynamic keys, and in Unicast Ciphers And Group Ciphers leave only aes ccm.
In the field WPA Pre-Shared Key Set a complex password of at least 12 characters containing letters and numbers. Use an outdated protocol. TKIP or mixed mode TKIP+AES reduces speed and safety, so they should be abandoned in favor of a clean one AES.
⚠️ Warning: Never leave your network open or with WEP encryption. These security methods can be cracked in minutes, even by an inexperienced attacker.
After saving the security profile, return to the interface settings and to the field Security Profile Select the profile you created. Also, make sure the box is unchecked. Hide SSID, if you want the network to be visible when searching for devices.
☑️ Wi-Fi Security Check
Configuring a DHCP server to distribute addresses
For Wi-Fi-connected devices to receive IP addresses and access the internet, a DHCP server must be running on the bridge interface or the wireless interface itself. Go to the menu IP -> DHCP Server.
Use the setup wizard DHCP Setup, selecting your bridge interface (bridge1). The wizard will automatically prompt you to create an Address Pool, configure a Gateway, and configure DNS servers. Accept the suggested values unless you have specific requirements.
If a DHCP server is already configured for LAN ports, then adding Wi-Fi to the bridge (as we did earlier) doesn't require any additional configuration—the server will work on all bridge ports at once. This is an advantage of the architecture. Bridge in MikroTik.
You can check the operation by connecting a smartphone or laptop. If the device receives an address in the range, for example, 192.168.88.x, and has internet access, then the configuration was successful. Otherwise, check your firewall rules.
What to do if DHCP does not assign addresses?
Check that the DHCP service is added to the Services line in the IP -> Services menu. Make sure the address pool isn't exhausted, and check the logs in the Log menu to see client requests.
Signal optimization and frequency channel selection
For stable operation, it's important to select the correct frequency channel. The 2.4 GHz band experiences significant interference from neighboring networks and household appliances. Use the built-in tool. Sniffer or menu Wireless -> button Scan for ether analysis.
Find the channel with the lowest noise level and the fewest neighboring networks. For a 20 MHz channel, channels 1, 6, and 11 are optimal because they don't overlap. The situation is better in the 5 GHz band, but it also requires analysis.
It is also worth paying attention to the transmitter power (Tx Power). Setting the maximum power isn't always beneficial: the client device may "see" the router but not "reach" it in response due to a weak transmitter in the smartphone. It's best to adjust the power experimentally.
⚠️ Note: Interfaces and menu names may differ slightly depending on the RouterOS version (v6 or v7) and the specific hardware model (e.g. series hAP or RB). Always check the official documentation for your software version.
For maximum performance in modern networks, it is recommended to use the standard Wi-Fi 5 (802.11ac) or Wi-Fi 6 (802.11ax), if your equipment supports these protocols. The configuration is done in the field Band in the interface settings.
Diagnostics and troubleshooting
If the network is enabled but not working, first check the interface status. Is the network indicator lit? Is the network visible in the list of available networks? If the network is visible but not working, the issue is with the security profile or password.
A common error is the lack of a default route or incorrect DNS. Try setting up a static DNS (for example, 8.8.8.8) in the DHCP server settings or in the router itself in the menu IP -> DNS.
For in-depth diagnostics, use the built-in tools: Tools -> Wireless -> Registration Table. All connected clients and signal strength are displayed here (RX/TX Rate) and connection uptime. This is the best way to understand connection quality.
If nothing helps, try updating the firmware RouterOS to the latest stable version. Older versions may contain bugs that affect the wireless module, especially with new encryption standards.
Why won't Wi-Fi turn on on my MikroTik?
Most often, the problem is that the interface isn't activated (the Enable button isn't pressed) or the corresponding region isn't added to the country in the wireless network settings. Also, check if the package is disabled. wireless in the System -> Packages menu.
How to change Wi-Fi signal strength?
Parameter Tx Power is located in the tab Advanced wireless interface settings. However, remember that increasing the power beyond reasonable limits can lead to equipment overheating and deterioration of connection quality due to channel asymmetry.
Is it possible to share Wi-Fi from a phone to a MikroTik?
Yes, for this the interface needs to be switched to the mode station (or station-bridge). However, most MikroTik home routers do not have a built-in USB modem, so sharing internet from your phone to the router is only possible via Bluetooth (difficult) or by connecting the phone via USB as a modem (requires 3G/4G modem support).
What is the maximum Wi-Fi speed on MikroTik?
Speed depends on the model. Budget models (for example, hAP lite) will provide up to 40-50 Mbps of real data. Top models with support Wi-Fi 6 and multi-threading can achieve speeds in excess of 800 Mbps under ideal conditions.