Usage MikroTik as Client Wi-Fi β is an effective solution for expanding your network when you need to connect devices without a built-in Wi-Fi adapter to the wireless internet or set up bridged access to a remote location. For example, you can share the internet from a neighboring router to your own. MikroTik, and then connect computers, IP cameras, or even a second router to it via cable. This approach is suitable for offices, cottages, temporary facilities, or locations where cable installation is not possible.
Unlike standard home routers, MikroTik offers flexible settings: support for multiple ranges (2.4 GHz, 5 GHz, 6 GHz), advanced security protocols (WPA3, 802.1X), as well as the ability to fine-tune signal strength and traffic prioritization. However, without proper configuration, you risk encountering problems such as constant connection breaks, low speed, or data leaks. In this article, we'll cover step-by-step setup, common errors, and troubleshooting stepsβfrom hardware selection to performance optimization.
1. Which MikroTik equipment is suitable for Wi-Fi client mode?
Not all devices MikroTik They perform equally well in the client role. Key selection criteria:
- πΆ Availability of a Wi-Fi module: models without a wireless adapter (eg RB750Gr3 or CRS326) won't work. Look for the letters in the title.
w(wireless) orac(802.11ac support). - π Operating modes: the device must support
stationorstation-pseudobridgeThis is indicated in official specifications. - π Power and antennas: For weak signals, choose models with external antennas (for example, SXT or GrooveA). It's enough for urban conditions. hAP acΒ².
The table below compares popular models based on key parameters:
| Model | Ranges | Max. speed | Antennas | Price (approximately) |
|---|---|---|---|---|
| RB4011iGS+5HacQ2HnD | 2.4/5 GHz, 6 GHz (Wi-Fi 6) |
1.8 Gbps | Built-in | ~25 000 β½ |
| hAP acΒ² | 2.4/5 GHz (Wi-Fi 5) |
867 Mbps | Built-in | ~8 000 β½ |
| SXT LTE6 | 2.4/5 GHz + LTE |
300 Mbps (Wi-Fi) | Externally directed | ~12 000 β½ |
| GrooveA 52 ac | 5 GHz |
867 Mbps | Externally directed | ~6 500 β½ |
Important: models with index LTE (For example, LHGG LTE6) can work in client mode only for 4G networks, but not for connecting to other Wi-Fi routers. Please check the documentation for more details on the modes!
2. Preparing for setup: resetting and updating the firmware
Before configuration it is recommended reset to factory settings and update RouterOSThis will avoid conflicts with previous configurations and ensure stability.
To reset:
- Connect to MikroTik via cable or through
WinBox. - Go to
System β Reset Configuration. - Select
No Default Configurationand confirm.
To update the firmware:
/system package update
download
β οΈ Attention: If your device was purchased a long time ago, the new version RouterOS may not support its hardware platform. Before updating, check compatibility on official website.
After updating, reboot your device with the command:
/system reboot
Make sure you have a backup of your current configuration|
Reset to factory settings|
Update RouterOS to the latest stable version|
Connect the device to the PC via Ethernet|
Write down the MAC address of the Wi-Fi interface (useful for binding to the main router) -->
3. Step-by-step configuration of MikroTik in Wi-Fi client mode
Let's consider a universal method of setting up through WinBox (fits most models) Alternatively, you can use WebFig or console.
Step 1: Setting up the wireless interface
1. Open WinBox, connect to the device.
2. Go to Wireless β select the interface (usually wlan1 or wlan2).
3. Tab General:
- πΉ
Mode: selectstation(orstation-pseudobridge, if a bridge is needed). - πΉ
Band:2GHz-B/G/Nor5GHz-A/N/AC(depending on the network). - πΉ
SSID: Enter the name of the network you are connecting to.
Step 2: Security Settings
Go to the tab Security Profiles:
- π
Mode:dynamic keys. - π
Authentication Types:WPA2 PSK(orWPA3, if supported). - π
WPA2 Pre-Shared Key: Enter your Wi-Fi password.
Step 3: Setting the IP address
If the main router distributes IP via DHCP:
/ip dhcp-client add interface=wlan1 disabled=no
If you need a static IP:
/ip address add address=192.168.88.2/24 interface=wlan1
Checking the connection: ping the gateway:
/ping 192.168.88.1 count=5
4. Common mistakes and their solutions
Even with proper setup, problems can still arise. Let's look at some typical scenarios:
| Problem | Possible cause | Solution |
|---|---|---|
| Doesn't connect to the network | Incorrect password or SSID | Check the register in SSID and password. In MikroTik They are case sensitive! |
| Low speed (< 10 Mbps) | Automatic channel selection | Manually set the channel in the settings Wireless (For example, 36 for 5 GHz). |
| Constant breaks | Weak signal or interference | Reduce Distance in the interface settings or use a directional antenna. |
| No internet access | There is no default route | Add a route: /ip route add gateway=192.168.88.1. |
β οΈ Attention: if you use MikroTik in modestation-pseudobridge, disable the function on the main routerAP Isolation(client isolation). Otherwise, the devices are MikroTik will not be able to access the network.
How to check signal strength?
Open Wireless β tab Registration. Parameter Signal Strength shows the current level:
-50 dBmand above: excellent signal.-60...-70 dBm: average (brakes may occur).-80 dBmand below: weak (needs antenna or repeater).
5. Performance Optimization: Fine-Tuning
To maximize speed and stability, let's configure additional parameters:
Setting the transmit power
By default MikroTik uses maximum power, which can cause interference. Optimal value:
/interface wireless set wlan1 tx-power=20
Where 20 β power in dBm (recommended range: 17β23).
Selecting channel width
For 5 GHz:
/interface wireless set wlan1 band=5ghz-a/n/ac width=20/40/80mhz
Advice: In conditions of interference (apartment building) it is better to use 20MHz or 40MHz. Width 80MHz will give higher speed, but only if the channel is free.
Traffic prioritization (QoS)
To prevent important traffic (such as VoIP or video conferencing) from being swamped by downloads:
/queue simple add name="VoIP Priority" target=192.168.88.0/24 \dst-port=5060,5061,10000-20000 packet-mark=voip limit-at=10M/10M \
max-limit=50M/50M priority=1/1
6. Security: Connection protection
Client mode is vulnerable to attacks like "evil twin" (rogue AP) or traffic interception. We minimize the risks:
- π Disable unnecessary protocols: V
Security Profilesleave onlyWPA2 PSKorWPA3. DeleteWEPAndWPA. - π MAC filtering: On the main router, allow connections only for the MAC address of your MikroTik.
- π‘οΈ Control encryption: turn on
WinBoxonly via secure protocol:/ip service disable"winbox" port=8291
For additional protection of traffic between MikroTik and set up the main router VPN tunnel (For example, IPsec or WireGuard). This is relevant for public networks (hotels, cafes), where Wi-Fi can be eavesdropped.
β οΈ Attention: if you use MikroTik To connect to a corporate network, check with the administrator to make sure it is not blocked MAC-spoofingSome security systems consider changing the MAC address as an attack.
7. Alternative use cases
Client mode is not the only option MikroTik for wireless connections. Let's consider other useful configurations:
- π Wi-Fi bridge (WDS): Connects two networks at the data link layer. Suitable for connecting two offices. Requires WDS support on both devices.
- π Repeater: Retransmits the signal, increasing coverage. The downside is that speed is halved.
- π‘ PTP connection (point-to-point): for long-distance communication (up to 10+ km) with directional antennas.
WDS configuration example:
/interface wireless set wlan1 master-interface=none \
mode=station-wds disabled=no
What is the difference between station and station-pseudobridge?
station β standard client mode, where MikroTik receives an IP from the main router and can distribute the Internet further via a cable or a second Wi-Fi.
station-pseudobridge - creates a bridge between Wi-Fi and Ethernet ports, allowing devices to MikroTik Make them appear as if they are connected directly to the main router (their MAC address is preserved). Suitable for IP cameras or printers that require direct network access.
8. Diagnostics and monitoring
Use built-in tools to quickly identify problems MikroTik:
View logs
Wireless interface logs:
/log print where topics=wireless
Spectrum analysis
To search for free channels:
/interface wireless scan wlan1 duration=30s
Load charts
IN WinBox go to Tools β GraphingAdd graphs for:
- π
wlan1 signal strength(signal level). - π
wlan1 tx/rx rate(transmission/reception speed).
Automated monitoring: Set up alerts when the signal drops below -75 dBm:
/tool netwatch add host=192.168.88.1 interval=30s \up-script={/system script run notify_admin} \
down-script={/system script run notify_admin}
FAQ: Frequently asked questions about setting up MikroTik as a Wi-Fi client
Is it possible to connect MikroTik to a Wi-Fi network with a hidden SSID?
Yes, but you will have to manually specify the network name in the settings. WinBox go to Wireless β Scan, find the network (it will be displayed as hidden), copy it SSID and paste it into the interface settings. Don't forget to also specify Security Profile.
Why won't my MikroTik connect to a WPA3 network?
Your model probably doesn't support it. WPA3 at the firmware level. Check compatibility in official wikiAn alternative is to switch the main router to WPA2/WPA3 Transition Mode.
How can I make MikroTik automatically reconnect when the power is interrupted?
Add the script to System β Scheduler:
/system scheduler add name="WiFi Reconnect" interval=5m \on-event="/interface wireless disable wlan1; \
:delay 5s; \
/interface wireless enable wlan1"
This script will restart the Wi-Fi interface every 5 minutes if the connection is lost.
Is it possible to use MikroTik as a client for public networks (hotels, airports)?
Technically yes, but many public networks require authorization through a web portal (captive portal). In this case:
- Connect your laptop directly to MikroTik via cable.
- Open your browser and log in to the portal.
- After this, traffic from other devices MikroTik will take place without additional authorization.
Warning: This method may violate network usage rules (for example, the ban on internet tethering). Check with your provider for specific terms.
How can I check that traffic is going through Wi-Fi and not through another interface?
Perform a trace:
/tool traceroute 8.8.8.8
The first hop should be the IP address of the main router your router is connected to. MikroTik via Wi-Fi. Also check the routes:
/ip route print
The active default route must point to wlan1.