A plain old Access Point

Just a plain old Access Point.

I already have a firewall, NAT configuration, and DHCP on a Cisco ASA so I don't need any of that on a MikroTik device. Out of the box it wants to turn all that on for you. For my configuration I will strip all that and start from a truly blank router, I will build up the stuff I need and leave the rest for a more complex install.
(Note: I'm assuming you are using routerOS 6.23 or better in all the below instructions)

First Access Point:
#1. Plug it in and use Winbox to configure:  Clicking the 3 dots lets you view everything Winbox finds on the local network, no need to even be on the subnet the MikroTik device is on, you can connect via MAC Address alone.

#2. On first load Winbox will ask if you want to apply a generic config:

If you click "Remove Configuration" you will have a pretty blank router. I recommend you start here.

Notes: Need to reset the config and start over?  In Winbox, Click System, Reset Configuration, Choose any options you need and then click the Reset Configuration button.
Using the web interface? Don't do this step! see explanation on step #3.




#3. Once you remove the configuration the router will disconnect you because the default IP will be removed. Just reconnect via the MAC Address in Winbox. (If you are using the web interface to configure, or you just switched over to the web interface at this step, you have no IP to connect to. You can Reset the device manually to try again, see MikroTik documentation for instructions on resetting your device)

#4. Basic config:  I use the QuickSet function and set Network Name (SSID), Frequency, Country, WPA Security, a WiFi Password, Set Bridge Mode, IP, Subnet, Gateway.  Also you may want to Bridge all LAN Ports (unless you need multiple Ethernet interfaces) and set a system Identity (makes life easier when you are managing 8 access points). You may also want an Admin password, that is the Password entry in the lower right corner of the QuickSet.  A Note about the DNS Servers entry: I can't make DNS stay when I enter it here, (maybe a 6.23 bug?) but you can enter it under IP, DNS.
Click Apply

#5. This is a good time to test connectivity and if you want, upgrade to the latest routerOS (QuickSet, Check for Updates, Download & Upgrade)

Now you have a basic, Stand-alone Access Point configured for your subnet. This configuration will work on both the RB951Ui-2HnD indoor access point and the RBSXTG-2HnD outdoor access point equally as well. 

See the next post: Wireless Bridge Part 1.

Mikrotik WiFi project overview

Project Overview

I have scoured the net and found so little information on SIMPLE MikroTik / Routerboard WiFi installations I decided to write my configuration in detail for other to see working examples and so I have a record of what I did.

Here are my requirements:
1.  I need WiFi in several buildings.
2.  I need WiFi is some outdoor work areas.
3.  I need to share a single Internet connection that is at the entrance to the property and at the lowest geographic location.
4.  I don't want to daisy-chain the WiFi. As much as geographically possible I will bridge back to the original installation.
5.  I need a single network so I can access equipment and provide desktop support throughout the property.

To accomplish this I am using the following MikroTik 2.4ghz WiFi models:
- RB951Ui-2HnD   - Indoor AP and router.  see specs here: http://routerboard.com/RB951Ui-2HnD
- RBSXTG-2HnD  - outdoor AP and router.  specs: http://routerboard.com/RBSXTG2HnD
- RBSXT-2nD  or  SXT Lite2 - CPE station.  specs: http://routerboard.com/RBSXT2nDr2

Mikrotik makes products that are MUCH faster and more robust then these and I recommend all their equipment, however, this installation is in a remote location with 10mb Internet and I don't need 1gb ethernet or amazing throughput, plus these models are extremely affordable.  A note about the SXT Lite2: this is an SXT with a level 3 license which means it can only have one connection. We are using these devices to create wireless bridges so we only need one network connection. You could use the full level 4 licensed SXT's to do the same thing and they would be more versatile. I chose the Lite2 because it was $15 cheaper than the full licensed SXT.

Here is the basic installation in a picture: