I've got a CRS125 as CAPSMAN and a RBcAP2n as CAP both running RouterOS 6.34.4 and wireless-cm2.
I've currently got 3xRBcAP2n in AP mode, bridging their wireless and ethernet interfaces. Stations get dhcp addresses in the 192.168.88.x range and all of this works perfectly. I've added a 4th RBcAP2n which should be CAPSMAN managed and once I've got this working I want to move the other devices over to CAPSMAN too. I just can't get this CAP to work.
I can see that the CAP connects to the CAPSMAN and starts a wireless network. When a client connects it even gets an DHCP address 10.0.0.x, but I can't ping the CAPSMAN bridge interface 10.0.0.1. arping 10.0.0.1 does work, so the bridge seems to be correctly established it's just layer 3 that doesn't seem to be working?
I've restarted both to see if that would resolve it, but I still can't ping anything from a connected client. Any ideas?
CAPSMAN CONFIG
Code: Select all
# apr/15/2016 15:11:50 by RouterOS 6.34.4
/interface bridge
add name=bridge1
/interface ethernet
set [ find default-name=ether1 ] name=ether1-master
set [ find default-name=ether2 ] master-port=ether1-master
set [ find default-name=ether3 ] master-port=ether1-master
set [ find default-name=ether4 ] master-port=ether1-master
set [ find default-name=ether5 ] master-port=ether1-master
set [ find default-name=ether6 ] master-port=ether1-master
set [ find default-name=ether7 ] master-port=ether1-master
set [ find default-name=ether8 ] master-port=ether1-master
set [ find default-name=ether9 ] master-port=ether1-master
set [ find default-name=ether10 ] master-port=ether1-master
set [ find default-name=ether11 ] master-port=ether1-master
set [ find default-name=ether12 ] master-port=ether1-master
set [ find default-name=ether13 ] master-port=ether1-master
set [ find default-name=ether14 ] master-port=ether1-master
set [ find default-name=ether15 ] master-port=ether1-master
set [ find default-name=ether16 ] master-port=ether1-master
set [ find default-name=ether17 ] master-port=ether1-master
set [ find default-name=ether18 ] master-port=ether1-master
set [ find default-name=ether19 ] master-port=ether1-master
set [ find default-name=ether20 ] master-port=ether1-master
set [ find default-name=ether21 ] master-port=ether1-master
set [ find default-name=ether22 ] master-port=ether1-master
set [ find default-name=sfp1 ] master-port=ether1-master
/interface pppoe-client
add add-default-route=yes disabled=no interface=ether24 keepalive-timeout=\
disabled name=pppoe-out1 password=pass use-peer-dns=yes user=\
user@domain.com
/caps-man datapath
add bridge=bridge1 name=datapath1
/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm name=wpa2psk
/caps-man configuration
add country="south africa" datapath.bridge=bridge1 name=picsa-cfg security=\
wpa2psk security.authentication-types=wpa2-psk security.encryption=\
aes-ccm security.passphrase=pass ssid=picsa
/ip pool
add name=dhcp_pool1 ranges=192.168.88.10-192.168.88.254
add name=dhcp_pool2 ranges=192.168.88.10-192.168.88.254
add name=dhcp_pool3 ranges=10.0.0.10-10.0.0.254
add name=dhcp_pool4 ranges=192.168.88.20-192.168.88.254
/ip dhcp-server
add address-pool=dhcp_pool3 disabled=no interface=bridge1 name=dhcp1
add address-pool=dhcp_pool4 disabled=no interface=ether1-master name=dhcp2
/caps-man manager
set enabled=yes
/caps-man provisioning
add action=create-dynamic-enabled master-configuration=picsa-cfg
/ip address
add address=192.168.88.1/24 comment=defconf interface=ether1-master network=\
192.168.88.0
add address=10.0.0.1 interface=bridge1 network=10.0.0.0
/ip dhcp-client
add add-default-route=no dhcp-options=hostname,clientid disabled=no \
interface=ether23
/ip dhcp-server network
add address=10.0.0.0/24 gateway=10.0.0.1
add address=192.168.88.0/24 gateway=192.168.88.1
/ip firewall mangle
add chain=prerouting disabled=yes dst-address=41.221.6.227
/ip firewall nat
add action=masquerade chain=srcnat out-interface=pppoe-out1
/ip route
add distance=1 dst-address=41.221.6.227/32 gateway=192.168.1.1
/lcd
set time-interval=hour
/system clock
set time-zone-name=Indian/Mauritius
/system routerboard settings
set protected-routerboot=disabledCode: Select all
# apr/15/2016 15:28:35 by RouterOS 6.34.4
/interface bridge
add admin-mac=E4:8D:8C:F3:54:2C auto-mac=no name=bridge-local
/interface wireless
# managed by CAPsMAN
# channel: 2442/20-Ce/gn(20dBm), SSID: picsa, CAPsMAN forwarding
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce \
distance=indoors mode=ap-bridge ssid=MikroTik-F3542D wireless-protocol=\
802.11
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=aes-128-cbc
/system logging action
set 1 disk-file-name=log
/interface bridge port
add bridge=bridge-local interface=ether1
add bridge=bridge-local interface=wlan1
/interface wireless cap
set discovery-interfaces=ether1 enabled=yes interfaces=wlan1
/ip address
add address=10.0.0.4 comment="default configuration" interface=bridge-local \
network=10.0.0.0
/ip dhcp-client
add default-route-distance=0 dhcp-options=hostname,clientid disabled=no \
interface=ether1
/system clock
set time-zone-name=Indian/Mauritius
/system identity
set name=cap-callcentre
/system leds
set 0 interface=wlan1
/system routerboard settings
set cpu-frequency=400MHz