Setting up MikroTik as a WiFi client: a complete guide

Using a router MikroTik As a wireless client, this is one of the most popular solutions for extending the coverage of a home or office network. Often, a situation arises when your primary internet provider only provides Wi-Fi, and you need to connect a desktop computer, IP camera, or another router that doesn't have a built-in wireless module. In this case, a device based on RouterOS becomes an ideal bridge, receiving the signal and transmitting it through the cable.

However, the setup process is not without its nuances, which can be confusing for an inexperienced user. Unlike simply connecting to an open network via a smartphone, this requires careful configuration of interfaces, bridging, and NAT rules. Incorrectly following the steps can result in loss of access to the device's configuration, so it's important to follow the steps carefully.

In this article, we'll cover the entire process in detail, from the physical connection to checking channel stability. You'll learn how to avoid common mistakes, set frequencies correctly, and ensure a secure connection. We'll avoid complex terms without explanation, ensuring even a beginner can handle the task.

Equipment preparation and compatibility testing

Before you begin any manipulations with the software, you must ensure that the hardware is ready. Not all models MikroTik Support client mode, especially for older or specialized devices. You'll need a computer with a network card, a patch cord, and the router itself, which will act as a receiver.

It is important to understand the difference between the wireless interface operating modes. Standard mode ap-bridge It is intended for distributing the Internet, but we need a mode station or station-bridgeThe first option creates a separate subnet, while the second transparently forwards MAC addresses, which is often required by providers.

⚠️ Caution: Ensure the antennas are securely screwed into the connectors before powering on. Operating the transmitter without a load (antennas) can cause the radio module to burn out in a matter of seconds.

For initial setup, it's best to use a direct cable connection between your PC and the MikroTik's LAN port. This will prevent connection loss when the wireless interface switches to client mode, which is when the device stops broadcasting its network.

Basic wireless interface setup

After connecting to the device via WinBox or web interface, the first thing you should do is go to the section Wireless. Here you can double-click on the interface name (usually wlan1 or wifi1), which will open the properties window. It is in the tab Wireless we change the parameter Mode on station (or station-bridge for MAC address forwarding).

Next you need to click the button Scan in the top menu of the settings window. A list of available networks within range will open. Find the desired network in the list by name (SSID) and click the button Connect or Make This TargetThe system will automatically fill in the network name in the field. SSID.

If the network is password protected, go to the tab Security ProfileIn the window that opens, in the field Passphrase Enter the password for your ISP's Wi-Fi network or main router. Make sure the security mode (WPA2/WPA3) matches the access point settings.

After applying the settings (Apply And OK) the connection indicator should light up green, and in the column Status the inscription will appear connected to ess. If the status searching or registering, check that the password and encryption type are correct.

IP addressing and DNS configuration

Once a physical connection is established, the router needs to obtain an IP address from the remote network. To do this, go to the menu IP -> DHCP Client. Click the plus (+) and select the interface that you just configured (for example, wlan1). In most cases, it is enough to leave the default settings and just click OK.

If in the column Status status appeared bound, then the address was received successfully. Now you can check the tab IP -> Addresses, where the dynamic address assigned by the master router should appear. Without this step, the internet will not work, as the device doesn't know where to send packets.

The DNS configuration step is no less important. Go to IP -> DNSHere you can manually enter servers (for example, from Google 8.8.8.8 or Cloudflare 1.1.1.1), but it's safer to check the box Use Dynamic DNS ServersThis will allow MikroTik to automatically obtain DNS addresses from your ISP.

⚠️ Attention: If you use the mode station-bridge, the DHCP client must be created on the interface Bridge, and not on the wireless interface, since in this mode wlan1 becomes part of the bridge.

It is convenient to check the functionality through the menu Tools -> Ping. Enter the address 8.8.8.8 and press StartIf you see replies with time stamps (time=xx ms), then routing is configured correctly.

What to do if Ping doesn't work?

Check the routing table in IP -> Routes. There should be an entry with the prefix 0.0.0.0/0 and a gateway matching the IP address of the main router. If such an entry is missing, add it manually or recreate the DHCP Client.

Creating a Bridge for LAN Ports

To ensure that devices connected to MikroTik ports via cable also have internet access, you need to combine the wireless interface and Ethernet ports into a single logical bridge. Go to the section Bridge and create a new bridge (+), if it has not already been created by default (usually it is called bridge).

Next, go to the tab Ports inside the Bridge menu. Add a new port, selecting your wireless interface as the interface (wlan1). Then we add another port for the physical Ethernet connector (for example, ether2 or ether3), where the computer or another router will be connected.

Now all these interfaces function as a switch. It's also best to move the IP address for managing the MikroTik itself to the Bridge interface so that access to the settings remains regardless of the port you're connected to.

Setting up NAT and firewall

In normal mode station (not bridge) MikroTik creates its own subnet. To enable devices connected to its LAN ports to access the internet via the provider's Wi-Fi, network address masquerading (NAT) must be configured. Without this, packets from clients will be returned by the provider as invalid.

Go to the menu IP -> Firewall tab NATCreate a new rule (+). In the field Chain select srcnatIn the field Out. Interface Please specify your wireless interface (wlan1). In the field Action select masquerade.

This rule tells the router: "Substitute all requests coming from the local network to the outside via Wi-Fi with your external IP address." This is a standard practice for home networks, allowing you to hide the internal structure of the network from the outside world.

It is also worth checking the firewall settings in the tab Filter Rules. Make sure the chain forward does not block passing traffic. In the standard configuration RouterOS Often there is already a rule that allows established and linked connections, which is what we want.

⚠️ Please note: When NAT is enabled, connection speed may decrease slightly due to the additional load on the router's processor, especially on models without hardware acceleration.

Optimization and troubleshooting

After basic setup, fine-tuning the parameters is often required to improve stability. The main problem with wireless clients is their sensitivity to interference. If you notice intermittent connection drops, try manually locking the channel frequency instead of using the default mode. Auto, choosing the least loaded channel.

It's also a good idea to disable unnecessary protocols and services. If you don't need access to the router from the external network, close the WinBox, SSH, and Telnet ports in the settings. IP -> ServicesLeave only those that you use, and only from the internal network (LAN).

To diagnose signal quality, use the built-in tool Tx/Rx Tables in the Wireless menu. Double-clicking on an active connection will display the signal strength in dBm. Values ​​above -70 dBm are considered good, while values ​​below -80 dBm indicate an unstable signal.

Frequently Asked Questions (FAQ)

Can MikroTik be used as a repeater to boost the signal?

Technical mode station It's not a classic repeater, as it doesn't repeat the signal but creates a new connection. However, by creating a bridge and enabling Wi-Fi sharing from another interface (if the model is dual-band) or connecting an access point, you get the functional equivalent of an amplifier.

Why is the speed via cable lower than via Wi-Fi on my phone?

This may be due to the operating mode (NAT creates a load), channel width or interference. In the mode station-bridge Speed ​​is usually higher because double address translation is eliminated. Also, check if your ISP limits the number of connected devices.

Are settings reset when updating firmware?

When updating RouterOS via the menu System -> Packages The settings are preserved. However, when changing major versions or architectures (for example, from v6 to v7), you may need to export the configuration, as the syntax of some commands may change.

How do I regain access to my router if I've lost the connection?

Use the utility MikroTik Neighbor Discovery (included in WinBox), which finds the device even if the IP address changes. If this doesn't help, a physical reset will be required using the Reset button on the device.