Time to Play

WIFI on the water can be a challenge, but it does not have to be

MikroTik GroveA Bridge Setup Guide

🚤 Boat WiFi That Actually Works

How I solved the marina WiFi problem with a proper bridge setup

No more double NAT headaches â€ĸ Keep control of your gear

🛒 Required Equipment

MikroTik GroveA 52 AC

📡 Uplink Router (Mounted on Dodger):

MikroTik GroveA 52 AC – Outdoor CPE 802.11ac Gigabit PoE 2.4GHz 5GHz 5W OSL4 8dBi US Version

🛒 View on Amazon
  • Weatherproof outdoor design perfect for marine use
  • High-gain 8dBi antenna for long-range reception
  • Dual-band AC wireless with excellent sensitivity
  • PoE powered – single cable installation
GL.iNET GL-SFT1200 Opal

🏠 Cabin Router (Inside Boat):

GL.iNET GL-SFT1200 (Opal) – Secure Travel WiFi Router, AC1200 Dual Band Gigabit Ethernet Wireless Network

🛒 View on Amazon
  • Compact size perfect for boats
  • AC1200 dual-band for fast local network
  • Built-in VPN support for security
  • Easy web interface and mobile app
MikroTik RBGPOE

⚡ Power Supply:

MikroTik RBGPOE – Gigabit PoE Injector

🛒 View on Amazon
  • Powers the GroveA via ethernet cable
  • Eliminates need for separate power cable to dodger
  • Gigabit passthrough maintains full speed
  • Compact design for boat installation

🔌 Connection Diagram

📡
“Club”
Public WiFi
~~~
đŸ“ģ
MikroTik GroveA
(Dodger Mount)
Bridge Mode
PoE Injector
⚡
🔌
GL.iNET Opal
(Inside Cabin)
Your Private WiFi
~~~
📱đŸ’ģ
Your Devices
Phones, Laptops
✅ Here’s what you get: Your router talks directly to the marina network – no weird NAT issues!

🎛ī¸ You Won’t Lose Control

The MikroTik will always be at: http://192.168.1.254

So when the marina changes their WiFi password (and they will), you can update it without pulling your hair out.

0

Mount Everything First

The physical setup:

  1. GroveA on the dodger: Mount it somewhere with a clear shot to the marina WiFi – this thing has serious range
  2. Run one cable: Ethernet from dodger to cabin (the PoE means you only need this one cable)
  3. PoE injector in cabin: Plug the cable from outside into the “PoE” port, cable to your Opal into “LAN”
  4. Opal wherever you want WiFi coverage: Usually central in the boat works best
💡 Pro tip: The GroveA can grab signals from marinas that your phone can’t even see. Mount it high and with line of sight.
1

Get Into the MikroTik

Connect to it first:

  • Plug your laptop into the GroveA with an ethernet cable
  • Or connect to its default WiFi (looks like “MikroTik-XXXXXX”)

Then log in:

  • Web browser: Go to 192.168.88.1
  • Winbox: Download from mikrotik.com if you want the fancy interface
⚠ī¸ Default login: Username is admin, password is blank (just hit enter)
2

Tell It the Marina WiFi Password

Easiest way – use the web interface:

  1. Click Wireless then Security Profiles
  2. Click on the default one
  3. Change Mode to dynamic keys
  4. Set Authentication Types to WPA2 PSK
  5. Type the marina password in WPA2 Pre-Shared Key
  6. Hit Apply

Command line version (if you’re feeling fancy):

/interface wireless security-profiles set [ find default=yes ] mode=dynamic-keys authentication-types=wpa2-psk wpa2-pre-shared-key=”marina_password_here”
3

Set Wireless to Station Mode

Web Interface:

  1. Go to Wireless → Interfaces
  2. Double-click wlan1
  3. Set Mode: station
  4. Set SSID: club
  5. Set Security Profile: default
  6. Uncheck Disabled
  7. Click Apply

Terminal Commands:

/interface wireless set wlan1 mode=station ssid=”club” security-profile=default disabled=no
4

Clean Up Existing Configuration

Remove unnecessary configurations while preparing for bridge mode:

# Remove DHCP clients (we don’t want MikroTik getting its own IP) /ip dhcp-client remove [find] # Remove NAT rules (no routing needed) /ip firewall nat remove [find] # Remove old IP addresses (we’ll add management IP to bridge) /ip address remove [find] # Remove default routes /ip route remove [find]
ℹī¸ Note: Don’t worry about losing access – we’ll add a management IP in the next step
5

Create Bridge with Management Access

Create the bridge and add a management IP so you can always access the MikroTik:

# Create bridge /interface bridge add name=bridge1 # Add interfaces to bridge /interface bridge port add bridge=bridge1 interface=ether1 add bridge=bridge1 interface=wlan1 # Add management IP address to bridge /ip address add address=192.168.1.254/24 interface=bridge1
✅ Perfect! You can now always access MikroTik at 192.168.1.254 to change passwords or settings
6

Connect GL.iNET Router

  1. Connect ethernet cable from GroveA to GL.iNET WAN port
  2. Power on GL.iNET Opal router
  3. Configure GL.iNET to use 192.168.1.x subnet (e.g., 192.168.1.1)
  4. GL.iNET should get internet access through the bridge
  5. Set up your private WiFi name/password on GL.iNET using the web interface or mobile app
⚠ī¸ Important: Make sure GL.iNET Opal uses 192.168.1.x subnet so it can communicate with MikroTik management IP. The Opal’s intuitive interface makes this configuration straightforward.
7

Verification Steps

  1. Test MikroTik Access: Browse to http://192.168.1.254
  2. Check GL.iNET Opal Status: Should show connection to club network via the admin panel
  3. Connect device to your private WiFi
  4. Test internet: Browse websites, check speeds
  5. Verify no double NAT: Use online NAT detection tools
# To check your public IP and NAT status: # Visit whatismyipaddress.com # Or use: https://www.whatsmyip.org/nat-detection/
8

When the Marina Changes Their Password

This will happen, so here’s how to fix it:

  1. Connect to your Opal’s WiFi network
  2. Open a browser and go to http://192.168.1.254
  3. Log into the GroveA (still username: admin)
  4. Go to Wireless then Security Profiles
  5. Edit the default profile
  6. Update the password
  7. Hit Apply and you’re back online
✅ Easy fix: No need to reset anything or climb back up to the dodger!
9

When Things Go Wrong

Can’t connect to the marina WiFi?

  • Double-check you typed their password right
  • Some marinas block devices like this – ask the dockmaster
  • Try moving the GroveA higher or to a different spot
  • Make sure your Opal is using the 192.168.1.x addresses

Can’t get to the MikroTik at 192.168.1.254?

  • Make sure you’re connected to the Opal’s WiFi first
  • Check that the Opal is actually using 192.168.1.x addresses
  • Try using Winbox with the MAC address instead

Nuclear option:

  1. Hold the reset button on the GroveA for 10 seconds
  2. Plug directly into it with ethernet
  3. Start over at 192.168.88.1

📊 Network Flow & Benefits

Internet Request Path:

📱 Your Device → 🔌 GL.iNET Opal WiFi → 🔌 GL.iNET Router → ⚡ PoE Injector → đŸ“ģ MikroTik GroveA Bridge → 📡 Club WiFi → 🌐 Internet

Management Access:

📱 Your Device → 🔌 GL.iNET Opal WiFi → 🎛ī¸ MikroTik GroveA (192.168.1.254)

Key Benefits:

  • ✅ Single NAT (only at GL.iNET)
  • ✅ Direct connection to club network
  • ✅ Retained management access
  • ✅ Easy password changes
  • ✅ Better performance
  • ✅ No port forwarding issues
  • ✅ Private secure network inside boat

🎉 You’re Done!

Here’s what you ended up with:

  • Serious WiFi range – that GroveA grabs signals from way out there
  • Clean network setup – no double NAT weirdness
  • You stay in control – can always get back into the MikroTik
  • Simple wiring – just one cable to the dodger
  • Easy updates – password changes don’t require a reset

🔧 Don’t Forget

MikroTik is always at: http://192.168.1.254

Connect to your Opal’s WiFi first, then hit that address to manage the GroveA

Scroll to Top