The MikroTik RouterOS supports the PrismII chipset based wireless adapter cards for working both as wireless clients (station mode) and wireless access points (ap-bridge or bridge mode).
Supports event logging.
Important! Prism 2.5 200mW cards require firmware 1.3.6 or lower, if you want to bridge networks. Please see the troubleshooting section on how to check the firmware version and downgrade it
The MikroTik RouterOS supports as many Prism chipset based cards as many free adapter slots are there on your system. One license is valid for all cards on your system. Note that maximal number of PCMCIA sockets is 8.
[admin@MikroTik] interface prism> set prism1 disabled=no ssid=test
[admin@MikroTik] interface prism> print
Flags: X - disabled, R - running
0 R name="prism1" mtu=1500 mac-address=00:02:6F:01:D2:7D arp=enabled
mode=station root-ap=00:00:00:00:00:00 frequency=2412MHz ssid="test"
default-authentication=yes default-forwarding=yes max-clients=2007
card-type=generic tx-power=auto supported-rates=1-11 basic-rates=1
hide-ssid=no
[admin@MikroTik] interface prism>
status (searching-for-network | connected-to-ess | out-of-range) - status of the interface:
[admin@MikroTik] interface prism> monitor prism1
status: connected-to-ess
data-rate: 11Mbps
ssid: "test"
bssid: 00:03:2F:04:25:10
signal-quality: 92
signal-level: 54
noise-level: -99
[admin@MikroTik] interface prism>
[admin@MikroTik] interface prism> registration-table print # INTERFACE MAC-ADDRESS TYPE PARENT 0 prism1 00:07:EB:30:E7:DA client 1 prism1 00:40:96:29:2F:80 client [admin@MikroTik] interface prism>To get additional statistics:
[admin@MikroTik] interface prism> registration-table print stats
0 interface=prism1 mac-address=00:07:EB:30:E7:DA type=client packets=0,19
bytes=0,482 signal-level=69/75/138 noise-level=0/0/0 data-rate=10/110/110
tx-rate=10 last-update=00:00:00.840 uptime=00:02:59.180
1 interface=prism1 mac-address=00:40:96:29:2F:80 type=client packets=0,14
bytes=0,196 signal-level=66/72/84 noise-level=0/0/0 data-rate=10/10/10
tx-rate=10 last-update=00:00:08.380 uptime=00:02:42.220
[admin@MikroTik] interface prism>
The association procedure is as follows: when a new client wants to associate to the AP that is configured on interface prismX, entry with client's MAC address and interface prismX is looked up in the access-list. If such entry is found, action specified in it is taken. Otherwise default-authentication and default-forwarding of interface prismX is taken.
If you have default authentication action for the interface set to no, you can allow this node to register at the AP's interface prism1 by setting authentication=yes for it. Thus, only the specified nodes will be able to register to the interface prism1.
[admin@MikroTik] interface prism access-list> add mac-address=00:40:96:37:A3:39
interface=prism1
[admin@MikroTik] interface prism access-list> print
Flags: X - disabled, I - invalid
0 mac-address=00:40:96:37:A3:39 interface=prism1 authentication=yes
forwarding=yes
[admin@MikroTik] interface prism access-list>
The result of scanning contains a list of discovered access points along with their MAC addresses, channel frequencies, service set identificators, and the measured signal level.
(name) - interface name to use for scanning
frequencies (string; default: all frequencies) - list of frequencies to scan for, e.g., 2412MHz,2427MHz
time (time; default: ) - time to scan for one frequency. The total time used for scanning
is multiplier of this value and the number of frequencies to scan
[admin@MikroTik] interface prism> scan prism1 00:02:6f:01:5d:fe frequency=2412MHz ssid=waubonsie_low_ap1 signal-level=132 00:02:6f:01:63:0b frequency=2427MHz ssid=john signal-level=114 00:02:6f:01:62:ee frequency=2462MHz ssid=sales signal-level=0 [admin@MikroTik] interface prism>
[admin@MikroTik] interface prism> set prism1 ssid=testing
[admin@MikroTik] interface prism> enable prism1
[admin@MikroTik] interface prism> print
Flags: X - disabled, R - running
0 R name="prism1" mtu=1500 mac-address=00:90:4B:02:17:E2 arp=enabled
mode=station root-ap=00:00:00:00:00:00 frequency=2412MHz ssid="testing"
default-authentication=yes default-forwarding=yes max-clients=2007
card-type=generic tx-power=auto supported-rates=1-11 basic-rates=1
hide-ssid=no
[admin@MikroTik] interface prism>
All other parameters can be left as default. However, you should make sure, that all clients support the basic rate of your access point, i.e., the supported-rates of the client should cove the basic-rates of the access point.
[admin@MikroTik] interface prism> set prism1 mode=ap-bridge frequency=2442MHz \
\... ssid=testing
[admin@MikroTik] interface prism> print
Flags: X - disabled, R - running
0 R name="prism1" mtu=1500 mac-address=00:90:4B:02:17:E2 arp=enabled
mode=ap-bridge root-ap=00:00:00:00:00:00 frequency=2442MHz ssid="testing"
default-authentication=yes default-forwarding=yes max-clients=2007
card-type=generic tx-power=auto supported-rates=1-11 basic-rates=1
hide-ssid=no
[admin@MikroTik] interface prism>
The 'non-root' access point will register the clients only if it is registered to the 'root' access point.
Having one access point registered to another one enables bridging the networks, if bridging mode between prism and ethernet interfaces is used. Note, that in the station mode, bridging cannot be used between prism and ethernet interfaces.
Important! Prism 2.5 200mW cards require firmware 1.3.6 or lower, if you want to bridge networks. Please see the troubleshooting section on how to check the firmware version and downgrade it.
[admin@MikroTik] interface prism> set prism1 root-ap=00:90:4B:03:F1:71
[admin@MikroTik] interface prism> print
Flags: X - disabled, R - running
0 R name="prism1" mtu=1500 mac-address=00:90:4B:02:17:E2 arp=enabled
mode=ap-bridge root-ap=00:90:4B:03:F1:71 frequency=2442MHz ssid="testing"
default-authentication=yes default-forwarding=yes max-clients=2007
card-type=generic tx-power=auto supported-rates=1-11 basic-rates=1
hide-ssid=no
[admin@MikroTik] interface prism>
Let us consider the following point-to-multipoint network setup with CISCO/Aironet Wireless Access Point as a base station and MikroTik Wireless Router as a client:

Note that the AP is not a router! It has just one network address, and is just like any host on the network. It resembles a wireless-to-Ethernet HUB or bridge. The AP does not route the IP traffic!
[admin@MikroTik] interface prism> set 0 ssid=mt
[admin@MikroTik] interface prism> print
Flags: X - disabled, R - running
0 R name="prism1" mtu=1500 mac-address=00:02:6F:01:D2:7D arp=enabled
mode=station root-ap=00:00:00:00:00:00 frequency=2412MHz ssid="mt"
default-authentication=yes default-forwarding=yes max-clients=2007
card-type=generic tx-power=auto supported-rates=1-11 basic-rates=1
hide-ssid=no
[admin@MikroTik] interface prism> monitor 0
status: connected-to-ess
data-rate: 11Mbps
ssid: "mt"
bssid: 00:40:96:56:E2:AD
signal-quality: 78
signal-level: 125
noise-level: -99
[admin@MikroTik] interface prism>
The IP addresses assigned to the wireless interface should be from the network 10.0.0.0/24, e.g.:
[admin@MikroTik] ip address> add address=10.0.0.217/24 interface=prism1 [admin@MikroTik] ip address> print Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK BROADCAST INTERFACE 0 10.0.0.217/24 10.0.0.0 10.0.0.255 prism1 1 192.168.0.254/24 192.168.0.254 192.168.0.254 ether1 [MikroTik] ip address>
The default route should be set to the gateway router 10.0.0.1 (not to the AP 10.1.1.250 !):
[admin@MikroTik] ip route> add gateway=10.0.0.1
[admin@MikroTik] ip route> print
Flags: X - disabled, I - invalid, D - dynamic, J - rejected,
C - connect, S - static, R - rip, O - ospf, B - bgp
# DST-ADDRESS G GATEWAY DISTANCE INTERFACE
0 S 0.0.0.0/0 r 10.0.0.1 1 prism1
1 DC 10.0.0.0/24 r 0.0.0.0 0 prism1
2 DC 192.168.0.0/24 r 0.0.0.0 0 ether1
[admin@MikroTik] interface prism>
Note! You cannot use the bridging function between the prism and ethernet interfaces, if the prism interface is in the station mode. The bridge does not work in this case!
Let us consider the following point-to-point wireless network setup with two MikroTik Wireless Routers:

You need both the 2.4GHz Wireless and the Prism AP Feature Licenses to enable the AP mode. To make the MikroTik router work as an access point, the configuration of the prism wireless interface should be as follows:
[admin@MT_Prism_AP] interface prism> set 0 mode=ap-bridge frequency=2442MHz \
\... ssid=mt
[admin@MT_Prism_AP] interface prism> print
Flags: X - disabled, R - running
0 R name="prism1" mtu=1500 mac-address=00:90:4B:02:17:E2 arp=enabled
mode=ap-bridge root-ap=00:00:00:00:00:00 frequency=2442MHz ssid="mt"
default-authentication=yes default-forwarding=yes max-clients=2007
card-type=generic tx-power=auto supported-rates=1-11 basic-rates=1
hide-ssid=no
[admin@MT_Prism_AP] interface prism> monitor 0
current-sta-count: 2
current-ap-count: 0
current-local-count: 0
current-forwarding-count: 0
[admin@MT_Prism_AP] interface prism>
The list of registered clients looks like follows:
[admin@MT_Prism_AP] interface prism> registration-table print # INTERFACE MAC-ADDRESS TYPE PARENT 0 prism1 00:07:EB:30:E7:DA client 1 prism1 00:02:6F:01:5D:FE client [admin@MT_Prism_AP] interface prism>
There are two possible ways of implementing the wireless access point feature:
[admin@MT_Prism_AP] interface bridge> add forward-protocols=ip,arp,other
[admin@MT_Prism_AP] interface bridge> print
Flags: X - disabled, R - running
0 X name="bridge1" mtu=1500 arp=enabled mac-address=00:00:00:00:00:00
forward-protocols=ip,arp,other priority=1
[admin@MT_Prism_AP] interface bridge>
[admin@MT_Prism_AP] interface bridge port> set "ether1,prism1" bridge=bridge1 [admin@MT_Prism_AP] interface bridge port> print Flags: X - disabled # INTERFACE BRIDGE 0 ether1 bridge1 1 prism1 bridge1 [admin@MT_Prism_AP] interface bridge port>
[admin@MT_Prism_AP] interface> print Flags: X - disabled, D - dynamic, R - running # NAME TYPE MTU 0 R ether1 ether 1500 1 R prism1 prism 1500 2 X bridge1 bridge 1500 [admin@MT_Prism_AP] interface> enable bridge1 [admin@MT_Prism_AP] interface> print Flags: X - disabled, D - dynamic, R - running # NAME TYPE MTU 0 R ether1 ether 1500 1 R prism1 prism 1500 2 R bridge1 bridge 1500 [admin@MT_Prism_AP] interface>
[admin@MT_Prism_AP] ip address> add address=10.0.0.250/24 interface=bridge1
[admin@MT_Prism_AP] ip address> print
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK BROADCAST INTERFACE
0 10.0.0.250/24 10.0.0.0 10.0.0.255 bridge1
[admin@MT_Prism_AP] ip address> .. route add gateway=10.0.0.1
[admin@MT_Prism_AP] ip address> .. route print
Flags: X - disabled, I - invalid, D - dynamic, J - rejected,
C - connect, S - static, R - rip, O - ospf, B - bgp
# DST-ADDRESS G GATEWAY DISTANCE INTERFACE
0 S 0.0.0.0/0 r 10.0.0.1 1 bridge1
1 DC 10.0.0.0/24 r 0.0.0.0 0 bridge1
[admin@MT_Prism_AP] ip address>
The client router requires the System Service Identificator set to "mt". The IP addresses assigned to the interfaces should be from networks 10.0.0.0/24 and 192.168.0.0./24:
[admin@mikrotik] ip address> print Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK BROADCAST INTERFACE 0 10.0.0.217/24 10.0.0.0 10.0.0.255 aironet 1 192.168.0.254/24 192.168.0.0 192.168.0.255 Local [admin@mikrotik] ip address>The default route should be set to gateway 10.0.0.1 for the router [mikrotik]:
[admin@mikrotik] ip route> add gateway=10.0.0.1
[admin@mikrotik] ip route> print
Flags: X - disabled, I - invalid, D - dynamic, J - rejected,
C - connect, S - static, R - rip, O - ospf, B - bgp
# DST-ADDRESS G GATEWAY DISTANCE INTERFACE
0 S 0.0.0.0/0 r 10.0.0.1 1 aironet
1 DC 10.0.0.0/24 r 0.0.0.0 0 aironet
2 DC 192.168.0.254/24 r 0.0.0.0 0 Local
[admin@mikrotik] ip route>
To set up a wireless bridge between two networks, you need to have a "wireless 2.4GHz" or "AP" license. Configure one MikroTik RouterOS Prism AP to register to another MikroTik RouterOS Prism AP for point-to-point operation.
Important! Prism 2.5 200mW cards require firmware 1.3.6 or lower, if you want to bridge networks. Please see the troubleshooting section on how to check the firmware version and downgrade it.
The basic setup is as follows:

Below are step-by-step configurations for both units. The system identities are set to [MT-parent] and [MT-child], respectively.
/interface enable ether1
/interface prism set prism1 mode=bridge ssid=br8 frequency=2447 disabled=no
/interface bridge add forward-protocols=ip,arp,other disabled=no
/interface bridge port set ether1,prism1 bridge=bridge1
/ip address add address=10.0.0.217/24 interface=bridge1
/ip route add gw=10.0.0.1
/interface enable ether1
/interface prism set prism1 mode=bridge ssid=br8 frequency=2447 \ root-ap=xx:xx:xx:xx:xx:xx disabled=no
Here, substitute the xx:xx:xx:xx:xx:xx with MAC address of [MT-parent] prism interface.
[admin@MT-child] interface prism> registration-table print # INTERFACE MAC-ADDRESS TYPE PARENT 0 prism1 00:02:6F:01:CE:2A parent-ap [admin@MT-child] interface prism>
/interface bridge add forward-protocols=ip,arp,other disabled=no
/interface bridge port set ether1,prism1 bridge=bridge1
/ip address add address=10.0.0.218/24 interface=bridge1
/ip route add gw=10.0.0.1
Note, that both LANs should use IP addresses from the same network 10.0.0.0/24. Both MikroTik routers belong to the same network too. You should be able to ping through the wireless bridge from one LAN to other and to gateway 10.0.0.1.