Equipment integration MikroTik into an existing home or office network where a standard one is already operating Wi-Fi router from the provider is a common scenario for expanding functionality. Users often need to set up complex routes, VPN server or set up a guest network with separate access rules that are not supported by the carrier's base devices. In such cases MikroTik acts as a powerful gateway or access point, taking over traffic management.
The process of connecting two network devices requires an understanding of the basic principles of addressing. IP and port operation to avoid conflicts within the local network. Incorrect configuration can lead to connection interruptions or the inability to access the internet for connected clients. Therefore, before physically connecting cables, it's essential to have a clear understanding of the logical structure of your future network.
In this guide, we'll look at the most efficient and secure ways to connect equipment, with a particular focus on setup. DHCP protocol and rules NATYou will learn how to turn a bundle of two devices into a single controlled system, where MikroTik takes on the task of filtering traffic, and the provider's router operates in simple modem or bridge mode.
To get started, you'll need the router itself. MikroTik (hAP, RB, or other models), an Ethernet patch cord, and a computer with a network card. It's also highly recommended to download the latest version of the operating system in advance. RouterOS from the manufacturer's official website to avoid compatibility issues and security vulnerabilities.
Selecting a connection diagram and preparing equipment
The first step is to determine the role of each device in the infrastructure being created. There are two main approaches: using MikroTik As the primary router (replacing the provider's functionality) or as a second router in a cascade (Double NAT). The first option is preferable for maximum performance and complete control over the network.
If your provider provides the service PPPoE or L2TP, you can configure these connections directly on MikroTik, completely eliminating the provider device from the authorization process. In this case, the provider's cable is inserted directly into the port. ether1 your new router. This reduces latency and makes it easier to diagnose problems.
In a situation where the provider's router is already configured and its parameters cannot be changed (or there is no access), MikroTik connects to the port LAN the main device. Here it is important to distribute IP addresses correctly so that subnets do not overlap. For example, if the main router distributes addresses in the range 192.168.0.x, That MikroTik must raise its network in range 192.168.88.x or any other.
⚠️ Important: Make sure the WAN and LAN IP addresses on both devices are on different subnets. If both routers try to use the same address
192.168.88.1, a conflict will arise and network management will become impossible.
☑️ Preparing for connection
The physical connection is made via a standard cable. EthernetOne end is inserted into the port. ether1 devices Connect one MikroTik router (which is marked as WAN by default) and the other to a free LAN port on the main router or to a port from your ISP. Once power is applied, the port indicators should light up, indicating a link.
Initial MikroTik setup via WinBox
To configure the equipment MikroTik the utility is used WinBox, which allows you to manage the device even without a configured IP address, using the MAC address. Download the program from the official website and run it on a computer connected to any LAN port of the router.
In the window that opens, you will see a list of nearby devices. Select yours. MikroTik by MAC address. By default, the login is admin, and the password field is empty. After logging in, the system will prompt you to delete the default configuration if one was pre-installed. For the sake of clarity, it's best to click the button Remove Configuration and reboot the device.
After rebooting, connect again via WinBox. Now you need to set a static IP address to manage the router. Go to the menu IP -> Addresses and add a new address, for example, 192.168.88.1/24 on the interface bridge-local or ether1, depending on your scheme. This will become the default gateway for your clients.
Don't forget to set a password for your account. admin and create a new user with limited rights for everyday use. Security begins with protecting the entry point to the management system.
| Parameter | Default value | Recommended value | Description |
|---|---|---|---|
| IP Address | 192.168.88.1 | 192.168.88.1 | Gateway address for the local network |
| User | admin | admin_new | Login username |
| Password | (empty) | Complex password | System access key |
| Service | telnet, ftp | ssh, winbox | Control protocols |
Setting up an Internet connection (WAN)
The next critical step is setting up a connection to the global network. If MikroTik is located after the provider's router, then in the menu IP -> DHCP Client You need to add a client to the port ether1The device will automatically receive an IP address from the main router.
In case of direct connection to the provider, the settings depend on the authorization type. For PPPoE go to the menu PPP, create a new interface, and enter the login and password received from your operator. For a dynamic IP, a DHCP client is sufficient. A static IP requires manual address entry. IP -> Addresses.
The important point is the setting Default Route. Make sure that in the menu IP -> Routes a record with .dst-address appeared 0.0.0.0/0 and a gateway leading to the external network. Without such an entry, the internet will not work, even if there is a physical connection.
What should I do if my ISP binds my internet connection to my MAC address?
If your ISP uses MAC address binding, you need to clone the old router's address. In MikroTik, this is done in the Interfaces -> Ethernet -> your port (ethernet1) -> Clone MAC Address menu. Enter the MAC address of the device that previously connected to the internet.
Check the availability of external resources by running the command ping 8.8.8.8 via terminal (New Terminal). A successful response will confirm that IP-level routing is configured correctly.
Organizing a local network and a DHCP server
To connected to MikroTik devices receive IP addresses automatically, you need to configure DHCP server. Go to the menu IP -> DHCP Server and use the setup wizard DHCP Setup. Select the interface on which the server will run (usually this is bridge or ether2-5).
The wizard will prompt you to specify an address pool. The default range is 192.168.88.2-192.168.88.254 Suitable for most home networks. You also need to specify DNS servers. You can use your ISP's addresses or public ones, for example, 1.1.1.1 And 8.8.8.8.
Make sure it's in the menu IP -> Pool A corresponding address pool has been created and referenced by the DHCP server. Without a properly configured pool, addresses will not be assigned to clients, and they will remain stuck in the "Obtaining IP address" status.
For wireless clients, you need to configure Wireless interface. In the menu Wireless Double-click on wlan1, enable it (check Enable), set the mode ap bridge, specify the SSID (network name) and configure the security profile security-profile with a password WPA2.
Configuring NAT and firewall rules
Without setting NAT (Network Address Translation) devices on the local network will not be able to access the Internet because their addresses are MikroTik This is implemented through masking rules. Go to IP -> Firewall -> Tab NAT and add a new rule.
Tab General: in the field Chain select srcnat, and in Out. Interface Please specify your WAN port (for example, ether1 or pppoe-out1). Tab Action: select an action masqueradeThis rule "hides" internal addresses behind the router's external IP.
⚠️ Note: In newer versions of RouterOS (v7+), the default configuration may already contain a NAT rule. Check the list of rules before adding a new one to avoid creating duplicates, which could slow down packet processing.
Firewall MikroTik By default, it blocks incoming connections, which is good security practice. However, if you plan to host servers or use remote access, you'll need to create rules in Input ChainBe careful: opening ports unnecessarily creates vulnerabilities.
It is also recommended to enable protection against brute-force attacks. Create a rule that temporarily blocks an IP address after several unsuccessful connection attempts. This can be done through the mechanism address-list and counters in the firewall.
Network diagnostics and optimization
Once setup is complete, you should test the connection stability. Use the built-in tools. MikroTik, such as Torch (menu Tools -> Torch). This tool allows you to see passing traffic, its sources, destinations, and the ports used in real time.
To check the speed and quality of the channel, use the utility Bandwidth Test (menu Tools -> Bandwidth Test). It allows you to measure the channel throughput between the router and a remote server or another MikroTik device.
Monitor your processor load. There's a CPU indicator in the WinBox main window. If the load is consistently high (above 70-80% on low-end models), it's possible that unnecessary services are running (e.g., upnp, cloud) or the firewall rules are too complex for the processor to process.
If you experience intermittent connection interruptions, check the logs in the menu LogThere may be messages about interface reboots, PPPoE errors, or DHCP issues. Analyzing the logs is the first step to troubleshooting.
Why isn't the internet working after setting up MikroTik?
The most common cause is a missing NAT (Masquerade) rule or an incorrect Default Route. Also, check whether the router itself is receiving an IP address on the WAN port. If you're using PPPoE, ensure the connection status is "Connected."
How to reset MikroTik to factory settings?
A physical reset is performed with the power on: press and hold the Reset button on the router for 5-10 seconds until the ACT indicator flashes. After releasing it, the router will reboot with a clean configuration.
Can MikroTik be used only as an access point?
Yes, to do this, you need to disable the DHCP server, assign an IP address from the main router's network, and connect the devices via LAN ports (or configure Bridge). In this mode, the router functions as a Wi-Fi switch.