The situation where the range of the main wireless network doesn't cover the entire home or office is familiar to many administrators and enthusiasts. Instead of purchasing expensive equipment or installing additional cables, it's often wiser to use the existing one. Mikrotik As a signal booster, this device does an excellent job of expanding coverage, becoming a fully-fledged bridge or repeater.
Unlike simple consumer routers, this brand's equipment offers flexible settings that allow you to select the most suitable operating mode for your specific environment. You can use the mode Station Bridge for a transparent bridge or WDS to create a distributed system. Understanding the difference between these methods is key to the stable operation of your local network.
In this guide, we'll walk you through the process of turning your router into a powerful extender. We'll cover not only the basic steps, but also the nuances that beginners often overlook, leading to slow speeds or connection drops. Get ready to dive into the world of Wireless MikroTik technologies.
Selecting the right hardware and interface
The first step is always to evaluate the hardware capabilities. Not all models Mikrotik are equally well suited for operation in client-repeater mode. For example, devices of the series hAP or wAP have built-in antennas with good gain, which is critical for receiving a weak signal from the main access point.
It's important to consider the frequency range. If the primary network operates at 5 GHz, the client device must also support this standard. 802.11ac or axUsing older 2.4 GHz models as a repeater for a modern network will result in a significant drop in system performance.
It is also worth paying attention to the operating system version. RouterOSTo implement complex encryption schemes and modern security protocols, it is recommended to use the latest stable branch of the software. Older versions may not support the necessary WPA3 encryption features.
Preparing for setup: reset and basic configuration
Before attempting any complex wireless manipulations, the device must be cleaned. It's best to perform a full configuration reset to avoid conflicts with old rules. NAT or DHCP servers that may interfere with client mode operation.
To reset, hold down the button Reset on the device body when turning on the power and hold until the indicator ACT The LED will start flashing. After rebooting, connect to the device via WinBox using the MAC address, as the default IP address may be unknown or changed.
⚠️ Important: After resetting the device, it will only be accessible via its MAC address on the local network. Make sure your computer is on the same subnet or connected directly via cable.
After logging in, the first thing you should do is update the package. wireless and RouterOS itself through the menu System → PackagesHaving up-to-date drivers for your wireless module often solves compatibility and connection stability issues.
☑️ Preparing the device
Setting up Station Bridge mode for a transparent bridge
Mode Station Bridge This mode is the preferred method for creating a transparent L2 bridge. In this mode, all devices connected to the Mikrotik router will receive IP addresses from the main router while being on the same subnet. This is ideal for expanding the network without creating complex routes.
To activate this mode, go to the menu Wireless and open the wireless interface settings. In the field Mode select a value station-bridgePlease note that in this mode, the device cannot simultaneously act as an access point for other clients unless an additional radio module is used.
/interface wireless
set wlan1 mode=station-bridge ssid="MainNetworkName" disabled=no
Next, you need to configure security. Go to the tab Security Profiles and create a new profile or edit an existing one. Specify the same encryption type and password as those used on the primary access point. Mismatched encryption settings are the most common reason why a connection fails.
Why is Station Bridge better than WDS?
Station Bridge mode encapsulates Ethernet frames within wireless packets, allowing for the transmission of any traffic, including multicast and broadcast, without the need to configure WDS on the main router. This makes it a more versatile solution for mixed networks.
After applying the settings, the device will begin searching for the network. If all parameters are correct, the interface status will change to runningNow you need to bridge the wireless interface with the LAN ports so clients can connect via cable. Create a bridge Bridge and add interfaces there wlan1 And ether2-ether5.
Using WDS to Expand a Multi-Point Network
Protocol WDS (Wireless Distribution System) allows you to create chains of multiple access points that transmit the signal further. Unlike simple station mode, WDS requires configuration on both the client and the main router. This is more complex, but sometimes the only possible option for equipment from different manufacturers that support this standard.
In the Mikrotik wireless interface settings, you need to enable the flag wds-mode=dynamic or staticIn static mode, you must manually enter the MAC addresses of all WDS network members, which reduces flexibility but increases security. Dynamic mode is easier to deploy.
The main advantage of WDS is that it preserves clients' MAC addresses as they traverse the wireless link. This enables the use of MAC address filtering and billing systems operating at the channel access level.
| Parameter | Station Bridge | WDS Mode | Station (NAT) |
|---|---|---|---|
| L2 Transparency | Full | Full | No (double NAT) |
| Main router requirements | No | WDS support | No |
| Speed | High | Medium (overlay) | Average |
| Difficulty of setup | Low | High | Low |
When using WDS, it's important to be mindful of bandwidth loss. Each hop in a wireless chain theoretically halves the available bandwidth, as the radio channel operates in half-duplex mode. Therefore, building chains longer than two or three nodes is not recommended.
Optimizing wireless connections and frequencies
Connection quality directly depends on the selected frequency and channel width. In a congested apartment building, using automatic frequency selection (scan-list) can lead to instability. It's better to manually set the frequency where the noise level is minimal.
Use the built-in tool Wireless Scanner in WinBox or CLI command /interface wireless scan wlan1 To analyze your surroundings, select the channel that is least occupied by neighboring networks and enter it in the interface settings.
⚠️ Note: Channel width (20/40/80 MHz) affects not only speed but also noise pollution. In the 2.4 GHz band, always use 20 MHz. Increasing the channel width to 40 MHz in this band often results in reduced stability due to channel overlap.
It is also worth paying attention to the parameter TX PowerSetting the maximum power isn't always beneficial. If the client's signal is too strong and the access point's response signal is weak, asymmetry will occur, leading to disconnects. Sometimes reducing the power to 15-17 dBm provides a more stable link.
For advanced users, protocol customization is available. NV2 or TDMA, if both ends of the link are Mikrotik devices. These protocols help avoid collisions and significantly improve airtime efficiency, especially over distances exceeding 100 meters.
Troubleshooting and Network Security
After setting up, you need to make sure the connection is stable. Use the utility Torch for real-time traffic monitoring. It will show whether packets are being lost and what the actual channel throughput is. A high level of retransmissions (retries) indicates poor signal quality or interference.
Security in repeater mode is critical as you extend the perimeter of your network. Make sure you use an encryption protocol of at least WPA2-PSK with an algorithm AESThe outdated TKIP is not only slow, but also vulnerable.
/interface wireless security-profilesset [ find default=yes ] authentication-types=wpa2-psk mode=dynamic-key \
unicast-ciphers=aes group-ciphers=aes wpa2-pre-shared-key="StrongPassword123"
Don't forget to disable unnecessary management services such as API, Telnet or FTP, on the wireless interface, if they are not required. Accessing router settings from the guest network area is a direct path to compromising the entire infrastructure.
Why doesn't Mikrotik connect to WiFi in Station mode?
Most often, the problem lies in mismatched security settings (profile, encryption type) or operating mode (infrastructure vs. ad-hoc). Also, check if MAC address filtering is enabled on the main router.
Is it possible to distribute WiFi from Mikrotik if it is connected as a Station?
Yes, but only if the device has two radio modules (dual band). One module operates as a client (Station), the other as an access point (AP). A single radio cannot simultaneously operate as a client and an access point.
What is the maximum distance for a Mikrotik WiFi bridge?
Indoors with obstacles, the range is 10-30 meters. With a direct line of sight and directional antennas, the range is several kilometers. Everything depends on the transmitter power, receiver sensitivity, and frequency range.
Do I need a separate license for repeater mode?
Most wireless features at Layer 3 (L3) and above don't require a license; Level 3 (built into most devices) is sufficient. However, some advanced AP features may require a Level 4 or 5 license, but the basic license is generally sufficient for Station mode.
How to reset the wireless module?
You can delete the interface configuration with the command /interface wireless remove wlan1 (after creating a new one, if necessary) or simply reset the settings of a specific security profile and interface via WinBox.