Setting up a MikroTik Wi-Fi Repeater: A Complete Guide with Examples

If your Wi-Fi doesn't work in distant rooms and it's impossible to run a cable from the router, the best solution is to set up MikroTik as a repeater (signal repeater). Unlike household "amplifiers" with a WPS button, devices based on RouterOS Allows you to flexibly configure power, channels, and even traffic filtering. However, without proper configuration, you risk creating a "double" network with constant disconnections or low speeds.

This article provides step-by-step instructions for the models. hAP ac², RB4011, SXT LTE and others, including mode selection (station-pseudobridge vs wds), security configuration, and performance optimization. We'll cover common errors (for example, DHCP loops or IP conflicts), which can ruin all your efforts, and we'll show you how to avoid them. Finally, we'll cover a FAQ with answers to questions about compatibility, speed, and alternative connection options.

1. Which MikroTik models are suitable for repeater mode?

Not all devices MikroTik They perform equally well as repeaters. Key selection criteria:

• 📶 Dual-band Wi-Fi (2.4 + 5 GHz): models hAP ac², RB4011, Audi allow the network to be repeated in both ranges simultaneously, whereas hAP lite Works only on 2.4 GHz.
• 🔋 Transmitter power: suitable for large houses (100+ m²) SXT or Groove with directional antennas (up to 27 dBm), whereas hAP mini (20 dBm) is only enough for a small apartment.
• 🔄 WDS support: if the main router too MikroTik, it's better to use WDS instead of station-pseudobridge - this will reduce delays.

Important: Devices with one Ethernet port (mAP Lite) can work as a repeater, but they cannot simultaneously distribute internet via cable. For offices, it is better to choose models with SFP or several Gigabit-ports.

2. Preparing for setup: what needs to be done before configuration

Before you transform MikroTik to the repeater, follow the required steps:

Reset to factory settings (System → Reset Configuration)

Update RouterOS to the latest stable version

Connect to MikroTik via Ethernet (not Wi-Fi!)

Write down the MAC address of the main router (useful for filtering)

Disable all unnecessary services (IP → Services)

-->

Pay special attention Wi-Fi channels: if the main router is operating on the channel 13 (allowed in Europe, but banned in the US), and yours MikroTik purchased for the US market, it won't be able to connect. Check your main router settings and change the channel if necessary. 1–11.

⚠️ Attention: If your MikroTik previously used on another network, delete all old Wi-Fi profiles (Wireless → Security Profiles) and firewall rules (IP → Firewall). Conflicting settings may block traffic after a reboot.

3. Step-by-step configuration of MikroTik in repeater mode (station-pseudobridge)

This method is universal and works even if the main router is not MikroTik. Follow the instructions:

1. Create a bridge To combine Wi-Fi and Ethernet:

   /interface bridge add name=bridge-local
   /interface bridge port add bridge=bridge-local interface=ether1

2. Set up a Wi-Fi client (connection to the main router):

   /interface wireless security-profiles add name=home-wifi mode=dynamic-keys authentication-types=wpa2-psk unicast-ciphers=aes-ccm group-ciphers=aes-ccm wpa2-pre-shared-key=your_password
   
   /interface wireless connect-list add interface=wlan1 security-profile=home-wifi ssid=your_network_name

3. Activate station-pseudobridge mode:

   /interface wireless set wlan1 mode=station-pseudobridge master-interface=none wireless-protocol=802.11 disabled=no

4. Set up a DHCP client to obtain IP automatically:

   /ip dhcp-client add interface=bridge-local disabled=no

After applying the settings MikroTik should connect to the main network and start distributing internet. Check the connection status in Wireless → Connect List.

/ip firewall filter add chain=forward action=accept place-before=0-->

4. Alternative method: Setting up WDS (only for MikroTik → MikroTik)

If both the main router and the repeater are devices MikroTik, use WDS (Wireless Distribution System). This reduces latency and allows for network interconnection at the data link layer.

Instructions for the main router:

1. Turn on WDS in Wi-Fi settings:

   /interface wireless set wlan1 wds-mode=dynamic wds-default-bridge=bridge-local

2. Add the repeater's MAC address to the allowed list:

   /interface wireless wds add master-interface=wlan1 wds-address=00:00:00:00:00:00

   (replace with the real MAC of the repeater).

On the repeater, run similar commands, but specify the MAC address of the primary router. This will merge both networks into one, and devices will be able to "see" each other without additional firewall rules.

⚠️ Attention: In mode WDS Connection speed drops by approximately 30-50% due to packet retransmissions. If you need maximum performance, consider a wired connection (EoIP tunnel).

5. Signal optimization and troubleshooting

Even after successful setup, the repeater may still operate unstable. Main causes and solutions:

Critical error: if in the logs (/log print) If the "authentication timeout" message appears, it means the primary router is blocking the connection based on the MAC address. Add the repeater's MAC address to the whitelist on the primary device.

How to check signal strength?

Open Wireless → Registration Table and pay attention to the parameter signal-strengthOptimal value: from -50 dBm to -70 dBmIf the indicator is worse -80 dBm, move the repeater closer to the router or use an amplifier.

6. Security: How to protect your repeater from hacking

Devices in repeater mode are often targeted for attacks because they broadcast two Wi-Fi signals (the primary one and their own). Minimum security measures:

• 🔒 Disable unnecessary services: V IP → Services leave only winbox And ssh, the rest (telnet, ftp, api) - turn off.
• 🛡️ Set up a firewall:

  /ip firewall filter add chain=input protocol=icmp action=drop
  /ip firewall filter add chain=input connection-state=established action=accept
  /ip firewall filter add chain=input connection-state=related action=accept
  /ip firewall filter add chain=input action=drop

• 🔄 Update RouterOS: vulnerabilities in older versions (eg 6.47.9) allow remote code execution.

If the repeater is used in an office, add VLAN To separate guest and employee traffic. Example setup:

/interface vlan add interface=bridge-local name=guest-vlan vlan-id=10
/ip address add interface=guest-vlan address=192.168.10.1/24

7. Comparison with other solutions: which is better – MikroTik or a specialized repeater?

Why choose MikroTik instead of a cheap repeater from TP-Link or Xiaomi?

However MikroTik It loses out in simplicity: to set up a household repeater, you only need to press one button WPS, while the configuration RouterOS requires knowledge of commands. If you need maximum performance and control, choose MikroTikIf simplicity and low price are important, it is enough TP-Link RE450.

FAQ: Answers to frequently asked questions

Can MikroTik be used as a repeater for a network with Captive Portal (for example, in a hotel)?

Technically yes, but you will have to manually log in through the web interface. MikroTik (IP → Hotspot). Automatic authorization (like on a phone) will not work. An alternative is to set up EoIP- tunnel to the home router.

Why did the speed drop by half after setting up the repeater?

This is normal: in mode station-pseudobridge Traffic passes through two Wi-Fi connections (router → repeater → device), which increases latency. To reduce losses:

• Use 5 GHz instead of 2.4 GHz (less interference).
• Reduce the channel width to 20 MHz (increases stability).
• Turn it off WMM in Wi-Fi settings if you are not using QoS.

How can I make the repeater distribute Wi-Fi with a different name (SSID)?

By default MikroTik repeats the name of the primary network. To set your own SSID:

1. Create a new security profile:

   /interface wireless security-profiles add name=my-repeater mode=dynamic-keys authentication-types=wpa2-psk wpa2-pre-shared-key=new_password

2. Set up a virtual Wi-Fi interface:

   /interface wireless add master-interface=wlan1 name=wlan2 security-profile=my-repeater ssid=My_Repeater mode=ap-bridge

Now you will have two networks: the original and the new one from the repeater.

Is it possible to connect another repeater to a repeater (chain)?

Technically yes, but:

• Each new "jump" reduces the speed by 2 times.
• Latencies increase (ping can reach 100+ ms).
• Devices at layer 3 may not receive an IP due to DHCP restrictions.

Better to use Mesh-network (via CAPsMAN) or lay the cable to the second repeater.

How do I reset my MikroTik if I made a configuration error and lost access?

There are three ways:

1. Software reset (if there is access via Winbox):

   /system reset-configuration no-defaults=yes skip-backup=yes

2. Hard reset: hold down the button Reset for 5 seconds (until the light blinks).
3. Netinstall (if the device does not boot): download the utility from the website MikroTik and flash a clean firmware via Ethernet.