Extending wireless network coverage is one of the most common tasks when setting up Wi-Fi at home or in the office. The signal from the main router often can't penetrate thick walls or ceilings, creating "dead zones" where internet service is either intermittent or nonexistent. Using additional equipment, such as Mikrotik, allows you to turn your second router into a powerful one repeater (repeater) that receives the signal and retransmits it further.
Unlike simple home routers, the equipment Mikrotik (based on OS RouterOS) offers flexible tools for creating a stable connection. The most reliable method for organizing such a tandem is technology WDS (Wireless Distribution System), which allows for the unification of wireless network segments at the data link layer. This means that all devices on the network will be on the same subnet, simplifying access to printers, NAS storage, and local resources.
However, configuring Mikrotik in repeater mode requires attention to detail, especially when working with MAC addresses and frequency ranges. In this article, we'll cover the full configuration process, from preparing the equipment to fine-tuning security settings. You'll learn how to create a transparent bridge that will seamlessly extend the range of your network.
Equipment preparation and basic requirements
Before you begin configuration, you need to ensure that your equipment supports the necessary features. To implement a router-repeater setup, you'll need two devices: the main router (Master), which distributes the internet, and the MikroTik (Slave), which will act as a client-repeater. It's important to understand that for stable operation, it's best to use devices that support the standard. 802.11n or 802.11ac (5 GHz), as older standards can become a bottleneck for the entire network.
Before starting work, it is recommended to reset the MikroTik device that will be used as a repeater to factory settings. This will prevent IP address conflicts and old firewall rules that may have been left over from previous experiments. You can reset the device by holding down the button. Reset on the device body when turning on the power and holding it until the indicator flashes ACT.
⚠️ Attention: Make sure the RouterOS versions on both devices are compatible or at least not critically outdated. RouterOS v7 changed the wireless packet architecture, so if the primary router is running v6 and the extender is running v7, the connection may fail without additional compatibility configuration.
It's also worth determining the frequency range your network will operate in advance. If you plan to use the 2.4 GHz band, be prepared for a possible decrease in speed, as this channel is often congested with neighboring networks. Choosing a channel and channel width (channel-width) must match on both devices.
Setting up the main router (Master AP)
The first step is to properly configure the main router that will broadcast Wi-Fi. In the MikroTik interface (WinBox or WebFig), go to the WirelessIf you have a dual-band device, select the appropriate interface, for example wlan1 for 2.4 GHz or wlan2 For 5 GHz. Double-clicking on the interface will open the settings window.
In the window that opens, go to the tab Wireless. Make sure that the operating mode (Mode) is set to the value ap bridgeThis is the standard access point mode. Next, you need to enable WDS support by checking the box. WDS Mode in meaning dynamic or static. Mode dynamic It is preferable because it allows you to automatically add MAC addresses of connected repeaters to the WDS table without requiring manual registration.
Don't forget to configure your security settings. Go to the tab Security Profile and create a new profile or edit an existing one default. Set the mode Authentication Types V wpa2 psk and set a complex password in the field WPA2 Pre-Shared KeyWithout encryption, your network will be vulnerable to traffic interception.
After applying the settings, check if your mobile devices see the network with the new name (SSID). If the network appears and devices connect, then the basis for creating a repeater is ready. Remember the MAC address of the main router's wireless interface—you may need it for diagnostics.
MikroTik Configuration in Client Mode (WDS Station)
Now let's move on to setting up the second device that will receive the signal. Connect to it via cable or a temporary Wi-Fi network (if available). First, you need to disable the DHCP server on this device to prevent it from conflicting with the main router. Go to the menu IP → DHCP Server and make sure the server is stopped or removed.
Next you need to create a bridge (Bridge). In the menu Bridge add a new bridge (default bridge1). All interfaces that should work as part of the local network must be added to this bridge: LAN ports (ether2-ether5) and wireless interface (wlan1). This will combine the wired and wireless ports into one logical switch.
The most important step is setting up the wireless interface. Open Wireless, select your WLAN interface and go to properties. Here you need to change the operating mode (Mode) on station-wdsThis mode allows the device to operate as a client and simultaneously forward the MAC addresses of connected devices to the main router, maintaining network transparency.
- 📡 SSID Scan: Click the Scan button, find the main router's network and click Connect to automatically enter the network name and frequency.
- 🔒 Security: On the Security Profile tab, select the same profile with password that is configured on the main router.
- 🌐 WDS Mode: Make sure that the value is selected here as well. dynamic or static, similar to the master.
After turning on the interface (Enable) the wireless indicator should light up, and in the logs (Log) messages about successful association with the access point should appear. If the interface status running, but the IP address was not received, check the DHCP client settings.
Setting up a bridge and obtaining an IP address
For the extender to receive internet access and allow you to access its management interface, it must receive an IP address from the main router. To do this, go to the menu IP → DHCP Client You need to add a new client. In the field Interface select the one created earlier bridge1. Make sure the checkbox is checked. Use as default route set if you want all traffic from this device to go through Wi-Fi.
If the DHCP client has received an address (status bound), which means the communication channel between the routers is working correctly. You can now manage the extender by accessing it using the IP address assigned by the primary router. For convenience, it's recommended to set up a static lease on the primary router using the extender's MAC address so that its address doesn't change after a reboot.
⚠️ Attention: If you don't add the wireless interface to the Bridge, but simply configure it as a separate interface, devices connected to the extender may end up on a separate subnet (Double NAT), which will disrupt local services like Chromecast or network printers.
☑️Checking bridge settings
It is also important to check that on the interface bridge1 There are no extra IP addresses left, except for the one received via DHCP. The old address 192.168.88.1 (standard for Mikrotik) it is better to remove from the list IP → Addresses, leaving only the dynamic one to avoid routing confusion.
Optimizing connection speed and stability
Once a basic connection is established, it's worth fine-tuning to improve performance. In repeater mode, the actual throughput speed can be halved, as the radio airwaves are used for both receiving and transmitting data. To minimize losses, use the range 5 GHz, if the distance between the routers allows (line of sight or one wall).
In the wireless interface settings (Wireless) you can manually fix the frequency (Frequency) to prevent the router from constantly scanning the airwaves for the best channel, which creates unnecessary load. It is also recommended to disable unused protocols, such as Install (for WPS), if you do not plan to connect devices using a button.
| Parameter | Recommended value | Impact on the network |
|---|---|---|
WDS Mode |
dynamic | Automatically add MAC addresses, simplifying setup |
Frequency Mode |
regulatory-domain | Compliance with legal power and channel standards |
Country |
no_country_set | Allows you to select any channels (use with caution) |
Antenna Gain |
0 | Correcting signal power in dB (for accurate calculations) |
To monitor connection quality, use the built-in tool Sniffer or Torch on the menu Tools. They allow you to see the signal level (signal strength) in real time. The optimal signal level is considered to be between -50 and -65 dBm. If the signal is weaker than -75 dBm, the stable operation of the WDS is questionable.
What to do if the speed drops?
If you notice a significant speed drop, try changing the channel width. In noisy 2.4 GHz environments, 20 MHz sometimes works better than 40 MHz, as it reduces interference. Also, check if Green AP or power saving mode is enabled, which could limit transmitter power.
Troubleshooting and Security
Even with proper configuration, connection issues may still occur. This is often due to MAC address filtering. If MAC filtering is enabled on the main router, Access List, make sure the MAC address of the extender (or its WDS interface) is added to the list of allowed addresses. In Mikrotik, this is done through the menu. Wireless → Access List.
It's also worth paying attention to logging. Enable detailed logging of the wireless interface by adding a rule to System → Logging: topics wireless,infoThis will help track connection breaks and understand whether the master or the client initiates the break.
⚠️ Attention: Interfaces and menu names may vary slightly depending on the RouterOS version (v6 or v7) and the specific device model (hAP, RB, SXT). Always consult the official documentation for your specific hardware revision, as the functionality of chipsets (Atheros, Qualcomm, MediaTek) varies.
Don't forget about physical security. Place the repeater antennas so they aren't shielded by metal objects. Vertically polarized antennas (vertical orientation) typically provide better coverage in apartment buildings.
Conclusion
Setting up a Mikrotik as a WiFi repeater is an effective way to improve network coverage without running unnecessary cables. Using WDS technology, you can create a single, seamless network where devices can switch between access points (albeit with a delay, unlike roaming protocols). The key is to properly configure the bridge and wireless interface modes.
By taking the time to configure it correctly, you'll have a flexible and reliable system that's easily scalable. While adding another repeater to the chain is possible, it's not recommended to use more than two or three links, as this will critically reduce the overall channel throughput.
Is it possible to use Mikrotik as a repeater for a third-party router (TP-Link, Asus)?
Yes, it is possible. WDS technology is a standard, but its implementation may vary between vendors. The main issue is encryption and preamble compatibility. Mikrotik routers can often be paired with other routers by setting the same encryption type (WPA2-AES) on both devices and disabling any "smart" optimization features.
Why is the speed through a repeater lower than directly from the router?
This is a physical limitation of Wi-Fi's half-duplex mode. There's only one radio channel, and it can't simultaneously receive and transmit data on the same frequency. Therefore, theoretical throughput drops by at least 50%. Using different frequencies for reception and transmission (if the equipment allows it) or the 5 GHz band helps mitigate this effect.
Do I need to configure NAT on the repeater?
No, in a WDS bridge setup, NAT on the repeater is unnecessary and even harmful. The repeater acts as a transparent switch (layer 2). All IP addresses are assigned by the main router. Enabling NAT will create a double address translation, which breaks many games and services.
How do I reset my router if I've blocked access?
Use the physical reset button on the device. With the power on, press it with a paperclip for 5-10 seconds (until the ACT indicator flashes). The device will reboot with factory settings, and you will be able to connect to it using the default IP address.