I have two hapac2, I am using CAPsMAN with Lo a FW for high performance. But the side effect is they are using their selves DHCP pool.

If I disable the local FW, the 2nd ros can use the primary’s DHCP.
Is that possible to use the DHCP service from CAPsMAN server with local FW enabled? How?

Both have similar settings:
Ether2 as communication port and connecting to a switch
I have vlan20(guest WiFi ) Vlan55(WiFi) , they are under ether2.

I've switched to using management forwarding now as I just found it more stable, but I used to use local forwarding on hAP's connected to a CAPsMAN server and the DHCP was done centrally and not locally, so I know it's possible.

I don't have the config anymore, so I can't look up how I did it, but it should be straight forwards if both hAP's use the same VLAN's. Essentially each VLAN network is extended across both hAP's, so it doesn't matter where the DHCP server is, as long as there is one on each of the VLAN's.

If it doesn't work with local forward and you can local forwarding and it works, it sounds like you have an issue with your VLAN config for traffic between the 2 hAP's. Can you ping each VLAN interface on hAP1 from hAP2? Can you do the reverse and ping each VLAN interface on hAP2 from hAP1? If you can and there are no firewall rules in the way then I would have thought you should be able to get DHCP

thanks, I gave it up for now, but I will have a look into it when I have time. I am switching to WDS now.