CAPSMAN 2 with VLANS

vito420 · Mon Feb 05, 2024 6:36 pm

Hello, for last two days I'm struggling with setting up cAPGi-5HaxD2HaxD as CAP with RB3011UiAS as CAPSMAN. They are connected via CRS354-48P-4S+2Q+. On RB3011 I'm running both versions capsman, currently there are 3 legacy AP's which works without problem. They have untagged management vlan 10 and tagged vlans 20 and 30 for wifi (intranet and guest network). Now I'm trying to set up new wifi 6 CAP with new version of capsman. For this new AP I made all vlans tagged and set dhcp on management vlan in order to get it work, but with no luck. Current situation is following. CAP is registered in new CAPSMAN, I can see it in wifi table but there is red comment "SSID not set" after manual enabling these wifi interfaces on CAPSMAN side. On CAP side there is red comment managed by CAPSMAN for whole time. It seems like provisioning doesn't work correctly. What is interesting is that I see this wifiwave2 radio also as CAP interface in old manager as Master Inactive (MI) Is there anyone who can give me an advice what to set to make it work? Here are my configs. There is no authentication and I'm also provisioning only 2GHz N profile for testing purposes. Thank you

RB3011 CAPSMAN

/interface wifi
# SSID not set
add configuration.mode=ap disabled=no name=cap-wifi1 radio-mac=**ELIDED**
# SSID not set
add configuration.mode=ap disabled=no name=cap-wifi2 radio-mac=**ELIDED**
/interface wifi channel
add band=5ghz-ax disabled=no frequency=5160-5805 name=5-ax skip-dfs-channels=\
    all
add band=2ghz-ax disabled=no name=2-ax skip-dfs-channels=all width=\
    20/40/80mhz
add band=2ghz-n disabled=no name=2-n skip-dfs-channels=all width=20mhz
/interface wifi datapath
add disabled=no name=main vlan-id=20
add client-isolation=yes disabled=no name=guest vlan-id=30
/interface wifi configuration
add channel=2-ax country=Czech datapath=main disabled=no mode=ap name=\
    main_wifi_conf security.ft=yes .ft-over-ds=yes ssid=test
add channel=2-n country=Czech datapath=guest disabled=no mode=ap name=\
    guest_wifi_conf security.ft=yes .ft-over-ds=yes ssid=test_guest
/interface wifi capsman
set enabled=yes interfaces=all package-path="" require-peer-certificate=no \
    upgrade-policy=none
/interface wifi provisioning
add action=create-dynamic-enabled disabled=no master-configuration=\
    main_wifi_conf radio-mac=00:00:00:00:00:00 supported-bands=2ghz-n

CAP ax

# 2024-02-05 17:27:53 by RouterOS 7.13.1
# software id = **ELIDED**
#
# model = cAPGi-5HaxD2HaxD
# serial number = **ELIDED**
/interface bridge
add admin-mac=**ELIDED** auto-mac=no comment=defconf name=bridgeLocal \
    vlan-filtering=yes
/interface vlan
add interface=bridgeLocal name=vlan10-infrastructure vlan-id=10
/interface wifi datapath
add bridge=bridgeLocal comment=defconf disabled=no name=capdp
/interface wifi
# managed by CAPsMAN
set [ find default-name=wifi1 ] configuration.manager=capsman .mode=ap \
    datapath=capdp datapath.bridge=bridgeLocal disabled=no
# managed by CAPsMAN
set [ find default-name=wifi2 ] configuration.manager=capsman .mode=ap \
    datapath=capdp datapath.bridge=bridgeLocal disabled=no
/interface bridge port
add bridge=bridgeLocal comment=defconf interface=ether1
add bridge=bridgeLocal comment=defconf interface=ether2
/interface bridge vlan
add bridge=bridgeLocal tagged=ether1,bridgeLocal vlan-ids=10
add bridge=bridgeLocal tagged=ether1,bridgeLocal vlan-ids=20
add bridge=bridgeLocal tagged=ether1,bridgeLocal vlan-ids=30
/interface wifi cap
set discovery-interfaces=all enabled=yes slaves-datapath=capdp
/ip dhcp-client
add comment=defconf disabled=yes interface=bridgeLocal
add interface=vlan10-infrastructure
/system clock
set time-zone-name=**ELIDED**
/system logging
add topics=caps
/system note
set show-at-login=no

weshigbee · Sun Apr 28, 2024 10:43 am

Hey I had a similar issue, I was able to fix it by removing the static wifi interfaces. In my case they were created before I had setup my provisioning rules to specify dynamic interfaces and so they were static (by default, IIGC) and thus frozen in time as of when they were created and so I "reprovision" them with my wifi profile mods...

# check interfaces on capsman device:
/interface/wifi/print ;# check if D-Dynamic or S-Static

# disable capsman, will remove dynamic interfaces:
/interface/wifi/capsman set enabled=no

/interface/wifi/print ;# only S-Static remain

# nuke the static interfaces
/interface/wifi/remove cap-wifi1,cap-wifi2 ;# depends on your setup,

/interface/wifi/capsman set enabled=yes

# wait 5-10 seconds

print again and profit! (Hopefully)

CAPSMAN 2 with VLANS

CAPSMAN 2 with VLANS

Re: CAPSMAN 2 with VLANS