Many users encounter an annoying problem: you're walking around the house with your phone, and when you move from one room to another, the video call drops or the game freezes. This happens because the device locks onto a moving access point, ignoring the stronger signal of a nearby one. In the ecosystem MikroTik Solving this problem requires proper configuration, as out-of-the-box routers of this brand are aimed at advanced administrators, not instant results.
Creation seamless roaming Seamless Roaming isn't just about installing multiple routers; it's about building complex interaction logic between them. You'll need to implement standards. 802.11r, 802.11k And 802.11vso that client devices understand when and where they need to switch. In this article, we'll look at how to transform a set of disparate devices into a unified, intelligent network that manages connections automatically.
Before you start fiddling with the settings, it's important to understand that ideal results can only be achieved with the right equipment. Older models without support ac or ax standards may not be up to the task or may require complex emulation of software functions. The key requirement is to use a single frequency and channel for all access points within the same frequency band.
Equipment preparation and network planning
The first step is always an audit of your existing hardware. To build a high-quality network, you'll need devices that support wireless operation. CAPsMAN (Controlled Access Point system Manager) or new technology WiFi (formerly known as CAPsMAN v2 in RouterOS v7). If you have different models, for example, hAP ac2 And wAP ac, make sure that all of them have the latest firmware version installed.
Planning the placement of access points (APs) is critical. Avoid placing them too close to each other, as this will create interference. The optimal distance depends on the wall materials, but is typically 10-15 meters indoors. Your goal is to create signal overlap zones, but not so strong that devices "jump back and forth" unnecessarily.
- 📡 Unified wired infrastructure: All access points must be connected via Ethernet cable to the main router or managed switch.
- 🔌 Nutrition: Use PoE injectors or PoE-enabled switches to simplify installation.
- 📶 Standards support: Make sure that client devices (phones, laptops) also support fast switching protocols.
⚠️ Attention: Interfaces and menu names in WinBox These may vary depending on the RouterOS version. Always check the official documentation for your specific model before making any changes.
After physically connecting, you need to align all devices. Reset access points that will operate in client mode (managed access points) to factory defaults. This will prevent conflicts with old DHCP configurations or static IP addresses, which could disrupt the entire system.
Basic setup of the main router and DHCP
The center of your future seamless network will be the main router, which will assign IP addresses and manage the internet connection. Unlike simple home routers, here DHCP server should be configured with the shortest possible lease time. This will allow devices to update their addresses more quickly and respond more quickly to connection point changes.
Go to the main router settings via WinBox or web interface. Go to the menu IP → DHCP ServerFind the network you use for Wi-Fi clients and change the setting lease timeThe default value is often 3 days or 1 hour, but for roaming, 1-5 minutes is optimal. This won't put unnecessary strain on the network but will speed up the reconnection process.
Why do you need a short DHCP lease time?
A short lease time forces the client device to communicate with the server more frequently. When moving to a new access point with a strong signal, the device will receive address confirmation more quickly and resume data transmission, minimizing latency.
Next, you need to reserve static addresses for the access points themselves. Although they can obtain IP addresses dynamically, assigning addresses based on MAC addresses will simplify future management and diagnostics. You'll always know that the access point in the living room has an address like 192.168.88.2, while the one in the bedroom has 192.168.88.3.
Don't forget to check your NAT and firewall settings. Ensure that traffic required for service protocols is allowed between devices on the local network. Blocking ports or isolating clients at the switch level can completely destroy roaming capabilities, even if your Wi-Fi is configured perfectly.
Configuring CAPsMAN for Centralized Management
Technology CAPsMAN — is the heart of MikroTik's seamless network. It allows the main router to manage Wi-Fi settings on all connected access points. You don't need to access each "dog" individually; you create a profile once, and it applies to all devices. In RouterOS v7, this functionality has been significantly redesigned and become even more powerful.
First, activate the CAPsMAN server on your main router. Go to Wireless → CAPsMAN (or WiFi → CAPsMAN in v7). Enable the service and make sure that the interface for discovering access points is selected correctly (usually it is bridge-local (or the specific port where the APs are connected). Now access points located on the same subnet and with factory settings should appear in the list. CAPs.
Creating a configuration is the next critical step. You need to create Configuration, where the network name (SSID), password, encryption mode and, most importantly, roaming parameters will be specified. In the field Mode select ap, and in the security settings specify WPA2 or WPA3This is where the parameters are set. 802.11r.
☑️ Checking CAPsMAN settings
It is important to set it up correctly DatapathThis parameter determines how traffic will flow through the network. For seamless roaming, the local forwarding, when traffic isn't tunneled back to the main router, but goes directly into the network. This reduces the load on the CPU and reduces latency.
| Parameter | Recommended value | Description |
|---|---|---|
installation |
indoor | Limits power and channels according to indoor regulations |
country |
your_country | Selecting a country to comply with local frequency regulations |
band |
2ghz-b/g/n | Or 5ghz-a/n/ac/ax depending on the range |
width |
20/40mhz | Channel width (for 2.4 GHz, 20 MHz is better) |
After applying the configuration, the access points may reboot. This is normal—they receive the new firmware (if configured to update) and new settings. You'll see messages in the main router's logs indicating CAP connection and configuration application.
Activating 802.11r, k, and v protocols
The most "magical" part of the setup, which turns a simple set of points into a single system, is the activation of fast protocols. Protocol 802.11r (Fast BSS Transition) allows the device to transmit encryption keys to the new access point before the actual handover. This reduces reconnection time from hundreds of milliseconds to tens of seconds.
In the CAPsMAN configuration, find the section responsible for security or additional Wi-Fi settings. There you will find the option ft-mode (Fast Transition). Set value ft-over-ds or ft-over-airThe first option is preferable if the access points are connected by cable, as it uses the wired network to transmit service data, reducing the airtime load.
Protocols 802.11k And 802.11v work in tandem with "erka". 802.11k Provides the client with a list of nearby access points with a strong signal so that it doesn't have to waste time scanning the entire airwaves. 802.11v Allows the access point to gently "request" an overloaded device to move to another access point or temporarily refrain from transmitting data. In MikroTik, these features are often enabled by default in new profiles, but it's worth checking the flags. neighbor-report And wnm.
⚠️ Note: Some older devices (such as old printers or IoT light bulbs) may not work properly with 802.11r enabled. If such devices stop connecting, create a separate guest network without Fast Transition support.
To enable these features in RouterOS v7 via the terminal or WiFi interface, ensure the appropriate options are enabled in the security profile. For example, the command might look like this: install ft-psk or activation reassociation-timeoutThe exact commands depend on the software version, so check your router's syntax.
Power and Channel Optimization
Even with roaming configured, the network will perform poorly if access points are "shouting" at each other. The main mistake is setting the transmitter power to maximum (tx-power) anywhere and everywhere. A strong signal from a distant router will force the phone to cling to it until the very end, ignoring a nearby, but "quiet" router.
Use the function automatic frequency selection (ACS) or manually assign non-overlapping channels. For the 2.4 GHz band, these are channels 1, 6, and 11. For 5 GHz, the choice is much wider, but it's important to avoid DFS (radar) channels unless you're confident in the stability of your provider or surroundings, although MikroTik can correctly switch from them when it detects a radar.
Recommended power setting strategy:
- 📉 2.4 GHz band: Set the power to around 10-14 dBm. This is sufficient for a room, but the signal will quickly fade behind walls, forcing a switch to 5 GHz.
- 📶 5 GHz band: You can set it to 16-20 dBm. This range has poorer penetration through walls, which naturally creates coverage gaps.
- 🎚️ Minimum bid: Increase the Basic Rates for 2.4 GHz to cut off very distant and weak connections.
MikroTik has a feature adjust-tx-power within CAPsMAN, which allows automatic power adjustments based on the environment. However, manual adjustments often produce more predictable results in static home environments. Try using an app like WiFi Analyzer and make sure that at any point in the house you see 2-3 points, but with a clear leader in signal strength.
Diagnosing and troubleshooting
Once setup, comes the moment of truth. How do you check if roaming is working? The easiest way is to run a ping at a constant interval (ping -t 8.8.8.8 on Windows or ping 8.8.8.8 on Linux/Mac) and walk around the house. Ideally, you should not see any packet loss (Request timed out) or ping jumps (jitter) of more than 50-100 ms.
If there are breaks, check the logs. WinBox open Log and filter messages by word capsman or wifiYou should see messages indicating that the client has disconnected from one access point and reconnected to another. If you see reconnections (ping-pong effects), the coverage areas may overlap too much or the power setting may be incorrect.
A common issue is driver incompatibility on client devices. Apple devices, for example, are very demanding when it comes to 802.11r settings, while some Android smartphones may ignore requests to switch. In such cases, creating a separate security profile without fast roaming for the affected devices can help.
It's also worth paying attention to the main router's CPU load. Traffic encryption, especially at high speeds, can put a strain on the CPU. If you're using complex firewall rules or a queue tree, make sure they don't become a bottleneck when switching clients.
⚠️ Warning: When updating RouterOS to major versions (e.g., from v6 to v7), the Wi-Fi configuration may be reset or changed due to changes in wireless module drivers. Always make a backup before updating.
Frequently Asked Questions (FAQ)
Do I need to buy MikroTik access points of the same model for seamless roaming?
No, it's not necessary. CAPsMAN supports various models with different chipsets. However, for stability and consistent coverage, it's best to use similar hardware. The key is that all devices support the required standards (ac or ax).
Does seamless roaming work between routers connected via Wi-Fi (bridge mode)?
Technically, this is possible, but highly not recommended for full-fledged seamless roaming. Wireless backhaul (connecting between points over the air) cuts speed in half and introduces additional latency, negating the benefits of fast switching protocols. For best results, use a cable.
Why doesn't my phone switch to a nearby access point?
The decision to switch is made by the client device (phone/laptop), not the router. The router can only "advise" (802.11v) or provide conditions (802.11r/k). Some phone manufacturers aggressively maintain the connection until the very end. Reducing the transmitter power at the moving end helps.
Is it possible to combine routers with different firmware (RouterOS and, for example, Ubiquiti) into one network?
It's possible to create a single network with a single SSID, but seamless roaming (Fast Transition) between equipment from different vendors is unstable or doesn't work at all. Protocols can be interpreted differently. For best results, use equipment from the same brand.
Will enabling 802.11r slow down my internet speed?
No, roaming protocols themselves don't reduce data transfer rates. They merely add overhead frames during connection. On the contrary, proper configuration can improve overall network performance by more evenly distributing clients and freeing up airtime.