Situations requiring access to a remote Wi-Fi network and sharing it via Ethernet cable or creating your own local access point are quite common. This could involve connecting to a wireless-only internet provider or setting up a backup communication channel in an office. In such cases, using a standard USB dongle isn't always effective, especially if stability and advanced routing capabilities are required.
Company equipment Mikrotik has powerful functionality that allows you to turn the router into a full-fledged WiFi adapterIn the terminology of the RouterOS operating system, this mode is called Station (or Station Bridge). Implementing such a scenario requires more than just flipping a switch, but understanding the logic behind how wireless interfaces and bridges work.
Unlike consumer routers, where the "client" function is often limited, RouterOS gives you complete control over the process. You can set up complex routing, traffic filtering, and prioritization of packets passing through the wireless bridge. However,
Selecting equipment and checking compatibility
Not all devices Mikrotik capable of operating in client mode. The key factor is the installed wireless card and its chipset. Devices marked wAP, hAP, SXT And LHG Most often, they support the necessary modes, but before purchasing or setting up, be sure to check the specifications of a specific model on the official website.
Particular attention should be paid to the frequency range. If your ISP or remote network operates on the 5 GHz frequency, your client router must also support this range. Using only 2.4 GHz devices in today's noisy environments can lead to unstable performance and slow connection speeds.
⚠️ Attention: Mode
Station Bridgeis not an IEEE 802.11 standard and only works between devices MikrotikTo connect to third-party access points (routers from other manufacturers), you must use the modeStationwith the NAT function or interface forwarding enabled.
Antenna factor is also worth considering. For receiving a weak signal at a distance, an external antenna with a high gain is critical. Built-in antennas in compact models of the series hAP may not provide sufficient signal strength for a stable link over long distances.
Theoretical aspects: Station vs. Station Bridge
Understanding the differences between wireless interface operating modes is the key to successful setup. RouterOS offers several profiles, but for the "Mikrotik as a WiFi adapter" task, we're interested in two primary ones: Station And Station BridgeThe choice depends on your network topology and traffic transparency requirements.
Mode Station Bridge Allows the device to act as a transparent bridge. All devices connected to the Mikrotik LAN ports will be on the same subnet as the remote network and receive IP addresses from the main router. This is ideal if you simply need to extend coverage or connect devices without Wi-Fi.
In turn, the regime Station (sometimes called a "pseudo-bridge") creates a separate subnet. The router receives one IP address from the remote network on its WAN interface and distributes addresses from its own subnet to its clients via a DHCP server. In this case, NAT (masquerading) is enabled, hiding your local network from your ISP.
Below is a comparison table to help you decide which mode to choose:
| Parameter | Station Bridge | Station (with NAT) |
|---|---|---|
| Transparency | Full (L2 level) | Hidden (L3 level) |
| IP addressing | From the main router | From local Mikrotik |
| Compatibility | Only Mikrotik | Any vendor |
| Complexity | High (requires WDS) | Low (standard routing) |
Why does Station Bridge require WDS?
Transparent bridging requires that clients' MAC addresses be transmitted over the wireless channel. The standard Wi-Fi protocol hides endpoints' MAC addresses, so a WDS (Wireless Distribution System) extension or proprietary implementations are required to forward them.
Basic wireless interface setup
Setup begins with connecting to the device via an Ethernet cable and the utility. WinBoxFirst, you need to reset the configuration to factory settings to avoid conflicts between scripts and firewall rules if the router was previously used. After rebooting, go to the menu. Wireless.
In the window that opens, double-click on the name of the wireless interface (usually wlan1). In the field Mode select station (for working with any routers) or station-bridge (to connect two Mikrotik devices). Next, go to the tab Wireless and press the button Scan.
The system will scan the air and display a list of available networks. Find the access point you need, select it, and press the button. Connect (or Make Superchannel in older versions, if the frequency is non-standard). Make sure that in the field SSID the network name appeared, and in the field Frequency — operating frequency.
If the network is password protected, go to the tab Security and in the field Security Profile Specify a profile. Usually a default profile is created default. Open its settings and in the field WPA Pre-Shared Key Enter the password for your Wi-Fi provider's network. The encryption type must match the settings of the head end (usually wpa2-psk).
☑️ Checking Wireless Settings
Network bridging and IP addressing
After a successful connection at the radio level (the connection indicator in the Wireless menu should show a signal strength of, for example, -65 dBm), you need to configure the logical connection. If you are using the station-bridge, you need to create a bridge (Bridge) and add it as a wireless interface wlan1, as well as a wired port ether1 (or any other that will be used for distribution).
In normal mode station There is no need to create a bridge here. wlan1 acts as a WAN interface. You need to add this interface to the list of interfaces with the type WANThis can be done in the menu. Interfaces, by selecting the tab Interface List and adding wlan1 to the list WAN.
Next, configure the IP address acquisition. Go to the menu IP -> DHCP ClientAdd a new client, select the interface wlan1 and make sure the box is checked Add Default RouteIt is also recommended to check the box. Use Peer DNSso that the router automatically receives DNS server addresses from the provider.
To distribute the Internet to local devices, you need to configure a DHCP server. In the menu IP -> DHCP Server press the button DHCP Setup. Select the interface your computers are connected to (e.g. ether2 or bridge-local), and follow the wizard's instructions, agreeing with the proposed address pool and lease time values.
⚠️ Attention: When using the mode
Stationwithout a bridge, be sure to enable masquerading. Go toIP->Firewall-> tabNAT, add a new rule:Chain=srcnat,Out. Interface=wlan1,Action=masqueradeWithout this, the Internet will not work.
Connection optimization and security
Once the internet is available, it's important to ensure channel stability. In noisy environments, channel width and transmitter power become key parameters. In the menu Wireless try changing it in the interface properties Channel WidthFor 2.4 GHz, the width often works more stably. 20mhz, and not 20/40mhz Ce, as this reduces the influence of neighboring networks.
No less important is the parameter WMM Mode. It must be turned on (enabled), as many modern access points require multimedia support to establish connections at high speeds (802.11n/ac standard). Disabling WMM may limit the connection speed to the standard 54 Mbps.
In terms of security, even in client mode, your router remains vulnerable to attacks from the local network unless a firewall is configured. Basic protection includes blocking access to management services (WinBox, SSH, API) from the interface. wlan1This is done in the menu. IP -> Services, where you can specify valid IP addresses or interfaces for each service.
It is also recommended to disable unused discovery protocols such as LLDP And MNDP, on the external interface, to prevent your device from being visible on someone else's network. This will increase privacy and reduce CPU load.
Diagnosing problems and common mistakes
The most common problem is status connected in the wireless interface, but no DHCP IP address. This indicates that the radio link is present, but there is no logical connection. Check that the security type and password match. Also, make sure that MAC address filtering is not enabled on the headend.
If your connection speed is extremely slow, check the setting TX/RX Rate in the wireless interface status. If it fluctuates or is low, there may be interference. Use the tool Sniffer or Torch on the menu Tools to analyze passing traffic and find bottlenecks.
Another common error is an IP address conflict. If your Mikrotik's subnet (e.g., 192.168.88.0/24) matches your ISP's subnet, routing issues will occur. In this case, you need to change the router's local network IP address to a unique one, such as 192.168.10.0/24.
For deep diagnostics, use the utility ping from the router's interface. Go to New Terminal and try pinging the provider's gateway and an external resource (e.g., 8.8.8.8). This will help isolate the problem: at the link, IP addressing, or routing level.
How to increase the reception range in Station mode?
To increase range, use devices with external antenna ports (such as SXT or LHG). Point the antenna directly toward the signal source. In the Wireless settings, reduce the value. Basic Rates, leaving only the minimum (for example, 6 Mbps), which will increase range but reduce overall speed. You can also try increasing the power TX Power, but this may lead to overheating of the device.
Can Mikrotik be used as a PC adapter via USB?
The Mikrotik router itself is not a USB WiFi adapter for your computer. However, you can connect the router to your PC via an Ethernet cable. The computer will see it as a regular network card. Station allows you to forward the WiFi connection to the Ethernet port to which the PC is connected.
Why doesn't the Internet work after setup?
Check three points: 1) Has the wlan1 interface received an IP address (IP -> DHCP Client)? 2) Is there a default route (IP -> Routes, line with DSt. Address 0.0.0.0/0)? 3) Is NAT enabled (IP -> Firewall -> NAT)? Most often, the problem lies in the absence of a route or blocked DNS.