Page 1 of 1

CAP's ident conflict

Posted: Fri Aug 03, 2018 11:10 am
by Neferith
Hello All,

I have problem with 1 of 4 APs which are managed by CAPsMAN. For AP01 I get errors:
10:02:25 caps,info [::ffff:10.1.100.11:43729,Join,[6C:3B:6B:42:C7:7B]] joined, pro
vides radio(s): 6C:3B:6B:42:C7:7C 
10:02:29 caps,info OGR-AP01-1: selected channel 2412/20-Ce/gn(20dBm) 
10:02:56 [b]caps,error removing stale connection [::ffff:10.1.100.11:43729,Run,[6C:3B
:6B:42:C7:7B]] because of ident conflict with [::ffff:10.1.100.11:37543,Join,[6C:3
B:6B:42:C7:7B]] [/b]
10:02:56 caps,info [::ffff:10.1.100.11:37543,Join,[6C:3B:6B:42:C7:7B]] joined, pro
vides radio(s): 6C:3B:6B:42:C7:7C 
10:03:00 caps,info OGR-AP01-1: selected channel 2457/20-eC/gn(20dBm) 
10:03:22 dhcp,info server-vlan192 deassigned 192.168.0.167 from 10:9A:B9:01:24:4A 
10:03:22 dhcp,info server-vlan192 assigned 192.168.0.167 to 10:9A:B9:01:24:4A 
10:03:27 caps,error removing stale connection [::ffff:10.1.100.11:37543,Run,[6C:3B
:6B:42:C7:7B]] because of ident conflict with [::ffff:10.1.100.11:38221,Join,[6C:3
B:6B:42:C7:7B]] 
10:03:27 caps,info [::ffff:10.1.100.11:38221,Join,[6C:3B:6B:42:C7:7B]] joined, pro
vides radio(s): 6C:3B:6B:42:C7:7C 
10:03:30 caps,info OGR-AP01-1: selected channel 2452/20-Ce/gn(20dBm) 
10:03:58 caps,error removing stale connection [::ffff:10.1.100.11:38221,Run,[6C:3B
:6B:42:C7:7B]] because of ident conflict with [::ffff:10.1.100.11:33405,Join,[6C:3
B:6B:42:C7:7B]] 
10:03:58 caps,info [::ffff:10.1.100.11:33405,Join,[6C:3B:6B:42:C7:7B]] joined, pro
vides radio(s): 6C:3B:6B:42:C7:7C 
10:04:01 caps,info OGR-AP01-1: selected channel 2452/20-Ce/gn(20dBm) 
10:04:25 caps,info 20:78:F0:E5:F4:BA@OGR-AP03-1-1 connected, signal strength -85 
10:04:29 [b]caps,error removing stale connection [::ffff:10.1.100.11:33405,Run,[6C:3B
:6B:42:C7:7B]] because of ident conflict with [::ffff:10.1.100.11:60123,Join,[6C:3
B:6B:42:C7:7B]] [/b]
10:04:29 caps,info [::ffff:10.1.100.11:60123,Join,[6C:3B:6B:42:C7:7B]] joined, pro
vides radio(s): 6C:3B:6B:42:C7:7C 
10:04:32 caps,info OGR-AP01-1: selected channel 2452/20-Ce/gn(20dBm) 
10:05:00 [b]caps,error removing stale connection [::ffff:10.1.100.11:60123,Run,[6C:3B
:6B:42:C7:7B]] because of ident conflict with [::ffff:10.1.100.11:58957,Join,[6C:3[/b]
AP01 is being disconnected and connected again. Cable is OK (different AP works fine on it). Other APs work fine.

I noticed double cerificates on CAPsAMN, so I revoked both of them:
[xadmin@OGR-R01] > /certificate print
Flags: K - private-key, D - dsa, L - crl, C - smart-card-key, A - authority, I - issued, R - revoked, E - expired, T - trusted 
 #          NAME                                           COMMON-NAME                                          SUBJECT-ALT-NAME                                                                       FINGERPRINT                                         
 0 K   A  T CAPsMAN-CA-5B7AC357B87B                        CAPsMAN-CA-5B7AC357B87B                                                                                                                     26009078e9ccb588551ec5f3bc07111862a30f8e1ce3c53f3...
 1 K    I   CAPsMAN-5B7AC357B87B                           CAPsMAN-5B7AC357B87B                                                                                                                        ce3144151deb29bf108fc90cb9154a93ee5b06dc2b2db871d...
 2      I   CAP-CC2DE0319484                               CAP-CC2DE0319484                                                                                                                            06d11669629ddd8e03a8f44abdfa0d1e28048d83c04aba67c...
 3      I   CAP-CC2DE031945C                               CAP-CC2DE031945C                                                                                                                            4132657301f6c6c13b208461c31e8bd8063751887265923f1...
 4      R   CAP-6C3B6B42C77B-old                           CAP-6C3B6B42C77B                                                                                                                            4e768bbc9732f2e6fd00ca26766b42a882fc5d2877eea5f3b...
 5      I   CAP-CC2DE031945E                               CAP-CC2DE031945E                                                                                                                            ef9dfb378f0f18eb8029208598d515d38b04095131dc65638...
 6      R   CAP-6C3B6B42C77B-old2                          CAP-6C3B6B42C77B                                                                                                                            36382215b18a57ccc06f976c317614968df12ab6d1672debc...
[xadmin@OGR-R01] > 
It didn't help.

Do you have any suggestions what might be wrong?

BR/Eliash

Re: CAP's ident conflict

Posted: Wed Aug 08, 2018 10:47 am
by Neferith
For those who had the same problem: Solution is to manually set MAC address for Ap's bridge. Use Ether1 MAC address.

BR/Eliash

Re: CAP's ident conflict

Posted: Mon Apr 27, 2020 9:47 am
by kattivius
For those who had the same problem: Solution is to manually set MAC address for Ap's bridge. Use Ether1 MAC address.

BR/Eliash
Hi @Neferith, I got the same issue :
caps,error removing stale connection [mac_add/13/fef4,Run,CAP-mac_add] because of ident conflict with [mac_address/13/2b39,join,CAP,MAC_address]
I am fairly new on mikrotik and I not understand how to implement your solution.
Could you please explain how you did that and if (after so long time) the problem was fixed and stable?
Thanks

Re: CAP's ident conflict

Posted: Mon Apr 27, 2020 10:50 pm
by fstirparo
For those who had the same problem: Solution is to manually set MAC address for Ap's bridge. Use Ether1 MAC address.

BR/Eliash
I'm having the same issue, briege MAC Address on both AP are using AP's ether1 MAC Address. My Bridge has a static IP Address and I'm still getting that error logged and my SSIDs droping when it happens.

I someone else has any additional help I will appreciate it.
Thanks