I am using a hAP ax² to run capsman and some cap ac’s using vlans, the ssid is showing up but when connecting the issue is the dhcp server is not binding the ip address, the status remains “offered” under leases, any help will be greatly appreciated,
Code: Select all
[admin@controller] > export
# by RouterOS 7.14.1
# software id = xxxxx
#
# model = C52iG-5HaxD2HaxD
# serial number = xxxxxxxx
/interface bridge
add name=bridge-local vlan-filtering=yes
/interface vlan
add interface=bridge-local name=vlan-10-vip vlan-id=10
add interface=bridge-local name=vlan-20-guest vlan-id=20
add interface=bridge-local name=vlan-33-mgmt vlan-id=33
/interface wifi channel
add band=2ghz-ax disabled=no name=ch-2-ax width=20mhz
add band=2ghz-n disabled=no name=ch-2-n width=20mhz
add band=5ghz-ax disabled=no name=ch-5-ax skip-dfs-channels=all width=20/40/80mhz
add band=5ghz-ac disabled=no name=ch-5-ac skip-dfs-channels=all width=20/40mhz
/interface wifi datapath
add disabled=no name=data-vip vlan-id=10
add client-isolation=yes disabled=no name=data-guest vlan-id=20
/interface wifi security
add authentication-types=wpa2-psk,wpa3-psk disabled=no ft=yes ft-over-ds=yes name=sec-vip
add authentication-types=wpa2-psk,wpa3-psk disabled=no ft=yes ft-over-ds=yes name=sec-guest
/interface wifi configuration
add channel=ch-2-ax country="United Kingdom" datapath=data-vip disabled=no mode=ap name=cfg-2-vip-ax security=sec-vip ssid=wifi6-vip
add channel=ch-2-n country="United Kingdom" datapath=data-vip disabled=no mode=ap name=cfg-2-vip-n security=sec-vip ssid=wifi6-vip
add channel=ch-5-ax country="United Kingdom" datapath=data-vip disabled=no mode=ap name=cfg-5-vip-ax security=sec-vip ssid=wifi6-vip
add channel=ch-5-ac country="United Kingdom" datapath=data-vip disabled=no mode=ap name=cfg-5-vip-ac security=sec-vip ssid=wifi6-vip
add channel=ch-2-ax country="United Kingdom" datapath=data-guest disabled=no mode=ap name=cfg-2-guest-ax security=sec-guest ssid=wifi6-guest
add channel=ch-2-n country="United Kingdom" datapath=data-guest disabled=no mode=ap name=cfg-2-guest-n security=sec-guest ssid=wifi6-guest
add channel=ch-5-ax country="United Kingdom" datapath=data-guest disabled=no mode=ap name=cfg-5-guest-ax security=sec-guest ssid=wifi6-guest
add channel=ch-5-ac country="United Kingdom" datapath=data-guest disabled=no mode=ap name=cfg-5-guest-ac security=sec-guest ssid=wifi6-guest
/interface wifi
set [ find default-name=wifi1 ] configuration=cfg-5-vip-ax configuration.country="United Kingdom" .manager=local .mode=ap disabled=no
set [ find default-name=wifi2 ] configuration=cfg-2-vip-ax configuration.manager=local .mode=ap disabled=no
add configuration=cfg-5-guest-ax configuration.mode=ap disabled=no mac-address=xA:A9:8A:xx:20:xx master-interface=wifi1 name=wifi3
add configuration=cfg-2-guest-ax configuration.mode=ap disabled=no mac-address=xA:A9:8A:xx:20:xx master-interface=wifi2 name=wifi4
/ip pool
add name=dhcp_pool0 ranges=10.55.55.2-10.55.55.254
add name=dhcp_pool1 ranges=172.16.10.2-172.16.10.254
add name=dhcp_pool2 ranges=192.168.20.2-192.168.20.254
add name=dhcp_pool3 ranges=10.33.33.2-10.33.33.30
add name=dhcp_pool4 ranges=192.168.50.2-192.168.50.254
add name=dhcp_pool5 ranges=172.16.10.2-172.16.10.254
add name=dhcp_pool6 ranges=192.168.20.2-192.168.20.254
add name=dhcp_pool7 ranges=10.33.33.2-10.33.33.30
/ip dhcp-server
add address-pool=dhcp_pool4 interface=bridge-local name=dhcp-bridge-local
add address-pool=dhcp_pool5 interface=vlan-10-vip name=dhcp-vlan-10
add address-pool=dhcp_pool6 interface=vlan-20-guest name=dhcp-vlan-20
add address-pool=dhcp_pool7 interface=vlan-33-mgmt name=dhcp-vlan-30
/interface bridge port
add bridge=bridge-local interface=ether2
add bridge=bridge-local interface=ether3
add bridge=bridge-local interface=wifi1 pvid=10
add bridge=bridge-local interface=wifi2 pvid=10
add bridge=bridge-local interface=wifi3 pvid=20
add bridge=bridge-local interface=wifi4 pvid=20
/ip firewall connection tracking
set udp-timeout=10s
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/interface bridge vlan
add bridge=bridge-local tagged=bridge-local,ether2,ether3 vlan-ids=10
add bridge=bridge-local tagged=bridge-local,ether2,ether3 vlan-ids=20
add bridge=bridge-local tagged=bridge-local,ether2,ether3 vlan-ids=33
/interface wifi capsman
set enabled=yes interfaces=vlan-33-mgmt package-path="" require-peer-certificate=no upgrade-policy=none
/interface wifi provisioning
add action=none disabled=no
/ip address
add address=172.16.10.1/24 interface=vlan-10-vip network=172.16.10.0
add address=192.168.20.1/24 interface=vlan-20-guest network=192.168.20.0
add address=10.33.33.1/27 interface=vlan-33-mgmt network=10.33.33.0
add address=192.168.50.1/24 interface=bridge-local network=192.168.50.0
/ip dhcp-client
add interface=ether1
/ip dhcp-server network
add address=10.33.33.0/27 dns-server=10.33.33.1 gateway=10.33.33.1
add address=172.16.10.0/24 dns-server=172.16.10.1 gateway=172.16.10.1
add address=192.168.20.0/24 dns-server=192.168.20.1 gateway=192.168.20.1
add address=192.168.50.0/24 dns-server=8.8.8.8 gateway=192.168.50.1
/ip dns
set allow-remote-requests=yes
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
/system clock
set time-zone-name=Europe/London
/system identity
set name=controller
/system note
set show-at-login=no
/tool romon
set enabled=yes
[admin@controller] >