Setting up Mikrotik as a Wi-Fi Repeater: A Complete Guide

Expanding wireless network coverage often becomes a critical task for owners of large apartments, country houses, or office spaces. A standard router, even a powerful one, isn't always capable of penetrating thick concrete walls or providing a stable signal over a distance of 20 meters. In such situations, repeater technology comes to the rescue, allowing the signal to be broadcast further using existing infrastructure.

The devices of this brand are ideal for implementing this task. Mikrotik, with a flexible operating system RouterOSUnlike consumer models, which often have limited functionality, Mikrotik allows you to create a reliable bridge WDS (Wireless Distribution System). This solution turns the second router into a fully-fledged node, seamlessly (or almost seamlessly) extending the network of the main gateway.

In this article, we'll take a detailed look at the hardware configuration process. You'll learn how to properly prepare your device, configure security, and avoid common mistakes that lead to slow speeds. For repeater mode to work, both devices must be on the same subnet and have the same Wi-Fi security settings. This is a fundamental requirement, without which the connection simply will not be established.

Preparing hardware and resetting the configuration

Before making any changes to the network architecture, ensure you are working with a clean device. Using configurations with unknown parameters may cause conflicts. IP addresses or incorrect DHCP services. If the router was previously used, it's best to completely clear it.

Reset process on devices Mikrotik standard: with the power on, press the button Reset and hold it for about 10-15 seconds until the indicator ACT will not start blinking. After this, the device will reboot with factory settings. By default, the control address will be 192.168.88.1, and the login is admin without password.

⚠️ Attention: Make sure that the computer you are using to configure the device is connected via cable to the LAN port of the device you are configuring, and not to the main router, to avoid address conflicts on the network.

After connecting, run the utility WinBox or web interface. First of all, it is recommended to update RouterOS to the latest stable version, as older builds may contain vulnerabilities or bugs in the wireless module. This can be done through the menu. System → Packages → Check for Updates.

Basic wireless interface setup

Configuring the radio interface is the first step to creating a bridge. You need to go to the section Wireless and open the interface by double-clicking wlan1 (or wlan2, if you have a dual-band device). Tab Wireless contains key parameters of the antenna operation.

In the field Mode select a value station-bridgeThis mode turns the router into a client that connects to another access point and forwards traffic to its LAN ports and, if necessary, to its own Wi-Fi. station (without bridge) will not work if you need a full-fledged repeater with forwarding of broadcast packets.

Next, go to the tab WDSYou need to check the box here. Use WDS and in the field WDS Mode choose dynamicDynamic mode allows for the automatic creation of virtual interfaces for each connected client, which is critical for stable network operation.

Why not AP Bridge mode?

AP Bridge mode is designed to connect two point-to-point or point-to-multipoint access points, where both devices are masters. To expand a network where one device is master, an AP + station-bridge combination is used.

Don't forget to enter the name of your network in the field on the main tab. SSID (it should match the name of the main network) and select the country in the field CountryChoosing the right country is important to ensure compliance with legal regulations regarding signal strength and available channels.

Setting up Wireless Security and Profile

Security in wireless networks is not an option, but a necessity. Unlike wired connections, the radio channel is open to everyone within range. To configure encryption, go to the menu Wireless → Security ProfilesHere you need to create a new profile or edit an existing one. default.

In the window that opens, make sure that the mode is Mode installed in dynamic keys. In the section WPA Pre-Shared Key Enter the password for your main Wi-Fi network. It's best to choose the encryption type tkips,aes-ccm, which will ensure compatibility with all modern devices (WPA2).

• 🔑 Make sure the password matches the password on the main router character for character.
• 🔒 Use encryption WPA2 or WPA3, avoiding the legacy WEP.
• 📡 Make sure that WDS (Master mode) support is also enabled on the main router.

After setting up the profile, return to the wireless interface settings (Wireless → wlan1) and in the field Security Profile Select the profile you created. Also in the field SSID you can press the button Scanto find your main network in the list of available ones, select it and press Connect.

⚠️ Note: Hardware interfaces and menu locations may vary slightly depending on the RouterOS version (v6, v7) and device model (hAP, cAP, SXT).

Setting up IP and disabling the DHCP server

One of the most common mistakes when setting up a repeater is running a second DHCP server. There should only be one DHCP server on the network that distributes addresses. If your Mikrotik will start offering its IP addresses, devices on the network will lose access to the Internet.

Go to the menu IP → DHCP ServerIf there are active servers there (marked with a flag D), select them and press the red delete or deactivate button (Disable). Make sure the server status has changed to inactive.

Now you need to assign a static IP address to the control device itself so you can access its settings after connecting to the main network. Go to IP → Addresses and add a new address. For example, if the main network 192.168.88.0/24, set the repeater address 192.168.88.2/24.

Also check the settings IP → Routes. In most cases, when working in the mode station-bridge, routes are added automatically, but the presence of a default gateway (0.0.0.0/0), pointing to the main router, will not hurt.

Checking the connection and diagnosing WDS

After applying all the settings, you need to verify the system's operation. Go to the section Wireless and look at the interface status. If everything is done correctly, the status indicator will change to connected to SSID, and in the column WDS the status will appear running.

For more detailed diagnostics, open the tab Registration (or Registration Table) in the wireless interface window. This displays all devices connected to this radio interface. You should see an entry for the connection to the master router.

Please pay attention to the signal level (Signal Strength). For stable operation of the repeater, the signal level from the main router at the repeater installation location must be no worse than -75 dBm. If the signal is weaker, the speed through the repeater will be low, regardless of the antenna power.

Optimization of frequencies and channels

The quality of a wireless bridge directly depends on the selected frequency and channel width. The 2.4 GHz band often experiences high levels of noise from neighboring networks. Use a frequency scanner (Wireless → Scan) to find the most free channel.

For the bridge WDS It is recommended to use channel width 20/40mhz Ce or 20mhz, if the airwaves are very noisy. The 40 MHz bandwidth provides a speed boost, but is more susceptible to interference. In the 5 GHz range, you can safely use 40mhz or 80mhz.

An important parameter is Frequency Mode. Make sure that the same mode is selected on both devices (usually regulatory-domain). Also, check that both devices have standards support enabled. N And AC (if the equipment allows it) so as not to limit the speed by old protocols.

⚠️ Note: Using a channel width of 40 MHz or more in the 2.4 GHz band in apartment buildings can cause significant interference. In such cases, it's better to sacrifice speed for stability by choosing 20 MHz.

Advanced settings and fine-tuning

Advanced users can fine-tune radio settings. In the section Wireless → Advanced Mode (you need to enable the checkbox in the interface window) you can change the parameters Distance (distance). For indoor scenarios, it is better to set indoors or a fixed value in kilometers (for example, 1 km) to optimize the timings of ACK packets.

It is also worth paying attention to the transmission power (TX Power). It doesn't always make sense to crank it up to the maximum (for example, 30 dBm). High power can clog the receiver and degrade connection quality. Optimally, set the power so that the signal level is around -60...-70 dBm.

• 📡 Use Antenna Gain only if you know exactly the gain of your antennas.
• 🛡️ Disable unnecessary services (Telnet, FTP, WWW) in the menu IP → Services for safety.
• 🔄 Set up System → Scheduler to automatically reboot the router at night once a week.

If you plan to use multiple repeaters, make sure they do not create loops in the network, though RouterOS has prevention mechanisms, it is better to design a star or line topology.

The secret of stability

A common cause of unstable operation is overheating. Make sure the Mikrotik device is installed in a well-ventilated area and not covered by any objects.

Is it possible to use Mikrotik as a repeater without a cable?

Yes, that's exactly what the mode is for. station-bridge with it on WDSThe cable is only needed for the initial setup, after which the device operates entirely over the air, receiving the signal from the main router and distributing it further.

Why is the speed through a repeater lower than directly?

This is a physical limitation of Wi-Fi technology. A repeater operates in half-duplex mode: it cannot simultaneously receive and transmit data on the same frequency. Therefore, the theoretical channel throughput is divided by at least two. Using dual-band routers (5 GHz for the backhaul, 2.4 GHz for clients) helps minimize losses.

Does Mikrotik support seamless roaming?

Yes, but standard WDS doesn't provide full Fast Roaming (802.11r/k/v) out of the box as easily as proprietary systems. For seamless roaming within the Mikrotik ecosystem, it's better to use the protocol. CAPsMAN, which requires a controller (main router) and switches access points to managed CAP mode.

Is Mikrotik WDS compatible with other routers?

WDS is a standard, but its implementation may vary between vendors (TP-Link, Asus, Keenetic). WDS often only works between devices of the same brand or requires specific settings on the main router. If WDS doesn't work, try the [WDS mode] station (without bridge), but then you will lose the ability to connect wired devices to the repeater ports.

How do I reset everything to factory settings if I messed everything up?

Use a physical button Reset on the case. Press and hold it while the power is off, plug the device into a power outlet, and hold the button until the indicator light flashes. ACT (usually 10-15 seconds). After this, the device will boot with a clean configuration, and you can begin setup again.