CAPsMAN Local Forwarding problem!

fa1 · Thu Jan 15, 2015 12:27 pm

Hello! Sorry for the trouble! But I had a problem when using CAPsMAN v2!

I have one router with version 6.24 and CAPsMAN installed and second router is Wireless Access Point. Both CAPsMAN v2. I have enabled local forwarding for Wireless Access Point. The problem is: if access point try to create each new connections to CAPsMAN (reboot, reconect, etc.) - on the Access Point virtualAP interfaces change their name every time and i can't bind wireless virtual-ap interface to bridge!

CAPsMAN

/caps-man provisioning
add action=create-disabled comment=dsw3 hw-supported-modes=gn \
    master-configuration=office_staff_local name-format=prefix name-prefix=\
    dsw3_ radio-mac=xx:xx:xx:xx:xx:xx slave-configurations=\
    office_royal_local,office_workshop_local,office_guest_local

/caps-man configuration
.....
add channel=auto country=ukraine datapath=office_guest_local mode=ap name=\
    office_guest_local security=office_guest ssid=guest
.....

/caps-man datapath
add client-to-client-forwarding=no local-forwarding=yes name=\
    office_guest_local

Connection with AP established!

/caps-man radio> print
Flags: L - local, P - provisioned 
 #    RADIO-MAC         INTERFACE     REMOTE-CAP-NAME    REMOTE-CAP-IDENTITY   
 0  P xx:xx:xx:xx:xx:xx dsw3_1        CAP-xxxxxxxxxxxxxx   dsw3.workshop

In CAPsMAN interface was created!

/caps-man interface> print
Flags: M - master, D - dynamic, B - bound, 
X - disabled, I - inactive, R - running 
 #      NAME                 RADIO-MAC         MASTER-INTERFACE                
 0 M BR dsw3_1               xx:xx:xx:xx:xx:xx none                            
 1   B  dsw3_1-1             00:00:00:00:00:00 dsw3_1                          
 2   B  dsw3_1-2             00:00:00:00:00:00 dsw3_1                          
 3   B  dsw3_1-3             00:00:00:00:00:00 dsw3_1

On Wireless Access Point:

/interface wireless> print
Flags: X - disabled, R - running 
 0  R ;;; managed by CAPsMAN
      ;;; channel: 2427/20-Ce/gn(20dBm), SSID: staff, local forwarding
      name="wlan1" mtu=1500 mac-address=xx:xx:xx:xx:xx:xx arp=enabled 
      interface-type=Atheros AR9300 mode=ap-bridge ssid="MikroTik-092640" 
      frequency=2412 band=2ghz-b/g/n channel-width=20/40mhz-Ce 
      scan-list=default wireless-protocol=any vlan-mode=no-tag vlan-id=1 
      wds-mode=disabled wds-default-bridge=none wds-ignore-ssid=no 
      bridge-mode=enabled default-authentication=yes default-forwarding=yes 
      default-ap-tx-limit=0 default-client-tx-limit=0 hide-ssid=no 
      security-profile=default compression=no 

 1  R ;;; managed by CAPsMAN
      ;;; SSID: workshop, local forwarding
      name="wlan69" mtu=1500 mac-address=xx:xx:xx:xx:xx:xx arp=enabled 
      interface-type=virtual-AP master-interface=wlan1 

 2  R ;;; managed by CAPsMAN
      ;;; SSID: royal, local forwarding
      name="wlan70" mtu=1500 mac-address=xx:xx:xx:xx:xx:xx arp=enabled 
      interface-type=virtual-AP master-interface=wlan1 

 3  R ;;; managed by CAPsMAN
      ;;; SSID: guest, local forwarding
      name="wlan71" mtu=1500 mac-address=xx:xx:xx:xx:xx:xx arp=enabled 
      interface-type=virtual-AP master-interface=wlan1

Here we see that the virtual interface named wlan69,wlan70 and wlan71. Now i bind interface to bridge!

/interface bridge port> print
Flags: X - disabled, I - inactive, D - dynamic 
 #    INTERFACE              BRIDGE              PRIORITY  PATH-COST    HORIZON
 0    wlan1                  br.12.staff             0x80         10       none
 1    vlan102.managment      br.102.managment        0x80         10       none
 2    vlan12.dsw3.ccr        br.12.staff             0x80         10       none
 3    vlan1.dsw1.ccr         br.1.royal              0x80         10       none
 4    vlan52.dsw3.ccr        br.52.guest             0x80         10       none
 5    vlan9.dsw3.ccr         br9.workshop            0x80         10       none
 6    wlan69                 br9.workshop            0x80         10       none
 7    wlan71                 br.52.guest             0x80         10       none
 8    ether21-slave-local    br9.workshop            0x80         10       none
 9    wlan70                 br.1.royal              0x80         10       none

But if I only change frequency in CAPsMAN for this AP and i have different interface name and errors in /interface bridge port:

/interface wireless> print
Flags: X - disabled, R - running 
 0  R ;;; managed by CAPsMAN
      ;;; channel: 2412/20-Ce/gn(20dBm), SSID: staff, local forwarding
      name="wlan1" mtu=1500 mac-address=xx:xx:xx:xx:xx:xx arp=enabled 
      interface-type=Atheros AR9300 mode=ap-bridge ssid="MikroTik-092640" 
      frequency=2412 band=2ghz-b/g/n channel-width=20/40mhz-Ce 
      scan-list=default wireless-protocol=any vlan-mode=no-tag vlan-id=1 
      wds-mode=disabled wds-default-bridge=none wds-ignore-ssid=no 
      bridge-mode=enabled default-authentication=yes default-forwarding=yes 
      default-ap-tx-limit=0 default-client-tx-limit=0 hide-ssid=no 
      security-profile=default compression=no 

 1  R ;;; managed by CAPsMAN
      ;;; SSID: workshop, local forwarding
      name="wlan87" mtu=1500 mac-address=xx:xx:xx:xx:xx:xx arp=enabled 
      interface-type=virtual-AP master-interface=wlan1 

 2  R ;;; managed by CAPsMAN
      ;;; SSID: royal, local forwarding
      name="wlan88" mtu=1500 mac-address=xx:xx:xx:xx:xx:xx arp=enabled 
      interface-type=virtual-AP master-interface=wlan1 

 3  R ;;; managed by CAPsMAN
      ;;; SSID: guest, local forwarding
      name="wlan89" mtu=1500 mac-address=xx:xx:xx:xx:xx:xx arp=enabled 
      interface-type=virtual-AP master-interface=wlan1 

/interface bridge port> print
Flags: X - disabled, I - inactive, D - dynamic 
 #    INTERFACE              BRIDGE              PRIORITY  PATH-COST    HORIZON
 0    wlan1                  br.12.staff             0x80         10       none
 1    vlan102.managment      br.102.managment        0x80         10       none
 2    vlan12.dsw3.ccr        br.12.staff             0x80         10       none
 3    vlan1.dsw1.ccr         br.1.royal              0x80         10       none
 4    vlan52.dsw3.ccr        br.52.guest             0x80         10       none
 5    vlan9.dsw3.ccr         br9.workshop            0x80         10       none
 6 I  *6D                    br9.workshop            0x80         10       none
 7 I  *6F                    br.52.guest             0x80         10       none
 8    ether21-slave-local    br9.workshop            0x80         10       none
 9 I  *6E                    br.1.royal              0x80         10       none

How i can bind VirtalAP interface to bridge if local forwarding is enabled?

Sorry if i something forgot! Thank you for your help!

lunchboxrts · Fri Jan 16, 2015 2:30 am

On the CAPs device

/interface wireless cap set bridge=[SomeBridge]

fa1 · Fri Jan 16, 2015 9:46 am

Welcome! Thank you for your reply! That's right - but this applies only in case if I translated only 1 SSD without VirtualAP.

In this case, all VirtualAP be tied to only one bridge. And in my case - I need bind VirtualAP to different bridges.

/interface bridge port print
Flags: X - disabled, I - inactive, D - dynamic 
 #    INTERFACE              BRIDGE              PRIORITY  PATH-COST    HORIZON
 0    wlan1                  br12.staff              0x80         10       none
 1    vlan1.ap11.dsw3        br1.royal               0x80         10       none
 2    vlan102.ap11.dsw3      br102.managment         0x80         10       none
 3    vlan9.ap11.dsw3        br9.workshop            0x80         10       none
 4    vlan12.ap11.dsw3       br12.staff              0x80         10       none
 5  D wlan17                 br12.staff              0x80         10       none
 6  D wlan18                 br12.staff              0x80         10       none

lunchboxrts · Fri Jan 16, 2015 8:15 pm

Aw, currently I don't think there is a way to do that.

fa1 · Fri Jan 16, 2015 11:37 pm

Problem solved!!!

I use vlan in datapath section:

In CAPsMAN:
add client-to-client-forwarding=no local-forwarding=yes name=\
    office_guest_local_vlan vlan-id=52 vlan-mode=use-service-tag
add client-to-client-forwarding=no local-forwarding=yes name=\
    office_royal_local_vlan vlan-id=1 vlan-mode=use-service-tag
add client-to-client-forwarding=no local-forwarding=yes name=\
    office_staff_local_vlan vlan-id=12 vlan-mode=use-service-tag
add client-to-client-forwarding=no local-forwarding=yes name=\
    office_workshop_local_vlan vlan-id=9 vlan-mode=use-service-tag

In AP:
/interface bridge port
add auto-isolate=yes bridge=br-vlans interface=ether1
/interface wireless cap
set bridge=br-vlans

In ether1 i have 4 tagged vlan.

Now it work like a charm!!

Thanks for all!

emuell · Wed Feb 11, 2015 11:17 am

Problem solved!!!

I use vlan in datapath section:

In CAPsMAN:
add client-to-client-forwarding=no local-forwarding=yes name=\
    office_guest_local_vlan vlan-id=52 vlan-mode=use-service-tag
add client-to-client-forwarding=no local-forwarding=yes name=\
    office_royal_local_vlan vlan-id=1 vlan-mode=use-service-tag
add client-to-client-forwarding=no local-forwarding=yes name=\
    office_staff_local_vlan vlan-id=12 vlan-mode=use-service-tag
add client-to-client-forwarding=no local-forwarding=yes name=\
    office_workshop_local_vlan vlan-id=9 vlan-mode=use-service-tag

In AP:
/interface bridge port
add auto-isolate=yes bridge=br-vlans interface=ether1
/interface wireless cap
set bridge=br-vlans

Hi!

Thank you for that, i have the same situation, but i can't get it to work properbly.

I did the VLAN assignment in datapath section for Master (VLAN 10) and Slave (VLAN 20) and configured the cap to bridge where trunk port is assigned.
Master and Slave WLAN Interface would be added to the Bridge but connection is only working for the master interface (VLAN 10). On the slave Interface (Virtual AP) i get no IP from VLAN 20.

It look's like that the VLAN assignment in datapath section will only applied to the master Interface.
However, if i configure the WLAN-Interfaces manually (without CAPsMAN), VLAN Options only availiable for the Master Interface but not for VirtualAP.

Did i forget anything ? Please help - Thanks!

fa1 · Thu Feb 12, 2015 8:56 am

Can I see your interfaces and capsman datapath config?

emuell · Thu Feb 12, 2015 10:27 am

 /caps-man datapath> print
 0 name="ps-privat" client-to-client-forwarding=no local-forwarding=yes 
   vlan-mode=use-tag vlan-id=25 

 1 name="ps-public" client-to-client-forwarding=no local-forwarding=yes 
   vlan-mode=use-tag vlan-id=66

 /interface> print
Flags: D - dynamic, X - disabled, R - running, S - slave 
 #     NAME                                TYPE       ACTUAL-MTU L2MTU  MAX-L2MTU
 0  RS ether1-master-local                 ether            1500  1598       4074
 1  XS ether2-slave-local                  ether            1500  1598       4074
 2  XS ether3-slave-local                  ether            1500  1598       4074
 3  XS ether4-slave-local                  ether            1500  1598       4074
 4     ether5-mgmt                         ether            1500  1598       4074
 5  RS ;;; managed by CAPsMAN
       ;;; channel: 2442/20-Ce/gn(20dBm), SSID: ps-privat, local forwarding
       wlan1                               wlan             1500  1600
 6 DRS ;;; managed by CAPsMAN
       ;;; SSID: ps-public, local forwarding
       wlan2                               wlan             1500  1600
 7  R  bridge-vlan-trunk                   bridge           1500  1598
 8  R  vlan25                              vlan             1500  1594

/interface bridge> print
Flags: X - disabled, R - running 
 0  R name="bridge-vlan-trunk" mtu=auto actual-mtu=1500 l2mtu=1598 arp=enabled 
      mac-address=D4:CA:6D:07:4C:EC protocol-mode=rstp priority=0x8000 
      auto-mac=yes admin-mac=00:00:00:00:00:00 max-message-age=20s 
      forward-delay=15s transmit-hold-count=6 ageing-time=5m

/interface bridge port> print
Flags: X - disabled, I - inactive, D - dynamic 
 #    INTERFACE                BRIDGE               PRIORITY  PATH-COST    HORIZON
 0    ether1-master-local      bridge-vlan-trunk        0x80         10       none
 1  D wlan1                    bridge-vlan-trunk        0x80         10       none
 2  D wlan2                    bridge-vlan-trunk        0x80         10       none

ether1-master-local is the trunk-port which includes tagged VLAN's 25 & 66.

Thank you for your support!!

fa1 · Fri Feb 13, 2015 2:05 pm

very strange ... as an experiment try the following:

1.create two bridge - br-vlans and br-vlan25
2. create interface vlan: name:vlan25.to.eth1 on port eth1 and name:vlan25.to.wlan on br-vlans
3. bridge ports: vlan25.to.eth1 to bridge: br-vlan25 and vlan25.to.wlan to bridge: br-vlan25
4. change wireless - cap - bridge to br-vlans and try connect to ps-private over wireless.

if it will be work then try:
1.create bridge - br-vlan66
2. create interface vlan: name:vlan66.to.eth1 on port eth1 and name:vlan66.to.wlan on br-vlans
3. bridge ports: vlan66.to.eth1 to bridge: br-vlan66 and vlan66.to.wlan to bridge: br-vlan66

please try this

emuell · Sat Feb 21, 2015 11:27 am

´1.create two bridge - br-vlans and br-vlan25
2. create interface vlan: name:vlan25.to.eth1 on port eth1 and name:vlan25.to.wlan on br-vlans
3. bridge ports: vlan25.to.eth1 to bridge: br-vlan25 and vlan25.to.wlan to bridge: br-vlan25
4. change wireless - cap - bridge to br-vlans and try connect to ps-private over wireless.

if it will be work then try:
1.create bridge - br-vlan66
2. create interface vlan: name:vlan66.to.eth1 on port eth1 and name:vlan66.to.wlan on br-vlans
3. bridge ports: vlan66.to.eth1 to bridge: br-vlan66 and vlan66.to.wlan to bridge: br-vlan66

Sorry for the delay!

I've tested both configurations with same result, connection to VLAN 25 (Master Interface) will work, but not to VLAN 66 (Slave/Virtual AP)
If i change the VLAN ID in datapath, 66 to master and 25 to slave, connection to VLAN 66 will work and VLAN 25 failed.

I think that VLAN assignments only work on Master Interfaces but not on Slave/Virtual AP!
would it be possible that you reproduce that in your environment ?

Thank you!!

dash · Tue Apr 28, 2015 12:44 pm

Hi guys, wanted to share my findings with you...

I have had the very same issue as described here, "could not add virtual wlan to the bridge". I resolved it by defining the bridge directly in the wireless CAP menu. Works fine for me!

ploquets · Fri Jan 29, 2016 11:02 pm

Problem solved!!!

I use vlan in datapath section:

In CAPsMAN:
add client-to-client-forwarding=no local-forwarding=yes name=\
    office_guest_local_vlan vlan-id=52 vlan-mode=use-service-tag
add client-to-client-forwarding=no local-forwarding=yes name=\
    office_royal_local_vlan vlan-id=1 vlan-mode=use-service-tag
add client-to-client-forwarding=no local-forwarding=yes name=\
    office_staff_local_vlan vlan-id=12 vlan-mode=use-service-tag
add client-to-client-forwarding=no local-forwarding=yes name=\
    office_workshop_local_vlan vlan-id=9 vlan-mode=use-service-tag

In AP:
/interface bridge port
add auto-isolate=yes bridge=br-vlans interface=ether1
/interface wireless cap
set bridge=br-vlans

In ether1 i have 4 tagged vlan.

Now it work like a charm!!

Thanks for all!

Hello!

I've read your configuration export, but, could you please teach me how to do it ?

I'm not aware about what needs to be done on CAP to have this cenario:

6 CAPs (one of them being the CAPsMAN)

Every CAP are connected to a switch, and all CAPs ports on Switch are tagged on two vlans.

What I need to do is:
Be able to control all CAPs with CAPsMAN (this step I think is done because they are visible at CAPsMAN page)
Two SSIDs per CAP, one for Administration Network and one for Guest
Two VLANS (VID 2000 for Administration and VID 3000 for Guest)

How to be able to connect to Guest network and be tagged to VID 3000 ?
And How to be able to connect to Administration Network and be tagged to VID 1000 ?

Equipments are all RBcap2n

Please, help! Thanks

--------------------------------------------------------------------
If you are here and reading this post, I did resolve this by adding those vlans to a bridge.
Not adding vlan inside a bridge, but creating a vlan with bridge as interface.

/interface vlan add name=XXXX vlan-id=1234 interface=bridge

That will do the job.

CAPsMAN Local Forwarding problem!

CAPsMAN Local Forwarding problem!

Re: CAPsMAN Local Forwarding problem!

Re: CAPsMAN Local Forwarding problem!

Re: CAPsMAN Local Forwarding problem!

Re: CAPsMAN Local Forwarding problem!

Re: CAPsMAN Local Forwarding problem!

Re: CAPsMAN Local Forwarding problem!

Re: CAPsMAN Local Forwarding problem!

Re: CAPsMAN Local Forwarding problem!

Re: CAPsMAN Local Forwarding problem!

Re: CAPsMAN Local Forwarding problem!

Re: CAPsMAN Local Forwarding problem!

Who is online