Connecting MikroTik to a Wi-Fi Network: 3 Working Methods + Troubleshooting

• IN Security Profile Select an existing profile or create a new one (more on this below)
• Mark Connect And Default Authenticate

Now let's set it up safety profile:

1. Go to Wireless → Security Profiles.
2. Create a new profile with a name like, home_wifi.
3. Tab General:
   • Mode: dynamic keys
   • Authentication Types: WPA2 PSK (or WPA3, if supported)
   • Unicast Ciphers: AES CCM
   • Group Ciphers: AES CCM
• Tab WPA Pre-Shared Key Enter the Wi-Fi network password.

After applying the settings, check the connection status in Wireless → Registration. If the status running, and in IP → DHCP Client If the address appears, the connection is successful. If not, see the "Error Diagnosis" section.

Reset configuration to factory settings|

Set Station mode in Wireless interface|

Create a Security Profile with the correct encryption type|

Check channel compatibility (2.4 GHz vs 5 GHz)|

Disable firewall during setup|

Ping the gateway after connecting (e.g. 8.8.8.8)

-->

3. Method 2: Setting up a Wi-Fi bridge (to expand the network)

Bridge (bridge) allows you to "transparently" connect wired devices to the Wi-Fi network, as if they were connected by cable to the main router. For example, you can connect Smart TV or NAS, which do not have Wi-Fi, but have an Ethernet port.

Configuration algorithm:

1. Create a bridge:

   /interface bridge add name=wifi_bridge

2. Add an Ethernet port to the bridge (for example, ether2) and Wi-Fi interface:

   /interface bridge port add bridge=wifi_bridge interface=ether2
   /interface bridge port add bridge=wifi_bridge interface=wlan1

3. Set up wlan1 in mode station-pseudobridge (this is the key point!):

   /interface wireless set wlan1 mode=station-pseudobridge master-interface=none

4. Tie it up Security Profile (similar to Method 1).
5. Configure the DHCP client on the bridge:

   /ip dhcp-client add interface=wifi_bridge

Important: Station-pseudobridge mode only works with networks where the main router distributes IP addresses via DHCP. If you have static addresses, you'll have to configure routing manually.

Parameter	Significance for the bridge	Value for the client
Wi-Fi mode (mode)	station-pseudobridge	station
Interface for DHCP	Name of the bridge (wifi_bridge)	Wi-Fi interface (wlan1)
IP address on Ethernet	Not required (assigned via bridge)	Required (if you are distributing the Internet further)
WPA3 support	Yes (with RouterOS 7+)	Yes (with RouterOS 7+)

⚠️ Attention: In bridge mode, data transfer speeds can drop by 30-50% due to double packet conversion (Ethernet → Wi-Fi → Ethernet). For critical applications (e.g., IP telephony), it's better to use a wired connection or an access point in bridge mode. WDS.

4. Method 3: Wi-Fi Repeater (signal booster)

If you need to extend your Wi-Fi coverage, MikroTik can be configured as a repeater (repeater). Unlike a bridge, the device will rebroadcast the signal, creating a new network with the same name (or a different one). This method is suitable for large homes or offices with "dead zones."

Step-by-step instructions:

1. Create two virtual Wi-Fi interfaces:

   /interface wireless add master-interface=wlan1 name=wlan1-client mode=station disabled=no
   /interface wireless add master-interface=wlan1 name=wlan1-ap mode=ap-bridge disabled=no

2. Set up wlan1-client as a client (similar to Method 1).
3. Set up wlan1-ap as an access point:

   /interface wireless set wlan1-ap ssid=MyExtendedNetwork band=2ghz-b/g/n \
   security-profile=default

4. Combine interfaces into a bridge:

   /interface bridge add name=repeater_bridge
   /interface bridge port add bridge=repeater_bridge interface=wlan1-client
   /interface bridge port add bridge=repeater_bridge interface=wlan1-ap

5. Configure a DHCP server on the bridge (if you need to distribute IP addresses to local devices).

For stable operation of the repeater:

• 📶 Use different channels for wlan1-client And wlan1-ap (for example, channel 1 for connecting to the main network and channel 6 for retransmission).
• 🔄 Turn it off WMM Support in the Wi-Fi settings if lags are observed.
• 🔋 Reduce the transmit power (Tx Power) to 17 dBm, if the repeater is located close to the main router.

5. Diagnosing connection errors

If your MikroTik won't connect to Wi-Fi, first check the obvious:

• 🔌 Is the password entered correctly? (in Winbox The password is displayed as asterisks, but you can temporarily enable display in your profile settings).
• 📡 Does MikroTik see the target network? Check in Wireless → Scan.
• 🔒 Do the security settings match? For example, if the main router uses WPA2-AES, and in MikroTik it is indicated TKIP, there will be no connection.

Common errors and their solutions:

For in-depth diagnostics use Log (Tools → Log). Filter messages by tag wirelessFor example, the entry station: lost link indicates problems with connection stability, and authentication failed — authentication errors.

6. Speed ​​and stability optimization

Even after a successful connection, you may experience slow speeds or disconnections. Here's how to improve performance:

• 📈 Channel selection:
  • Use Wireless → Scanto find the least loaded channel.
  • For 2.4 GHz, avoid channels 6-11 (they are often congested).
  • In 5 GHz, select channels 36-48 or 149-165 (DFC channels may require manual country setting).
• 🔄 Relay settings:
  • Reduce Distance in the Wi-Fi settings to the actual distance to the router (for example, indoors for 50 meters).
  • Turn it off Compression And Fragmentation, if you don't use them.
• 🛡️ Safety:
  • Replace WPA2 PSK on WPA3 SAE, if both devices support it.
  • Turn it off WPS And Management Protection (if not needed).

For models with Wireless CM2 (For example, hAP ac³) the function is available Band Steering, which automatically switches clients between 2.4 GHz and 5 GHz. It's enabled with the command:

/interface wireless set wlan1 band=2ghz-only/5ghz-only/2ghz-n,5ghz-ac

7. Alternative connection methods

If standard methods don't work, consider alternatives:

• 🔗 WDS (Wireless Distribution System):
  • Requires support on the main router.
  • Setting: mode=station-wds and specifying the MAC address of the main router in WDS Peers.
  • Pros: less speed loss compared to a bridge.
• 🌐 CAPsMAN:
  • Centralized management of Wi-Fi networks (for several MikroTik).
  • Requires controller configuration (CAPsMAN Manager).
  • Suitable for large networks (hotels, offices).
• 🔌 USB Wi-Fi adapter:
  • If the built-in module does not support the required standard (for example, 802.11ax).
  • Chip adapters are supported Ralink And Atheros (list of compatible: official wiki).

For temporary connection (e.g. field setup) you can use USB modem in mode tethering. MikroTik supports most 4G modems (for example, Huawei E3372). Setting:

/interface lte apn set apn=internet.beeline.ru user=beeline password=beeline
/interface lte connect

⚠️ Attention: Interface and protocol settings may vary depending on the RouterOS version. For example, in v6.49 no support WPA3, and in v7.12 a new driver has appeared Wireless CM2, which requires reconfiguration of existing configurations.

FAQ: Frequently Asked Questions

Is it possible to connect MikroTik to Wi-Fi without a password (open network)?

Yes, but it's not safe. Security Profile select Authentication Types: none and disable all encryption (Unicast Ciphers: none, Group Ciphers: noneOn public networks (for example, in a cafe), this method may be blocked by a captive portal; in this case, additional DNS configuration will be required.

Why does MikroTik connect to Wi-Fi but there is no internet?

Check:

1. Is an IP address assigned on the interface (IP → Addresses).
2. Is the default route added (IP → Routes → 0.0.0.0/0).
3. Is the firewall blocking traffic?IP → Firewall → Filter Rules).
4. Does the main router distribute DHCP over Wi-Fi (sometimes DHCP is only bound to wired ports).

If you are using a bridge, make sure the DHCP client is configured on the bridged interface, not the Wi-Fi interface.

How to connect MikroTik to Wi-Fi with a hidden SSID?

In the Wi-Fi interface settings:

1. Install SSID: network_name (even if it is hidden).
2. Add parameter hide-ssid: yes.
3. IN Security Profile Please enter the correct password.

If the connection does not occur, try temporarily making the network visible on the main router for the initial setup.

Which MikroTik model should I choose for a stable Wi-Fi connection?
For home use:
• hAP ac² — balance of price and functionality (dual range, 5 ports).
• RB4011 — high performance (10 Gbps port, powerful processor).
For office/hotel:
• cAP ac - compact access point with support 802.11ac.
• RB922UAGS-5HPacD — for outdoor installation (high transmission power).
For advanced tasks (mesh networks, high loads):
• CCR2004-1G-12S+2XS + external adapter R11e-5HacD.
How do I reset my MikroTik if it's frozen due to incorrect Wi-Fi configuration?

Reset methods:

1. Software reset: Press and hold the button Reset for 5 seconds (until the light blinks).
2. Via Winbox: Connect via MAC (button Connect → tab Neighbors), then execute System → Reset Configuration.
3. Via CLI: If you have SSH access, enter:

   /system reset-configuration no-defaults=yes

After reset, the device will be accessible via IP 192.168.88.1 with login admin (password is empty).