Modern requirements for wireless networks dictate the need to use equipment capable of providing high speed and stable coverage even in densely populated areas or a large number of users. Model MikroTik cAP ac has proven itself as one of the most balanced solutions for creating corporate and home 802.11ac networks. Proper configuration of this device allows it to transform from a simple router into a powerful access point, centrally managed or operating autonomously.
Setup process wireless network Using MikroTik equipment requires careful attention to detail, as the RouterOS operating system offers the user extensive traffic management capabilities. Unlike consumer solutions, every radio module and interface parameter can be fine-tuned to specific operating conditions. This is especially relevant when deploying networks where data is critical. data security and even distribution of the load between clients.
In this guide, we'll cover the steps for preparing, connecting, and configuring the device for access point operation. You'll learn how to properly communicate with the controller or configure independent operation to ensure maximum performance. A smart approach to network planning at the outset will save time troubleshooting coverage issues later.
Equipment preparation and initial connection
Before starting software configuration, it is necessary to ensure that the device is properly physically connected to the existing infrastructure. MikroTik cAP ac Supports PoE (Power over Ethernet) technology, which allows for power and data transmission over a single cable, significantly simplifying installation. The device requires an 802.3af/at-compliant power source or a proprietary power supply if a PoE infrastructure is not available.
It's important to note that the device's default IP address may differ from your local network's addressing. For initial access, we recommend using the utility WinBox, which allows you to connect to a device via MAC address even without a configured IP connection. This simplifies the initial setup process, as it doesn't require temporarily changing the network settings of the administrator's computer.
After physically connecting the cable to the port ether1 (usually labeled as PoE in) and power supply, wait until the operating system has finished loading. The indicators on the device's body will indicate the device's operating status: blinking LEDs indicate network port activity, and a beep (if enabled) will confirm successful startup. Only after verifying the physical integrity of the link can you proceed to the logical configuration.
Basic configuration of interfaces and addressing
The first step in logical configuration is to determine the role of network interfaces. In access point mode, the port ether1 must be configured as a trunk port or access port, receiving an IP address from an upstream router or DHCP server. To do this, in the section IP -> Addresses a new entry is created where the DHCP Client mode is selected in the Address field, and the Interface is specified ether1.
You need to make sure the device has the correct default gateway configured for internet traffic. This can be done in the menu. IP -> Routes, where a static route with Dst.Address is added 0.0.0.0/0 and specifying a Gateway, either received via DHCP or manually set. Without the correct gateway, the access point will not be able to forward client traffic to the external network, even if Wi-Fi is working.
β οΈ Important: If you plan to manage the access point remotely from a different subnet, make sure that NAT rules or port forwarding are configured on the upstream router, and that the necessary services are allowed in the MikroTik firewall.
To ensure stable management, we recommend assigning a static IP address to the device, either reserved on the DHCP server based on its MAC address, or manually assigning it after dynamically acquiring the address. This will prevent the device from receiving a new address after a reboot and becoming inaccessible via the old DNS entry or device list.
Setting up wireless interface and security
The central element of the configuration is the wireless interface setting in the section WirelessYou need to double-click on the interface wlan1 (or wlan2 (for dual-band models) and go to the Wireless tab. This is where the operating mode is set AP Bridge, which allows the device to accept connections from client devices and broadcast them to the wired network.
The choice of frequency and channel width is critical. In the 2.4 GHz band, it is recommended to use channel width 20 MHz to minimize interference, while in the 5 GHz range you can safely install 40 MHz or 80 MHz To achieve maximum speeds, it's best to select the frequency manually, after first analyzing the airwaves using a tool. Wireless -> Interfaces -> Frequency Usage.
Why is channel width important?
Increasing the channel width increases throughput, but reduces the number of non-overlapping channels, which in densely populated areas can lead to a drop in speed due to mutual interference.
Security settings are implemented by creating a security profile in the menu Wireless -> Security ProfilesFor modern networks, the use of encryption is standard. WPA2 or WPA3 with the AES algorithm. It is not recommended to use older encryption methods such as TKIP or WEP, as they are easily cracked and limit connection speed.
| Parameter | Recommended value (2.4 GHz) | Recommended value (5 GHz) | Note |
|---|---|---|---|
| Channel width | 20 MHz | 40/80 MHz | Depends on the noise level of the air |
| Power (Tx Power) | 17-20 dBm | 20-23 dBm | Don't set the maximum unnecessarily |
| Security protocol | WPA2-PSK | WPA2-PSK / WPA3 | AES only |
| Mode | 802.11b/g/n | 802.11a/n/ac | Remove legacy modes if possible |
Integration into the CAPsMAN network (Centralized Management)
To scale your network and simplify administration of multiple access points, MikroTik offers technology CAPsMAN (Controlled Access Point system Manager). If your network already has a CAPsMAN controller, setting up cAP ac is reduced to a minimum: it is enough in the section System -> CAPsMAN Enable client mode and specify the IP address or domain name of the controller.
In this mode, the access point automatically receives all wireless network settings, VLANs, firewall rules, and firmware updates from the central server. This eliminates human error and ensures configuration consistency across the entire network. Controller discovery occurs automatically via broadcast packets if they are on the same network segment (L2).
βοΈ CAPsMAN Connection Checklist
If automatic discovery doesn't work due to network segmentation, you'll need to manually enter the controller's address. It's also worth checking the time settings, as accurate time synchronization between the access point and the controller is required for security certificates to work. NTP client solves this problem automatically.
Optimizing performance and eliminating interference
After the basic setup, it's time to optimize the radio system. In urban areas, the 2.4 GHz band is often overloaded, so it's important to select the right frequency channel. Frequency Usage WinBox allows you to visually assess channel loading and select the least noisy channel. For a 20 MHz channel in this range, only channels 1, 6, and 11 are non-overlapping.
Transmitter power (TX Power) also requires attention. Setting maximum power isn't always the best solution, as it can "stun" client devices, which won't be able to respond with sufficient power. The balance should be such that the client can "hear" the access point, but can also communicate with it.
β οΈ Note: Interfaces and settings may change between different RouterOS versions. Before making changes to your production network, please consult the official documentation on the manufacturer's website for your software version.
Additionally, it is recommended to disable legacy standards (e.g., 802.11b/g) if there are no devices on the network that require their support. This will reduce personnel management overhead and improve overall airtime efficiency. Frame Protection (802.11w) will protect management frames from forgery, increasing the network's resilience to Deauth attacks.
Firmware update and system maintenance
Regular software updates are essential for network security and stability. In RouterOS, updating consists of two parts: updating the operating system itself and updating the wireless chip firmware. To check for new versions, use the menu. System -> Packages -> Check for Updates.
The update process should be performed during periods of minimal network load. After downloading the packages, reboot the device with the command System -> Reboot.
To automate the process, you can set up an update schedule or use scripts that check the software version upon boot. However, in mission-critical systems, manual testing of the new version on a separate rig before deployment is mandatory to avoid unexpected network outages.
Diagnostics and solution of typical problems
During operation, situations may arise where clients cannot see the network or are unable to connect. The first diagnostic tool is the event log (Log), which records connection attempts, authentication errors, and client disconnections. Log analysis often allows one to quickly identify the cause of a problem, whether it's an incorrect password or incompatible encryption protocols.
If the device stops responding to ping or WinBox, try performing a physical reset by holding the Reset button on the device while powering it on. This will restore the device to factory settings, allowing you to reconnect. It's also worth checking the CPU load; if the CPU load is constantly at 100%, the access point may be struggling to handle the number of clients or the amount of traffic.
What to do if WiFi speed is slow?
Check the noise level in the air, make sure clients are connecting on 5 GHz, check the negotiated rate in the client list, and make sure the connection cable supports gigabit speed.
For deep traffic analysis, you can use the built-in packet sniffer (Tools -> Packet Sniffer) or export traffic to Wireshark. This allows you to see the details of the handshake process and understand at what stage the connection is being interrupted. Proper diagnostics save time and help quickly restore network functionality.
How to reset CAP AC to factory settings?
To reset, connect the device to power, wait until the USER indicator flashes, then press and hold the Reset button until the USER indicator starts flashing faster (approximately 5 seconds). After releasing the button, the device will reboot with a clean configuration.
Can CAP AC be used as a primary router?
Yes, technically this is possible, as the device runs full-fledged RouterOS. However, its processor and radio modules are optimized for use as an access point. For distributing internet to a large number of users, it's better to use a dedicated router, leaving the CAP AC for Wi-Fi distribution.
Does the device support VLAN?
Yes, the MikroTik cAP ac fully supports VLANs (802.1Q). You can create virtual VLANs on wireless interfaces, segregating guest and employee traffic, or forward tagged traffic from the main switch to different SSIDs.
What is the maximum WiFi speed for this model?
Speed ββdepends on environmental conditions and clients. The theoretical maximum for 2.4 GHz is 300 Mbps (2x2 MIMO), and for 5 GHz, it's up to 867 Mbps (2x2 MIMO, 80 MHz). Actual throughput speeds are typically 50-60% of the theoretical maximum.
Do I need a separate controller to operate?
No, the device can operate in standalone mode, storing its configuration internally. The controller (CAPsMAN) is only required for centralized management of multiple access points, automatic updates, and seamless roaming in large networks.