Using the model RB951G-2HnD As a wireless signal receiver, it's an excellent solution for a cottage, office, or remote location where cable installation is impossible. This device features a powerful Atheros AR9344 processor and supports the 802.11n standard, allowing for stable speeds even at significant distances from the base station. Main feature Configuration in client mode consists of correctly switching interfaces and setting up encryption protocols.
Before you begin working with the software, you need to physically prepare the hardware. You'll need the router itself, a 24V power supply, and a computer or laptop for the initial setup. It is important to understand, that by default the device is configured to operate in access point mode, so receiving a signal from outside will require a complete reconfiguration of the system.
Connect your computer to any LAN port on the rear panel of the device using a patch cord. Make sure your PC's network card is set to obtain an IP address automatically. After powering on, wait for the operating system to finish loading. RouterOS, which usually takes about a minute, as indicated by the ACT indicator.
Preparing for setup and logging in
To get started, you need to connect to the web interface or management console. Open any modern browser and enter the standard address in the address bar. 192.168.88.1If you use a proprietary utility WinBox, then going by MAC address is often more reliable, especially if the IP address has been changed by the previous owner.
The first time you log in, the system will ask for authorization. The default login is admin, and the password field remains blank. Immediately after successful login, we strongly recommend setting a strong password for your account to prevent unauthorized access to the configuration. Security The network perimeter begins with protecting the administrative interface.
The control interface may seem complicated to a beginner due to the abundance of settings, but for our purposes, only a few specific sections are needed. The main changes will affect the menu. Wireless And IPDon't be afraid to experiment, as you can reset the settings at any time using the button. Reset on the device body.
Configuration reset and basic preparation
If the device was previously used, it may contain remnants of old firewall or NAT rules that will conflict with the new operating system. The most reliable way to start from scratch is to perform a full configuration reset. This will remove all user scripts and security settings.
To perform a reset, find the button on the case Reset. Press it with the power off, apply current and hold until the indicator flashes. ACTAfter this, the router will reboot with factory settings. Now you can log in again and ensure the configuration is empty.
☑️ Preparing the device
⚠️ Note: After resetting the configuration, all ports except the first may be bridged. Make sure you are connected to the correct port for management access, typically any of ports 2 through 5.
Configuring the client's wireless interface
Let's move on to the key stage - setting up the radio module. In the menu Wireless select interface wlan1. Tab Wireless contains the parameters that need to be changed to work in client mode. In the field Mode change the value from ap-bridge on stationThis setting forces the radio card to search for and connect to another access point rather than broadcasting a signal.
Next, you need to specify the network name (SSID) to which we will connect. In the field SSID Enter the exact name of your ISP network or main router. It's case-sensitive, so check your entry carefully. If the network is hidden, check the box. scan-list and specify the frequency manually.
After selecting the mode and network name, go to the tab Data RatesYou can leave the default values here. basic And supported, unless you encounter compatibility issues with your provider's older equipment. Modern standards usually automatically select the optimal connection speed.
What is WDS and should it be enabled?
WDS (Wireless Distribution System) allows broadcast and control packets to be transmitted over a wireless connection. Enable WDS only if your ISP or main access point requires forwarding client MAC addresses or using specific routing protocols over Wi-Fi. In most cases, this isn't necessary for simple internet access through NAT.
Setting up security and passwords
Most modern networks are protected by encryption protocols. To connect to a router, you need to provide it with the password. Go to the Security Profile in the wireless network settings window. Make sure the profile is selected. default or create a new one by clicking on the ellipsis button.
In the security profile settings window that opens, set the mode dynamic keysIn the field WPA Pre-Shared Key Enter the password for the Wi-Fi network you are connecting to. The encryption type (WPA2 or WPA3) must match the settings of the signal source. The most common combination is WPA2 PSK with an algorithm aes-ccm.
After entering the password, click the button OK and return to the main wireless interface window. Make sure the checkbox is checked. Disable removed so that the interface is active. If all settings are correct, the signal strength indicator Tx/Rx should start showing activity, and in the list of registered clients (Registration Table) a record about connecting to an access point will appear.
| Parameter | Value for Client mode | Description |
|---|---|---|
| Mode | station | Radio card operating mode as a client |
| SSID | Provider network name | Target network identifier |
| Security Profile | default (WPA2) | Profile with access key |
| Frequency Mode | regulatory-domain | Compliance with the laws of the country |
Setting up IP addressing and DHCP
After a successful link (physical connection), you need to obtain an IP address from your provider. To do this, go to the menu IP -> DHCP Client. Add a new client by selecting in the field Interface your wireless interface wlan1Make sure the box is checked. Use Peer DNS And Use Peer NTP, if you need to synchronize time.
Enabling the DHCP client will allow the router to automatically obtain the external IP address, gateway, and DNS servers. After applying the settings, go to the menu IP -> AddressesHere you should see the address received from the provider, labeled DHCPIf the address appears, it means the L3 (network) layer is working correctly.
However, in order for devices connected to the LAN ports of your MikroTik, also gained access to the network, you need to configure the internal DHCP server. Go to IP -> Pool and create a pool of addresses, for example, 192.168.10.10-192.168.10.254Then in IP -> DHCP Server Run the DHCP Setup wizard for the interface. bridge-local or ether2-5, indicating the created pool.
⚠️ Important: Make sure your local DHCP server's subnet (e.g., 192.168.10.x) doesn't match the subnet assigned by your ISP. If your ISP assigns addresses in the 192.168.88.x range, change your router's local network to avoid routing conflicts.
Routing and NAT
The most critical aspect of setup is traffic flow management. Even with an IP address, without proper routing, packets won't know where to go. Check the menu. IP -> RoutesThere should be a record with the status DAS (Dynamic, Active, Static), where the gateway is the address received from the provider via DHCP.
If the gateway is present, but the internet is not working on the connected devices, the problem is most likely with NAT (Network Address Translation). Go to IP -> Firewall -> tab NATYou need to add a rule that will mask internal addresses as the provider's external IP.
Create a new rule (plus button). In the tab General in the field Chain select srcnatIn the field Out. Interface please indicate wlan1. Go to the tab Action and select an action masqueradeThis action dynamically substitutes the external IP into all outgoing packets.
/ip firewall nat
add chain=srcnat out-interface=wlan1 action=masquerade comment="NAT for WiFi Client"
Diagnostics and troubleshooting
If you still can't access the network after completing all the settings, use the built-in diagnostic tools. In the menu Tools -> Ping try pinging an external address, for example, 8.8.8.8If you can ping but can't access websites, there's a DNS issue. Check your DNS settings in the menu. IP -> DNS and enter the servers manually (8.8.8.8 and 1.1.1.1).
A common problem is a mismatch of frequency ranges. Make sure that in the settings Wireless The correct frequency is selected or the channel scan is enabled. If your provider operates on 5 GHz, and your RB951G If your phone is set to 2.4 GHz (or vice versa), there will be no connection. This model only supports 2.4 GHz, so keep that in mind when choosing a provider.
It is also worth checking the system logs in the menu LogAuthorization or disconnection errors are often written there with the label wireless,infoIf you see constant reconnections, your signal strength may be too low or there may be strong interference from neighboring networks.
Why doesn't the router see the provider's network when scanning?
Possible causes: the router is too far from the signal source, the wrong region (Country) is used in the wireless network settings, or the provider is hiding the SSID. In the latter case, you will need to enter the network name manually.
How to increase speed via Wi-Fi client?
Use high gain antennas, make sure Channel Width is set to 20/40MHz, and select the least crowded frequency channel.
Can this router be used as a repeater?
Technically, station mode allows you to connect, but for a full-fledged repeater (extension of one network), WDS mode is often required or the creation of a bridge between WLAN and Ether, which can reduce the overall performance of the network.