Turnkey MikroTik Setup for Office Networks from $150

A new office usually starts with furniture and internet, and the network gets remembered last. The result: one router handles employees, guest Wi-Fi, and cameras all mixed together, every passwords is known to the whole floor, and when something breaks, nobody knows why. A turnkey MikroTik setup for office networks solves this: the network gets built correctly from the start, with segmentation and clear documentation.

What’s included

• Firewall configuration: protects the network from external and internal threats
• VLANs for employees, guests, cameras, and VoIP phones: isolates traffic into separate segments
• Wi-Fi based on CAPsMAN (centralized access point management from a single router, so a phone or laptop roams between access points without dropping connection)
• DHCP and DNS setup: automatic address assignment and name resolution for devices
• Network documentation: diagram, addressing table, passwords, and access credentials

How the work is done

%%{init: {
  'theme': 'base',
  'themeVariables': {
    'primaryColor': '#ffffff',
    'primaryTextColor': '#1e293b',
    'primaryBorderColor': '#94a3b8',
    'lineColor': '#64748b',
    'fontSize': '15px',
    'fontFamily': 'ui-sans-serif, system-ui, sans-serif'
  },
  'flowchart': {'curve': 'linear', 'nodeSpacing': 50, 'rankSpacing': 50}
}}%%
flowchart TD
    S1["1. Site survey"]
    S2["2. VLAN network design"]
    S3["3. Configuration prep"]
    S4["4. Deployment remote or on-site"]
    S5["5. Testing and documentation"]
    S1 --> S2
    S2 --> S3
    S3 --> S4
    S4 --> S5
    style S1 fill:#f8fafc,stroke:#3b82f6,stroke-width:2px,color:#1e40af
    style S2 fill:#f8fafc,stroke:#94a3b8,stroke-width:2px,color:#1e293b
    style S3 fill:#f8fafc,stroke:#94a3b8,stroke-width:2px,color:#1e293b
    style S4 fill:#f8fafc,stroke:#94a3b8,stroke-width:2px,color:#1e293b
    style S5 fill:#f8fafc,stroke:#22c55e,stroke-width:2px,color:#15803d

1. Site survey. We get on a call, go over the floor plan, count workstations, cameras, phones, and Wi-Fi access points. This avoids reworking the design midway through.
2. Network design. I plan out VLANs, addressing, and pick hardware that matches your load.
3. Configuration prep. I prepare the config ahead of time to minimize network downtime during deployment.
4. Deployment. Remote or on-site, I migrate devices to the new configuration.
5. Testing and documentation. I check every segment, put together the network diagram, and hand over all access credentials.

What hardware you’ll need

MikroTik router: I’ll pick one that fits the job, for example hAP ax³ or RB5009 depending on your load. Plus a managed switch and access points (cAP or hAP ax for Wi-Fi with roaming). If you already have MikroTik hardware, I’ll check it and use it instead of buying new gear, if it’s up to the task.

What gets deployed

• Firewall with rules tailored to your network
• VLANs for employees, guests, cameras, and VoIP
• DHCP and DNS for automatic address assignment
• Wi-Fi with CAPsMAN and roaming between access points
• Guest network with bandwidth limits, isolated from the work network
• Configuration backups: in case of hardware failure

What you get at the end

• A working network split into segments: employees, guests, cameras, and VoIP each separate
• Network diagram and addressing table
• All passwords and access credentials for the hardware
• Instructions for employees on connecting to Wi-Fi and how the guest network differs from the work network

Pricing

Base price starts from 15,000 ₽, timeline 2-3 days. Final cost depends on the number of access points, format (remote or on-site), and the scope of extra work.

Not included in the price: hardware cost, structured cabling, and installation work.

After handover: 14 days of free fixes for any issues. After that: one-off work at 2,000 ₽/hour or support starting from 4,000 ₽/month.

What I need from you

• A list of devices that will connect to the network
• Access to the ISP’s router or your internet connection credentials
• A floor plan showing the layout of workstations and cameras

Frequently asked questions

Can you set up the network remotely, without visiting the office?

Yes, remote or on-site, it’s your choice. If the hardware is already in place and accessible, I can do part of the work remotely.

What if we don’t have MikroTik, but a different router?

I’ll pick hardware that fits your needs, for example hAP ax³ or RB5009. If you already have MikroTik installed, I’ll check it and use it if the specs are good enough.

How long does the whole job take?

Timeline: 2-3 days, from site survey to handover with documentation.

What happens if something stops working after handover?

I fix any issues for free within 14 days after handover. After that, it’s one-off work or support under a separate rate.

Do we need a separate network for video surveillance?

Yes, cameras go into a separate VLAN from the employee work network. This protects against unwanted access and keeps the main traffic uncongested.

What if we need another access point after the project is done?

It gets added separately as an extra service. It’s cheaper to say upfront during the site survey how many access points you need, rather than buying them one at a time later.

Related reading

• VLAN on MikroTik: separating guests, employees, VoIP, and cameras
• MikroTik Wi-Fi setup on RouterOS 7 (Wifiwave2): a cheat sheet from channels to CAPsMAN
• VLAN setup on MikroTik RouterOS 7: full guide 2026