Dual-band Wi-Fi on MikroTik: Complete 2.4 GHz and 5 GHz Setup from Scratch

Dual-band routers MikroTik — these are powerful devices that allow you to deploy two wireless networks simultaneously: at a frequency 2.4 GHz (for coverage range) and 5 GHz (for high speed). However, their setup often raises questions even for experienced administrators. Unlike home routers with a three-click web interface, RouterOS requires manual configuration via WinBox, WebFig or console - and it's easy to make mistakes here that can lead to low speeds, interference, or even complete Wi-Fi inoperability.

In this article we will look at step-by-step setup of dual-band mode using popular models as an example MikroTik hAP ac², RB4011 And cAP acYou will learn how to:

  • 🔧 Split 2.4 GHz and 5 GHz networks into different SSIDs or combine them into one
  • 📡 Select optimal channels to minimize interference
  • 🔒 Configure security (WPA3, MAC filtering, guest access)
  • ⚡ Optimize transmit power and channel width for maximum speed
  • 🛠️ Diagnose coverage and connection stability issues

We will pay special attention to hidden settings RouterOS, which are not visible in the basic interface, but critically affect performance - for example, parameters country, tx-power And wireless-protocolIf you've previously only configured home routers like TP-Link or ASUS, this guide will help you avoid common mistakes when working with professional equipment.

📊 What type of Wi-Fi network do you use at home?
2.4 GHz only
5 GHz only
Both networks have different SSIDs
Both networks with the same SSID
Don't know

1. Preparing the router: updating firmware and resetting settings

Before setting up Wi-Fi Be sure to update RouterOS to the latest version. Outdated firmware may not support modern security standards (for example, WPA3) or contain errors in the operation of dual-band modules. To check the version:

  1. Connect to the router via Ethernet or WinBox.
  2. Go to System → Packages and press Check For Updates.
  3. If a new version is available, download it and reboot your device.

After updating, please do the following: reset to factory settings (if the router has been used before). This will prevent conflicts with old configurations. This can be done:

  • 🖥️ Through WinBox: System → Reset Configuration (check No Default Configuration).
  • 🔧 Via console: 
    /system reset-configuration no-defaults=yes
⚠️ Warning: After resetting, your router will lose all current settings, including passwords and IP addresses. Make sure you have access to a backup copy of your configuration or network documentation.

If you are setting up MikroTik For the first time, we recommend starting with quick initial setup wizard (Quick Set V WinBox). It will help you set basic parameters (IP address, DHCP, administrator password), after which you can begin fine-tuning your Wi-Fi.

Update RouterOS to the latest version|Reset configuration to factory settings|Assign a new administrator password|Check internet connection (if required)|Save a backup of current settings (if available)-->

2. Setting up wireless interfaces: separating 2.4 GHz and 5 GHz

IN MikroTik Each Wi-Fi module is presented as a separate interface in the section Wireless. Dual-band models (eg hAP ac²) have two physical radio modules:

  • 📶 wlan1 — is usually responsible for 2.4 GHz (802.11b/g/n standards).
  • 📶 wlan2 — is usually responsible for 5 GHz (802.11a/n/ac/ax standards).

To check and configure them:

  1. Open WinBox → Wireless.
  2. Double click on each interface (wlan1, wlan2) and go to the tab General.
  3. Make sure that in the field Mode selected ap bridge (access point mode).
  4. In the field Band check the ranges match:
    • For 2.4 GHz: 2ghz-b/g/n or 2ghz-onlyn (if you only need 802.11n support).
    • For 5 GHz: 5ghz-a/n/ac or 5ghz-onlyac (for maximum speed).

If there is only one interface in the list wlan, this means that:

  • 🔴 Or your router model single-band (For example, hAP lite).
  • 🔴 Or the second module is disabled in the settings (check System → Resources → Wireless).
Parameter Recommended value for 2.4 GHz Recommended value for 5 GHz
Band 2ghz-b/g/n 5ghz-a/n/ac
Channel Width 20/40MHz Ce (or 20MHz in densely populated areas) 20/40/80MHz Ce (if supported by clients)
Frequency Auto (or manual: 1, 6, 11) Auto (or manual: 36, 40, 44, 48)
Country Set your country (affects available channels) Set your country (affects available channels)
⚠️ Attention: If the parameter is not specified in the settings Country, the router will use a limited set of channels (often only 1-11 for 2.4 GHz). This can lead to interference in densely populated areas. Set your country in Wireless → Advanced Mode → Country.

3. Selecting optimal channels and bandwidth

Wrong channel selection is one of the main reasons low speed and connection breaks. In the range 2.4 GHz the channels overlap, so it is recommended to use only 1, 6 or 11 (also allowed in Russia 12 And 13). For 5 GHz More channels are available, but their choice depends on the supported standards:

  • 📶 802.11a/n: channels 36-48 (DFS not required).
  • 📶 802.11ac/ax: channels 36-48 and 149-165 (DFS may be required for 50-144).

To select the least loaded channel:

  1. IN WinBox go to Wireless → Scan.
  2. Click Start and wait for the scanning to complete.
  3. Pay attention to the columns Frequency And Signal Strength. Channels with the lowest signal level of other networks (-80 dBm and below) is the optimal choice.

Channel width (Channel Width) affects speed and stability:

  • 🔄 For 2.4 GHz:
    • 20MHz - maximum stability, minimal interference (recommended for densely populated areas).
    • 20/40MHz - high speed, but possible interference with neighboring networks.
  • 🔄 For 5 GHz:
    • 20/40MHz - balance between speed and stability.
    • 80MHz — maximum speed, but requires clear airtime (suitable for offices with a small number of networks).

4. Security settings: WPA3, MAC filtering, and guest access

Wi-Fi Security on MikroTik configured in the section Wireless → Security Profiles. The default is WPA2-PSK, but for maximum protection we recommend:

  1. Create a new security profile: 
    /interface wireless security-add name=MySecureProfile mode=dynamic-keys authentication-types=wpa2-psk,wpa3-psk passphrase=Your Complex Password
  2. Apply the profile to both interfaces (wlan1 And wlan2) in the settings Wireless → tab Security.

Additional security measures:

  • 🔐 MAC filtering: Allows connections only to specified devices. Setting: 
    /interface wireless access-list

    add interface=wlan1 mac-address=00:11:22:33:44:55 forwarding=accept
    

    add interface=wlan1 forwarding=drop

    Replace 00:11:22:33:44:55 to the MAC address of your device.
  • 🚪 Guest network: isolates guests from the main network. Create a separate bridge and bind the second SSID to it.
  • 🔄 Hiding the SSID: Disables network name broadcasting. In Wi-Fi settings, set Hide SSID=yes. Please note: this does not increase security, but it does reduce the number of connection attempts by third-party devices.
⚠️ Attention: When using WPA3 Some older devices (manufactured before 2018) may not connect to the network. In this case, leave the compatible mode. wpa2-psk,wpa3-psk or create a separate SSID with WPA2 for legacy devices.
How do I know if my device supports WPA3?

Most devices on Android 10+, iOS 13+, Windows 10/11 And macOS 10.15+ support WPA3. To check:

  1. On Android: open Settings → Wi-Fi → Advanced → SecurityIf there is an option WPA3-Personal, there is support.
  2. On Windows: In the list of networks, there should be an icon next to the name WPA3.
  3. On old devices (before 2018) WPA3 is most likely not supported.

5. Optimization of transmission power and coverage

By default MikroTik uses maximum transmit power (tx-power), which is not always justified. Excess power can:

  • 🔋 Increase energy consumption.
  • 📡 Interfere with neighboring networks.
  • 📉 Degrade performance due to ether congestion.

Recommended values tx-power:

Range Type of premises Recommended power (dBm)
2.4 GHz Apartment (up to 50 m²) 17–20
2.4 GHz Home/office (50–100 m²) 20–23
5 GHz Any room 17–20 (higher is ineffective due to physical limitations)

To change the power:

  1. IN WinBox go to Wireless → select interface → tab Advanced.
  2. Find the parameter Tx Power and set the value (eg 20).
  3. Click OK and reboot the router.

To improve coverage in larger areas:

  • 📡 Use external antennas (if the router model supports connection, for example, RB4011).
  • 🔄 Set up Roaming (smooth transition between access points) using the protocol 802.11k/v/r (available in RouterOS v7+).
  • 🛠️ Add Wi-Fi repeater (For example, MikroTik mAP) in mode station-pseudobridge.

6. Split or combine SSIDs for 2.4 GHz and 5 GHz

You can set up Wi-Fi in two ways:

  1. One SSID for both bands (devices automatically select the best one).
  2. Different SSIDs (For example, MyWiFi_2G And MyWiFi_5G).

Benefits of one SSID:

  • 🔄 Convenience: users do not have to select a network manually.
  • 📱 Modern devices (smartphones, laptops) automatically switch between ranges.

Disadvantages of one SSID:

  • 🔴 Older devices may get stuck on 2.4 GHz even if 5 GHz is available.
  • 🔴 It's more difficult to diagnose problems (it's unclear which band the device is connected to).

To set up one SSID for both bands:

  1. IN Wireless open settings wlan1 (2.4 GHz) and wlan2 (5 GHz).
  2. On the tab General set the same network name (SSID) for both interfaces.
  3. Make sure that the security profiles (Security Profile) also coincide.

To set up different SSIDs:

  1. Set unique names, for example:
    • wlan1: MyWiFi_2G
    • wlan2: MyWiFi_5G
  • Create separate security profiles for each band (optional).
    • 📊 How do you prefer to set up Wi-Fi?
    One SSID for both bands
    Different SSIDs for 2.4 GHz and 5 GHz
    I don't know what's better

    7. Diagnosing problems and troubleshooting

    If Wi-Fi is unstable after setup, check the following settings:

    Problem: Slow speed in 5 GHz

    • 🔍 Check that the client device supports 802.11ac/ax (for example, older laptops may only work 802.11n).
    • 🔍 Reduce channel width to 40MHz (if it stood 80MHz).
    • 🔍 Check the distance to the router - 5 GHz has poorer penetration through walls.

    Problem: Frequent connection breaks

    • 🔍 Change the channel (interference from neighboring networks may occur).
    • 🔍 Reduce the transmit power (tx-power) to 17–20 dBm.
    • 🔍 Turn it off WMM Support in the Wi-Fi settings (tab Advanced), if clients do not support QoS.

    Problem: Devices are not connecting to the network

    • 🔍 Check that in Security Profile The correct password is specified.
    • 🔍 Make sure that Mode installed in ap bridge (and not station or ad-hoc).
    • 🔍 If used WPA3, try switching temporarily to WPA2 to check compatibility.

    For detailed diagnostics, use the following commands:

    /interface wireless registration-table print # List of connected devices

    /interface wireless scan 0 duration=5s # Scanning the air
    

    /tool ​​sniffer quick interface=wlan1 # Packet sniffing (requires experience)

    ⚠️ Attention: If Wi-Fi stops working completely after making changes, check if the settings have been reset. CountryAn incorrect region may block all channels. Reset the interface settings with the command: 
    /interface wireless reset-configuration wlan1
    Replace wlan1 to your interface.

    FAQ: Answers to frequently asked questions

    Is it possible to create two 5 GHz networks with different settings on one MikroTik router?

    Yes, but this will require:

    1. Use the model with two 5 GHz modules (For example, RB4011 has wlan1 And wlan2, both support 5 GHz).
    2. Configure each interface separately (different SSIDs, channels, power).

    If the router has only one 5 GHz module, it is impossible to create two independent networks.

    Why is Wi-Fi speed slower than cable?

    This is normal: Wi-Fi is always slower than Ethernet due to:

    • 📡 Interference in the air (neighboring networks, household appliances).
    • 📉 Losses during data transmission over the air.
    • 🔋 Limitations of the client device (e.g. smartphone with 1x1 MIMO antenna).

    To get the speed as close as possible:

    • Use 5 GHz with channel width 80MHz.
    • Connect at a distance of no more than 5 meters from the router.
    • Make sure your router and client support it. MU-MIMO or 802.11ac/ax.
    How to prevent devices from connecting to 2.4 GHz, leaving only 5 GHz?

    There are two ways:

    1. Disable 2.4 GHz completely: 
      /interface wireless disable wlan1
    2. Hide SSID for 2.4 GHz: 
      /interface wireless set wlan1 hide-ssid=yes
      Devices will still be able to connect if they know the network name, but it will not appear in the list.
    Does MikroTik support Wi-Fi 6 (802.11ax)?

    Yes, but only on models with a chipset Qualcomm IPQ-4019 or newer (for example, RB4011, cAP ax). To enable:

    1. Update RouterOS before version 7.1+.
    2. In the Wi-Fi settings (Wireless) select 802.11ax in the parameter Wireless Protocol.

    Please note: Even if the router supports Wi-Fi 6, the speed depends on the client devices. For example, iPhone 11 supports 802.11ax, and iPhone 8 - No.

    Can MikroTik be used as a Wi-Fi repeater?

    Yes, but with restrictions:

    1. Configure the interface in mode station-pseudobridge: 
      /interface wireless set wlan1 mode=station-pseudobridge master-interface=none
    2. Connect to the main network: 
      /interface wireless connect wlan1 ssid=AlienNetworkName
    3. Set up NAT And DHCP to distribute the Internet to local devices.

    Disadvantages of this approach:

    • 📉 The speed will be reduced by 2 times (the repeater receives and transmits data via one channel).
    • 🔒 Not all encryption types are supported in mode station.

    📖 Read also

    How to set up a D-Link DIR-620 Wi-Fi router: full instructions A detailed guide to setting up the D-Link DIR-620. Configuring PPPoE, L2TP, changing the password, and updating Tricolor Wi-Fi: How to connect a router and set up a network Detailed instructions for setting up a Tricolor router. Learn how to connect to Wi-Fi, change the password, and How to increase internet speed via a D-Link DIR-300 router: settings Learn how to increase internet speed on your D-Link DIR-300 router. Configure channels, standards, and W How to Change a WiFi Network Name: Step-by-Step Instructions Learn how to change the WiFi network name on any router. A detailed guide on accessing settings, without How to change the password on a Keenetic Wi-Fi router: step-by-step instructions A detailed guide to changing the Wi-Fi password on all Keenetic router models. Resetting and logging in How to change the password on a D-Link Wi-Fi router via a PC: step-by-step instructions Detailed instructions for changing the Wi-Fi password on D-Link routers using a computer. Step-by-step instructions.