Expanding wireless network coverage is often a critical task for owners of large apartments or offices. The main router's signal may not reach distant rooms, creating "dead zones" where internet is either unavailable or unreliable. In such situations, using additional equipment is the only effective solution.
One of the most reliable options is to set up Mikrotik as a WiFi repeaterThis brand's equipment is renowned for its flexibility and fine-tuning capabilities, allowing for complex network scenarios. However, the standard interface and abundance of features can be confusing for a beginner unfamiliar with RouterOS's operating logic.
In this article, we'll take a detailed look at how to turn a MikroTik router into an access point that replicates the main network's signal. You'll learn about the differences in operating modes, WDS configuration features, and connection security methods.
Selecting equipment and checking compatibility
Before you begin, make sure your equipment supports the required functionality. Not all MikroTik router models have a built-in wireless module required to function as a client access point. First, look for the letter W in the model name, for example, hAP ac² or RB951Ui-2HnD.
It's also important to consider the supported wireless standards. If the main router only broadcasts in the 5 GHz band, the device that will act as a repeater must support this frequency range. Otherwise, a physical connection between the devices will be impossible.
Checking firmware version compatibility can also save time. Although RouterOS is highly backwards compatible, using the latest firmware versions on both devices minimizes the risk of errors when establishing a secure WDS connection.
Preparing for setup: reset and access
Setting up Mikrotik as a repeater Requires a clean configuration. If the router was previously used for other purposes, it may have remaining firewall rules or DHCP servers that will conflict with the new configuration. Therefore, the first step should always be a full factory reset.
To perform a reset, connect the device to the computer via a LAN port and use the WinBox utility. Select "WinBox" from the menu on the left. System, then go to Reset Configuration. Make sure the option is checked. No Default Configuration, if you want to start with a completely clean slate, although for a basic scenario, a standard reset is often sufficient.
⚠️ Note: After resetting the device, it will lose its IP address if it was changed manually. Connect to it using the default address on the sticker or use the MAC address to log in through WinBox.
After rebooting, ensure your computer receives an IP address automatically. Log in to the web interface or WinBox. The device is now ready to accept new network expansion instructions.
☑️ Preparing the MikroTik router
Setting up a wireless interface (Wireless)
The central element of the configuration is the wireless interface. Go to the menu Wireless and double-click on the interface, usually labeled as wlan1 or wifi1Here you need to change the operating mode of the device.
In the field Mode select a value station-bridgeThis mode allows the device to connect to another access point as a client and forward traffic to its LAN ports, acting as a transparent bridge. Normal mode station It only works at the IP level and is not suitable for creating a full-fledged repeater with forwarding of broadcast packets.
Further into the field SSID Enter the network name of the main router you want to connect to. If the network is hidden, check the box. Connect List and enter the MAC address of the main access point. This will improve the stability of the connection.
/interface wireless
set wlan1 mode=station-bridge ssid="MainNetworkName" disabled=no
After applying the settings, go to the tab Security Profile in the same window. Create a new profile or edit an existing one, specifying the correct encryption mode (usually dynamic key for WPA2) and the password for the main network.
Why shouldn't you use station mode without bridge?
Station mode operates at Layer 3 of the OSI model, creating a separate subnet. This will lead to problems with multicast traffic forwarding, DLNA support, and device discovery on the local network. Station-bridge mode solves these problems by operating at Layer 2.
WDS Configuration and Bridge Creation
To ensure proper operation in repeater mode, the wireless interface and local ports must be combined into a single logical network segment. For this purpose, MikroTik uses a bridging mechanism (Bridge). Go to the menu Bridge and create a new bridge if it is not already created by default.
You need to add ports to the created bridge. Add your wireless interface (wlan1) and physical Ethernet ports (ether1-ether5), which will be used to distribute internet via cable or to connect other devices. This will ensure transparent data transmission.
| Parameter | Meaning for Repeater | Description |
|---|---|---|
| Mode | station-bridge | Client operation mode with bridge forwarding |
| SSID | Network name | The exact name of the main network |
| WDS Mode | dynamic | Dynamic creation of WDS links |
| Frequency | Auto | Automatic frequency selection or fixed |
Pay special attention to the WDS settings. In the wireless interface properties, make sure that WDS Mode set to value dynamicThis will automatically create tunnels for each connected client, which is critical for stability.
Setting up an IP and DHCP client
Once the bridge is created and the wireless connection is established, the device needs an IP address for management. Since the primary router is the primary address distributor in our setup, MikroTik must request an address from it.
Go to the menu IP -> DHCP Client. Add a new client by selecting in the field Interface a previously created bridge (usually bridge1). Make sure the boxes are checked. Add Default Route And Use Peer DNSThis will automatically register the gateway and DNS servers received from the main network.
If automatic address acquisition is not required for management, you can assign a static IP address from the same subnet as the main network, but outside the DHCP range of the main router. For example, if the main router 192.168.88.1 and distributes addresses from 100 to 200, the repeater can be assigned 192.168.88.250.
Check your connection by going to IP -> Firewall -> ConnectionsIf you see established connections, then traffic is flowing successfully. Missing entries may indicate problems with encryption keys or an incorrect SSID.
Network optimization and security
After a successful connection, it's important to ensure security and performance. Make sure the extender's wireless interface is set to disable its own SSID unless you plan to create a separate guest zone. In "Guest" mode station-bridge The device does not broadcast the network by default, but it won't hurt to check.
To improve stability, it is recommended to fix the frequency of the channel on which the main router operates, instead of the mode autoThis will prevent possible reconnections when the radio environment changes. This can be done in the wireless interface settings by selecting a specific frequency in the field Frequency.
⚠️ Note: Interfaces and menu item names may vary slightly depending on the RouterOS version (v6 or v7) and the specific device model (e.g., hAP or Audience series). Always consult the official documentation for your software version.
It's also worth checking the settings MTU (Maximum Transmission Unit). In some cases, especially when using tunnels or specific providers, it may be necessary to reduce the MTU on the bridge interface to 1400 or less to avoid packet fragmentation and speed loss.
Diagnosing connection problems
If the connection fails, first check the event log. In the menu Log You can see connection failure reasons, such as "invalid key" or "beacon loss." These messages will help you quickly isolate the problem.
A common mistake is choosing the wrong security mode. Make sure that the main router and the repeater use the same encryption standards (for example, only WPA2 PSK, without mixing with WPA1). Mixed modes often lead to unstable operation or complete lack of connection.
Use built-in diagnostic tools. WinBox has a button Sniffer, which allows you to see packets passing through. Run a sniffer on the wireless interface and try pinging the gateway. If packets are passing through but there's no response, the problem is with the main router or the radio channel.
What to do if the speed through the repeater is low?
Speed in repeater mode is always lower than with a direct connection, since the radio channel is used for both receiving and transmitting data (half-duplex). For maximum performance, use dual-band routers, connecting to one band (backhaul) and broadcasting the network on the other.
Frequently Asked Questions (FAQ)
Can MikroTik be used as a repeater for a network of another brand (TP-Link, Asus)?
Yes, it is possible. Mode station-bridge It's standard and compatible with most access points, regardless of manufacturer, as long as they support WDS or transparent bridging standards. The key is knowing the SSID and password of your primary network.
Will my internet speed decrease when using Mikrotik in repeater mode?
Yes, a decrease in speed is inevitable. Since the wireless interface operates in half-duplex mode, the throughput is split roughly 50/50 between receiving and transmitting data. Using a wired connection (AP mode) between routers is preferable if possible.
Do I need to configure a DHCP server on the repeater?
No, absolutely not. In a single-router setup, there should only be one DHCP server. Only the DHCP client should be enabled on the repeater (on the Bridge interface) so that it can obtain an address and forward requests from connected devices to the main router.
Does MikroTik support WDS mode with encryption?
Yes, modern versions of RouterOS support WDS with WPA2 encryption. However, for WDS to work in some older configurations, you had to enable "WDS Mode: static" and specify MAC addresses, but in this mode station-bridge With dynamic WDS everything happens automatically.