I’m seeking help with capsman running on ccr-1016 v6.41and 10 dual band APs. I tried all different scenarios and searched internet/forums for a few days on this problem with no positive result. My delema is that from 3 SSID i can only use TWO and it doesn’t matter master or slave. So, after reboot or in the morning somebody connects to one of the ssid then somebody else connects to another ssid, after that nobody can connect to third ssid (log shows: capsman received deauth: unspecified (1)). I didn’t catch any correlation to AP or SSID, though I didn’t try to downgrade and didn’t try to duplicate the problem in sandbox.
caps-man configuration was done manually because provisioning only showed main, virtualAP wouldn’t populate no matter what I tried.
Also, in caps-man configuration I had to manualy select SSID, datapath and security (wouldn’t provision ether). To make it easier I made a script to pretty much copy/paste cap configuration 9 times. All 10 APs are RBwAPG-5HacT2HnD with CAP enabled on the first boot with no other settings.
Here is capsman configuration:
Code: Select all
# jan/27/2018 12:01:21 by RouterOS 6.41 on CCR-1016
/caps-man channel
add band=5ghz-a/n/ac control-channel-width=20mhz extension-channel=Ce \
frequency=5180 name=channel5.1
add band=2ghz-b/g/n control-channel-width=20mhz extension-channel=disabled \
frequency=2412 name=channel2.1
/caps-man interface
add disabled=yes l2mtu=1600 mac-address=64:D1:54:BF:9D:53 master-interface=\
none name=cap1 radio-mac=64:D1:54:BF:9D:53
add disabled=yes l2mtu=1600 mac-address=64:D1:54:BF:9D:52 master-interface=\
none name=cap2 radio-mac=64:D1:54:BF:9D:52
/caps-man datapath
add arp=enabled bridge=bridge64 name=Executives
add arp=enabled bridge=bridge65 name=Production
add arp=enabled bridge=bridge73 name=Guest
/caps-man security
add authentication-types=wpa-psk,wpa2-psk encryption=aes-ccm name=Executives \
passphrase=“12341234\$"
add authentication-types=wpa-psk,wpa2-psk encryption=aes-ccm name=Production \
passphrase=12341234!
add authentication-types=wpa-psk,wpa2-psk encryption=aes-ccm name=Guest \
passphrase=12341234
/caps-man configuration
#production is master, other two are slaves (virtual AP)
add datapath=Production max-sta-count=100 mode=ap multicast-helper=full name=\
c-Production security=Production security.authentication-types=\
wpa-psk,wpa2-psk security.encryption=aes-ccm ssid=STUDIO-PROD
add datapath=Executives max-sta-count=50 mode=ap multicast-helper=full name=\
c-Executive security=Executives security.authentication-types=\
wpa-psk,wpa2-psk security.encryption=aes-ccm ssid=STUDIO-EXEC
add datapath=Guest max-sta-count=200 mode=ap multicast-helper=full name=\
c-Guest security=Guest security.authentication-types=wpa-psk,wpa2-psk \
security.encryption=aes-ccm ssid=STUDIO-GUEST
/caps-man interface
# repeated 9 more times with only difference in channel (each nod has its own frequncy)
add channel=channel2.1 comment="1 FL left" configuration=c-Production \
datapath=Production disabled=no l2mtu=1600 mac-address=64:D1:54:A6:C9:72 \
master-interface=none name=cap1a radio-mac=64:D1:54:A6:C9:72 security=\
Production
add configuration=c-Executive datapath=Executives disabled=no l2mtu=1600 \
mac-address=64:D1:54:A6:C9:72 master-interface=cap1a name=cap1aa \
radio-mac=64:D1:54:A6:C9:72 security=Executives
add configuration=c-Guest datapath=Guest disabled=no l2mtu=1600 mac-address=\
64:D1:54:A6:C9:72 master-interface=cap1a name=cap1aaa radio-mac=\
64:D1:54:A6:C9:72 rates=rate-guest security=Guest
add channel=channel5.1 configuration=c-Production datapath=Production \
disabled=no l2mtu=1600 mac-address=64:D1:54:A6:C9:71 master-interface=\
none name=cap1b radio-mac=64:D1:54:A6:C9:71 security=Production
add configuration=c-Executive datapath=Executives disabled=no l2mtu=1600 \
mac-address=64:D1:54:A6:C9:71 master-interface=cap1b name=cap1bb \
radio-mac=64:D1:54:A6:C9:71 security=Executives
add configuration=c-Guest datapath=Guest disabled=no l2mtu=1600 mac-address=\
64:D1:54:A6:C9:71 master-interface=cap1b name=cap1bbb radio-mac=\
64:D1:54:A6:C9:71 rates=rate-guest security=Guest
/caps-man aaa
# this doesn’t effect capsman if changed to default
set interim-update=10s mac-caching=1m mac-mode=as-username-and-password
/caps-man manager
set enabled=yes upgrade-policy=suggest-same-version
/caps-man manager interface
add disabled=no interface=bridge64
add disabled=no interface=bridge65
add disabled=no interface=bridge73
add disabled=no interface=bridge254
/caps-man provisioning
add action=create-dynamic-enabled hw-supported-modes=a,ac,gn identity-regexp=\
id-Prod master-configuration=c-Production name-prefix=new- \
slave-configurations=c-Executive,c-Guest
add action=create-dynamic-enabled disabled=yes identity-regexp=id-exec \
master-configuration=c-Production slave-configurations=c-Executive
add action=create-dynamic-enabled disabled=yes identity-regexp=id-guest \
master-configuration=c-Production slave-configurations=c-Guest
Thank you.
