In today's wireless networking environment, it's often necessary to not only distribute internet but also receive it over the air. Use cases can range from connecting a remote home to a provider via a neighbor's access point to creating a backup communication channel. MikroTik devices are ideal for this task thanks to the flexibility of the RouterOS operating system.
Turning a router into a signal receiver requires properly configuring the wireless network interfaces. You'll need to configure the card's operating mode, create a security profile, and bridge the interfaces. This will allow traffic to flow between the WAN port (which will become Wi-Fi) and the local network without any performance loss.
This article describes the hardware configuration process in detail. We'll cover creating a security profile, configuring the station mode, and setting up a transparent bridge. Following these steps will help you quickly establish a stable connection.
Preparing hardware and resetting the configuration
Before performing any manipulations on network equipment, it's crucial to ensure a clean environment. If any settings have been previously configured on the device, they may conflict with the new configuration. It's best to start with a clean base.
Connect your computer to one of the router's LAN ports using a cable. Open your browser and enter the address 192.168.88.1 To log into the WinBox or WebFig web interface. If you don't know the password or the configuration is corrupted, perform a hard reset.
⚠️ Warning: A physical reset will erase all your current configurations, including passwords and IP addresses. Make sure you have access to the device via a console cable or are prepared to reconnect after the reboot.
After the reset, the device will return to factory settings. You can now begin creating a new network structure. Make sure your RouterOS firmware version is up-to-date, as older versions may lack the necessary WPA3 or WPA2 encryption features.
☑️ Check before setup
Creating a Wi-Fi security profile
Configuring encryption settings is a key step. Without the correct security profile, connecting to a modern access point is impossible. Most providers and home routers use the WPA2-PSK standard or the newer WPA3.
Go to the menu Wireless and open the tab Security ProfilesHere you need to create a new profile or edit an existing one. defaultIn the field Mode select dynamic keys, which will allow the use of encryption keys.
In the field WPA2 Pre-Shared Key Enter the password for the Wi-Fi network you want to connect to. Make sure the correct encryption types are selected: TKIP And AESModern networks typically require only AES, but supporting both options improves compatibility.
The difference between encryption modes
WPA2 (AES) provides high speed and reliability, while TKIP is an outdated standard that limits speeds to 54 Mbps. If your target network only supports WEP or TKIP, connection speeds will be slow.
Be sure to save your changes by clicking Apply and OK. The profile is now ready to use in the interface settings. A single character error in the password will result in an infinite loop of connection attempts.
Configuring the wireless network interface
Now you need to switch the wireless card's physical interface to client mode. By default, the MikroTik operates in access point (AP) mode. We need to change this behavior.
On the menu Wireless Double-click on the interface wlan1 (or wifi1 in new models). In the field Mode select a value station or station-bridge. Mode station-bridge is preferable because it allows the device to act as a transparent bridge, hiding clients' MAC addresses behind its own address.
In the field SSID Enter the name of the network you want to connect to or select it from the list ScanIn the field Security Profile Select the profile you created earlier. You can leave the frequency set to automatic, but for stability, it's best to lock the frequency of the target access point.
| Parameter | Meaning | Description |
|---|---|---|
| Mode | station-bridge | Client operation mode with MAC forwarding |
| SSID | Target_Network | Provider network name |
| Frequency | 2437 | Channel frequency (example for channel 6) |
| Band | 2GHz-B/G/N | Operating standard (depending on equipment) |
After applying the settings, the status indicator should change. If the connection is established, an association message will appear in the logs. Check the tab Registration — the MAC address of the provider's access point should appear there.
Bridging and DHCP
A connected Wi-Fi interface alone won't distribute internet to LAN ports. The wireless interface and Ethernet ports must be combined into a single logical bridge. This will allow devices connected via cable to obtain IP addresses from the remote provider.
Go to the menu Bridge and create a new bridge (add a new element). Name it, for example, bridge-local. Then in the tab Ports add interfaces to this bridge wlan1 And ether2-ether5.
An important point is configuring the DHCP client. Go to the menu IP -> DHCP ClientAdd a new client, select the interface bridge-local and make sure the box is checked Add Default RouteThis will automatically create a default route to the provider's network.
Check the address in the menu IP -> AddressesIf an address from the provider's range (not 192.168.88.x) appears, then the setup was successful. The router is now operating as a client.
Diagnosing and troubleshooting
Even with proper setup, difficulties can still arise. Often, the problem lies in standard incompatibility or a weak signal. Use the built-in diagnostic tools to analyze the situation.
On the menu Wireless -> Registration the signal level is displayed (Rx Signal). Values better than -50 dBm are acceptable, with values down to -75 dBm. If the signal is weaker, consider installing an external antenna. Also, check the noise level in the surrounding area.
⚠️ Note: Some ISPs use MAC address binding. If you've changed your hardware, your internet connection may not work until you tell your ISP the new MAC address of your MikroTik or clone the old address in the interface settings.
To check packet passing, use the Ping utility. Open New Terminal and enter the command:
ping 8.8.8.8 count=10If packets are being lost or the latency is excessively high, the channel may be overloaded. Try changing the channel width or switching to a different frequency band if your equipment is dual-band.
Optimizing performance and security
Once you've established a basic connection, it's time to consider optimization. Disable unnecessary services such as FTP, Telnet, or WWW if they're not in use. Leave only SSH with a modified port for administration.
To increase data transfer speed, make sure you are using the mode N or AC (depending on the supported standards). In older settings, the mode may be enabled by default. legacy, which greatly cuts speed.
It's also recommended to configure a firewall. Even in client mode, the device should be protected. Block incoming connections from the external network, allowing only established and connected connections.
How often should I change my client's Wi-Fi password?
You don't need to change the password for the network you connect to (your ISP) unless they've changed it. For security reasons, it's recommended to change the password for your MikroTik's Wi-Fi hotspot (if you set one up) every 3-6 months.
Is it possible to set up two Wi-Fi clients at the same time?
Most MikroTik devices with a single radio module cannot simultaneously act as an access point and a client on the same frequency. However, you can use the second radio module (5 GHz) for receiving and the first (2.4 GHz) for transmitting, or vice versa.
Why is the client's Wi-Fi speed lower than the cable speed?
Wi-Fi operates in half-duplex mode, which theoretically means a loss of up to 50% speed. Interference, distance, and encryption standards also play a role. Using a cable to connect to your ISP is always preferable if physically possible.
Following these recommendations will help you create a reliable and fast network. Regularly check device logs for association or deauthentication errors to promptly respond to changes in the environment.