Connecting equipment MikroTik Connecting another router's existing Wi-Fi network is a task faced by both novice administrators and experienced users. Why is this necessary? There are many reasons: expanding coverage, setting up a separate subnet for guests or smart home devices, providing a backup access channel, or even creating complex network topologies with multiple routing layers. However, standard home routers rarely support flexible communication schemes, unlike MikroTik professional solutions, where such scenarios are realized through Wireless Client, WDS or Bridge.
The main difficulty is that MikroTik by default it does not work as a typical "repeater" - it requires manual configuration of interfaces, routes and sometimes even NATIn this article we will discuss three main connection methods (client, bridge, repeater), we'll look at the nuances of security, diagnostics, and optimization. You'll also learn why it's sometimes easier to use EoIP- a tunnel instead of a direct Wi-Fi bridge and how to bypass restrictions from some providers.
If you have never worked with RouterOSDon't be alarmed: all commands will be duplicated with explanations. For visual control, we'll provide screenshots from Winbox — the most popular administration tool MikroTikBut first, let's determine which connection scheme is right for you.
1. Choosing a connection scheme: client, bridge or repeater?
Before you start setting up, it is important to understand what role will yours play? MikroTik in a new topology. This determines not only the configuration but also the final functionality of the network. Let's consider three main scenarios:
1. Wireless Client mode (Stationary client) MikroTik connects to the main router like a regular device (for example, a laptop), receives an IP address from it, and distributes the Internet further via a cable or via its Wi-Fi. Ideal for:
- 📡 Connecting a remote office to the central network
- 🖥️ Setting up wired access in a place where there is no cable from the provider
- 🔒 Creating a "clean" network for servers or IP cameras
⚠️ Attention: In this mode MikroTik It won't rebroadcast the main router's Wi-Fi. If you need a wireless network at the output, additional configuration will be required. Virtual AP.
2. WDS (Wireless Distribution System) mode
Both routers (main and MikroTik) are combined into a single wireless network at the data link level. Advantages:
- 🔄 Transparent roaming between access points (devices automatically switch)
- 🌐 United
SSIDand security settings for the entire network - 📦 Multicast traffic support (important for IPTV)
However WDS requires support on both devices and often reduces throughput by 30-50%. due to duplication of packages.
3. Repeater mode (Wireless Repeater)
MikroTik connects to the main router via Wi-Fi and relays its network, possibly with another SSID. Suitable for:
- 📶 Increasing Wi-Fi coverage in a large home
- 🚪 Organizing a guest network with limited access
- 🔄 Bypass provider restrictions on the number of connected devices
| Scheme | Required support on the main router | Difficulty of setup | Loss of speed |
|---|---|---|---|
| Wireless Client | Any router with Wi-Fi | Low | Minimum (5-10%) |
| WDS | WDS support on the main router | Average | 30-50% |
| Repeater | Any router with Wi-Fi | High | 20-40% |
2. Equipment preparation: what needs to be checked before setup
Before you begin configuration, please make sure your hardware meets the requirements. Here mandatory checklist:
Check Wi-Fi standards compatibility (802.11a/b/g/n/ac/ax)
Update MikroTik firmware to the latest stable version
Write down the main router settings (SSID, channel, security type)
Prepare a cable for initial setup (if Wi-Fi access is not available)
Disable the firewall during setup (enable later)
-->
Wi-Fi Standards Compatibility
If the main router is operating in mode 802.11ac (5 GHz), and yours MikroTik supports only 802.11n (2.4 GHz), connection will be possible, but the speed will be limited to the slowest standard. The best option - when both devices support 802.11ac or 802.11ax (Wi-Fi 6).
Channels and widths
Make sure your main router is using fixed channel (and not Auto), otherwise MikroTik may lose connection when changing it. Channel width (20/40/80 MHz) on both devices must match. For example, if the main router is configured to 40 MHz, A MikroTik trying to connect in mode 20 MHz, the speed will drop by 2 times.
Security
MikroTik supports all modern encryption types: WPA3, WPA2-PSK, WPA2-EnterpriseHowever, if the main router uses WEP or WPA-TKIP, abandon this scheme - it is unsafe and may not work reliably.
3. Setting up MikroTik in Wireless Client mode (step-by-step instructions)
This is the simplest and most universal connection method. MikroTik will work as a client of the main router, receive an IP address from it via DHCP and distribute the Internet further through its ports.
Step 1: Connecting to MikroTik
Reset your device to factory settings (button Reset for 5 seconds) and connect to it via cable. Go to Winbox (or WebFig) at the address 192.168.88.1 (login: admin, the password is empty).
Step 2: Setting up the Wi-Fi interface
Go to Wireless, select your wireless interface (eg. wlan1) and press ScanFind the main router's network and double-click it. In the window that opens:
- Please specify
SSIDmain network - Select mode
station(orstation-pseudobridgefor compatibility) - Tab
Security: Specify the security type and password - Tab
Advanced: installBand=2GHz-OnlyN(if the network is 2.4 GHz) or5GHz-OnlyAC(for 5 GHz)
Step 3: Obtaining an IP address
Go to IP → DHCP Client, click + and select the interface wlan1This will allow MikroTik automatically obtain IP from the main router.
Step 4: Configure NAT and Routing
If you plan to distribute the Internet through ports MikroTik, execute:
/ip firewall nat add chain=srcnat action=masquerade out-interface=wlan1
This command will enable NAT, so that the devices are MikroTik could access the Internet.
Step 5: Checking the connection
Connect the device to the port MikroTik and check your internet access. If the ping is up to 8.8.8.8 Yes, but websites won't open - check your settings DNS V IP → DNS.
What to do if MikroTik won't connect to Wi-Fi?
1. Check that the main router does not block new devices by MAC address.
2. Make sure that Client Isolation is disabled on the main router.
3. Try manually specifying the channel in the MikroTik settings (instead of Auto).
4. If you are using WPA2-Enterprise, make sure the certificates are correct.
4. Setting up a WDS bridge between MikroTik and another router
This method allows you to connect two networks at the data link layer, as if they were connected by a cable. Important condition: both routers must support WDS, otherwise the bridge will not work.
Step 1: Setting up the main router
On the main router (not MikroTik) turn on the mode WDS and add the MAC address of the wireless interface MikroTik. This is usually done in the section Wireless → WDS or Bridge.
Step 2: MikroTik Configuration
IN Winbox go to Wireless, select the interface and configure it as follows:
- Mode:
station-wds - SSID: must match the main router
- Security: the same settings as on the main router
- WDS: Enable and enter the MAC address of the main router
Step 3: Setting up the bridge
Create a bridge (Bridge) and add to it the Wi-Fi interface and ports that should work in a single network:
/interface bridge add name=bridge-local/interface bridge port add bridge=bridge-local interface=wlan1
/interface bridge port add bridge=bridge-local interface=ether2
Step 4: Disabling DHCP on MikroTik
If the main router distributes IP addresses, MikroTik You need to disable the DHCP server to avoid conflicts:
/ip dhcp-server disable [find]
⚠️ Note: In WDS mode you can't use different subnets on routers. All devices must be on the same network (for example, 192.168.1.0/24).
5. Optimization and troubleshooting
Even after successful setup, there may still be issues with network speed, stability, or availability. key parameters for optimization:
1. Selecting a channel and power
Use the utility Frequency Usage V Wirelessto find the least congested channel. Transmission power (Tx Power) install on 17 dBm for 2.4 GHz and 20 dBm for 5 GHz - this is enough for most scenarios.
2. Setting MTU
If websites don't open completely or the video is lagging, reduce MTU on the Wi-Fi interface:
/interface wireless set wlan1 mtu=1400
3. Firmware update
Outdated versions RouterOS may contain errors in Wi-Fi drivers. Check the latest version in System → Packages and update through System → RouterBOARD → Upgrade.
| Problem | Possible cause | Solution |
|---|---|---|
| No connection to the main router | Incorrect password or security type | Check the settings in Wireless → Security Profiles |
| Low speed (1-10 Mbps) | Automatic channel width selection | Fix the width on 20/40MHz manually |
| Constant connection breaks | Interference from other networks | Change the channel to a less crowded one |
6. Alternative connection methods: EoIP and VPN
If a direct Wi-Fi connection is not possible (for example, due to long distance or interference), consider tunnel technologies:
EoIP (Ethernet over IP)
Allows you to create a virtual Ethernet cable over Wi-Fi. Configuration:
/interface eoip add name=eoip-tunnel remote-address=192.168.1.1 tunnel-id=1/interface bridge add name=bridge-eoip
/interface bridge port add bridge=bridge-eoip interface=eoip-tunnel
/interface bridge port add bridge=bridge-eoip interface=ether2
PPPoE over Wi-Fi
If your provider requires PPPoE authentication, you can forward it via Wi-Fi:
/interface pppoe-client add interface=wlan1 user=your_login password=your_password
WireGuard VPN
For a secure connection with encryption:
/interface wireguard add name=wg1 private-key="generated_key" listen-port=13231
/interface wireguard peers add interface=wg1 public-key="server_key" allowed-address=0.0.0.0/0 endpoint=192.168.1.1:51820
⚠️ Note: Tunneling solutions add latency (ping) and can reduce speed by 10-30%. Use them only if direct Wi-Fi setup is not possible.
7. Security: How to protect your connection
Connection MikroTik connecting to another router via Wi-Fi creates additional risks for the network. Here mandatory protective measures:
1. Traffic isolation
If MikroTik used for guest network, create a separate one VLAN:
/interface vlan add interface=bridge-local name=vlan-guest vlan-id=10
/ip address add address=192.168.10.1/24 interface=vlan-guest
2. MAC address filtering
Allow connections only to trusted devices:
/interface wireless access-list add interface=wlan1 mac-address=00:11:22:33:44:55
3. Disabling unnecessary services
Close access to MikroTik from the external network:
/ip service disable "api,api-ssl,ftp,telnet,www-ssl"
4. Updating passwords
Use complex passwords for Wi-Fi And WinboxIt is recommended to change them every 3-6 months.
FAQ: Frequently asked questions about connecting MikroTik to another router
Is it possible to connect MikroTik to a provider's router (for example, from Rostelecom)?
Yes, but there are some nuances:
- 🔹 If your ISP binds access to a MAC address, clone it
/interface wireless set wlan1 mac-address=XX:XX:XX:XX:XX:XX. - 🔹 Some providers block "non-their" devices
DHCP Option 82- in this case it will be necessaryEoIPorVPN. - 🔹 For IPTV you may need a separate one
VLAN.
Why is the speed via MikroTik 2 times slower than directly?
Possible reasons:
- 📉 Half duplex: if MikroTik works as a repeater, traffic passes twice (reception + transmission).
- 🔄 Channel width: check that it is set on both devices
40MHz(for 5 GHz) or20MHz(for 2.4 GHz). - 🔋 Signal strength: if the signal level is lower
-70 dBm, the speed will drop.
Solution: Use Wireless Client instead of a repeater or connect MikroTik via cable to the main router.
How can I make devices automatically switch between routers (roaming)?
For seamless roaming:
- 🔄 Set up
WDSorCAPsMAN(if both devices are - MikroTik). - 📶 Use the same ones
SSID, security type and password on both routers. - 🔗 Set different channels (for example, 1 and 6 for 2.4 GHz) to minimize interference.
- 🔧 Turn on
802.11r(Fast Transition) in the settingsWireless.
For Apple devices you will also need to enable 802.11k And 802.11v.
Can MikroTik be used as a repeater for a network with Captive Portal (for example, in a hotel)?
Technically yes, but it violates the policies of many providers. Furthermore:
- ⚠️ Captive Portal requires browser authorization, which is difficult to automate.
- 🔄 You will have to manually log in MikroTik, and then configure
NAT. - 🚫 Some networks block retransmission through
DHCP Snooping.
Alternative: Use MikroTik as a client, and configure for devices VPN to a server outside the network with Captive Portal.
How do I reset MikroTik if I made a mistake in the settings and lost access?
Reset methods:
- 🔧 Hard reset: hold down the button
Resetfor 5-10 seconds (until the lights start blinking). - 🖥️ Through
Netinstall: connect via cable by holdingResetwhen turned on, then use the utility Netinstall. - 🔌 If access is via
MAC-Telnetnot disabled, connect via MAC address:
telnet 192.168.88.1 mac=XX:XX:XX:XX:XX:XX
After resetting login/password: admin / (empty).