Setting up a wireless network on MikroTik equipment is a task that requires attention to detail, but the results are worth it. Unlike consumer routers, where everything is hidden behind simple buttons, you have complete control over the radio channel. This allows you to optimize network performance even in noisy environments.
Before proceeding with interface configuration, you need to physically prepare the device. Make sure the antennas are securely screwed into the connectors and the provider's cable is connected to the port. ether1 (or another one if your provider uses a VLAN). After turning on the device, wait for the RouterOS operating system to load, which will take about a minute.
For initial access, we recommend using a wired connection, as the wireless interface may be disabled by default or lack security settings. Connect your computer to any available local network port and launch the WinBox utility. This is the de facto standard for Mikrotik administration, providing access to all hidden functions.
Basic Wireless Interface Configuration
The first step is to activate and perform basic configuration of the radio module. Go to the menu Wireless and double-click to open the interface list. You'll see your wireless card, for example, wlan1 or wifi1 in new models. In the window that opens, on the tab Wireless make sure that the operating mode (Mode) is set to the value ap bridgeThis mode allows the device to distribute the Internet rather than receive it as a client.
Next, you need to specify the network name that users will see. In the field SSID Enter the desired name. Do not use special characters or Cyrillic characters, as some older devices may display such names incorrectly. The frequency can be left as is. auto, but for stability it is better to select a specific channel, having previously analyzed the broadcast with the button Scan.
An important parameter is Band (band). For the 2.4 GHz band, the optimal channel width is 20 MHz, as 40 MHz in this range often leads to speed drops due to interference. In the 5 GHz band, you can safely choose 40 or 80 MHz for maximum performance.
⚠️ Note: For Dual Band models, each band is configured separately. Make sure you configure the interface that physically corresponds to the desired frequency.
Setting up security and encryption
An open network is a security hole. Immediately after creating the access point, you need to configure a security profile. Go to the tab Security Profile and click the button to add a new profile or edit defaultIn the field Mode select dynamic keys, which will allow the use of modern encryption protocols.
In the section Authentication Types tick the boxes wpa2 psk and, if supported by clients, wpa3 pskThe WPA1 and WEP protocols have long been considered obsolete and insecure, and their use is not recommended. In the field Unicast Ciphers And Group Ciphers leave only aes ccms, disabling the outdated TKIP, which cuts speed.
Enter a complex password in the field WPA2 Pre-Shared KeyThe password must be at least 12 characters long, including upper- and lower-case letters and numbers. After applying the settings, be sure to return to the interface tab and the field Security Profile Select the profile you created from the drop-down list.
☑️ Wi-Fi Security Check
Creating a bridge and configuring DHCP
To enable wireless clients to obtain IP addresses and access the internet, they need to be connected to the local network. Bridge is used for this. Go to the menu Bridge and create a new bridge (usually bridge1). Then go to the tab Ports and add your wireless interface to this bridge wlan1 and wired ports ether2-ether5.
After merging the ports, you need to configure the addressing server. In the menu IP -> DHCP Server Run the setup wizard (DHCP Setup). Select the bridge interface, specify the address pool (e.g., 192.168.88.0/24) and gateway. This will allow devices to automatically obtain network settings upon connection.
Don't forget to check your firewall rules. In the menu IP -> Firewall on the tab NAT There must be a rule that masks traffic from the local network to the global one. Usually it looks like a chain srcnat with action masquerade for the provider interface.
| Parameter | Recommended value | Description |
|---|---|---|
| Mode | ap bridge | Access point mode |
| SSID | Home_WiFi | Network name |
| Frequency | 2412 - 2472 | Channel frequency (2.4 GHz) |
| Band | 20/40/80 MHz | Channel width |
| Security | WPA2/WPA3 | Security protocol |
Performance Optimization and Advanced Settings
To improve connection stability, it's worth paying attention to additional settings. In the advanced wireless interface settings (Advanced Mode) find the parameter Install and make sure it is active. It is also recommended to install Country in meaning no_country_set or your country to unlock all available channels and capacities permitted by the regulator.
Function WMM (Wi-Fi Multimedia) must be enabled. It prioritizes latency-sensitive traffic, such as voice calls or video streaming. Without WMM enabled, speeds for 802.11n and higher protocols may be artificially limited by the standard.
If your network contains many older devices, you may need to configure compatibility. However, enabling legacy mode support (b/g) may reduce overall network performance. In today's environment, it's best to leave legacy mode enabled. only-N or only-AC, if you are confident that all clients support the new standards.
⚠️ Note: Interfaces and item names may differ depending on the RouterOS version (v6 or v7). In v7, the wireless package was replaced with wifiwave2 for newer chips, requiring the use of a separate "Wifi" menu.
What is Guard Interval?
Guard Interval is the time interval between data packet transmissions. Reducing this interval (Short GI) can increase throughput by 10-15%, but increases the risk of errors in noisy environments.
Organizing guest access
Creating a virtual interface is ideal for separating traffic from home devices and guests. Multiple SSIDs can be configured on a single physical card. Go to the list of wireless interfaces and create a new one by adding a plus sign. Master Interface Please indicate your main card and in SSID Enter the guest network name.
The key here is isolation. In the settings of the created virtual interface, you need to check the box Hide SSID (if necessary) and, most importantly, turn on default-forwarding=noThis will prevent guest network clients from exchanging packets with each other and with the main network.
For complete isolation, it's best to route guest traffic through a separate bridge interface or use a VLAN. This will require setting up a separate DHCP address pool and firewall rules that block access from the guest range to the trusted range. This approach ensures that guests cannot access your network storage or printers.
Connection diagnostics and monitoring
After setting up, it is important to check the signal quality. In the menu Wireless go to the tab RegistrationAll connected clients are displayed here. Double-clicking on a client will show the signal strength (Signal Strength) in dBm. A value between -40 and -70 dBm is considered normal. Values below -80 dBm indicate poor coverage.
For in-depth analysis, use the built-in sniffer or monitoring tools. Interface load graphs (Tools -> Traffic Monitor) will help identify anomalies. If you see clients constantly reconnecting, check the logs in the menu Log for authentication errors or IP address conflicts.
Regular firmware updates RouterOS And firmware The radio module is the key to stability. Manufacturers frequently release patches that fix vulnerabilities and improve performance with specific client device models. It's best to check for updates through the menu. System -> Packages.
Why doesn't my MikroTik router distribute Wi-Fi after setup?
The most common cause is a failure to add a wireless interface to Bridge. Check the Bridge -> Ports menu. Another common cause is a mismatch in Country settings, which causes the radio interface to be blocked due to regulatory restrictions.
What is the maximum speed you can get on MikroTik?
Speed depends on the router model and Wi-Fi standard. On older 802.11n models, actual speeds rarely exceed 40-50 Mbps due to CPU load. Newer models with Wi-Fi 5 (AC) and Wi-Fi 6 (AX) hardware-accelerate encryption, allowing for over-the-air speeds of 300-800 Mbps and higher.
Is it possible to boost the MikroTik signal using software?
Software can only increase the transmit power (Tx Power) within the limits permitted by the country's regulator. However, blindly increasing power often leads to signal distortion and a drop in speed. The best solution is proper antenna configuration and access point placement.