Wi-Fi
Wireless and Wi-Fi in RouterOS, access point, client, CAPsMAN: all dojo articles on this topic.
Image generated locally with ComfyUI from randomly selected elements. How the images are created
MikroTik in Wi-Fi station and bridge mode: why nothing passes through (and how to fix it)
A MikroTik connected as a client to another access point's Wi-Fi, with a camera behind it: why it doesn't work in station mode, how to fix it with station-pseudobridge, and why the old bridge NAT trick breaks.
ProductsChateau 5G R17 ax: 5G router with eSIM and RouterOS v7
The Chateau 5G R17 ax is a MikroTik 5G home router featuring an integrated Release 17 modem, dual-band Wi-Fi 6, and native eSIM support. It is designed for users who require high-performance mobile connectivity without sacrificing the advanced control provided by RouterOS v7, eliminating the exclusive reliance on physical SIM cards.
NewsPractical community examples: Doom on RouterOS and CAPman setup
The MikroTik newsletter presents two real-world use cases from the community. The first involves running the Chocolate Doom game inside a RouterOS container. The second illustrates a complex wireless configuration for environments with thick walls, using wAP indoor and outdoor units in CAPman mode.
ProductsCRS418-8P-8G-2S+5axQ2axQ-RM: Switch with Wi-Fi 6 and routing
The CRS418-8P-8G-2S+5axQ2axQ-RM is a 1U rackmount switch that integrates a dual-band 4x4 MIMO Wi-Fi 6 controller, 17 Gigabit Ethernet ports (8 of which support PoE-out), and two 10G SFP+ slots. It is designed to replace multiple separate devices in medium-sized offices or server rooms, offering L3 routing capabilities with hardware offloading and advanced management via RouterOS v7.
DojoHotspot 2.0 and Passpoint with MikroTik: Interworking in the WiFi Package
Hotspot 2.0 (commercial name Passpoint, underlying standard 802.11u) allows a phone to automatically and securely connect to a public WiFi network without a login page, recognizing its own carrier or organization. In 2017, I discovered an undocumented menu in RouterOS 6; today, the WiFi package in RouterOS 7 includes an official menu, /interface wifi interworking, to be used together with a RADIUS server.
DojoWireless scan on a remote MikroTik without losing the result
A frequency scan stops the radio for a few seconds: if you reach the remote router through that wireless link, you lose the connection and the result. The solution is to run the scan in the background on the router itself, saving the result to a file to read once the link is back. In RouterOS 7, this is done with :execute and the file= parameter, which works with both the wifi and wireless packages.
SecurityCertificate Validation Vulnerability in RouterOS
CVE-2025-42611 is a certificate validation vulnerability that may allow authentication bypass in services such as OpenVPN, CAPsMAN, and Dot1X. It affects RouterOS versions up to 7.20.x. The fixed version has not yet been announced; as of the article date, the vulnerability is not known to be actively exploited.
DojoCAPsMAN and WiFi RouterOS 7: enabling client isolation
Client isolation prevents devices connected to the same WiFi network from communicating with each other: in a hotspot or guest network, it is the first defense against people snooping on others' phones. In RouterOS 7, with the new wifi package and its CAPsMAN, it is enabled with client-isolation=yes in the datapath; with the old wireless package, default-forwarding remains, and in CAPsMAN v1, client-to-client-forwarding.
ProductsChateau 5G ax: 5G Router with 2.5G Ethernet and Wi-Fi 6E
The Chateau 5G ax is a 5G/LTE mobile router designed to provide high-speed connectivity with Ethernet ports up to 2.5 Gigabit and Wi-Fi 802.11ax. It is ideal for professionals, WISPs, and advanced users who require flexibility through RouterOS v7 and superior radio performance compared to previous generations.
DojoHow to create a WiFi hotspot with MikroTik and RouterOS 7
A WiFi hotspot with a captive portal on MikroTik is built in seven steps: reset, WAN, guest network on a bridge, radio, /ip hotspot setup wizard, test, and final cleanup. In RouterOS 7, the radio part changes significantly, as recent models use the new wifi package instead of wireless. The addresses in the example are from my lab: adapt them to your network.