Compact device MikroTik Lite 2 (model RBLTAP-2HND) is a specialized solution for building wireless networks in confined spaces or with specific design requirements. This device, often referred to as a "pill" due to its round shape, is ideal for guest areas, small offices, or access points in hallways where discreet operation is essential. Its key feature is its ability to be mounted directly to a wall or ceiling without the need for bulky fasteners.
Using this equipment as a full-fledged access point allows you to offload the main router and expand the network coverage area while maintaining high performance. Configuration Wireless The RouterOS interface provides flexible radio channel management tools, which is critical in multi-apartment buildings with high-density neighboring networks. Properly configured, the device becomes a powerful tool for distributing stable internet.
Unlike standard home routers, RBLTAP-2HND requires a more careful approach to physical installation and initial configuration, as it does not have a built-in battery and relies on an external power source. However, once you've mastered the basic principles of working with RouterOS, you'll get a device that will work for years without needing to be rebooted. In this article, we'll walk you through all the steps to transform your tablet into an effective access point.
Hardware features and preparation for installation
Before you begin setup, you need to clearly understand the physical limitations and capabilities of your device. MikroTik Lite 2 Equipped with one 10/100 Mbps Ethernet port, this is an important factor when planning your network. This means the maximum wired connection speed won't exceed 100 Mbps, but higher speeds can be achieved over a 2.4 GHz wireless channel thanks to support for the 802.11n standard.
A critical aspect is the power supply of the device. For operation RBLTAP-2HND Power must be supplied via the Ethernet port, as the model does not have a separate power supply port. You can use the included PoE injector or any compatible switch that supports the 802.3af/at standard. It is important to observe polarity when using passive PoE adapters to avoid damaging the electronics.
⚠️ Attention: The device does not have a hardware reset button in the traditional sense accessible from the outside. Resetting the settings requires physical access to the contact pads on the board or using the reset function.
Safe Modewhen connecting via the console, so it is better to carry out the initial setup carefully.
For mounting, a special adhesive backing or screw holes are included. When choosing a mounting location, keep in mind that the device's round body provides an omnidirectional antenna pattern in the horizontal plane. Mounting it to a metal surface without additional shielding on the back may significantly degrade signal quality due to wave reflection.
Initial connection and interface access
Initial setup process MikroTik Lite 2 It starts with a physical connection to the computer. Since the device doesn't have a DHCP server configured on client ports by default (depending on the firmware version), it's most reliable to set a static IP address on your laptop's network card. The default device address is usually 192.168.88.1, and the login is admin without password.
Connect the cable from the port Lite 2 to the PC's network card. If you're using a PoE injector, plug the device's cable into the port labeled "PoE," and the cable from your computer or router into the "LAN" port. Once power is applied, the device's indicators should light up, indicating a connection. Next, open your browser and enter the device's address in the address bar.
Modern versions RouterOS (versions 7 and above) may require the use of a utility WinBox For initial login, especially if your browser is having issues with SSL certificates or protocol versions. Download the utility from the official website, go to the "Neighbors" tab, find your device by MAC address, and click "Connect." This is the most reliable way to access the management system.
☑️ Initial access to MikroTik
Basic wireless network configuration
After successful authorization in the management interface, the first thing you need to do is go to the section WirelessThis is where the radio module is configured. In the list of interfaces, you will see wlan1 or a similar symbol. Double-clicking on it will open the properties window where you can set the operating mode. AP BridgeThis mode allows the device to receive clients while simultaneously transmitting traffic further over the wired network.
On the tab Wireless In the interface properties window, enter the name of your network (SSID) in the field SSIDThis name will be displayed when searching for networks on smartphones and laptops. For security, switch to the tab Security Profiles and create a new profile or edit an existing one. Select the security mode WPA2-PSK or WPA3, if all your devices support the new encryption standard.
Be sure to select the appropriate frequency and channel width. In the 2.4 GHz band, channels 1, 6, and 11 are considered the most stable, as they don't overlap. Channel Width 20 MHz will provide better noise immunity in an apartment building, whereas 40 MHz will give a speed increase in the absence of neighbors.
⚠️ Attention: Wi-Fi interfaces in RouterOS may be disabled by default. Make sure that in the list of wireless interfaces next to wlan1 There's a blue "E" (Enabled) instead of a red "R" (Running/Disabled). Click the disable symbol to activate the module.
Optimal channel settings
For maximum compatibility with older devices (IoT sensors, older phones), it's recommended to use mixed security mode (TKIP+AES), but this reduces overall security. It's better to use only AES (CCMP).
Setting up a network bridge and DHCP
To access point MikroTik Lite 2 To not only create a wireless network but also distribute IP addresses to connected clients, you need to configure a DHCP server. However, if the device is connected to a primary router that already distributes addresses, there's no need to create a second DHCP server. In this case, creating a network bridge is sufficient.Bridge).
Go to the section Bridge and create a new bridge, adding both interfaces to it: the physical port ether1 and wireless interface wlan1This will combine the wired and wireless portions into a single logical network segment. Clients connecting via WiFi will receive IP addresses from the main router and be able to see other devices on the local network.
If so Lite 2 used as a standalone access point with its own subnet, you need to configure the address pool in the section IP -> Pool, then create a network in IP -> DHCP Server and launch the DHCP setup wizard. Specify the gateway (the IP address of the MikroTik itself) and DNS servers. This will allow devices to access the internet through this gateway.
| Parameter | Meaning for AP Bridge mode | Value for Router mode |
|---|---|---|
| Device IP address | From the main router's subnet | Gateway for clients (e.g. 192.168.2.1) |
| DHCP Server | Off (distributed by the main router) | Enabled (Lite 2 distributes itself) |
| NAT/Masquerade | Not required | Required for internet access |
| Security | WPA2-PSK (AES) | WPA2-PSK (AES) |
Optimization of radio channel and security
In urban areas, the airwaves are saturated with signals, so simply setting the SSID isn't enough. Use the built-in tool Wireless -> Interfaces -> wlan1 -> Scan To analyze the surrounding airwaves, select the channel with the lowest noise floor and the fewest neighboring networks. Avoid automatic channel selection if your network contains mission-critical devices.
For increased security, it is recommended to disable this feature. WPS, if it is activated, as this protocol has known vulnerabilities. Also a useful feature is Access List (Access list) allows you to allow or deny connections to specific devices based on their MAC addresses. This creates an additional barrier to unwanted access, even if they know the password.
Don't forget about the transmitter power either. Parameter TX Power By default, the power level may be set to maximum, which in a small apartment will only increase noise and interference. Reducing the power to a level sufficient to cover the required area can paradoxically improve connection stability.
Installation and practical recommendations
Physical installation MikroTik Lite 2 The device requires careful installation. It's round and can be attached with either double-sided tape (degrease the surface first) or screws. When drilling holes, ensure there are no wires running inside the wall. After securing the device, route the cables in a way that doesn't interfere with the appearance, possibly using conduit.
It's important to note that the device has no active cooling and relies on passive heat dissipation through the housing. It is not recommended to cover the device with wallpaper or store it in airtight compartments, as overheating may reduce the radio module's performance and lead to instability.
To administer the device after installation on the wall, it is convenient to use a mobile application WinBox For Android/iOS, or the web interface, if enabled. This will allow you to make changes to settings without dismounting the device each time. It's also a good idea to back up the configuration before final installation.
How to reset settings if you forgot your password?
Because MikroTik Lite 2 There's no external reset button, so you'll need to disassemble the case (which may void the warranty) and short the reset contacts on the board while powering on. An alternative method is to use the NetInstall utility to reinstall the system, which also requires physical access to the port and rebooting the device into a special mode.
Can Lite 2 be used as a repeater?
Yes, you can configure the mode in RouterOS Station Bridge or Stationto allow the device to connect to another access point and rebroadcast the signal. However, due to the limitations of a single-stream radio in the 2.4 GHz band, the speed of this connection may be reduced by half.
Does the device support 5 GHz standard?
No, model RBLTAP-2HND (Lite 2) operates exclusively in the 2.4 GHz band. For 5 GHz operation, consider other models in the line, such as the cAP or wAP series, with corresponding frequency markings.