cAP ax + CCR2004 + wifiwave2 + CAPsMAN
Posted: Fri Aug 18, 2023 3:36 pm
I have been running my CCR2004 with a couple cAP XL ac devices for a long time, very stable, no issues at all.
I recently replaced both my APs with cAP ax, and installed wifiwave2 on my CCR2004 to support them. I configured CAPsMAN in wifiwave2, but the cAP ax simply aren't provisioning. I'm sure I'm missing something, I just can't figure out what it is, and another set of eyes might help.
My network is very simple in concept, ether1 on the CCR2004 is WAN to my ISP, and everything else is just one giant bridge1. CAPsMAN is running on the CCR2004, and the cAP ax are on the CCR2004 and/or a downstream passive switch, but also on the same bridge1.
I'm just putting the cAP ax in "CAP" mode using the reset switches, though I have also tried to join them forcibly to the CAPsMAN through their config, and that doesn't work either. If I configure them manually without CAPsMAN, they work fine, so they aren't broken.
cAP ax are running 7.12beta1 + wifiwave2
CCR2004 is running 7.12beta1 + wifiwave2
Here's the configuration for the CCR2004 as it stands now:
I'm getting that cert error as you can see, and I have researched and seen that others did too, but I tried revoking/deleting all certs and I still get it, so I'm not sure if that's a red herring or what.
Any ideas?
I recently replaced both my APs with cAP ax, and installed wifiwave2 on my CCR2004 to support them. I configured CAPsMAN in wifiwave2, but the cAP ax simply aren't provisioning. I'm sure I'm missing something, I just can't figure out what it is, and another set of eyes might help.
My network is very simple in concept, ether1 on the CCR2004 is WAN to my ISP, and everything else is just one giant bridge1. CAPsMAN is running on the CCR2004, and the cAP ax are on the CCR2004 and/or a downstream passive switch, but also on the same bridge1.
I'm just putting the cAP ax in "CAP" mode using the reset switches, though I have also tried to join them forcibly to the CAPsMAN through their config, and that doesn't work either. If I configure them manually without CAPsMAN, they work fine, so they aren't broken.
cAP ax are running 7.12beta1 + wifiwave2
CCR2004 is running 7.12beta1 + wifiwave2
Here's the configuration for the CCR2004 as it stands now:
Code: Select all
# 2023-08-18 08:27:46 by RouterOS 7.12beta1
# software id = CWU8-WMJ4
#
# model = CCR2004-16G-2S+
# serial number = an-serial
/interface bridge
add name=bridge1
/interface list
add name=WAN
add name=LAN
/interface wifiwave2 datapath
add bridge=bridge1 disabled=no name=datapath1
/interface wifiwave2 security
add authentication-types=wpa2-psk,wpa3-psk disable-pmkid=yes disabled=no ft=yes ft-over-ds=yes name=\
"FDCP Wifi Security" wps=disable
/interface wifiwave2 configuration
add chains="" channel.band=5ghz-ax .width=20/40/80mhz datapath=datapath1 disabled=no manager=capsman mode=ap name=\
"Hector (5GHz)" security="FDCP Wifi Security" security.authentication-types="" ssid=Hector
add channel.band=2ghz-ax .width=20/40/80mhz country="United States" datapath=datapath1 disabled=no manager=capsman \
mode=ap name="Florry (2.4GHz)" security="FDCP Wifi Security" security.authentication-types="" ssid=Florry
/ip pool
add name=dhcp_pool0 ranges=10.62.14.128-10.62.14.254
/ip dhcp-server
add address-pool=dhcp_pool0 interface=bridge1 lease-time=10m name=dhcp1
/port
set 0 name=serial0
set 1 name=serial1
/interface bridge port
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
add bridge=bridge1 interface=ether6
add bridge=bridge1 interface=ether7
add bridge=bridge1 interface=ether8
add bridge=bridge1 interface=ether9
add bridge=bridge1 interface=ether10
add bridge=bridge1 interface=ether11
add bridge=bridge1 interface=ether12
add bridge=bridge1 interface=ether13
add bridge=bridge1 interface=ether14
add bridge=bridge1 interface=ether15
add bridge=bridge1 interface=ether16
add bridge=bridge1 interface=sfp-sfpplus1
add bridge=bridge1 interface=sfp-sfpplus2
/ip neighbor discovery-settings
set discover-interface-list=all lldp-med-net-policy-vlan=1
/ipv6 settings
set disable-ipv6=yes
/interface detect-internet
set detect-interface-list=all
/interface list member
add interface=ether1 list=WAN
add interface=bridge1 list=LAN
/interface wifiwave2 capsman
# failed to create CA certificate: name must be unique! (6)
set ca-certificate=auto enabled=yes interfaces=LAN package-path="" require-peer-certificate=no upgrade-policy=none
/interface wifiwave2 provisioning
add action=create-dynamic-enabled disabled=no master-configuration="Hector (5GHz)" radio-mac=00:00:00:00:00:00
add action=create-dynamic-enabled disabled=no master-configuration="Florry (2.4GHz)" radio-mac=00:00:00:00:00:00 \
supported-bands=2ghz-n
/ip address
add address=10.62.14.1/24 comment="foo.com LAN range" interface=bridge1 network=10.62.14.0
/ip arp
add address=10.62.14.42 interface=bridge1 mac-address=98:06:3C:24:AB:C9
/ip cloud
set ddns-enabled=yes ddns-update-interval=20m
/ip dhcp-client
add interface=ether1 use-peer-dns=no use-peer-ntp=no
/ip dhcp-server lease
add address=10.62.14.17 comment="clock.foo.com" mac-address=58:BF:25:C3:DC:13 server=dhcp1
/ip dhcp-server network
add address=10.62.14.0/24 dns-server=94.140.14.49,94.140.14.59 domain=foo.com gateway=10.62.14.1 ntp-server=\
10.62.14.1
/ip dns
set servers=94.140.14.49,94.140.14.59
/ip dns static
add address=10.62.14.17 name=clock.foo.com
/ip firewall nat
add action=masquerade chain=srcnat out-interface-list=WAN
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www address=10.62.14.0/24,4.59.157.210/32,73.132.190.55/32
set ssh address=10.62.14.0/24,4.59.157.210/32,73.132.190.55/32
set api address=10.62.14.0/24,73.132.190.55/32
set winbox address=10.62.14.0/24,73.132.190.55/32
set api-ssl address=10.62.14.0/24,73.132.190.55/32
/system clock
set time-zone-name=America/New_York
/system identity
set name=rtr1
/system note
set show-at-login=no
/system ntp client
set enabled=yes
/system ntp server
set enabled=yes
/system ntp client servers
add address=0.pool.ntp.org
add address=1.pool.ntp.org
add address=2.pool.ntp.org
/system package update
set channel=testing
/system routerboard settings
set auto-upgrade=yes enter-setup-on=delete-key
/tool e-mail
set address=66.111.4.139 from=foo@foo.com port=465 tls=starttls user=foo@foo.com
Any ideas?