Setting up a wireless bridge between two points is a challenge many network administrators face when they need to transmit internet from one building to another or simply receive a signal from a provider without laying cables. Mikrotik is one of the most flexible tools for achieving this goal, allowing you to transform a regular router into a powerful radio signal receiver. Unlike consumer devices, the equipment RouterOS offers detailed control over every connection parameter.
In this article, we'll walk you through the process of configuring your device to operate in client mode. You don't need to be a network engineer to understand the basic principles of wireless network interfaces. The key is to follow the steps for creating security profiles and configuring IP addressing.
It's worth noting right away that the result depends not only on the software settings, but also on the physical characteristics of the antennas. Correct setup MikroTik Wi-Fi reception will allow you to get a stable communication channel, comparable in speed to a wired connection, if line of sight conditions are met.
Selecting the wireless interface operating mode
The first step is to determine how exactly your device will interact with the signal source. There are several modes in the RouterOS ecosystem, but for receiving a signal from another access point, we're primarily interested in station And station-bridgeThe choice between them is dictated by the architecture of your local network and the requirements for data transmission transparency.
Mode station It works similarly to connecting a laptop or smartphone to Wi-Fi. In this case, the router receives an IP address from a remote access point, and all devices behind it are on a separate subnet. This creates a layer NAT, which can be useful for isolating a network, but sometimes causes problems with port forwarding or network games.
A more advanced option is the mode station-bridgeIt allows you to combine a wireless segment and a wired local network into a single logical broadcast domain. In this case, all devices connected to the receiving Mikrotik will receive IP addresses directly from the main router, as if they were connected via cable. However, this mode requires WDS support or specific settings on the transmitter side.
⚠️ Note: Station-bridge mode only works if the remote access point also supports WDS or is configured in compatible mode. If you're connecting to someone else's Wi-Fi (for example, from your ISP), you'll likely only have access to standard station mode.
Basic preparation and configuration reset
Before making any changes, it's recommended to clear the device of any unnecessary settings that may have been left over from previous use. A clean configuration minimizes the risk of IP address conflicts and firewall rule errors. Connect to the device via WinBox or the web interface using the default address if the router hasn't been configured yet.
To get started, go to the menu Wireless and make sure your wireless interface is active. Double-clicking on the interface will open the properties window, where in the field Mode You need to select one of the client modes. After changing the mode, the interface may temporarily lose connection, which is normal system behavior.
It's important to check the frequency range. If you plan to use the 5 GHz band for high speeds, make sure your equipment supports the standard. 802.11ac or 802.11ax. In the menu Wireless in the field Frequency You can select a specific frequency or leave it auto, but for static bridges it is better to fix the frequency manually to avoid channel jumps.
☑️ Preparing MikroTik
Network search and scanning settings
The next step is to scan for available wireless networks. In the Wireless Interface settings window, click the button ScanA list of all visible access points within the antenna's range will open. Here you'll see the SSID, frequency, signal strength, and security protocol used.
Find the target network you want to connect to in the list. Pay attention to the column Signal: For stable bridge operation, the signal level should be no worse than -75 dBm, although for high speeds, a range of -40 to -60 dBm is recommended. Highlight the desired line and press the button Connect or Connect To.
After clicking the button, the system will prompt you to create a new security profile or select an existing one. If the network is password-protected, the window that opens will Security Profiles You must enter the correct encryption key. Make sure the correct security type is selected (usually it is WPA2 or WPA3), otherwise the connection will not take place.
If scanning doesn't show the network you need, check your region settings. In the menu System -> Country The correct country code must be selected, as it determines the permitted frequency range and transmitter power. Selecting the wrong country code may block certain channels.
⚠️ Note: Interfaces and available frequencies may vary depending on the device model (e.g., hAP ac2, SXT, LHG) and the installed license. Always check the specifications for your model on the official website before purchasing or setting up.
Configuring security profiles
Connection security is a critical aspect of setup. When creating a profile in the menu Wireless -> Security Profiles Make sure the encryption modes match the access point settings. For modern networks, the following standards are relevant: AES CCMP And TKIP.
In the field WPA2 Pre-Shared Key Enter the Wi-Fi network password. Please note that the characters are case-sensitive. If you are using the station-bridge, you may also need to enable the option WDS (Wireless Distribution System) in the security profile, although in newer versions of RouterOS this often happens automatically when you select bridge mode.
Corporate networks may require configuration. 802.1X authentication. In this case, the security profile selects the mode dynamic keys and EAP is configured. However, for most home scenarios, a static key (Pre-Shared Key) is sufficient.
What to do if the password does not work?
If you're sure the password is correct but there's no connection, try temporarily creating an open security profile (without a password) on the access point to test. Also, make sure MAC address filtering isn't enabled on the access point.
Setting up IP addressing and DHCP
After a successful connection at the radio channel level (the R and T indicators in the interface list should be lit or blinking), you need to configure the logical network. If you are using the station, you need to create a DHCP client. Go to the menu IP -> DHCP Client, click + and select the wireless interface (usually wlan1).
In the window that opens, check the box Default Route Distance (value 1) so the router knows where to send internet traffic. It's also recommended to check the box. Add Default Routeto automatically register the route. After applying the settings, the DHCP Client status should display "bound" and the assigned IP address.
If you have configured the mode station-bridge, creating a DHCP client on the wireless interface is not required. In this case, the wireless interface functions as a transparent cable, and DHCP requests from your computers go directly to the main router. You just need to ensure that the LAN ports of the receiving Mikrotik are configured to Bridge, combining WLAN and Ethernet ports.
Don't forget to check your DNS. In the menu IP -> DNS You can specify static addresses (for example, 1.1.1.1 or 8.8.8.8) or allow them to be obtained automatically from your ISP via DHCP. For stability, it's best to use reliable public DNS servers.
| Parameter | Station mode (NAT) | Station-Bridge mode | Default value |
|---|---|---|---|
| WAN IP address | Received from the provider | Not required | Dynamic |
| Local area network | Separate subnet | Part of the provider's network | 192.168.88.0/24 |
| Port forwarding | Requires configuration | Works automatically | Closed |
| Complexity | Low | Medium/High | - |
Optimizing connection speed and stability
Obtaining an IP address is only half the battle. To achieve maximum performance, you need to optimize your wireless interface settings. First, pay attention to the channel width (channel-width). For the 2.4 GHz range, it is better to use 20 MHz to avoid interference, and for 5 GHz, you can set 40 or 80 MHz if the air is clear.
An important parameter is Wireless Protocol. The default is 802.11, but for MikroTik-MikroTik equipment you can choose a proprietary protocol nv2 or nstreme, which provide better stability over long distances. However, for compatibility with standard routers (Asus, TP-Link, Keenetic), stick with the 802.11 standard.
It's also worth adjusting QoS (Quality of Service) if the channel is narrow. In the menu Queues You can limit the speed for individual users or prioritize important traffic. This will prevent torrents from hogging your bandwidth and ensure smooth video calls.
To analyze signal quality, use the built-in tool Sniffer or schedule Wireless Table. Follow the parameter CCQ (Client Connection Quality) — this shows the transmission efficiency percentage. If CCQ drops below 60-70%, even with a full signal strength, the speed will be low due to packet retransmission.
⚠️ Important: Wireless interface settings, such as frequency and channel width, must strictly match those of the transmitting end. A mismatch of even one parameter will result in a connection failure.
Diagnosing and troubleshooting
If the connection fails or is unstable, use the logs for diagnostics. In the menu Log You can filter messages by topic wirelessErrors like "disassociated: sending deauth" or "association denied" indicate problems with the password or security standards compliance.
Check the physical orientation of the antennas. Even a slight misalignment of a directional antenna (e.g. SXT or LHG) may cause signal loss. Use the "Scan" mode in real time, slowly rotating the antenna to find the point of maximum signal.
A common problem is equipment overheating. Mikrotik devices operating in high-speed receive and transmit modes can become hot. Ensure the device is installed in the shade or has adequate cooling, as processor throttling reduces the Wi-Fi module's performance.
In complex cases, updating the firmware may help. Go to System -> Packages and check for updates. New versions of RouterOS often contain wireless card driver fixes and protocol stability improvements.
Why does Mikrotik see the network but not connect?
Most often, the cause is a mismatch in security settings. Check that the correct encryption type (WPA2 vs. WPA3) is selected and that the password is entered correctly. Also, make sure there are no client limits or MAC address filtering enabled on the access point.
Is it possible to receive 5 GHz Wi-Fi on an old router?
No, the hardware must support the appropriate band. If your device's specifications (e.g., hAP lite) only list 2.4 GHz, configuring 5 GHz reception via software is not possible. You will need to upgrade to dual-band hardware.
How to increase the signal reception range?
You can increase reception sensitivity by reducing the "noise floor threshold" parameter in the advanced wireless interface settings, but this may reduce stability. A better solution is to use antennas with a higher gain (dBi) and ensure a clear line of sight.
Do I need a license for Station mode?
Basic client (station) functionality is available with a Level 3 (L3) license and higher, which is included with most home routers. Creating an access point with a larger number of clients or using WDS may require a Level 4 (L4) license. Check your license level in the System -> License menu.