Connecting MikroTik to Another Router via Wi-Fi: A Complete Guide with Settings

Connecting equipment MikroTik Connecting another router's existing Wi-Fi network is a task faced by both novice administrators and experienced users. Why is this necessary? There are many reasons: expanding coverage, setting up a separate subnet for guests or smart home devices, providing a backup access channel, or even creating complex network topologies with multiple routing layers. However, standard home routers rarely support flexible communication schemes, unlike MikroTik professional solutions, where such scenarios are realized through Wireless Client, WDS or Bridge.

The main difficulty is that MikroTik by default it does not work as a typical "repeater" - it requires manual configuration of interfaces, routes and sometimes even NATIn this article we will discuss three main connection methods (client, bridge, repeater), we'll look at the nuances of security, diagnostics, and optimization. You'll also learn why it's sometimes easier to use EoIP- a tunnel instead of a direct Wi-Fi bridge and how to bypass restrictions from some providers.

If you have never worked with RouterOSDon't be alarmed: all commands will be duplicated with explanations. For visual control, we'll provide screenshots from Winbox — the most popular administration tool MikroTikBut first, let's determine which connection scheme is right for you.

📊 What problem do you want to solve with MikroTik?
Extend your Wi-Fi range
Create a separate network for devices
Backup access channel
Complex routing
Other

1. Choosing a connection scheme: client, bridge or repeater?

Before you start setting up, it is important to understand what role will yours play? MikroTik in a new topology. This determines not only the configuration but also the final functionality of the network. Let's consider three main scenarios:

1. Wireless Client mode (Stationary client) MikroTik connects to the main router like a regular device (for example, a laptop), receives an IP address from it, and distributes the Internet further via a cable or via its Wi-Fi. Ideal for:

  • 📡 Connecting a remote office to the central network
  • 🖥️ Setting up wired access in a place where there is no cable from the provider
  • 🔒 Creating a "clean" network for servers or IP cameras
⚠️ Attention: In this mode MikroTik It won't rebroadcast the main router's Wi-Fi. If you need a wireless network at the output, additional configuration will be required. Virtual AP.

2. WDS (Wireless Distribution System) mode

Both routers (main and MikroTik) are combined into a single wireless network at the data link level. Advantages:

  • 🔄 Transparent roaming between access points (devices automatically switch)
  • 🌐 United SSID and security settings for the entire network
  • 📦 Multicast traffic support (important for IPTV)

However WDS requires support on both devices and often reduces throughput by 30-50%. due to duplication of packages.

3. Repeater mode (Wireless Repeater) MikroTik connects to the main router via Wi-Fi and relays its network, possibly with another SSID. Suitable for:

  • 📶 Increasing Wi-Fi coverage in a large home
  • 🚪 Organizing a guest network with limited access
  • 🔄 Bypass provider restrictions on the number of connected devices
Scheme Required support on the main router Difficulty of setup Loss of speed
Wireless Client Any router with Wi-Fi Low Minimum (5-10%)
WDS WDS support on the main router Average 30-50%
Repeater Any router with Wi-Fi High 20-40%

2. Equipment preparation: what needs to be checked before setup

Before you begin configuration, please make sure your hardware meets the requirements. Here mandatory checklist:

Check Wi-Fi standards compatibility (802.11a/b/g/n/ac/ax)

Update MikroTik firmware to the latest stable version

Write down the main router settings (SSID, channel, security type)

Prepare a cable for initial setup (if Wi-Fi access is not available)

Disable the firewall during setup (enable later)

-->

Wi-Fi Standards Compatibility

If the main router is operating in mode 802.11ac (5 GHz), and yours MikroTik supports only 802.11n (2.4 GHz), connection will be possible, but the speed will be limited to the slowest standard. The best option - when both devices support 802.11ac or 802.11ax (Wi-Fi 6).

Channels and widths

Make sure your main router is using fixed channel (and not Auto), otherwise MikroTik may lose connection when changing it. Channel width (20/40/80 MHz) on both devices must match. For example, if the main router is configured to 40 MHz, A MikroTik trying to connect in mode 20 MHz, the speed will drop by 2 times.

Security MikroTik supports all modern encryption types: WPA3, WPA2-PSK, WPA2-EnterpriseHowever, if the main router uses WEP or WPA-TKIP, abandon this scheme - it is unsafe and may not work reliably.

3. Setting up MikroTik in Wireless Client mode (step-by-step instructions)

This is the simplest and most universal connection method. MikroTik will work as a client of the main router, receive an IP address from it via DHCP and distribute the Internet further through its ports.

Step 1: Connecting to MikroTik

Reset your device to factory settings (button Reset for 5 seconds) and connect to it via cable. Go to Winbox (or WebFig) at the address 192.168.88.1 (login: admin, the password is empty).

Step 2: Setting up the Wi-Fi interface

Go to Wireless, select your wireless interface (eg. wlan1) and press ScanFind the main router's network and double-click it. In the window that opens:

  • Please specify SSID main network
  • Select mode station (or station-pseudobridge for compatibility)
  • Tab Security: Specify the security type and password
  • Tab Advanced: install Band=2GHz-OnlyN (if the network is 2.4 GHz) or 5GHz-OnlyAC (for 5 GHz)

Step 3: Obtaining an IP address

Go to IP → DHCP Client, click + and select the interface wlan1This will allow MikroTik automatically obtain IP from the main router.

Step 4: Configure NAT and Routing

If you plan to distribute the Internet through ports MikroTik, execute:

/ip firewall nat add chain=srcnat action=masquerade out-interface=wlan1

This command will enable NAT, so that the devices are MikroTik could access the Internet.

Step 5: Checking the connection

Connect the device to the port MikroTik and check your internet access. If the ping is up to 8.8.8.8 Yes, but websites won't open - check your settings DNS V IP → DNS.

What to do if MikroTik won't connect to Wi-Fi?

1. Check that the main router does not block new devices by MAC address.

2. Make sure that Client Isolation is disabled on the main router.

3. Try manually specifying the channel in the MikroTik settings (instead of Auto).

4. If you are using WPA2-Enterprise, make sure the certificates are correct.

4. Setting up a WDS bridge between MikroTik and another router

This method allows you to connect two networks at the data link layer, as if they were connected by a cable. Important condition: both routers must support WDS, otherwise the bridge will not work.

Step 1: Setting up the main router

On the main router (not MikroTik) turn on the mode WDS and add the MAC address of the wireless interface MikroTik. This is usually done in the section Wireless → WDS or Bridge.

Step 2: MikroTik Configuration

IN Winbox go to Wireless, select the interface and configure it as follows:

  • Mode: station-wds
  • SSID: must match the main router
  • Security: the same settings as on the main router
  • WDS: Enable and enter the MAC address of the main router

Step 3: Setting up the bridge

Create a bridge (Bridge) and add to it the Wi-Fi interface and ports that should work in a single network:

/interface bridge add name=bridge-local

/interface bridge port add bridge=bridge-local interface=wlan1

/interface bridge port add bridge=bridge-local interface=ether2

Step 4: Disabling DHCP on MikroTik

If the main router distributes IP addresses, MikroTik You need to disable the DHCP server to avoid conflicts:

/ip dhcp-server disable [find]
⚠️ Note: In WDS mode you can't use different subnets on routers. All devices must be on the same network (for example, 192.168.1.0/24).

5. Optimization and troubleshooting

Even after successful setup, there may still be issues with network speed, stability, or availability. key parameters for optimization:

1. Selecting a channel and power

Use the utility Frequency Usage V Wirelessto find the least congested channel. Transmission power (Tx Power) install on 17 dBm for 2.4 GHz and 20 dBm for 5 GHz - this is enough for most scenarios.

2. Setting MTU

If websites don't open completely or the video is lagging, reduce MTU on the Wi-Fi interface:

/interface wireless set wlan1 mtu=1400

3. Firmware update

Outdated versions RouterOS may contain errors in Wi-Fi drivers. Check the latest version in System → Packages and update through System → RouterBOARD → Upgrade.

Problem Possible cause Solution
No connection to the main router Incorrect password or security type Check the settings in Wireless → Security Profiles
Low speed (1-10 Mbps) Automatic channel width selection Fix the width on 20/40MHz manually
Constant connection breaks Interference from other networks Change the channel to a less crowded one

6. Alternative connection methods: EoIP and VPN

If a direct Wi-Fi connection is not possible (for example, due to long distance or interference), consider tunnel technologies:

EoIP (Ethernet over IP)

Allows you to create a virtual Ethernet cable over Wi-Fi. Configuration:

/interface eoip add name=eoip-tunnel remote-address=192.168.1.1 tunnel-id=1

/interface bridge add name=bridge-eoip

/interface bridge port add bridge=bridge-eoip interface=eoip-tunnel

/interface bridge port add bridge=bridge-eoip interface=ether2

PPPoE over Wi-Fi

If your provider requires PPPoE authentication, you can forward it via Wi-Fi:

/interface pppoe-client add interface=wlan1 user=your_login password=your_password

WireGuard VPN

For a secure connection with encryption:

/interface wireguard add name=wg1 private-key="generated_key" listen-port=13231

/interface wireguard peers add interface=wg1 public-key="server_key" allowed-address=0.0.0.0/0 endpoint=192.168.1.1:51820

⚠️ Note: Tunneling solutions add latency (ping) and can reduce speed by 10-30%. Use them only if direct Wi-Fi setup is not possible.

7. Security: How to protect your connection

Connection MikroTik connecting to another router via Wi-Fi creates additional risks for the network. Here mandatory protective measures:

1. Traffic isolation

If MikroTik used for guest network, create a separate one VLAN:

/interface vlan add interface=bridge-local name=vlan-guest vlan-id=10

/ip address add address=192.168.10.1/24 interface=vlan-guest

2. MAC address filtering

Allow connections only to trusted devices:

/interface wireless access-list add interface=wlan1 mac-address=00:11:22:33:44:55

3. Disabling unnecessary services

Close access to MikroTik from the external network:

/ip service disable "api,api-ssl,ftp,telnet,www-ssl"

4. Updating passwords

Use complex passwords for Wi-Fi And WinboxIt is recommended to change them every 3-6 months.

FAQ: Frequently asked questions about connecting MikroTik to another router

Is it possible to connect MikroTik to a provider's router (for example, from Rostelecom)?

Yes, but there are some nuances:

  • 🔹 If your ISP binds access to a MAC address, clone it /interface wireless set wlan1 mac-address=XX:XX:XX:XX:XX:XX.
  • 🔹 Some providers block "non-their" devices DHCP Option 82 - in this case it will be necessary EoIP or VPN.
  • 🔹 For IPTV you may need a separate one VLAN.
Why is the speed via MikroTik 2 times slower than directly?

Possible reasons:

  • 📉 Half duplex: if MikroTik works as a repeater, traffic passes twice (reception + transmission).
  • 🔄 Channel width: check that it is set on both devices 40MHz (for 5 GHz) or 20MHz (for 2.4 GHz).
  • 🔋 Signal strength: if the signal level is lower -70 dBm, the speed will drop.

Solution: Use Wireless Client instead of a repeater or connect MikroTik via cable to the main router.

How can I make devices automatically switch between routers (roaming)?

For seamless roaming:

  • 🔄 Set up WDS or CAPsMAN (if both devices are - MikroTik).
  • 📶 Use the same ones SSID, security type and password on both routers.
  • 🔗 Set different channels (for example, 1 and 6 for 2.4 GHz) to minimize interference.
  • 🔧 Turn on 802.11r (Fast Transition) in the settings Wireless.

For Apple devices you will also need to enable 802.11k And 802.11v.

Can MikroTik be used as a repeater for a network with Captive Portal (for example, in a hotel)?

Technically yes, but it violates the policies of many providers. Furthermore:

  • ⚠️ Captive Portal requires browser authorization, which is difficult to automate.
  • 🔄 You will have to manually log in MikroTik, and then configure NAT.
  • 🚫 Some networks block retransmission through DHCP Snooping.

Alternative: Use MikroTik as a client, and configure for devices VPN to a server outside the network with Captive Portal.

How do I reset MikroTik if I made a mistake in the settings and lost access?

Reset methods:

  • 🔧 Hard reset: hold down the button Reset for 5-10 seconds (until the lights start blinking).
  • 🖥️ Through Netinstall: connect via cable by holding Reset when turned on, then use the utility Netinstall.
  • 🔌 If access is via MAC-Telnet not disabled, connect via MAC address:
telnet 192.168.88.1 mac=XX:XX:XX:XX:XX:XX

After resetting login/password: admin / (empty).