Setting up MikroTik in Wi-Fi Client Mode: A Complete Guide with Examples

Usage MikroTik as Client Wi-Fi β€” is an effective solution for expanding your network when you need to connect devices without a built-in Wi-Fi adapter to the wireless internet or set up bridged access to a remote location. For example, you can share the internet from a neighboring router to your own. MikroTik, and then connect computers, IP cameras, or even a second router to it via cable. This approach is suitable for offices, cottages, temporary facilities, or locations where cable installation is not possible.

Unlike standard home routers, MikroTik offers flexible settings: support for multiple ranges (2.4 GHz, 5 GHz, 6 GHz), advanced security protocols (WPA3, 802.1X), as well as the ability to fine-tune signal strength and traffic prioritization. However, without proper configuration, you risk encountering problems such as constant connection breaks, low speed, or data leaks. In this article, we'll cover step-by-step setup, common errors, and troubleshooting stepsβ€”from hardware selection to performance optimization.

1. Which MikroTik equipment is suitable for Wi-Fi client mode?

Not all devices MikroTik They perform equally well in the client role. Key selection criteria:

  • πŸ“Ά Availability of a Wi-Fi module: models without a wireless adapter (eg RB750Gr3 or CRS326) won't work. Look for the letters in the title. w (wireless) or ac (802.11ac support).
  • πŸ”„ Operating modes: the device must support station or station-pseudobridgeThis is indicated in official specifications.
  • πŸ“ˆ Power and antennas: For weak signals, choose models with external antennas (for example, SXT or GrooveA). It's enough for urban conditions. hAP acΒ².

The table below compares popular models based on key parameters:

Model Ranges Max. speed Antennas Price (approximately)
RB4011iGS+5HacQ2HnD 2.4/5 GHz, 6 GHz (Wi-Fi 6) 1.8 Gbps Built-in ~25 000 β‚½
hAP acΒ² 2.4/5 GHz (Wi-Fi 5) 867 Mbps Built-in ~8 000 β‚½
SXT LTE6 2.4/5 GHz + LTE 300 Mbps (Wi-Fi) Externally directed ~12 000 β‚½
GrooveA 52 ac 5 GHz 867 Mbps Externally directed ~6 500 β‚½

Important: models with index LTE (For example, LHGG LTE6) can work in client mode only for 4G networks, but not for connecting to other Wi-Fi routers. Please check the documentation for more details on the modes!

πŸ“Š Which MikroTik model are you using?
RB4011
hAP acΒ²
SXT
Groove
Another model
I haven't chosen yet

2. Preparing for setup: resetting and updating the firmware

Before configuration it is recommended reset to factory settings and update RouterOSThis will avoid conflicts with previous configurations and ensure stability.

To reset:

  1. Connect to MikroTik via cable or through WinBox.
  2. Go to System β†’ Reset Configuration.
  3. Select No Default Configuration and confirm.

To update the firmware:

/system package update

download

⚠️ Attention: If your device was purchased a long time ago, the new version RouterOS may not support its hardware platform. Before updating, check compatibility on official website.

After updating, reboot your device with the command:

/system reboot

Make sure you have a backup of your current configuration|

Reset to factory settings|

Update RouterOS to the latest stable version|

Connect the device to the PC via Ethernet|

Write down the MAC address of the Wi-Fi interface (useful for binding to the main router) -->

3. Step-by-step configuration of MikroTik in Wi-Fi client mode

Let's consider a universal method of setting up through WinBox (fits most models) Alternatively, you can use WebFig or console.

Step 1: Setting up the wireless interface

1. Open WinBox, connect to the device.

2. Go to Wireless β†’ select the interface (usually wlan1 or wlan2).

3. Tab General:

  • πŸ”Ή Mode: select station (or station-pseudobridge, if a bridge is needed).
  • πŸ”Ή Band: 2GHz-B/G/N or 5GHz-A/N/AC (depending on the network).
  • πŸ”Ή SSID: Enter the name of the network you are connecting to.

Step 2: Security Settings

Go to the tab Security Profiles:

  • πŸ” Mode: dynamic keys.
  • πŸ” Authentication Types: WPA2 PSK (or WPA3, if supported).
  • πŸ” WPA2 Pre-Shared Key: Enter your Wi-Fi password.

Step 3: Setting the IP address

If the main router distributes IP via DHCP:

/ip dhcp-client add interface=wlan1 disabled=no

If you need a static IP:

/ip address add address=192.168.88.2/24 interface=wlan1

Checking the connection: ping the gateway:

/ping 192.168.88.1 count=5

4. Common mistakes and their solutions

Even with proper setup, problems can still arise. Let's look at some typical scenarios:

Problem Possible cause Solution
Doesn't connect to the network Incorrect password or SSID Check the register in SSID and password. In MikroTik They are case sensitive!
Low speed (< 10 Mbps) Automatic channel selection Manually set the channel in the settings Wireless (For example, 36 for 5 GHz).
Constant breaks Weak signal or interference Reduce Distance in the interface settings or use a directional antenna.
No internet access There is no default route Add a route: /ip route add gateway=192.168.88.1.
⚠️ Attention: if you use MikroTik in mode station-pseudobridge, disable the function on the main router AP Isolation (client isolation). Otherwise, the devices are MikroTik will not be able to access the network.
How to check signal strength?

Open Wireless β†’ tab Registration. Parameter Signal Strength shows the current level:

  • -50 dBm and above: excellent signal.
  • -60...-70 dBm: average (brakes may occur).
  • -80 dBm and below: weak (needs antenna or repeater).

5. Performance Optimization: Fine-Tuning

To maximize speed and stability, let's configure additional parameters:

Setting the transmit power

By default MikroTik uses maximum power, which can cause interference. Optimal value:

/interface wireless set wlan1 tx-power=20

Where 20 β€” power in dBm (recommended range: 17–23).

Selecting channel width

For 5 GHz:

/interface wireless set wlan1 band=5ghz-a/n/ac width=20/40/80mhz

Advice: In conditions of interference (apartment building) it is better to use 20MHz or 40MHz. Width 80MHz will give higher speed, but only if the channel is free.

Traffic prioritization (QoS)

To prevent important traffic (such as VoIP or video conferencing) from being swamped by downloads:

/queue simple add name="VoIP Priority" target=192.168.88.0/24 \

dst-port=5060,5061,10000-20000 packet-mark=voip limit-at=10M/10M \

max-limit=50M/50M priority=1/1

6. Security: Connection protection

Client mode is vulnerable to attacks like "evil twin" (rogue AP) or traffic interception. We minimize the risks:

  • πŸ”’ Disable unnecessary protocols: V Security Profiles leave only WPA2 PSK or WPA3. Delete WEP And WPA.
  • πŸ” MAC filtering: On the main router, allow connections only for the MAC address of your MikroTik.
  • πŸ›‘οΈ Control encryption: turn on WinBox only via secure protocol:
    /ip service disable"winbox" port=8291

For additional protection of traffic between MikroTik and set up the main router VPN tunnel (For example, IPsec or WireGuard). This is relevant for public networks (hotels, cafes), where Wi-Fi can be eavesdropped.

⚠️ Attention: if you use MikroTik To connect to a corporate network, check with the administrator to make sure it is not blocked MAC-spoofingSome security systems consider changing the MAC address as an attack.

7. Alternative use cases

Client mode is not the only option MikroTik for wireless connections. Let's consider other useful configurations:

  • πŸŒ‰ Wi-Fi bridge (WDS): Connects two networks at the data link layer. Suitable for connecting two offices. Requires WDS support on both devices.
  • πŸ”„ Repeater: Retransmits the signal, increasing coverage. The downside is that speed is halved.
  • πŸ“‘ PTP connection (point-to-point): for long-distance communication (up to 10+ km) with directional antennas.

WDS configuration example:

/interface wireless set wlan1 master-interface=none \

mode=station-wds disabled=no

What is the difference between station and station-pseudobridge?

station β€” standard client mode, where MikroTik receives an IP from the main router and can distribute the Internet further via a cable or a second Wi-Fi. station-pseudobridge - creates a bridge between Wi-Fi and Ethernet ports, allowing devices to MikroTik Make them appear as if they are connected directly to the main router (their MAC address is preserved). Suitable for IP cameras or printers that require direct network access.

8. Diagnostics and monitoring

Use built-in tools to quickly identify problems MikroTik:

View logs

Wireless interface logs:

/log print where topics=wireless

Spectrum analysis

To search for free channels:

/interface wireless scan wlan1 duration=30s

Load charts

IN WinBox go to Tools β†’ GraphingAdd graphs for:

  • πŸ“Š wlan1 signal strength (signal level).
  • πŸ“Š wlan1 tx/rx rate (transmission/reception speed).

Automated monitoring: Set up alerts when the signal drops below -75 dBm:

/tool netwatch add host=192.168.88.1 interval=30s \

up-script={/system script run notify_admin} \

down-script={/system script run notify_admin}

FAQ: Frequently asked questions about setting up MikroTik as a Wi-Fi client

Is it possible to connect MikroTik to a Wi-Fi network with a hidden SSID?

Yes, but you will have to manually specify the network name in the settings. WinBox go to Wireless β†’ Scan, find the network (it will be displayed as hidden), copy it SSID and paste it into the interface settings. Don't forget to also specify Security Profile.

Why won't my MikroTik connect to a WPA3 network?

Your model probably doesn't support it. WPA3 at the firmware level. Check compatibility in official wikiAn alternative is to switch the main router to WPA2/WPA3 Transition Mode.

How can I make MikroTik automatically reconnect when the power is interrupted?

Add the script to System β†’ Scheduler:

/system scheduler add name="WiFi Reconnect" interval=5m \

on-event="/interface wireless disable wlan1; \

:delay 5s; \

/interface wireless enable wlan1"

This script will restart the Wi-Fi interface every 5 minutes if the connection is lost.

Is it possible to use MikroTik as a client for public networks (hotels, airports)?

Technically yes, but many public networks require authorization through a web portal (captive portal). In this case:

  1. Connect your laptop directly to MikroTik via cable.
  2. Open your browser and log in to the portal.
  3. After this, traffic from other devices MikroTik will take place without additional authorization.

Warning: This method may violate network usage rules (for example, the ban on internet tethering). Check with your provider for specific terms.

How can I check that traffic is going through Wi-Fi and not through another interface?

Perform a trace:

/tool traceroute 8.8.8.8

The first hop should be the IP address of the main router your router is connected to. MikroTik via Wi-Fi. Also check the routes:

/ip route print

The active default route must point to wlan1.