Establishing a stable wireless connection between remote sites is often the only alternative to laying expensive fiber optic or copper cable. The company's equipment MikroTik deservedly occupies a leading position in this segment thanks to the flexibility of the operating system RouterOS and affordable hardware platforms. Properly configured bridges allow for gigabit data transfers over distances of several kilometers without significant speed loss.
In this article, we will examine in detail the architecture of link construction, consider the nuances of choosing frequency ranges, and provide specific examples of equipment configuration through a graphical interface. WinBoxYou will learn how to avoid common antenna alignment errors and understand how to ensure maximum channel throughput in noisy environments.
Selecting architecture and hardware for the link
The first step is always determining the future network topology, as this directly influences the choice of equipment models and licenses. There are two main scenarios: point-to-point (Point-to-Point), when connecting two specific buildings, and point-to-multipoint (Point-to-MultiPoint), when a single base station is intended to distribute internet to multiple remote clients. For the former, devices with a narrow beamforming pattern are optimal, while the latter requires sector antennas or omnidirectional solutions.
A critical parameter is the frequency range. The range 2.4 GHz has better penetration ability through obstacles, but it is heavily overloaded with household devices, which can lead to connection instability. Frequency 5 GHz offers wider channels and less interference, but its signal is less able to bypass obstacles and requires a direct line of sight between the receiver and transmitter.
β οΈ Important: Before purchasing equipment, be sure to check local regulations regarding frequency use. Some countries require special permission from the communications regulator to operate on certain frequencies or with a certain power level.
When choosing a model, pay attention to the availability of support for modern standards. 802.11ac (Wave 2) or 802.11ax (Wi-Fi 6), if high throughput is your goal. Older models of the standard 802.11n are still relevant for budget solutions, but their real throughput rarely exceeds 40-50 Mbps in real conditions, which can become a bottleneck for modern traffic.
Preparation for setup and physical installation
Before starting software configuration, it is necessary to properly prepare the hardware physically. Devices MikroTik series LHG, SXT or Sextant often equipped with power supplies with support Passive PoE or standard 802.3af/atIt is important to use the correct injector, as applying the wrong voltage can damage the Ethernet port beyond repair.
Mounting antennas on a mast requires precision. To achieve maximum speed, a clear line of sight (LOS) between devices is essential. Even tree foliage or a glass panel can significantly weaken the 5 GHz signal, so it's recommended to use terrain analysis tools such as Google Earth, still at the planning stage.
The initial connection is best done indoors, by connecting the device directly to the computer. By default, the equipment MikroTik has an IP address 192.168.88.1, login admin and an empty password. A utility is used for management. WinBox, which can be downloaded from the manufacturer's official website. Once connected, make sure you see the device in your neighbors and can log in.
βοΈ Check before installation on the mast
Basic wireless interface setup
After logging in through WinBox go to the menu WirelessThis is where the main radio module control interface is located. First, you need to set the correct Country (Country), as this determines the available frequency range and maximum permitted transmit power. Ignoring this parameter may result in operation on prohibited frequencies or reduced signal strength.
In the field Mode We select the device's operating mode. To create a point-to-point bridge, one side is configured as bridge (or ap-bridge), and the second one is like station-bridge. Mode station-bridge is a proprietary extension MikroTik also allows for transparent forwarding of client MAC addresses over a wireless link, which is critical for the proper operation of a local network.
/interface wireless
set wlan1 disabled=no mode=ap-bridge ssid="MyBridgeLink" frequency=5180 band=5ghz-a/n/ac
channel-width=20/40/80mhz-eece
security-profile=default
Pay special attention to the parameter FrequencyFor stable operation, it is recommended to select clear channels. In the 5 GHz band, it is best to use channels that do not overlap with weather service radars to avoid automatic DFS (Dynamic Frequency Selection) frequency switching, which can cause brief connection interruptions.
Setting up security and encryption protocols
Wireless bridge security isn't just about protecting against unauthorized connections, it also ensures the integrity of transmitted data. In the menu Wireless Security Profiles You need to create a new profile or edit an existing one. For modern networks, the use of an encryption protocol is standard. WPA2 with an algorithm AES (CCMP). Using legacy TKIP or WEP This is unacceptable because these algorithms are easily hacked.
When setting up the mode station-bridge It is important to understand that encryption occurs at the link level. This means that all packets passing through the radio interface will be encrypted. The access key (Pre-Shared Key) must be complex, contain at least 12 characters, including letters of different upper and lower case and numbers, to prevent brute-force attacks.
| Parameter | Recommended value | Description |
|---|---|---|
| Authentication Types | wpa2-psk | Client authorization type |
| Unicast Keys | aes-ccm | Data encryption algorithm |
| Group Keys | aes-ccm | Algorithm for group packets |
| WPA Mode | dynamic keys | Key generation mode |
MAC address filtering can be used as an additional layer of protection, although it shouldn't be relied upon alone, as MAC addresses are easily spoofed. However, when combined with a strong WPA2 password, it will create an additional barrier to casual or inexperienced attackers attempting to connect to your network.
Speed ββOptimization and NV2 Protocol
Standard wireless network protocol MikroTik may be ineffective over long distances or in the presence of interference. To improve performance, the developers implemented a proprietary protocol. NV2 (Nstreme version 2). It uses the TDMA (Time Division Multiple Access) access method, which avoids packet collisions and significantly improves latency stability, especially in Point-to-MultiPoint mode.
To activate NV2, you need to change the wireless interface settings Wireless Protocol on nv2After this, additional settings will become available, such as TDMA Period SizeThe optimal period value depends on the distance between the antennas: the greater the distance, the longer the period should be to ensure the signal has time to reach the recipient and receive an acknowledgement.
What is the difference between NV2 and regular 802.11?
The NV2 protocol is proprietary and works exclusively between MikroTik devices. It completely replaces the standard CSMA/CA mechanism, eliminating airtime contention. This provides a 30-40% speed boost over long distances and ensures stable ping even under load, but requires all devices in the network to be configured to use NV2.
It's also worth experimenting with the channel width (Channel Width). Although the width 40 MHz or 80 MHz gives theoretically higher speed, in noisy air a narrow channel 20 MHz can provide a more stable connection and even greater real throughput due to a better signal-to-noise ratio.
Connection quality monitoring and adjustment
After the initial setup and installation of the antennas on the mast, a fine-tuning stage known as alignment begins. For this, you'll need an assistant at the other end of the link or use remote access. The primary tool for assessing quality is the alignment window. Wireless -> Interfaces -> [wlan1] -> Tx/Rx, where signal levels are displayed.
The key parameter here is Signal Strength (signal level) and CCQ (Client Connection Quality). CCQ indicates the percentage of successful data transfer. A CCQ value close to 100% and a signal strength between -45 and -65 dBm are considered ideal. If the signal is weaker than -75 dBm, speed will drop and ping will increase.
β οΈ Caution: Don't aim for the highest possible signal level (e.g., -30 dBm). An excessively strong signal can saturate the receiving circuit and cause intermodulation distortion, which will degrade communication quality. The optimal power margin should be 10-15 dB.
For precise tuning, use real-time monitoring tools. Smoothly rotate the antenna in azimuth and elevation, observing the changes in parameters. Fix the antenna in a position that achieves the best balance between signal strength and CCQ stability, not just maximum signal volume.
Frequently Asked Questions (FAQ)
Why does my MikroTik bridge show low speed even though the signal strength is high?
Low speed with a high signal strength most often indicates a low CCQ value. This can be caused by strong interference on the selected frequency, signal reflections from nearby buildings (multipass), or using a channel that is too wide in a noisy environment. Try changing the frequency or reducing the channel width to 20 MHz.
What is the difference between station and station-bridge modes?
Mode station works as a regular client (like a laptop with Wi-Fi), creating NAT and breaking broadcast packets. station-bridge (proprietary for MikroTik) allows forwarding MAC addresses of devices behind the client antenna to the base station side, making the wireless connection transparent, as if the devices were connected by a cable.
What is the maximum distance that can be covered using MikroTik equipment?
Theoretically, using highly directional antennas (e.g., series Dish) and clear ether, a link can be extended 50-80 km or more. However, in practice, the distance is limited by the curvature of the Earth and the presence of a direct line of sight. For distances over 20 km, a professional Fresnel link calculation is required.
Do I need to update my wireless firmware before setting it up?
Yes, this is highly recommended. Radio module firmware (firmware) is frequently updated regardless of the RouterOS version. Mismatched software and firmware versions may result in unstable operation of the radio interface or lack of support for new features. Check the status in the menu. System -> Packages and perform the update if necessary.