MikroTik LTE Setup Guide: Primary & Failover Internet (2026)

LTE (4G/5G) has become a reliable and often essential internet option – whether as a primary connection in rural areas or as a backup link for business continuity. MikroTik routers with USB modem slots or built‑in LTE modules (e.g., LtAP, wAP LTE, Chateau) make integration seamless. This guide covers configuration, failover with recursive routing, and monitoring.

Why Add LTE to Your MikroTik?

• Backup internet – Automatic failover when your primary wired connection fails.
• Primary in remote areas – Where DSL or fibre isn't available.
• Portable networks – Mobile setups like events, RVs, or temporary offices.
• Load balancing – Combine with wired connection (advanced).

Prerequisites

• MikroTik router with USB port (for external modems) or built‑in LTE modem.
• Compatible LTE modem (Huawei, Quectel, Sierra Wireless, or MikroTik's own).
• Active SIM card with data plan.
• Basic knowledge of interfaces and routes.

Step 1: Connecting and Detecting the LTE Modem

Plug in your USB modem or ensure the internal modem is enabled. Check if the modem is detected:

/interface lte print

You should see an interface like lte1. If not, reboot the router with the modem connected.

For USB modems, you may need to switch them to "modem mode" (not storage mode). Use AT commands:

/interface lte at-chat lte1 input="AT+QCFG=\"usbnet\",2"

Step 2: Basic LTE Configuration

Set the APN (Access Point Name) – obtain from your mobile provider.

/interface lte set lte1 apn=internet

Enable the interface:

/interface lte set lte1 allow-roaming=no

After a few seconds, check for an IP address:

/interface lte monitor lte1 once

You should see status=running and a dynamic IP assigned. To automatically get the IP, add a DHCP client on the LTE interface (though LTE usually provides IP via modem itself). Actually, in RouterOS, the LTE interface itself gets the IP; you can verify with:

/ip address print where interface=lte1

Step 3: Add Default Route via LTE

If the modem doesn't automatically add a default route, do it manually:

/ip route add dst-address=0.0.0.0/0 gateway=lte1 distance=2 comment="LTE Backup"

Set distance higher than your primary WAN (e.g., primary distance=1, LTE distance=2). The router will use the lower distance route when available.

Step 4: Implement Reliable Failover (Recursive Routing)

Simple distance‑based failover uses the LTE link only when the primary's gateway is unreachable. But if the primary ISP's gateway responds while internet is down, failover won't happen. Use recursive routing with a far‑end ping target (e.g., 1.1.1.1, 8.8.8.8).

4.1 Primary WAN recursive route

Assume your primary WAN is ether1 with gateway 203.0.113.1. First, create a route to a reliable internet IP via that gateway.

/ip route add dst-address=1.1.1.1/32 gateway=203.0.113.1 scope=10 comment="Ping target via primary"

Then create the recursive default route that uses this ping target as the gateway.

/ip route add dst-address=0.0.0.0/0 gateway=1.1.1.1 distance=1

4.2 LTE backup recursive route

Similarly, create a route to 8.8.8.8 via LTE interface.

/ip route add dst-address=8.8.8.8/32 gateway=lte1 scope=10 comment="Ping target via LTE"

Then recursive default route via that target with higher distance.

/ip route add dst-address=0.0.0.0/0 gateway=8.8.8.8 distance=2

Now, if 1.1.1.1 becomes unreachable via primary WAN, the primary default route disappears, and the LTE route (distance 2) takes over.

Step 5: Masquerade (NAT) for LTE Internet Access

Add a masquerade rule for traffic exiting LTE (unless your LTE plan provides public IP routing).

/ip firewall nat add chain=srcnat out-interface=lte1 action=masquerade comment="NAT for LTE"

Step 6: Force Certain Traffic to Use LTE (Routing Marks)

You can mark specific traffic to always use LTE, regardless of failover status (e.g., guest network).

/ip firewall mangle add chain=prerouting src-address=192.168.99.0/24 action=mark-routing new-routing-mark=to-lte
/routing table add name=to-lte fib
/ip route add dst-address=0.0.0.0/0 gateway=lte1 routing-mark=to-lte

Step 7: Monitor LTE Signal and Usage

Check signal strength and connection stats:

/interface lte monitor lte1 once
/interface lte info lte1

To log signal quality over time, create a script and scheduler.

/system script add name=lte-signal source=":local rssi [/interface lte get lte1 rssi]; :log info \"LTE RSSI: \$rssi\""
/system scheduler add name=monitor-lte interval=5m on-event=lte-signal

Step 8: SMS Management (Optional)

Many LTE modems support sending/receiving SMS. Useful for alerts or remote commands.

/tool sms set port=lte1
/tool sms send lte1 phone-number="+1234567890" message="Router online via LTE"
/tool sms inbox print

Step 9: LTE Passthrough Mode (Assign Public IP to a LAN Device)

Some LTE providers give a public IP to the modem. You can pass that IP to a downstream device (e.g., another router or a PC) using passthrough mode.

/interface lte set lte1 passthrough-interface=ether2 passthrough-mac=XX:XX:XX:XX:XX:XX

This makes the LTE modem act as a bridge, assigning the public IP directly to the specified device.

Troubleshooting LTE on MikroTik

• Modem not detected: Check USB port compatibility. Some modems require extra drivers. Update RouterOS. Try /system usb power-reset.
• No IP address assigned: Verify APN. Run /interface lte monitor lte1 to see registration status. Ensure SIM is active and not locked.
• Slow speeds: Check signal strength. Use external antennas if possible. Adjust modem band selection:

/interface lte set lte1 band="3,20"

• Recursive failover not working: Ensure the ping target (1.1.1.1) is reachable via primary when up. Check routes with /ip route print where gateway~"1.1.1.1|8.8.8.8". The route should be present and the distance correct.

Real‑World Use Cases

Small Office with DSL + LTE Backup

Primary DSL connection (ether1) with recursive check to 1.1.1.1. LTE (lte1) with distance 2. When DSL fails, office switches to LTE automatically. Employees notice only a few seconds of disruption.

Rural Home with LTE as Primary

No wired options. LTE provides 50 Mbps. Use external antennas, monitor signal, and optionally bond two LTE connections for more speed (advanced: using MLPPP or load balancing).

Event WiFi Trailer

MikroTik Chateau LTE12 with built‑in LTE and WiFi. Single device provides internet, hotspot, and management – perfect for pop‑up events.

Hardware Recommendations

Security Considerations

• Disable roaming if not needed (allow-roaming=no) to avoid unexpected charges.
• Monitor data usage with /interface lte monitor lte1 once (some modems report total usage).
• For backup use, set a data cap script to disable LTE after a threshold (e.g., 10 GB).

Conclusion

Adding LTE to your MikroTik router provides affordable redundancy or primary connectivity where wired options fail. With recursive routing, failover is automatic and reliable. Start with basic APN and route distance, then refine with recursive checks and monitoring. For advanced users, explore load balancing (PCC) across wired and LTE, or using LTE as a management plane for remote router access.

Next steps: test your failover by unplugging the primary WAN and observing the switch to LTE. Implement SMS alerts for signal drops. For high‑availability setups, combine with VRRP and dual routers.