{"id":2550,"date":"2026-09-10T19:40:20","date_gmt":"2026-09-10T17:40:20","guid":{"rendered":"https:\/\/bitnext.hu\/mikrotik-hap-ax-s-irodai-halozat-vendeg-wifi\/"},"modified":"2026-09-10T21:12:25","modified_gmt":"2026-09-10T19:12:25","slug":"mikrotik-hap-ax-s-office-network-guest-wifi","status":"publish","type":"post","link":"https:\/\/bitnext.hu\/en_gb\/mikrotik-hap-ax-s-irodai-halozat-vendeg-wifi\/","title":{"rendered":"MikroTik hAP ax S: office networking, separate guest Wi-Fi and multiple access points"},"content":{"rendered":"<div class=\"bn-article-body\">\n<p class=\"bn-article-lead\">A good office network is more than an internet connection. Using the MikroTik hAP ax S as an example, we explain how to set up internet access, corporate and guest networks, and Wi-Fi with multiple access points.<\/p>\n<details class=\"bn-article-toc\">\n<summary>Contents<\/summary>\n<nav aria-label=\"Contents\">\n<ol>\n<li><a href=\"#resz-1-amikor-mar-keves-az-alapbeallitas\">When the default setup is no longer enough<\/a><\/li>\n<li><a href=\"#resz-2-mit-tud-a-valasztott-eszkoz\">What does the selected device offer?<\/a><\/li>\n<li><a href=\"#resz-3-1-elso-hozzaferes-es-internetkapcsolat\">1. Initial access and internet connection<\/a><\/li>\n<li><a href=\"#resz-4-2-kulon-halozat-a-munkatarsaknak-es-a-vendegeknek\">2. Separate networks for employees and guests<\/a><\/li>\n<li><a href=\"#resz-5-3-a-wi-fi-beallitasa\">3. Configuring Wi-Fi<\/a><\/li>\n<li><a href=\"#resz-6-4-tobb-access-point-egy-rendszerben\">4. Multiple access points in one system<\/a><\/li>\n<li><a href=\"#resz-7-5-atadas-elotti-ellenorzes\">5. Checks before handover<\/a><\/li>\n<\/ol>\n<\/nav>\n<\/details>\n<h2 id=\"resz-1-amikor-mar-keves-az-alapbeallitas\">When the default setup is no longer enough<\/h2>\n<p>Video calls break up in the meeting room, visitors use the same Wi-Fi as employees, and nobody is quite sure which device belongs to which network.<\/p>\n<p>The answer is often a carefully planned network: coordinating the internet connection, wired devices, Wi-Fi and access rules.<\/p>\n<p>BitNext also configures MikroTik equipment. This guide uses the hAP ax S as an example; the layout described is not documentation of a specific customer installation.<\/p>\n<h2 id=\"resz-2-mit-tud-a-valasztott-eszkoz\">What does the selected device offer?<\/h2>\n<p>The hAP ax S is a dual-band Wi-Fi 6 device running RouterOS v7. It has five Gigabit Ethernet ports, an SFP slot supporting 2.5 Gbit\/s, and options for PoE input and passive PoE output.<\/p>\n<p>RouterOS provides internet connection management, a firewall, address allocation, network separation and remote access options. Actual performance depends on the configuration and usage; port speed is not the same as throughput achievable under all conditions.<\/p>\n<p>When using passive PoE output, the connected device's voltage requirements and compatibility must be checked separately. Not every access point can be powered directly from it.<\/p>\n<h2 id=\"resz-3-1-elso-hozzaferes-es-internetkapcsolat\">1. Initial access and internet connection<\/h2>\n<p>For a new device with factory settings, the internet connection goes to Ethernet1, and configuration starts from a computer connected to a LAN port. The default address is usually 192.168.88.1; we check the login details against the device label and documentation.<\/p>\n<p>First, we change the access credentials and check for RouterOS updates. If a configuration already exists, we back it up first.<\/p>\n<p>We configure the internet connection as specified by the provider: this may use automatic addressing, PPPoE or a static address. Alongside internet connectivity, we check the firewall rules and access to administration interfaces.<\/p>\n<h2 id=\"resz-4-2-kulon-halozat-a-munkatarsaknak-es-a-vendegeknek\">2. Separate networks for employees and guests<\/h2>\n<p>A simple example layout:<\/p>\n<div class=\"bn-article-table\">\n<table>\n<thead>\n<tr>\n<th scope=\"col\">Network<\/th>\n<th scope=\"col\">Purpose<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Corporate network<\/td>\n<td>Workstations and authorised internal services.<\/td>\n<\/tr>\n<tr>\n<td>Guest network<\/td>\n<td>Internet access without access to internal systems.<\/td>\n<\/tr>\n<tr>\n<td>Management network<\/td>\n<td>Managing routers, switches and access points.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<p>We assign separate addressing to the VLANs and configure DHCP services where needed. Firewall rules define which traffic is permitted between them.<\/p>\n<p>A different Wi-Fi name alone does not provide secure separation. Access from the guest network to corporate and management networks must actually be blocked. Necessary DNS and address allocation services must still be allowed.<\/p>\n<h2 id=\"resz-5-3-a-wi-fi-beallitasa\">3. Configuring Wi-Fi<\/h2>\n<p>In the Wi-Fi menu, we set the network name, country and authentication settings. The device uses the <code>wifi-mediatek<\/code> driver; configurations written for other MikroTik families should not be copied without checking them.<\/p>\n<p>The corporate and guest networks each receive a separate SSID. We choose modern encryption settings compatible with the devices that will connect.<\/p>\n<p>We select the channel and channel width based on the local radio environment. The widest channel and highest transmit power do not necessarily give the best result.<\/p>\n<h2 id=\"resz-6-4-tobb-access-point-egy-rendszerben\">4. Multiple access points in one system<\/h2>\n<p>A larger office may need several appropriately positioned access points. Where possible, these are connected to the network by cable.<\/p>\n<p>For compatible MikroTik access points, WiFi CAPsMAN can provide central management. On the controller, we create security and network profiles, then define which settings apply to each radio.<\/p>\n<p>AP management connectivity and VLAN forwarding for corporate and guest traffic must be configured along the entire path. The legacy CAPsMAN and the new WiFi CAPsMAN are not interchangeable.<\/p>\n<p>Using the same SSID can make the network easier to use, but the quality of roaming between access points depends on their placement, configuration and the client device's capabilities.<\/p>\n<h2 id=\"resz-7-5-atadas-elotti-ellenorzes\">5. Checks before handover<\/h2>\n<p>Measuring speed next to the router is not enough. Meeting rooms, more distant work areas and use with multiple devices must also be checked.<\/p>\n<p>We separately verify that:<\/p>\n<ul>\n<li>Guests cannot access internal systems.<\/li>\n<li>Network management interfaces cannot be accessed without authorisation.<\/li>\n<li>Name resolution and address allocation work.<\/li>\n<li>Connectivity is restored after a restart.<\/li>\n<li>A configuration backup is available.<\/li>\n<\/ul>\n<div class=\"bn-article-cta\">\n<p>Need an office network or Wi-Fi with multiple access points? BitNext provides network installation and configuration throughout Hungary.<\/p>\n<p><a class=\"elementor-button\" href=\"https:\/\/bitnext.hu\/en_gb\/contact\/#kapcsolatiform\">REQUEST A QUOTE<\/a><\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>A good office network is more than an internet connection. Using the MikroTik hAP ax S as an example, we explain how to set up internet access, corporate and guest networks, and Wi-Fi with multiple access points.<\/p>","protected":false},"author":0,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[29],"tags":[],"class_list":["post-2550","post","type-post","status-publish","format-standard","hentry","category-szakmai-utmutato"],"_links":{"self":[{"href":"https:\/\/bitnext.hu\/en_gb\/wp-json\/wp\/v2\/posts\/2550","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bitnext.hu\/en_gb\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bitnext.hu\/en_gb\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/bitnext.hu\/en_gb\/wp-json\/wp\/v2\/comments?post=2550"}],"version-history":[{"count":1,"href":"https:\/\/bitnext.hu\/en_gb\/wp-json\/wp\/v2\/posts\/2550\/revisions"}],"predecessor-version":[{"id":2560,"href":"https:\/\/bitnext.hu\/en_gb\/wp-json\/wp\/v2\/posts\/2550\/revisions\/2560"}],"wp:attachment":[{"href":"https:\/\/bitnext.hu\/en_gb\/wp-json\/wp\/v2\/media?parent=2550"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bitnext.hu\/en_gb\/wp-json\/wp\/v2\/categories?post=2550"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bitnext.hu\/en_gb\/wp-json\/wp\/v2\/tags?post=2550"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}