Beginner’s Guide: Setting Up a Basic Wireless Router on MikroTik Print

Hello there! Emmanuel Corels here from Emmanuel Corels Creatives, continuing with our MikroTik how-to series. Ever wanted to turn your MikroTik device into a simple wireless router—complete with internet on one port (WAN) and Wi-Fi for your home or small office? Let’s walk through the steps in a beginner-friendly way, focusing on the most common questions people ask.

Scenario Overview

We’ll assume you have a MikroTik router with:

• Ether1 connected to the internet (WAN).
• A built-in wireless interface (like WLAN) or a wireless card installed (for older devices).
• Optional LAN ports for wired clients.

By the end of this guide, you’ll have a working wireless network that provides internet access, along with the basics of DHCP, NAT, and firewall.

Step 1: Reset to Default (Optional)

If your MikroTik is brand-new or you want to start fresh, it’s often easiest to reset to the default configuration. This default config typically sets up ether1 as WAN, NAT out to the internet, and a basic IP range on the LAN. It also configures the default wireless with an SSID like “MikroTik-XXXX.”

1. In WinBox:
   • Go to System → Reset Configuration.
   • Check the box for “No Default Configuration” if you truly want a blank slate, or leave it unchecked if you want the factory default (which is simpler for beginners).
   • Click Reset Configuration.
2. The router reboots with a default IP (like 192.168.88.1) on the LAN and tries to configure a default Wi-Fi SSID (depending on model).

(If you’d rather do everything by hand, you can skip this step, but default config is often a good starting point.)

Step 2: WAN Configuration

If you’re using the default config, ether1 is typically your WAN. Plug that into your modem or ISP device.

• DHCP or Static: Most home ISPs give you a DHCP address automatically. If you need a static IP, go to IP → Addresses or IP → DHCP Client to adjust accordingly.

Check if you have an IP on ether1:

1. WinBox → IP → DHCP Client.
   • If you see Bound with an IP, you’re online.
2. Ping a Website from the router:

   /ping 8.8.8.8
   

   If you get replies, your WAN is good.

Step 3: LAN and DHCP Server

With the default config, MikroTik typically assigns 192.168.88.1/24 to the bridge or LAN ports, and sets up a DHCP server on that network. You can verify or change that:

1. Go to IP → Addresses: You should see 192.168.88.1/24 on either “bridge” or “ether2”.
2. Go to IP → DHCP Server:
   • You’ll see a server bound to “bridge” or another interface, with a default pool.
   • If you want to change the subnet, double-click the DHCP server and adjust. Or create a new IP address/pool if you prefer something like 192.168.10.0/24.

Step 4: Enable and Configure the Wireless

1. WinBox → Wireless.

2. Click on the Wi-Fi Interface (often named “wlan1” or “wlan2”).

3. Make sure it’s Enabled (a blue “R” indicates it’s running).

4. Double-click the wireless interface to check the Wireless tab:

   • Mode: ap bridge if you’re broadcasting a Wi-Fi network for clients.
   • SSID: Type something like “MyHomeWiFi”.
   • Frequency: Pick one that doesn’t clash too heavily with neighbors (e.g., 6 on 2.4GHz, or 5180 on 5GHz).
   • Band: If it’s a 2.4GHz radio, pick 2GHz-B/G/N. If it’s 5GHz, you might choose 5GHz-A/N/AC.

5. Security Profiles:

   • In Wireless → Security Profiles, either edit the default profile or create a new one.
   • Authentication Types: Check wpa2-psk at least.
   • WPA2 Pre-Shared Key: Enter a passphrase (like MikroTikRocks123).
   • Then apply that Security Profile to the wireless interface (in the “Wireless” tab).

6. Bridge or IP: If your default config uses a bridge for LAN, be sure your wireless interface is in the bridge so that Wi-Fi and the LAN ports share the same subnet.

   • WinBox → Bridge → Ports → “+” → select interface “wlan1,” set the bridge to “bridge-lan” (assuming that’s your main bridge).
   • Now, Wi-Fi clients get IP addresses from the same DHCP server as wired LAN clients.

Step 5: NAT and Firewall (Already in Default)

The default MikroTik config typically includes:

• A masquerade rule in IP → Firewall → NAT to allow LAN traffic to go out the WAN.
• Basic firewall rules to protect inbound traffic.

You can confirm by checking:

1. IP → Firewall → NAT: There should be a rule with chain=srcnat, out-interface=ether1, action=masquerade.
2. IP → Firewall → Filter Rules: Usually includes rules that allow established/related traffic, drop invalid, etc.

If you see those rules, you’re set. If you reset to No Default Configuration, you’d need to create these manually, but for a beginner, default is simpler.

Step 6: Connecting Devices

1. On your phone or laptop, look for the SSID “MyHomeWiFi” (or whatever you named it).
2. Enter the WPA2 password you set in the Security Profile.
3. If everything’s correct, you get an IP from DHCP (192.168.88.x or whichever you configured).
4. Test internet connectivity by opening a browser or pinging a public IP.

Step 7: Tweaking Wireless for Better Performance

• Channel Width: On 2.4GHz, a 20MHz width is more stable in congested areas. On 5GHz, you can try 40 or 80MHz for higher speeds if there’s room in the spectrum.
• Country Settings: In Wireless → Advanced, set your actual country for correct power limits and channels.
• Data Rates: If you have only modern devices, you might force only 802.11n or ac rates. But be careful—older clients might fail to connect if you’re too strict.

Troubleshooting Common Issues

1. Can’t See SSID: Make sure the wireless interface is enabled (R status) and it’s set to ap bridge, not station. Double-check frequency is valid for your region.
2. No Internet: Confirm your NAT rule is correct, and you have a default route on WAN. Also verify the firewall isn’t blocking traffic.
3. Wi-Fi Drops: Possibly interference or wrong channel. Use a Wi-Fi scanner to pick a quieter channel.
4. Slow Speeds: Could be signal strength or congestion. Try a less busy frequency or reduce channel width for stability.

Final Thoughts

That’s it! You have a basic, functioning wireless router with internet on ether1, a LAN bridge for wired clients, and a Wi-Fi interface bridging into that same network. Your MikroTik handles DHCP, NAT, and firewall by default so you can just enjoy browsing.

As you get more confident, you can explore advanced tweaks—like multiple SSIDs, guest Wi-Fi VLANs, QoS, or firewall rules to segment traffic. But for a beginner, the default config with a little wireless customization is often all you need.

If you have any hiccups, don’t worry—MikroTik is a powerful system with lots of knobs and dials. Keep at it, ask questions, and soon enough you’ll feel right at home customizing your router’s Wi-Fi and LAN setup.

Written with simplicity by
Emmanuel Corels – Admin, Emmanuel Corels Creatives