Using MikroTik equipment as a wireless client is a common task for network engineers, allowing them to connect remote network segments without laying cables. Most often, client mode It's necessary for receiving a signal from the main router and then distributing it over a wire or creating a new subnet. This solution is ideal for offices, summer cottages, or apartments where the provider only provides Wi-Fi access.
The configuration process requires careful attention, as the equipment RouterOS It has flexible yet complex operating logic. Unlike consumer routers, there's no "magic button," and all parameters are set manually. You'll need to configure the wireless network interface, create a bridge, and properly configure the routing.
Before you begin, make sure your device supports client mode. Not all MikroTik models have a built-in Wi-Fi module, so antennas or a built-in radio module are required. It's also important to know the network parameters you plan to connect to: name SSID, encryption type and password.
Preparing hardware and resetting the configuration
When setting up any network equipment, you should begin by clearing previous settings to avoid IP address conflicts and firewall rules. If the device is new or has previously been used in a different role, it's best to perform a full reset. This ensures that the configuration is free of any "garbage" from old experiments.
Connect your computer to any MikroTik LAN port using an Ethernet cable. By default, the device's address is often 192.168.88.1, but after a reset, it may change or become inactive without a DHCP server. Use the utility WinBox to search for a device by MAC address, as this is the most reliable method of accessing RouterOS.
β οΈ Warning: After executing the reset command, the device will reboot and you will lose connection. If you are connected via Wi-Fi or a static IP, access may be lost permanently without physical access to the console or the reset button.
To clear the configuration via the terminal (CLI) or the New Terminal menu in WinBox, use the command:
/system reset-configuration no-defaults=yes skip-backup=yesAfter rebooting, the device needs to be assigned a new IP address from your local network so you can manage it while on the same subnet as the future gateway. Keep in mind that control interface must be added to the list of allowed access.
βοΈ Preparing MikroTik for setup
Creating a bridge and configuring interfaces
In the modern version RouterOS v7 The current v6 configuration is built around Bridge. You need to create a logical bridge that connects a physical Ethernet port and a wireless interface. This will allow traffic to flow transparently between them, as if they were ports on the same switch.
First create a new Bridge in the menu Bridge. Then go to the tab Ports and add your wireless interface there (usually wlan1 or wifi1 (depending on the model) and the physical port that will be used as a LAN for internet sharing. It's also important to add the Bridge itself as a port if required by the software version, although often simply creating a bridge is sufficient.
Next, you need to configure IP addressing. Go to the menu IP β Addresses and add a new address. Enter an IP address from the subnet where your future gateway (main router) is located, but select a free address. For example, if your gateway is 192.168.1.1, set the MikroTik address to 192.168.1.250 with a /24 mask.
Don't forget about DNS. Without correct name servers, the device won't be able to resolve domain names, which will result in inaccessibility to web resources even if there is a connection. In the menu IP β DNS Enter the server addresses, for example, 8.8.8.8 or the address of your main router.
Wireless interface configuration
The most important step is setting up the Wi-Fi module. Go to the menu Wireless (or Wifi in newer versions with the wifi-qcom-ac package) and open the properties of your interface. In the field Mode you must select a value station or station-bridge. Mode station-bridge Preferred if you want MikroTik-based devices to receive IP addresses directly from the main router.
Tab Scan allows you to find available networks within range. Find the desired network by SSID and press the button Connect or Connect ToThe system will automatically insert the access point's MAC address (BSSID) into the interface settings. This is a critical parameter that ensures binding to specific equipment.
In the security settings (Security Profile) select or create a new profile with the appropriate encryption type (usually WPA2 PSK or WPA3). Enter the network password. Make sure the frequency mode (Frequency Mode) matches the region and access point settings, otherwise the connection may be unstable.
β οΈ Attention: When selecting the mode
station-bridgeThe main router must support forwarding of client MAC addresses (WDS or similar), otherwise the Internet will only work on the MikroTik itself, but not on the devices connected to it.
The difference between station and station-bridge
In station mode, the MikroTik operates as a regular client (like a laptop), creating a NAT. In station-bridge mode, the device becomes a transparent bridge, and all clients appear to be on the same network as the main router.
Configuring DHCP Client and Routing
To automatically obtain an IP address from the main router (if you haven't set a static address), MikroTik needs to configure a DHCP client. Go to the menu IP β DHCP Client, click "+" and select your bridge interface or wireless interface, depending on your RouterOS version and operating scheme.
The key is adding a default route. Typically, the DHCP client itself adds a route with a label. dynamic, but sometimes you need to enter it manually in the menu IP β RoutesMake sure the gateway points to the IP address of the main router.
Check for NAT rules if you are using the mode station (not a bridge). In this case, the MikroTik acts as a separate router. Go to IP β Firewall β NAT and add the rule:
chain=srcnat action=masquerade out-interface=wlan1Here wlan1 β This is the name of your wireless interface that connects to the internet. Without this rule, MikroTik devices will not be able to connect to the network.
Checking the connection and diagnostics
After applying all the settings, you need to make sure the channel is working. Go to the tab Interfaces and look at the wireless interface status. Indicator R means Running, and X β that the interface is disabled. The connection indicator should also be lit.
Use the built-in tool Tools β PingTry pinging the IP address of the main router (gateway). If the ping works, the physical layer and data link layer are configured correctly. Then try pinging an external resource, for example, 8.8.8.8.
To analyze the signal quality, use the menu Wireless (or Wifi) β tab Registration (or Interfaces β wifi). The signal level is displayed here (Rx Signal) and noise level. The optimal value is considered to be a range from -50 to -70 dBm.
| Parameter | Meaning | Description |
|---|---|---|
| SSID | MyNetwork | Wireless network name |
| Signal Strength | -65 dBm | Received signal level |
| TX/RX Rate | 433/433 Mbps | Data transfer rate |
| Uptime | 00:15:30 | Connection uptime |
Common mistakes and how to solve them
One of the common problems is the mismatch of security standards. If the main router is operating in WPA3, and the client is configured for WPA2, the connection will fail. In such cases, you will need to create a separate security profile with mixed mode support or update the client settings.
Another common issue is the MTU (Maximum Transmission Unit). If packets aren't getting through or websites are loading partially, try reducing the MTU on the WAN interface or in the PPP/VPN settings, if used. The default value is 1500, but some tunnels require 14xx.
Don't forget about channels and bandwidth. If you manually set channel 1 and the access point switches to channel 6 due to interference, the connection will be lost. It's best to leave the channel setting on automatic or hard-code it on both devices.
β οΈ Note: Interfaces and menu names may differ depending on the RouterOS version (v6 or v7) and the installed driver package (old wireless or new wifi-qcom). Always consult the official documentation for your specific model.
DNS problem
If you have internet access (pinging via IP works) but pages won't open, check your DNS settings. Try hardcoding 1.1.1.1 and 8.8.8.8 in IP -> DNS.
Optimizing WiFi client performance
To achieve maximum speed in client mode, it's important to position your antennas correctly. Use high-gain external antennas if the distance to the access point is long. Directional antennas (MIMO) can significantly improve link quality.
In the wireless interface settings you can experiment with the parameter DistanceBy default it is in the mode indoor or outdoor, but for precise calculations, you can specify the distance in kilometers. This affects packet acknowledgement (ACK) timeouts.
Disable unnecessary services and protocols if they are not needed. For example, if you don't use IPv6, you can disable it to reduce CPU load. It's also worth checking the list of installed packages and removing any unnecessary ones using the menu. System β Packages.
How do I reset my MikroTik if I forgot my password?
A physical connection is required to reset the device. Locate the Reset button on the device. With the device powered off, press and hold the button, then power it on. Keep holding the button until the ACT indicator flashes (usually 5-10 seconds), then release. The device will boot to factory settings.
Why doesn't MikroTik see 5 GHz networks?
It's possible your Country settings are set to a region where some 5 GHz channels are restricted, or your hardware doesn't support the 802.11ac/ax standard. Check your model's specifications and set the correct regulatory domain in the Wireless menu.
Is it possible to use MikroTik as a client and an access point at the same time?
Yes, this is possible. By configuring the interface in station mode, you can create a virtual interface (Virtual AP) or use a second radio module (if available) to distribute Wi-Fi to your clients. This is called repeater mode.