MikroTik RB951 Quick Setup Guide (2025) – Step-by-Step with Screenshots

Close-up of MikroTik RB951 Ui-2nD showing Wi-Fi and Ethernet port activity LEDs

Table of Contents


✅ What is the MikroTik RB951 Series RouterBOARD?

The RB951 Series includes models like:

  • MikroTik RB951 Ui-2nD (hAP)
  • MikroTik RB951 G-2HnD
  • MikroTik RB951 -2n

RouterOS documentation

These MikroTik RB951 routers combine:

  • Wireless AP
  • Router
  • Firewall
  • Ethernet switch (5 ports)
  • PoE output (on RB951Ui-2nD)

🔧 Use Cases for MikroTik RB951

Use CaseDescription
Home/Office RouterReplaces basic home routers with enterprise features
Wireless Access PointAdds Wi-Fi to wired networks
Firewall GatewayProvides traffic filtering and NAT protection
PoE OutputPowers other MikroTik devices via Ethernet

🔍 Key Features (MikroTik RB951 Ui-2nD example)

FeatureSpecification
CPU650 MHz
RAM128 MB
Ethernet Ports5 x Fast Ethernet
Wireless2.4GHz b/g/n
RouterOS LicenseLevel 4
PoE OutputYes (Port 5)

🔧 Step-by-Step Configuration MikroTik RB951

✔ Step 1: Plug the Internet Cable into Port 1

Connect the Ethernet cable from your modem or ISP to Port 1 (ether1) on the MikroTik RB951. This port is designated as the WAN port, responsible for receiving internet access.

💡 Why this step is important: This is the only port that MikroTik defaults to for WAN DHCP configuration. Plugging the internet source here ensures that the router receives an IP address and can route traffic to the LAN.


✔ Step 2: Access the MikroTik RB951 Interface

To configure the router:

  • Open a browser and go to 192.168.88.1
  • Or use Winbox if you’re on Windows
  • Default login: admin with no password

💡 Why this step is important: Accessing the RouterOS interface allows you to make necessary changes and customize your network behavior. MikroTik RB951 doesn’t use the usual “plug and play” setup – it requires manual input.


✔ Step 3: DHCP Client Setup for WAN

Navigate to IP > DHCP Client and set:

  • Interface: ether1
  • Use Peer DNS: Yes
  • Add Default Route: Yes
MikroTik RB951 Winbox screenshot showing DHCP client status as stopped on interface ether1

💡 Why this step is important: The DHCP client allows the router to obtain an IP address from your ISP. Without this, the router won’t know how to route traffic to the internet.


✔ Step 4: Assign LAN IP

Go to IP > Addresses and assign:

  • Address: 192.168.88.1/24
  • Interface: bridge or ether2

💡 Why this step is important: This IP address acts as the gateway for all your connected devices. It’s what they’ll use to reach the router and beyond.


✔ Step 5: Setup DHCP Server

Under IP > DHCP Server > DHCP Setup:

  • Interface: bridge
  • IP Pool: 192.168.88.10-254

💡 Why this step is important: The DHCP server assigns IP addresses to devices automatically. Without it, you’d have to set IPs manually on every connected device.


✔ Step 6: NAT (Masquerade Rule)

In IP > Firewall > NAT:

  • Chain: srcnat
  • Out Interface: ether1
  • Action: masquerade
MikroTik RB951 Winbox view showing NAT masquerade rule setup for internet sharing via WAN

💡 Why this step is important: NAT masquerade is what enables internet sharing from one public IP (your ISP) to multiple local devices. It hides local IPs behind the WAN.


✔ Step 7: Enable and Configure Wi-Fi

Under Wireless > Interfaces, enable wlan1 and set:

  • Mode: ap bridge
  • Band: 2GHz-B/G/N
  • SSID: Your network name
MikroTik RB951 WebFig interface showing wlan1 configuration with SSID, mode, band, and country settings

💡 Why this step is important: This activates the wireless feature of the RB951, turning it into a Wi-Fi access point that devices can connect to.


✔ Step 8: Setup Wireless Security

Under Wireless > Security Profiles, configure:

  • Mode: WPA2 PSK
  • Cipher: AES
  • Pre-Shared Key: Set a strong password
MikroTik RB951 WebFig showing wireless security profile configured with WPA2 PSK and AES encryption

💡 Why this step is important: Without proper encryption, your Wi-Fi network is open to anyone nearby. WPA2 is a secure standard used for home and business Wi-Fi.


✔ Step 9: Confirm IP Pool

Check IP > Pool for:

  • Name: dhcp
  • Address Range: 192.168.88.10 - 192.168.88.254

💡 Why this step is important: Ensures there’s a sufficient range of IP addresses available for devices connecting to the router.


Step 10: DNS Settings (Optional)

In IP > DNS, configure:

  • Enable “Allow Remote Requests”
  • Set DNS servers: 8.8.8.8 and 8.8.4.4

💡 Why this step is important: These settings allow devices to resolve domain names into IP addresses using your router. Using public DNS can improve reliability.


Final DHCP Client Status View (Winbox)

  • Check under DHCP Client
  • Interface: ether1
  • Status: should show bound with IP

💡 Why this step is important: Confirms your router is properly receiving internet access from your ISP and ready to route traffic.

You bought tp-link archer c64 ac1200 router here your setup by step guide!


FAQ – Frequently Asked Questions

Q1: Why can’t I access 192.168.88.1?
A: Check that your computer is connected to ether2–5 and set to obtain an IP automatically. Try resetting the router.

Q2: How do I change the Wi-Fi name (SSID)?
A: Go to Wireless > Interfaces > wlan1 > Set the SSID field to your preferred name.

Q3: What is the default username and password?
A: Username: admin, Password: (blank). Change it immediately for security.

Q4: Can I use the RB951 as an access point only?
A: Yes. Just disable NAT and DHCP and bridge ether1 with wlan1.

Q5: What does NAT masquerade do?
A: It allows all LAN devices to share a single internet IP from your ISP.

Q6: Can I use a USB modem on this router?
A: Yes, if your model supports USB ports. Configure it under PPP > Interfaces.

Q7: How do I reset the router to factory settings?
A: Hold the reset button while powering it on until the LED blinks.

Q8: My router shows “DHCP Client status: stopped” – what to do?
A: Make sure ether1 is connected to a live internet source. Click “renew” or check cable.


Common Problems and Solutions

ProblemSolution
Can’t access WebFigReset the router and connect directly via Ethernet
No internetEnsure DHCP client is running on ether1 and NAT is enabled
Wi-Fi not showingEnable wlan1 and configure SSID and security settings
Devices not getting IPCheck DHCP server is set up and running on the LAN bridge
Slow connectionLimit connections or check bandwidth use under Queues

Technical Glossary – 15 Important Terms

TermExplanation
RouterOSThe operating system that runs on MikroTik devices, used for configuration.
BridgeA logical interface that combines multiple Ethernet or Wi-Fi ports into one LAN.
Ether1The first physical Ethernet port, typically used for WAN (internet) connection.
DHCPA service that automatically assigns IP addresses to devices in the network.
NATNetwork Address Translation, used to allow multiple devices to share one IP.
MasqueradeA type of NAT that hides internal IPs when accessing the internet.
SSIDThe name of the wireless network that appears when you search for Wi-Fi.
WPA2 PSKA Wi-Fi encryption method using a password, secure for home and office.
FirewallA set of rules to control incoming and outgoing network traffic.
PoEPower over Ethernet – delivers electricity through the Ethernet cable.
WinboxA Windows-based tool for configuring MikroTik routers locally.
WebFigThe web interface used to configure MikroTik routers through a browser.
IP PoolA range of IP addresses the DHCP server can assign to devices.
Dynamic IPAn IP address assigned automatically, usually by your ISP.
Reset ConfigurationA MikroTik option that returns the router to factory default settings.

Final Thoughts

Configuring a MikroTik RB951 router may seem difficult at first, especially if you’re used to plug-and-play consumer routers. Unlike typical home routers, MikroTik offers powerful enterprise-grade tools which can feel overwhelming to beginners. However, with a bit of patience and some trial and error, you’ll find it becomes easier with time.

One of the reasons MikroTik feels complicated is that it doesn’t assume how you’ll use it. Every feature—from Wi-Fi and DHCP to firewall and bandwidth limits—can be customized. This flexibility is exactly what makes it so powerful for IT professionals and businesses. You’re not just setting up a router, you’re building a tailored network solution.

This guide walks through a quick setup for a basic internet-sharing router. But keep in mind, MikroTik can do much more: VPN, VLANs, hotspot portals, user isolation, remote access, and bandwidth control. You can always build on this foundation as your needs grow.

✅ Conclusion

You’ve now fully configured your MikroTik RB951 router as a secure internet router with Wi-Fi and DHCP. This guide includes real screenshots and verified working steps from a live setup.

Leave a Comment

Your email address will not be published. Required fields are marked *