CAPsMAN and 4 CAP devices

ivicav · Tue Sep 08, 2015 6:51 pm

I have one RB750GL and four RB951G-2HnD devices. RB750GL is CAPsMAN and other 4 devices should be CAPs.

All four devices are upgraded to 6.31 version of RouterOS. All 4 CAPs are connected to CAPsMAN and 2 of them are working as it should (CAPRoom1 and CAPRoom2) but other two refuses to retrieve WiFi configuration from CAPsMAN. What did I do wrong? Here are configs:

CAPsMAN

# sep/08/2015 17:05:01 by RouterOS 6.31
# software id = 3ZR0-PNPG
#
/caps-man channel
add band=2ghz-b/g/n frequency=2422 name=kanal3
add band=2ghz-b/g/n frequency=2447 name=kanal7
add band=2ghz-b/g/n frequency=2452 name=kanal9
add band=2ghz-b/g/n frequency=2472 name=kanal13
/interface bridge
add name=vlan10br protocol-mode=stp
add name=vlan20br protocol-mode=none
/caps-man interface
# 
add arp=enabled channel=kanal7 disabled=no l2mtu=1600 mac-address=\
    4C:5E:0C:AA:37:D1 master-interface=none mtu=1500 name=CAP_Room1 \
    radio-mac=4C:5E:0C:AA:37:D1
# 
add arp=enabled channel=kanal3 disabled=no l2mtu=1600 mac-address=\
    4C:5E:0C:AA:36:CB master-interface=none mtu=1500 name=CAP_Room2 \
    radio-mac=4C:5E:0C:AA:37:CB
/interface vlan
add interface=ether1 l2mtu=1594 name=VLAN10 vlan-id=10
add interface=ether2 l2mtu=1594 name=VLAN10#2 vlan-id=10
add interface=ether3 l2mtu=1594 name=VLAN10#3 vlan-id=10
add interface=ether4 l2mtu=1594 name=VLAN10#4 vlan-id=10
add interface=ether5 l2mtu=1594 name=VLAN10#5 vlan-id=10
add interface=ether1 l2mtu=1594 name=VLAN20 vlan-id=20
add interface=ether2 l2mtu=1594 name=VLAN20#2 vlan-id=20
add interface=ether3 l2mtu=1594 name=VLAN20#3 vlan-id=20
add interface=ether4 l2mtu=1594 name=VLAN20#4 vlan-id=20
add interface=ether5 l2mtu=1594 name=VLAN20#5 vlan-id=20
/caps-man datapath
add bridge=vlan10br client-to-client-forwarding=yes name=vlan10dp
add bridge=vlan20br name=vlan20dp
/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
    name=GUEST passphrase=XXXXXX
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
    name=LAN passphrase=YYYYYYYY
/caps-man configuration
add country=serbia datapath=vlan20dp mode=ap name=CompanyGUESTcfg security=\
    GUEST ssid=CompanyGuest
add country=serbia datapath=vlan10dp mode=ap name=CompanyLANcfg security=LAN \
    ssid=Company
/caps-man interface
# 
add arp=enabled configuration=CompanyLANcfg disabled=no l2mtu=1600 mac-address=\
    4C:5E:0C:AA:A7:D2 master-interface=CAP_Room1 mtu=1500 name=capRoom110 \
    radio-mac=4C:5E:0C:AA:A7:D2
# 
add arp=enabled configuration=CompanyGUESTcfg disabled=no l2mtu=1600 \
    mac-address=4C:5E:0C:AA:A7:D3 master-interface=CAP_Room1 mtu=1500 name=\
    capRoom120 radio-mac=4C:5E:0C:AA:A7:D3
# 
add arp=enabled configuration=CompanyLANcfg disabled=no l2mtu=1600 mac-address=\
    4C:5E:0C:AA:36:CC master-interface=CAP_Room2 mtu=1500 name=\
    capRoom210 radio-mac=4C:5E:0C:AA:37:CC
# 
add arp=enabled configuration=CompanyGUESTcfg disabled=no l2mtu=1600 \
    mac-address=4C:5E:0C:AA:36:CD master-interface=CAP_Room2 mtu=1500 \
    name=capRoom220 radio-mac=4C:5E:0C:AA:37:CD
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=aes-128-cbc
/system logging action
add name=Syslog remote=172.28.42.15 target=remote
/caps-man access-list
add action=accept interface=all signal-range=-80..120
add action=reject interface=all signal-range=-120..-81 time=\
    0s-1d,sun,mon,tue,wed,thu,fri,sat
/caps-man manager
set enabled=yes
/interface bridge port
add bridge=vlan10br interface=VLAN10
add bridge=vlan10br interface=VLAN10#2
add bridge=vlan10br interface=VLAN10#3
add bridge=vlan10br interface=VLAN10#4
add bridge=vlan10br interface=VLAN10#5
add bridge=vlan20br interface=VLAN20
add bridge=vlan20br interface=VLAN20#2
add bridge=vlan20br interface=VLAN20#3
add bridge=vlan20br interface=VLAN20#4
add bridge=vlan20br interface=VLAN20#5
add bridge=vlan10br
add bridge=vlan10br
add bridge=vlan20br
add bridge=vlan20br
add bridge=vlan10br
add bridge=vlan10br interface=capRoom210
add bridge=vlan10br interface=capRoom110
add bridge=vlan20br
add bridge=vlan20br interface=capRoom220
add bridge=vlan20br interface=capRoom120
/ip address
add address=172.28.42.249/23 comment="Management port" interface=VLAN10 \
    network=172.28.42.0
/system clock
set time-zone-name=Europe/Belgrade
/system identity
set name=CAPsMAN
/system logging
set 0 action=Syslog
set 1 action=Syslog
set 2 action=Syslog
set 3 action=Syslog
add action=Syslog topics=system
add action=Syslog topics=wireless
add action=Syslog topics=account
/system ntp client
set enabled=yes primary-ntp=172.28.42.15
/system package update
set channel=current
/system routerboard settings
set cpu-frequency=720MHz protected-routerboot=disabled
/tool romon port
add

CAP1

# sep/08/2015 17:05:49 by RouterOS 6.31
# software id = 6SF5-20V5
#
/interface bridge
add name=vlan10br protocol-mode=none
add name=vlan20br protocol-mode=none
/interface wireless
# managed by CAPsMAN
# channel: 2447/20-eC/gn(30dBm), SSID: , CAPsMAN forwarding
set [ find default-name=wlan1 ] band=2ghz-b l2mtu=1600 ssid=MikroTik
/interface ethernet
set [ find default-name=ether2 ] disabled=yes
set [ find default-name=ether3 ] disabled=yes
set [ find default-name=ether4 ] disabled=yes
set [ find default-name=ether5 ] disabled=yes
/interface vlan
add interface=ether1 l2mtu=1594 name=VLAN10 vlan-id=10
add interface=ether1 l2mtu=1594 name=VLAN20 vlan-id=20
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=aes-128-cbc
/interface bridge port
add bridge=vlan10br interface=VLAN10
add bridge=vlan20br interface=VLAN20
/interface wireless cap
set caps-man-addresses=172.28.42.249 enabled=yes interfaces=wlan1
/ip address
add address=172.28.42.248/23 interface=VLAN10 network=172.28.42.0
/system clock
set time-zone-autodetect=no time-zone-name=Europe/Belgrade
/system identity
set name=CAPRoom1
/system leds
set 0 interface=wlan1
/system ntp client
set enabled=yes primary-ntp=172.28.42.15
/system package update
set channel=current
/tool romon port
add

CAP2

# sep/08/2015 17:06:25 by RouterOS 6.31
# software id = XKC6-PBW4
#
/interface bridge
add name=vlan10br protocol-mode=none
add name=vlan20br protocol-mode=none
/interface wireless
# managed by CAPsMAN
# channel: 2422/20-Ce/gn(30dBm), SSID: , CAPsMAN forwarding
set [ find default-name=wlan1 ] band=2ghz-b l2mtu=1600 mac-address=\
    4C:5E:0C:AA:36:CB ssid=MikroTik
/interface ethernet
set [ find default-name=ether2 ] disabled=yes
set [ find default-name=ether3 ] disabled=yes
set [ find default-name=ether4 ] disabled=yes
set [ find default-name=ether5 ] disabled=yes
/interface vlan
add interface=ether1 l2mtu=1594 name=VLAN10 vlan-id=10
add interface=ether1 l2mtu=1594 name=VLAN20 vlan-id=20
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=aes-128-cbc
/system logging action
add name=Syslog remote=172.28.42.15 target=remote
/interface bridge port
add bridge=vlan10br interface=VLAN10
add bridge=vlan20br interface=VLAN20
/interface wireless cap
set caps-man-addresses=172.28.42.249 enabled=yes interfaces=wlan1
/ip address
add address=172.28.42.251/23 interface=VLAN10 network=172.28.42.0
/snmp
set enabled=yes
/system clock
set time-zone-autodetect=no time-zone-name=Europe/Belgrade
/system identity
set name=CAPRoom2
/system leds
set 0 interface=wlan1
/system ntp client
set enabled=yes primary-ntp=172.28.42.15
/system package update
set channel=current
/tool romon port
add

CAP3

# sep/08/2015 17:07:00 by RouterOS 6.31
# software id = V6KV-0IT5
#
/interface bridge
add name=vlan10br protocol-mode=none
add name=vlan20br protocol-mode=none
/interface wireless
# managed by CAPsMAN
set [ find default-name=wlan1 ] ssid=MikroTik
/interface ethernet
set [ find default-name=ether2 ] disabled=yes
set [ find default-name=ether3 ] disabled=yes
set [ find default-name=ether4 ] disabled=yes
set [ find default-name=ether5 ] disabled=yes
/interface vlan
add interface=ether1 l2mtu=1594 name=VLAN10 vlan-id=10
add interface=ether1 l2mtu=1594 name=VLAN20 vlan-id=20
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/system logging action
add name=Syslog remote=172.28.42.15 target=remote
/interface bridge port
add bridge=vlan10br interface=VLAN10
add bridge=vlan20br interface=VLAN20
/interface wireless cap
set caps-man-addresses=172.28.42.249 enabled=yes interfaces=wlan1
/ip address
add address=172.28.42.253/23 interface=VLAN10 network=172.28.42.0
/snmp
set enabled=yes
/system clock
set time-zone-autodetect=no time-zone-name=Europe/Belgrade
/system identity
set name=CAPRoom3
/system leds
set 0 interface=wlan1
/system ntp client
set enabled=yes primary-ntp=172.28.42.15
/system package update
set channel=current
/tool romon port
add

CAP4

# sep/08/2015 17:07:35 by RouterOS 6.31
# software id = KK43-7C5P
#
/interface bridge
add name=vlan10br protocol-mode=none
add name=vlan20br protocol-mode=none
/interface wireless
# managed by CAPsMAN
set [ find default-name=wlan1 ] ssid=MikroTik
/interface ethernet
set [ find default-name=ether2 ] disabled=yes
set [ find default-name=ether3 ] disabled=yes
set [ find default-name=ether4 ] disabled=yes
set [ find default-name=ether5 ] disabled=yes
/interface vlan
add interface=ether1 l2mtu=1594 name=VLAN10 vlan-id=10
add interface=ether1 l2mtu=1594 name=VLAN20 vlan-id=20
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=aes-128-cbc
/system logging action
add name=Syslog remote=172.28.42.15 target=remote
/interface bridge port
add bridge=vlan10br interface=VLAN10
add bridge=vlan20br interface=VLAN20
/interface wireless cap
set caps-man-addresses=172.28.42.249 enabled=yes interfaces=wlan1
/ip address
add address=172.28.42.254/23 interface=VLAN10 network=172.28.42.0
/snmp
set enabled=yes
/system clock
set time-zone-name=Europe/Belgrade
/system identity
set name=CAPRoom4
/system leds
set 0 interface=wlan1
/system ntp client
set enabled=yes primary-ntp=172.28.42.15
/system package update
set channel=current
/tool romon port
add

TonyJr · Wed Sep 09, 2015 4:27 am

have you enabled cm2 package and rebooted all devices?

ivicav · Wed Sep 09, 2015 12:09 pm

Yes I did. I just upgraded RouterOS to 6.32.1 version. Downloaded file wireless-cm2-6.32.1-mipsbe.npk and installed on all 5 devices. Same result.

Right now I configured those two problematic devices to work separately (one as CAPsMAN and other as CAP) with same config and SSIDs but that is not permanent solution.

TonyJr · Wed Sep 09, 2015 5:33 pm

On the capsman device, try setting the IP address to interface vlan10br instead of VLAN10. This can cause issues.

solaoxo · Thu Sep 10, 2015 12:31 am

You may pack a mistake to have chosen wireless-cm2 can.

QQ截图20150910052908.png

ivicav · Thu Sep 10, 2015 12:48 pm

I changed address interface to vlan10br but still no luck.

I don't get it. Only thing I can imagine that could be problem is that those 2 devices were configured to work before I bought another 3 (RB750 and 2 RB951). They had 6.1 version and it was CAPsMAN v2 on them installed. Then I configured new ones and just tried to reconfigure that devices and connect to RB750GL.

There is absolutely nothing in logs on syslog server and they works just fine but separately.

karlisi · Thu Sep 10, 2015 1:05 pm

Have You tried to create at least one provisioning rule?
http://wiki.mikrotik.com/wiki/Manual:CA ... ovisioning

karlisi · Thu Sep 10, 2015 1:14 pm

I don't get it. Only thing I can imagine that could be problem is that those 2 devices were configured to work before I bought another 3 (RB750 and 2 RB951). They had 6.1 version and it was CAPsMAN v2 on them installed. Then I configured new ones and just tried to reconfigure that devices and connect to RB750GL.

There must be the same CAPsMAN version on all devices, version 1 can't talk to version 2 and vice versa. Enable wireless-cm2 package on all devices.

janisk · Thu Sep 10, 2015 3:03 pm

as karlisi points out, you have to use the same CAPsMAN on all devices. Our recommendation would be to use CAPsMAN 2 and wireless-cm2 package for best results.

ivicav · Wed Sep 23, 2015 4:43 pm

Yes. I am aware of that. I did equalize all 5 devices with same OS version and CM version2. I did tried radio provisioning but no luck either. I am running out of ideas now.

Wed Sep 23, 2015 4:59 pm

Yes. I am aware of that. I did equalize all 5 devices with same OS version and CM version2. I did tried radio provisioning but no luck either. I am running out of ideas now.

Please write to support@mikrotik.com and include the support output file from the CAPsMAN and the CAP that doesn't want to connect to the CAPsMAN.

hubtik · Fri Apr 08, 2016 7:47 pm

Hi all,

@ivicav did you managed to solve your problems?
I'm also having issues with RB750GL as CAPsMAN.

Please also see topic:
http://forum.mikrotik.com/viewtopic.php?f=7&t=104646

It seems that more people are having similar issues.

---
Regards
Hubert

ivicav · Sat Apr 09, 2016 12:37 pm

Yes I solved the problem.

When you upgrade CAPsMAN and all of CAPs then you should enable wireless-cm2 package by command:

/system package enable wireless-cm2

or In Winbox open System Packages menu and select the wireless-cm2 and click Enable. And then you need to do a System Reboot command.

All devices need to be on same version of ROS and wireless-cm2.

hubtik · Mon Apr 11, 2016 10:23 pm

You are right!

Versions were the same all the time, but cm2 package wasn't enabled on some CAPs..

Thank you!

CAPsMAN and 4 CAP devices

CAPsMAN and 4 CAP devices

Re: CAPsMAN and 4 CAP devices

Re: CAPsMAN and 4 CAP devices

Re: CAPsMAN and 4 CAP devices

Re: CAPsMAN and 4 CAP devices

Re: CAPsMAN and 4 CAP devices

Re: CAPsMAN and 4 CAP devices

Re: CAPsMAN and 4 CAP devices

Re: CAPsMAN and 4 CAP devices

Re: CAPsMAN and 4 CAP devices

Re: CAPsMAN and 4 CAP devices

Re: CAPsMAN and 4 CAP devices

Re: CAPsMAN and 4 CAP devices

Re: CAPsMAN and 4 CAP devices