You should avoid repeaters if possible - anything downstream from a repeater is only going to get 50% bandwidth because the repeater must spend 1/2 its time doing tx/rx from the real AP, and then the other half is available to the devices downstream from the repeater.
Furthermore, it’s been a while since I dealt with Ubnt gear, but I’m not thinking that it could do WDS over encrypted wlan when the WDS peer is not Ubiquiti.
You could try though - enable WDS on the 2011 and set the WDS bridge to whatever your LAN bridge is, and set the UBNT as an AP-WDS - you’ll need to statically define the WDS peer there. If it’s working, you’ll see a dynamic WDS entry pop up on the Mikrotik’s bridge. If not, then chances are it’s not going to work. If you really can’t get a LAN cable out to the location of your repeater, then perhaps a PTP using a different frequency would be better for you.
To enable WDS on the 2011, In the Wireless interface configuration, your mode should be set to “ap bridge” and in the WDS tab, set WDS mode: dynamic. WDS default bridge should be whatever bridge the directly-connected stations are assigned to.
Looks fine - the open drop-down is hiding the WDS default bridge setting - but this simply tells the router which bridge to associate WDS links to - and that should be whichever bridge holds your wireless network on it.
If you have a bridge called ‘wireless’ for instance, and that is the bridge with the DHCP and firewall settings for your wireless users, then choose that bridge.
If you’re not using a bridge yet (if your DHCP server is running directly on wlan1) then you’re going to need to make a new bridge interface (click bridge, add a new bridge and name it something like ‘wireless’)
Go into ports, and add the interface wlan1 to the wireless bridge
Go into IP addresses and move the LAN IP address onto the wireless bridge interface.
Go into DHCP server and change the interface from wlan1 to wireless bridge interface.
Go through your firewall filter/nat/mangle rules and if any rule makes reference to interface wlan1, change it to the wireless bridge interface.
Finally, use this wireless bridge interface in the WDS default Bridge setting.
One thing I did notice is that ether2, ether3, ether4, and ether5 are all set as bridge ports.
While this will work, it won’t give the wirespeed performance between devices connected to these gigabit interfaces.
You should remove ether3, ether4 and ether5 from the bridge ports, then go into the ethernet interface configuration for ether3 and set master port = ether2, and then set the same thing for ether4 and ether5.
master/slave means that the hardware-based switch in the 2011 can forward traffic directly between the interfaces at wire speed, but bridge → ports will forward the traffic using the CPU, which is much slower than wire speed.
Thanks man , i did that, but i notice that there are two bridge ports, ether2 and ether6-master-local. should i make one port or two ports, what do you advice me ?
I suggest you bridge ports ether2, ether6, and wlan1 if you want all of this to be a single network. This is because ether6 - ether10 are on a different switch chip than sfp1,ether1-ether5.