Many users, purchasing powerful equipment from MikroTik, are faced with a paradoxical situation: instead of the expected performance boost, wireless connection speeds remain slow or unstable. Unlike out-of-the-box consumer solutions, routers from this brand require careful manual configuration to unlock their full potential. Default settings are often focused on compatibility rather than maximum throughput, resulting in inefficient use of the radio spectrum.
To solve this problem, it is necessary to conduct a comprehensive audit of the current configuration and consistently apply a number of technical measures. Wi-Fi optimization This includes choosing the right encryption standard, configuring channel width, managing transmitter power, and properly allocating frequency bands. Ignoring these parameters turns an expensive router into a regular access point with limited functionality.
In this article, we'll cover the key steps to getting the most out of your hardware. We'll cover working with the interface. WinBox, radio environment analysis and fine-tuning of security protocols that directly impact the final data transfer rate.
Diagnostics of the current network state and frequency selection
The first step before making any changes is a thorough analysis of the radio airwaves. In apartment buildings or office centers, the airwaves are oversaturated with signals from neighboring access points, which creates interference and reduces effective throughput. For diagnostics, MikroTik the built-in tool is used Wireless -> Interfaces -> tab Wireless -> button ScanThis tool will show all available networks, their signal strength (signal strength) and noise level.
Pay attention to channel noise. If you're using the 2.4 GHz band, you're almost guaranteed to encounter channel overlap, as only three non-overlapping channels (1, 6, 11) are effective. The 5 GHz band is better, but still requires careful selection. Interference is the main enemy of high speed, causing packet loss and the need to retransmit them.
⚠️ Note: When scanning the airwaves, your current wireless connection may be temporarily interrupted. Schedule the diagnostics for a time when your clients' internet connection will not be critical.
After collecting the data, you need to select the least loaded channel. In modern models with support Wi-Fi 5 (ac) And Wi-Fi 6 (ax) It's recommended to use a channel width of 40, 80, or even 160 MHz, but only if the airwaves allow it. Using a wide channel in a noisy environment will have the opposite effect—a drop in speed due to constant collisions.
Optimizing wireless interface settings
After selecting the frequency, you need to proceed to fine-tuning the wireless interface itself. Open the menu Wireless, select your interface (usually wlan1 or wifi1) and go to the tab WirelessThe key parameter here is Band. Make sure you select the mode that matches your devices, for example, 5GHz-only-N or 5GHz-only-AC to disable legacy modes that slow down the entire network.
An important parameter is Frequency ModeFor most countries, you should select the mode regulatory-domain, so that the router automatically applies the power and available channel limits established by the laws of your country. Violating these regulations may result in fines or interference with specialized equipment.
☑️ Basic interface setup checklist
It is also worth paying attention to the parameter InstallationIf the router antenna is located indoors, select the value indoor, which will increase the transmission power within the permitted limits. For external antennas, there is a mode outdoor, which reduces power to meet the requirements for street equipment.
Setting up channel width and security protocols
Channel width (channel-width) is one of the most effective speed controls. In the 2.4 GHz band, 20 MHz is recommended for stability, as 40 MHz is often unusable due to neighboring networks. In the 5 GHz band, feel free to use 40 or 80 MHz unless you're in a densely populated area with hundreds of neighbors.
Security protocols directly impact performance. Using outdated encryption TKIP or mixed mode TKIP+AES limits the connection speed to the standard 54 Mbps (in reality it's around 20-25 Mbps). It's necessary to force the mode WPA2-PSK with encryption algorithm aes-ccmThis unlocks the high speeds of 802.11n/ac/ax standards.
| Parameter | Recommended value (2.4 GHz) | Recommended value (5 GHz) | Impact on speed |
|---|---|---|---|
| Channel width | 20 MHz | 40 / 80 MHz | Direct increase in throughput |
| Encryption | aes-ccm | aes-ccm | Removing the 54 Mbps limit |
| Opening hours | only-N | only-AC | Disabling slow clients |
| Power (Tx Power) | 17-20 dBm | 20-23 dBm | Coating stability |
Don't forget to check the settings WMM (Wi-Fi Multimedia). This protocol prioritizes traffic (video, voice) and is required for speeds above 54 Mbps in the N standard and higher. Without WMM enabled, modern Wi-Fi standards cannot be fully utilized.
Why shouldn't you set the power to maximum?
Setting maximum transmitter power (Tx Power) isn't always beneficial. Client devices (smartphones, laptops) have weak antennas and can't reach the router, even if the router is blaring at full power. This leads to an asymmetric connection, where packets are lost and speed drops. It's better to select an optimal level that provides a strong but not excessive signal (usually -60 to -70 dBm on the client).
Power control and signal coverage
A common mistake is to set the transmitter power to maximum (tx-power). Paradoxically, this often makes the situation worse. Wi-Fi range is determined not only by the router's transmitting power but also by the client's receiver sensitivity. If the router is too loud and the phone is too quiet, the connection will be unstable, with constant drops and slow speeds.
The optimal strategy is to adjust the power so that the signal level in the coverage area is around -60...-65 dBm. For small apartments, 15-17 dBm is often sufficient. This also reduces interference for your neighbors and reduces equipment heating. MikroTik The power is adjusted in dBm in the wireless interface settings.
⚠️ Note: Configuration interfaces and available power values may vary depending on the installed RouterOS version and the specific device model (hAP, cAP, SXT, etc.). Always check the datasheet for your model.
If one access point is not enough to cover the entire area, it is better to use several low-power access points configured on different non-overlapping channels, creating a single network (roaming), than to try to break through the walls with one powerful "gun".
Reduce CPU load and prioritization
Wi-Fi speed may be limited not by the radio channel, but by the performance of the router's processor, especially if heavy-duty features are enabled. Features like FastTrack must be enabled to forward traffic without loading the CPU. Check if FastTrack is enabled in the menu. IP -> Firewall -> Mangle (usually the rule connection-mark=fasttrack-connection action=fasttrack-connection).
It is also worth implementing a simple queuing system (Queues) to limit the speed for individual users or applications that can consume the entire bandwidth (for example, torrents or Steam updates). This will ensure a comfortable experience for other devices. The Simple Queues setting allows you to set speed limits (Max Limit) for specific IP addresses.
Disable unnecessary services that consume resources. If you don't use UPnP, Cloud (for access via mymicrotik.net) or Bluetooth (on applicable models), it's best to disable them. This will free up processor cycles to handle network traffic.
Firmware update and final check
A router's software is the foundation of its operation. In older versions RouterOS There could be bugs in the wireless module drivers or inefficient buffer management algorithms. Before final configuration, be sure to update the system to the latest stable version (Long-term or Stable, depending on your reliability requirements).
The update process is in MikroTik simple: System -> Packages -> button Check for Updates. After updating and rebooting (System -> Reboot) It is recommended to reset the wireless interface configuration and configure it again, as some parameters may not be applied correctly during a hot update.
After making all the changes, run a final speed test using services like Speedtest or Fast.com, connecting from different distances. Compare the results with your previous measurements. If the results are unsatisfactory, try changing the channel or channel width, as the radio environment may have changed.
What to do if the speed is still low?
If software configuration doesn't help, the problem may be hardware-related (an outdated Wi-Fi standard on the client, a damaged ISP cable, or a physical barrier such as a metal wall) or on the ISP's end. Try connecting the cable directly to the PC, bypassing the router, to rule out ISP-related bandwidth limitations.
Why is the Wi-Fi speed on MikroTik slower than via cable?
Wi-Fi is a half-duplex medium, meaning devices cannot transmit and receive data simultaneously on the same frequency. Furthermore, a significant portion of bandwidth is consumed by overhead, packet delivery acknowledgement (ACK), and interference control. Actual Wi-Fi speeds are typically 50-60% of the theoretical connection speed (phy-rate).
Which encryption standard should I choose for maximum speed?
The only right choice for modern networks is WPA2-PSK with an algorithm aes-ccmAvoid TKIP, as it limits speed to legacy standards (up to 54 Mbps). WPA3 is even more secure, but may not be supported by older devices and sometimes requires a more powerful processor for encryption.
How often should I change my Wi-Fi channel?
In a static environment (home, office), selecting the best channel once is sufficient. However, if new access points (neighbors, mobile hotspots) frequently appear in the area, it makes sense to scan periodically. In advanced scenarios, you can use scripts to automatically switch channels when signal quality drops (Noise Floor Threshold).
Does the network name (SSID) affect speed?
The name (SSID) itself doesn't affect data transfer speed. However, using special characters or very long names can cause compatibility issues with some older clients, indirectly resulting in an inability to connect or operation in a slower compatibility mode. It's best to use Latin characters and simple names.
Should I enable WPS on MikroTik?
We strongly discourage this use. The WPS protocol has known security vulnerabilities that make it easy to crack Wi-Fi passwords. Furthermore, it can impose a small, but unnecessary, load on the system. For guest connections, it's better to use a guest network (VLAN) or a QR code.