Many users are familiar with the situation where the wireless signal doesn't reach the far corners of their home or office. Instead of purchasing expensive mesh systems or installing additional cables, a smart solution is to use a router. MikroTik as a signal receiver. This device, known for its flexibility and stability, can transform a weak signal into a fully-fledged local network.
Unlike simple home routers, the equipment RouterOS allows you to implement complex connection schemes such as WDS (Wireless Distribution System)This allows you to not only access the internet but also unite network segments into a single broadcast domain. In this article, we'll detail the process of turning your router into a powerful repeater.
It's important to understand that configuration requires attention to detail, especially when working with MAC addresses and frequency channels. A single error in a parameter can result in the connection between access points failing altogether. We'll cover proven configuration methods that will ensure the stable operation of your network.
Selecting equipment and preparing for work
Before you begin setting up, you must ensure that your equipment supports the required operating mode. Not all models MikroTik Both are equally effective as clients, especially when it comes to the 2.4 GHz and 5 GHz bands. Older models may not support high speeds or modern encryption standards, which will become a bottleneck for the entire system.
The optimal choice would be devices of the series hAP, cAP or specialized outdoor access points SXT And LHGThese models are equipped with high-quality radio modules capable of maintaining a stable connection even in noisy environments. Dual-band devices are preferable, as they allow the signal from the provider to be received and transmitted to clients to different frequencies.
⚠️ Attention: Make sure that both devices (the main router and the extender) have the latest versions installed RouterOSOlder firmware versions may lack necessary security features or contain errors in wireless network drivers.
It's also a good idea to prepare a cable in advance for direct connection to the device being configured. Wireless configuration is possible, but risky: losing connection while changing settings can result in loss of access to the device. A local connection via a LAN port is the most reliable way to perform the initial configuration.
Basic Wireless Interface Setup
The first step is to log into the control interface. This can be done via WinBox, WebFig, or the terminal. We'll cover the graphical interface, as it's the most intuitive for beginners. Go to the menu. Wireless and open the tab Wireless, where a list of available radio interfaces will be displayed.
Double click on the interface wlan1 (or the one corresponding to your range). In the settings window that opens, you need to change the operating mode. By default, the device operates as AP Bridge (access point), but we need to switch it to client mode. In the drop-down list Mode select a value station-bridge or station, depending on the required network topology.
Mode station-bridge Allows the device to act as a transparent bridge, forwarding client MAC addresses to the main router. This is ideal if you need all devices on the network to be on the same subnet. station Works like a regular network adapter, hiding clients behind NAT or creating a separate segment.
What is the difference between station and station-bridge?
Station-bridge mode requires WDS support on the primary router and is transparent to Layer 2 protocols. Station mode operates as a regular router interface, breaking the broadcast domain, which can be useful for isolating network segments.
After selecting the mode, do not forget to press the button Apply And OKThe interface may briefly lose connection. The device is now ready to search for networks to connect to, but it doesn't yet know which network it should join.
Scanning networks and connecting to the provider
The next step is to search for the target network. In the wireless interface settings window, click the button ScanA list of all available WiFi networks within range will open. Find the name of your primary network (SSID) you want to connect to.
Select the desired line and press the button ConnectThe device will automatically enter the MAC address of the primary access point (BSSID) and channel frequency into the corresponding settings fields. This is critical: manually entering the address incorrectly risks interrupting the connection when the primary router changes channel.
☑️ Check before connection
If the primary network is hidden, the scan button won't help. In this case, you'll need to manually enter the primary access point's MAC address in the field. Connect To and specify the network name in the field SSIDThe address can be found on the sticker on the main router or in its web interface in the wireless network status section.
After completing the connection, the logs show (Log) association messages should appear. However, internet access will not yet be available because security settings are not configured. Without the correct encryption key, the primary router will reject connection requests, despite the correct technical parameters.
Setting up security and profiles
Connection security is a key aspect of setup. Go to the tab Security Profiles on the menu Wireless. Create a new profile or edit an existing one (usually default). In the field Name Give it a descriptive name, for example, uplink-profile.
In the profile settings section, you need to select the encryption mode. For modern networks, this is WPA2 PSK or WPA3, if the equipment supports it. Make sure the boxes are checked. Group Key Update and other timeout parameters are set to values compatible with the main router. The default values usually work correctly.
| Parameter | Meaning for WPA2 | Description |
|---|---|---|
| Authentication Types | wpa2-psk | Authorization type |
| Unicast Keys | tkips, aes-ccm | Encryption algorithms |
| Group Key Update | 1h | Key update time |
| EAP Methods | passthrough | EAP method (for Enterprise) |
In the field Passphrase Enter the password for your WiFi network. Be careful with the case of the characters: a single mistake will result in endless reconnection attempts. After entering the password, save the settings by pressing Apply.
⚠️ Attention: If you use the mode
station-bridge, make sure that the Wireless option is enabled in the main router's settings. WDS Mode: dynamic or staticWithout WDS support on the receiving end, the bridge won't come up, and you'll see an error in the logs.
Now go back to the interface settings wlan1 and in the field Security Profile Select the profile you created. After applying the settings, the device should successfully pass the authentication process and receive the status connected.
Network configuration and obtaining an IP address
The physical connection is established, but the logical network is not yet operational. The MikroTik doesn't have a DHCP client configured on the wireless interface by default. You need to create one manually so the router can obtain an IP address from the main router.
Go to the menu IP -> DHCP Client. Click the button + to add a new client. In the field Interface select your wireless interface (eg wlan1). Make sure the checkbox is checked. Use Peer DNS set if you want MikroTik to automatically obtain DNS server addresses.
After enabling the DHCP client, a message about receiving a lease should appear in the logs (bound). Check the tab IP -> Addresses. The address issued by the main router should appear there, labeled D (dynamic). If the address is missing, check the logs for DHCP errors.
To distribute the Internet to devices connected via cable (if MikroTik is used as a bridge) or to create your own subnet, you need to configure NAT. However, in mode station-bridge NAT is usually not required since the device operates as a switch. If you use the mode station, NAT setting is required.
If you need to forward traffic, go to IP -> Firewall -> NATAdd a new rule: Chain srcnat, Out. Interface wlan1, Action masqueradeThis will allow MikroTik devices to access the Internet via the assigned IP address.
Signal optimization and troubleshooting
Even with proper setup, stability issues may still occur. Often, the cause is interference or incorrect channel width selection. In the menu Wireless check the parameter Channel WidthFor the 2.4 GHz range, it is optimal to set 20 MHz to avoid overlapping with neighboring ones.
Use the tool Torches or Tools -> Graphs To monitor signal quality (CCQ). The CCQ value indicates the percentage of successful packet transmission. If it drops below 60-70%, it's worth trying a different channel or antenna.
It is also worth paying attention to the transmitter power (Tx Power). Maximum power doesn't always produce the best results; sometimes it creates intermodulation distortion. Experiment with power levels in the 10-15 dBm range to find the optimal balance.
If the connection keeps dropping, check if the channel on your main router is changing. You can set a specific frequency in the scanning settings instead of auto-selection, locking the channel. This will improve stability, but will reduce flexibility when reconfiguring your network.
Additional features and scripts
RouterOS allows you to automate many processes. For example, you can write a script that will reboot the wireless interface when the connection quality drops below a certain threshold. This is useful for outdoor links exposed to weather conditions.
The script can be placed in the section System -> Scripts. It will check the parameter rx-bytes or signal level and initiate a restart of the interface via the command /interface wireless disable wlan1 followed by /interface wireless enable wlan1.
:local signal [/interface wireless get [find name="wlan1"] signal-strength];
:if ($signal < -80) do={
/interface wireless disable wlan1;
:delay 5s;
/interface wireless enable wlan1;
}
This approach allows for a self-healing system without human intervention. However, use automatic reboots with caution to avoid creating a network reconnection storm.
⚠️ Note: Interfaces and commands may differ depending on the RouterOS version (v6, v7). Before deploying scripts to production, test them in a lab environment. The syntax has changed in v7.
Using tags WDS A proper understanding of how bridges work opens up enormous opportunities for network scalability. You can connect multiple buildings into a single network, set up backup communication channels, or simply expand coverage in a complex building.
Why isn't the WDS bridge working?
Most often, the problem is a mismatch in security settings or a lack of WDS support on the primary router. Make sure the encryption is identical and the mode on the primary router is set to "dynamic" or "static." Also, check that your firewall isn't blocking management frames.
Is it possible to use different brands of routers?
Yes, WDS is a standard, but implementation may vary. MikroTik works well with most vendors (TP-Link, Ubiquiti), but sometimes manual MAC address entry in the WDS table is required for stable operation.
How to increase speed in repeater mode?
Speed drops by at least half because the radio spectrum is half-duplex. To increase speed, use dual-band routers: receive the signal on 5 GHz and broadcast on 2.4 GHz (or vice versa), or use a separate radio interface for the backhaul.
Do I need a static IP for MikroTik?
Not necessarily. In bridge mode, the MikroTik can operate without an IP address at all if you don't need to manage it over the network. In router mode, an IP address is required for NAT and routing.
Will IPTV work via WiFi bridge?
Yes, but you need to configure IGMP Snooping and Proxy on both ends of the channel, as well as proper traffic priority (QoS) so that multicast packets do not clog the airwaves and cause lags in the video.