I'm running a central Router RB5009UG (as CAPsMAN) and two hAPax2 (as CAPs) and I'm a little bit struggling about the CAPsMAN datapath configurations.
Basic informations:
The Router itself and both APs are all configured with a central vlan-bridge (VLAN-ID=1; vlan-filtering enabled) and different VLAN-interfaces to get specific IP addresses (4 on the router, 2 on the APs):
Code: Select all
RB5009UG (CAPsMAN,DHCP,etc.) hAPax2 (CAP#1) hAPax2 (CAP#2)
VLAN 1 (management) 192.168.1.1/24 <-> 192.168.1.2/24 <-> 192.168.1.3/24
VLAN 10 (private) 192.168.10.1/24 <-> 192.168.10.2/24 <-> 192.168.10.3/24
VLAN 20 (devices) 192.168.20.1/24 <-> x <-> x
VLAN 30 (guests) 192.168.30.1/24 <-> x <-> x
-> all Ethernet Ports configured as following:
VLAN 1, 20, 30 tagged
VLAN 10 untagged(is a tagged management VLAN over ETH the right way for CAPsMAN?)
The VLAN network itself is working correctly, no issues there. Wifi without CAPsMAN was also working correctly. But now I wanted to switch to CAPsMAN.
My current CAPsMAN configuration on Router side (focus on 2,4GHz to not make it unnecessary complex):
RB5009UG (CAPsMAN):
Code: Select all
Interface:
Wifi:
Datapath:
Add:
Name: dpath_wlan-private
Bridge: vlan-bridge
VLAN: 10
Add:
Name: dpath_wlan-devices
Bridge: vlan-bridge
VLAN: 20
Add:
Name: dpath_wlan-guests
Bridge: vlan-bridge
VLAN: 30
Security
Add:
Name: sec_wlan-private
Auth. Types: wpa2-psk,wpa3-psk
Passphrase: xxxx
FT Enabled: enabled
FT over DS: enabled
Add:
Name: sec_wlan-devices
Auth. Types: wpa2-psk,wpa3-psk
Passphrase: xxxx
FT Enabled: enabled
FT over DS: enabled
Add:
Name: sec_wlan-guests
Auth. Types: wpa2-psk,wpa3-psk
Passphrase: xxxx
FT Enabled: enabled
FT over DS: enabled
Channel:
Add:
Name: chan_2GHz-AX
Band: 2GHz AX
Channel Width: 20MHz
Frequency: 2300-7300
Reselect Interval: 00:30:00 - 01:00:00
Add:
Name: chan_5GHz-AX
Band: 5GHz AX
Channel Width: 20/40MHz
Frequency: 5150-5350, 5470-5725
Reselect Interval: 00:30:00 - 01:00:00
Configuration:
Add:
Name: cfg_2G_wlan-private
SSID: wlan-private
Channel: chan_2GHz-AX
Security: sec_wlan-private
Datapath: <- not set !! (but why is it only working this way????)
Add:
Name: cfg_2G_wlan-devices
SSID: wlan-devices
Channel: chan_2GHz-AX
Security: sec_wlan-devices
Datapath: dpath_wlan-devices
Add:
Name: cfg_2G_wlan-guests
SSID: wlan-guests
Channel: chan_2GHz-AX
Security: sec_wlan-guests
Datapath: dpath_wlan-guests
Remote CAP:
CAPsMAN:
Enabled: true
Interfaces: VLAN-Interface_1
Provisioning:
Add:
Enabled: true
Supported Bands: 2GHz AX
Action: create dynamic enabled
Master Configur.: cfg_2G_wlan-private
Slave Configur.: cfg_2G_wlan-devices, cfg_2G_wlan-guestshAPax2 (CAPs):
Code: Select all
... vlan-bridge (vlan-id=1, admit all, vlan filtering enabled) ...
... VLAN-Interface_1 for VLAN1 and VLAN-Interface_10 for VLAN10, connected with the local vlan-bridge for setting IP-sddresses...
... all ETH-ports: VLAN 1/20/30 tagged, VLAN 10 untagged ...
Interface:
Wifi:
Datapath:
Add:
Name: dpath_cap
Bridge: vlan-bridge #local bridge, without VLAN-ID
Wifi:
edit wifi1:
name: wifi1_5G
Configuration.Manager: capsman
Datapath: dpath_cap
edit wifi2:
name: wifi2_2G
Configuration.Manager: capsman
Datapath: dpath_cap
Wifi - CAP:
Enabled: true
Discovery Interfaces: VLAN-Interface_1 #vlan-bridge in here was not working
Slaves Datapath: dpath_capThe strange behaviour is, if I set the datapath "dpath_wlan-private" into configuration "cfg_2G_wlan-private" on CAPsMAN side, there is following behaviour:
> wlan-private > devices can join the network, but will not get an IP address from DHCP / there is no connectivity
> wlan-devices > working correct
> wlan-guests > working correct
If I then switch the master/slave configuration under provisioning in CAPsMAN (master = cfg_2G_wlan-devices; slave = cfg_2G_wlan-private, cfg_2G_wlan-guests)
> wlan-private > working correct
> wlan-devices > devices can join the network, but will not get an IP address from DHCP / there is no connectivity
> wlan-guests > working correct
So the not working SSID is glued to the wifi master configuration - why?
Did I do anything wrong? Is there any obvious misconfiguration?
