Expanding the coverage area of a wireless network often becomes a pressing issue when the standard router signal isn't sufficient for the entire home or office. Using the equipment MikroTik As a repeater, it solves the problem of "dead zones" without installing new cables. This is especially important for buildings with complex layouts or thick walls, where the signal attenuates faster than expected.
Unlike simple consumer routers, RouterOS offers flexible tools for creating a wireless bridge. You can configure the device as a client, repeater, or access point connected to a remote gateway. It's important to understand that the choice of a specific operating mode depends on your network architecture and data transfer rate requirements.
The setup process requires attention to detail, as wireless connection sensitive to interference and security settings. Configuration errors can lead to a decrease in overall channel throughput or connection interruptions. However, a properly configured MikroTik will become a reliable link in your infrastructure.
Selecting the wireless interface operating mode
The first step is to determine how exactly the device will interact with the main network. RouterOS There are several operating profiles, each with its own characteristics. The most commonly used modes for signal retransmission are station And ap-bridge.
Mode station Turns the MikroTik into a client that connects to another access point. In this mode, the device receives an IP address from the main router and distributes the internet connection further. This is the most stable option, but it requires a wired network between the device's ports or the use of NAT.
If you need to combine network segments at the second level (L2), the mode is used station-bridgeThis mode allows you to forward MAC addresses of clients behind the repeater to the main router. However, it's important to remember one important limitation:
⚠️ Note: Station-bridge mode only works with MikroTik equipment on the server side or requires support for proprietary WDS extensions. This mode may not work with standard routers from other brands.
- 📡 Station — the device operates as a regular network card, ideal for distributing the Internet via NAT.
- 🔗 Station Bridge - transparent bridge, requires compatibility from the main access point (WDS).
- 📶 WDS Client — a mode for creating a wireless bridge with support for broadcast addresses.
Basic wireless interface setup
After selecting the mode, you need to configure the wireless interface itself. Go to the menu Wireless and open by double-clicking wlan1. Tab Wireless Contains basic parameters for connecting to a remote network.
In the field Mode select a previously defined profile, for example, station. Further in the field SSID Enter the name of the network you want to connect to or use the button Scan to search for available networks within range. This will ensure the signal strength is adequate.
Be sure to check the frequency and channel width parameters. They must match the settings of the main access point. If the main router is operating in mode 20/40 MHz Ce, then the repeater must also support this channel width to achieve maximum speed.
/interface wirelessset wlan1 band=2ghz-b/g/n channel-width=20/40mhz-Ce \
disabled=no frequency=2437 mode=station ssid="MainNetwork" \
wireless-protocol=802.11
After applying the settings, the interface will attempt to establish a connection. The connection status can be monitored in the Connected to AP or through the tab Registration in the Wireless menu. If the status running, then the physical connection is established.
Security and encryption configuration
Modern networks require reliable protection, so setting up security profiles is a critical step. RouterOS the section is responsible for this Wireless Security ProfilesWithout the correct settings, connecting to a secure network is impossible.
Create a new profile or edit an existing one. Select the security mode that matches your main network, usually dynamic keysIn the field WPA Pre-Shared Key Enter the password for the WiFi network you are connecting to.
It is important to ensure that the encryption protocol versions match. If the underlying network uses WPA2, and left on the repeater WPA1, there will be no connection. It's also worth paying attention to Group Encryption, which often needs to be set in aes-ccm.
⚠️ Note: Security interfaces may differ between versions of RouterOS v6 and v7. In v7, encryption settings were moved to a separate configuration section.
- 🔑 WPA2 — the most common and recommended protection standard.
- 🛡️ AES-CCM - a modern encryption algorithm that ensures high speed.
- ⚙️ Dynamic Keys — a mode that allows the use of passwords and key changes.
Organizing a local network and DHCP
After successfully connecting to a remote access point, the MikroTik device receives an IP address. However, to share the internet connection further, the network stack must be configured correctly. If you are using the station, you will need to configure NAT.
Create a pool of addresses for your local network that the relay will distribute. These can be addresses from the range 192.168.88.0/24 or any other that doesn't conflict with the main network. Then configure the DHCP server to automatically distribute addresses to connected clients.
The key is configuring routing. By default, the gateway may not be determined automatically in some scenarios. Make sure the routing table has a default entry pointing to the interface. wlan1.
| Parameter | Meaning | Description |
|---|---|---|
| IP Address | 192.168.88.1/24 | Gateway address for clients |
| DHCP Range | 192.168.88.10-192.168.88.254 | Range of issued addresses |
| DNS Server | 8.8.8.8, 1.1.1.1 | Name resolution servers |
| NAT Rule | src-address=192.168.88.0/24 | Address masking rule |
Don't forget to turn it on IP Firewall and add a masquerade rule for outgoing traffic. Without this, packets from clients will not be returned through the provider's interface.
☑️ Check network settings
Optimizing connection speed and stability
Wireless connections always introduce latency and reduce effective throughput. To minimize losses, fine-tuning the radio parameters is essential. This primarily concerns frequency selection and signal strength.
Use the tool Torcher Or use the built-in scanner to analyze channel congestion. Select the channel that is least used by neighboring networks. Channel overlap can lead to constant packet retransmissions and reduced speed.
It is also worth paying attention to the parameter DistanceIn the wireless interface settings, set the value indoors Or specify the exact distance to the access point in kilometers. This will help the ACK timeout protocol function correctly and avoid unnecessary retransmissions.
⚠️ Please note: The maximum theoretical speed in repeater mode will always be lower than with a wired connection, since the radio air is used for both receiving and transmitting data simultaneously.
For advanced users, protocol customization is available. NV2 or TDMA, if both devices support these MikroTik technologies. This allows for a transition from airtime competition to time slot scheduling, significantly improving stability.
/interface wirelessset wlan1 distance=indoors tx-power-mode=all-rates-fixed \
tx-power=17 frequency-mode=superchannel
Why does the speed drop on the repeater?
Speed drops because the radio module can't simultaneously receive and transmit data on the same frequency. It's forced to switch, wasting time on the switching. Using different frequencies for reception and transmission (if the equipment allows it) solves this problem.
Diagnostics and troubleshooting
If the connection is not established or is unstable, it is necessary to run diagnostics. The first tool to use should be Log in the System menu. There you can see the reasons for the disconnection or authentication error.
Use the utility ping To check the availability of the gateway and external resources. High ping or packet loss indicate problems with the radio channel or overload of the device's processor. In such cases, reducing the channel width or repositioning the antenna can help.
Check your signal level (signal strength) and noise level (noise floorA signal better than -65 dBm is considered good. If the value is below -75 dBm, the network's stability is at risk.
- 📉 Signal — the useful signal level should be closer to 0.
- 🔊 Noise — noise level, ideally below -90 dBm.
- 📡 CCQ — communication quality coefficient, shows the transmission efficiency.
Can MikroTik be used as a repeater for a regular router?
Yes, you can. For this, use the mode station With NAT enabled. In this case, the MikroTik will appear to the main router as a regular client device, but will still be able to distribute internet over WiFi or cable.
What is the difference between WDS and Station Bridge?
WDS (Wireless Distribution System) is a standard that allows broadcast packets to be transmitted over a wireless bridge. Station Bridge is a proprietary MikroTik mode that emulates a transparent bridge without requiring WDS support on the server side, but it only works between MikroTik devices.
Why is WiFi speed through a repeater low?
Speed is reduced because the radio channel is used twice: for reception from the client and transmission to the base station. This effectively splits the bandwidth in half. Using the 5 GHz band and highly directional antennas helps mitigate this effect.
Do RouterOS versions need to match for the bridge to work?
No, the versions may differ. However, for specific features, such as NV2 or proprietary WDS extensions, it is recommended to use similar software versions on both ends of the link.