-CAPs talk to CAPsMAN via management VLAN
-3 SSIDs for 2.4GHz and 3 SSIDs for 5 GHz, all SSIDs are set on every CAP
-all SSIDs/CAPs use local forwarding, and each SSID is tagged to its own VLAN
-I did not use the "Provision" functionality, but instead created each CAP and Virtual AP interface in CAPsMAN manually. Therefore the configuration in CAPsMAN is static.
My issue is that whenever the CAP loses connection to CAPsMAN, even for a second, the wlan# associated to each virtual AP (for SSIDS 2 and 3 on each band on each CAP) increments. So right after a router boots it has wlan1 - wlan6, then after a brief connection loss it changes to wlan1 and wlan2 followed by wlan7-10. Another disconnect, and the virtual APs become wlan11 - wlan14. and so on. This causes havoc in my monitoring (Zabbix plus Network Weathermap) because of the changing wlan IDs. I need a way to make the virtual APs retain their wlan IDs across disconnects, while still being able to see all connected clients in the central CAPsMAN registration table. I'm willing to make network changes except that I need to keep Local Forwarding. Some way to make Virtual APs static would do the trick.
Edit#2: CAPsMAN and all CAPs are on 6.34.2 and have their firmwares upgraded as appropriate.
Edit: Here is my CAPsMAN config: (and I wonder - would setting the radio-mac on the Virtual APs make a difference?)
Code: Select all
[admin@Router01] /caps-man> export compact
# mar/01/2016 16:14:10 by RouterOS 6.34.2
# software id = AC25-1GAQ
#
/caps-man datapath
add client-to-client-forwarding=yes local-forwarding=yes name=SSID1 \
vlan-id=10 vlan-mode=use-tag
add client-to-client-forwarding=yes local-forwarding=yes name=SSID2 \
vlan-id=2 vlan-mode=use-tag
add client-to-client-forwarding=yes local-forwarding=yes name=\
SSID3 vlan-id=3 vlan-mode=use-tag
/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm name=SSID1 \
passphrase=<redacted>
add authentication-types=wpa2-psk encryption=aes-ccm name=SSID2 passphrase=\
<redacted>
add authentication-types=wpa2-psk encryption=aes-ccm name=SSID3 \
passphrase=<redacted>
/caps-man configuration
add country="united states3" datapath=SSID2 \
datapath.client-to-client-forwarding=yes datapath.local-forwarding=yes \
name=SSID2-24 security=SSID2 ssid=SSID2-24
add country="united states3" datapath=SSID2 \
datapath.client-to-client-forwarding=yes datapath.local-forwarding=yes \
name=SSID2-50 security=SSID2 ssid=SSID2-50
add country="united states3" datapath=SSID3 \
datapath.client-to-client-forwarding=yes datapath.local-forwarding=yes \
name=SSID3-24 security=SSID3 ssid=SSID3-24
add country="united states3" datapath=SSID3 \
datapath.client-to-client-forwarding=yes datapath.local-forwarding=yes \
name=SSID3-50 security=SSID3 ssid=SSID3-50
add country="united states3" datapath=SSID1 \
datapath.client-to-client-forwarding=yes datapath.local-forwarding=yes \
name=SSID1-24 security=SSID1 ssid=SSID1-24
add country="united states3" datapath=SSID1 \
datapath.client-to-client-forwarding=yes datapath.local-forwarding=yes \
name=SSID1-50 security=SSID1 ssid=SSID1-50
/caps-man interface
add arp=enabled configuration=SSID1-24 disabled=no l2mtu=1600 \
mac-address=E4:8D:8C:52:F6:EB master-interface=none mtu=1500 name=\
CAP1-24 radio-mac=E4:8D:8C:52:F6:EB
add arp=enabled configuration=SSID2-24 disabled=no l2mtu=1600 mac-address=\
E6:8D:8C:52:F6:EB master-interface=CAP1-24 mtu=1500 name=CAP1-24-2 \
radio-mac=00:00:00:00:00:00
add arp=enabled configuration=SSID3-24 disabled=no l2mtu=1600 \
mac-address=E6:8D:8C:52:F6:EC master-interface=CAP1-24 mtu=1500 name=\
CAP1-24-3 radio-mac=00:00:00:00:00:00
add arp=enabled configuration=SSID1-50 disabled=no l2mtu=1600 \
mac-address=E4:8D:8C:52:F6:EA master-interface=none mtu=1500 name=\
CAP1-50 radio-mac=E4:8D:8C:52:F6:EA
add arp=enabled configuration=SSID2-50 disabled=no l2mtu=1600 mac-address=\
E6:8D:8C:52:F6:EA master-interface=CAP1-50 mtu=1500 name=CAP1-50-2 \
radio-mac=00:00:00:00:00:00
add arp=enabled configuration=SSID3-50 disabled=no l2mtu=1600 \
mac-address=E6:8D:8C:52:F6:ED master-interface=CAP1-50 mtu=1500 name=\
CAP1-50-3 radio-mac=00:00:00:00:00:00
add arp=enabled configuration=SSID1-24 disabled=no l2mtu=1600 \
mac-address=E4:8D:8C:52:F6:CB master-interface=none mtu=1500 name=\
CAP3-24 radio-mac=E4:8D:8C:52:F6:CB
add arp=enabled configuration=SSID2-24 disabled=no l2mtu=1600 mac-address=\
E6:8D:8C:52:F6:CB master-interface=CAP3-24 mtu=1500 name=\
CAP3-24-2 radio-mac=00:00:00:00:00:00
add arp=enabled configuration=SSID3-24 disabled=no l2mtu=1600 \
mac-address=E6:8D:8C:52:F6:CC master-interface=CAP3-24 mtu=1500 \
name=CAP3-24-3 radio-mac=00:00:00:00:00:00
add arp=enabled configuration=SSID1-50 disabled=no l2mtu=1600 \
mac-address=E4:8D:8C:52:F6:CA master-interface=none mtu=1500 name=\
CAP3-50 radio-mac=E4:8D:8C:52:F6:CA
add arp=enabled configuration=SSID2-50 disabled=no l2mtu=1600 mac-address=\
E6:8D:8C:52:F6:CA master-interface=CAP3-50 mtu=1500 name=\
CAP3-50-2 radio-mac=00:00:00:00:00:00
add arp=enabled configuration=SSID3-50 disabled=no l2mtu=1600 \
mac-address=E6:8D:8C:52:F6:CD master-interface=CAP3-50 mtu=1500 \
name=CAP3-50-3 radio-mac=00:00:00:00:00:00
add arp=enabled configuration=SSID1-24 disabled=no l2mtu=1600 \
mac-address=E4:8D:8C:49:20:22 master-interface=none mtu=1500 name=\
CAP2-24 radio-mac=E4:8D:8C:49:20:22
add arp=enabled configuration=SSID2-24 disabled=no l2mtu=1600 mac-address=\
E6:8D:8C:49:20:22 master-interface=CAP2-24 mtu=1500 name=\
CAP2-24-2 radio-mac=00:00:00:00:00:00
add arp=enabled configuration=SSID3-24 disabled=no l2mtu=1600 \
mac-address=E6:8D:8C:49:20:23 master-interface=CAP2-24 mtu=1500 name=\
CAP2-24-3 radio-mac=00:00:00:00:00:00
add arp=enabled configuration=SSID1-50 disabled=no l2mtu=1600 \
mac-address=E4:8D:8C:49:20:21 master-interface=none mtu=1500 name=\
CAP2-50 radio-mac=E4:8D:8C:49:20:21
add arp=enabled configuration=SSID2-50 disabled=no l2mtu=1600 mac-address=\
E6:8D:8C:49:20:21 master-interface=CAP2-50 mtu=1500 name=\
CAP2-50-2 radio-mac=00:00:00:00:00:00
add arp=enabled configuration=SSID3-50 disabled=no l2mtu=1600 \
mac-address=E6:8D:8C:49:20:24 master-interface=CAP2-50 mtu=1500 name=\
CAP2-50-3 radio-mac=00:00:00:00:00:00
/caps-man manager
set ca-certificate=auto certificate=auto enabled=yes
[admin@Router01] /caps-man>