MikroTik

That's new ? It has always been stated earlier that for wifiwave2 capsman, local radios needed to be configured locally.

That is local.
You don't need to configure a cap connection to localhost for it to work.

Also note that you cannot run CapsMAN and connect CAP on the same box now. So if you run CapsMAN on a hAP AC3 the wireless interfaces on that box needs to be configured manually.

You can use provisioning rules on local radios by running the '/interface/wifi/radio/provision' command.

I have a HAPac2 and I need both the 2.4GHz and 5 GHz. What is the way to go for me? All of our products based on IPQ4018/4019 chips use the same driver for 2.4GHz and 5GHz interfaces. If your device is listed as 'compatible' here https://help.mikrotik.com/docs/display/ROS/Wifi#WiFi-Compatibility th...

I confirm that (on 7.12rc1) the Bridge VLAN "Current tagged" column incorrectly lists the wlan interfaces. I have added them both to Tagged for several VLANs, but wlan2 does not appear correctly in "Current tagged" even when a client is connected that uses the VLAN (RADIUS assig...

The VLAN should never appear as a secondary entry when its already added to the bridge vlan table when a wireless client connects If it can be called a bug, then it's a cosmetic one. The datapath.vlan-id interface property sets the default VLAN ID to assign to client devices, but an interface may h...

BRIDGE/VLAN interface "TAGGED" ports are expected to carry vlan traffic, and should not be applied to an access port weather its physical or wireless( unless your expecting a client to be using tagged vlan traffic ) You're assuming that datapath.vlan-id only affects bridge port settings. ...

I also use old netmetal 5 and hap ac in station-bridge mode to connect to the Audience, but those don't support wifiwave2. So I guess I'm screwed and have to use legacy wireless package on Audience forever? You can configure an L2 tunnel (EoIP, for example) to run on the wireless link, then bridge ...

And is station-roaming feature in the roadmap ? Or better , station-roaming (FT) ? for the wifiwave2 ...

Not as far as I know. Using a RouterOS device as mobile station is an uncommon use case.
I'll note down your interest.

802.11r (FT) roaming is only implemented on the AP side. Unfortunately, there is currently no equivalent to the station-roaming setting from the older wireless package.
Received signal strength can be seen in the registration table. Noise floor figures are not available though.

I have an SA Query timeout error when the device switches between wifi1 and wifi2 interfaces (hAP ac3). It appeared in 7.11 beta2, it was not present in 7.10.2. This is to be expected if a client device, which supports management frame protection, attempts a new connection without properly terminat...

If you look carefully this particular device is connected only to cap-wifi5 (IoT network) Right, my bad. That MAC is in fact only connecting to cap-wifi5. One thing I am noticing on a second look is that the delay between a connection and disconnection appears to be almost exactly 190 seconds every...

After update to 7.11rc I started to get famous SA Query timeout every couple of minutes Device in question is air conditioner, I didn't had any problems until update. SA Query is a procedure for checking if a client device can be reached (and still has the agreed-on encryption key). SA Query timeou...

Could you show us the output of '/interface/wireless/export' on the AP that you're trying to connect to, please?
Does it write anything to the wireless debug log?

Numbers I presume are for wireless interface I want to be in roaming ? No, it's the numbers of steering configuration profiles, of which you have none. The '/interface/wifiwave2/steering' menu is a where you can, optionally, create configuration profiles for distinct neighbour groups, if for some r...

Can you see the AP when you run `/interface/wifiwave2/scan wifi2` ?
Is it attempting a connection, but failing?

Don't know anything more about this, no docs, The /interface/wifiwave2/steering menu is a configuration profile section, just like 'security' or 'channel'. In the menu, you can create a steering profile, specifying a neighbor group name of you choosing as well whether BSS transition management requ...

You've not applied the specified security profile to the interface.
Also, you've not set an SSID. And the 'wifi2' interface is configured to be in AP mode.

/interface/wifiwave2/set wifi2 security=seamless configuration.mode=station configuration.ssid=seamless@wifi.id

Responses to neighbor report requests and BSS transition management queries are enabled by default.
That's the extent of the band steering as currently implemented.

And in the /interface/bridge/port no wifi12 appears: There are 2 settings on a cAP, where datapath is specified. /interface/wifiwave2/set [find] datapath= will set the datapath for master interfaces. /interface/wifiwave2/cap set slaves-datapath will set datapath for slave ('virtual') interfaces. I'...

Fast transition over DS is a an optional variant of 802.11r.
You can enable it in any setup, where you've enabled FT. If a client device does not support it, it will perform FT over air.

If I have only one HAP AX3 and I want to enable roaming, should I use capsman when I use only one AP?

In such cases, capsman is not necessary.

Is always CAPsMAN + ft=yes required for a device to roam between APs? The 'security.ft' setting enables 802.11r fast roaming. For fast roaming to be possible between APs, they must be managed by the same instance of RouterOS. So a client device can roam between the interfaces of a dual-band AP or b...

We'll update the documentation shortly. 'configuration.rrm' has been renamed to 'steering.rrm' and it enables or disables responses to neighbor report requests. 'steering.wnm' disables or enables responses to BSS transition management queries. Those 2 types of frames both include a list of APs that ...

To lower the distance at which a link can be established?
You can do that by manually lowering maximum transmit power.

On hAP ac^2, the settings between v6 and v7 have not changed. On hAP ax^2, the configuration menu differs from hAP ac^2. 'mode=dynamic-keys' is deprecated. The wifiwave2 package only supports authentication with dynamic keys, so there's no need to set it. 'mschapv2-password' is now security.eap-pass...

I know all this but it doesnt work regardless of this setting .For now my script in scheduler works to help band steer to 5ghz until mikrotik does some fixes /improvments to wave2. 7.11beta2 enabled 802.11v BSS transition management requests and 802.11k neighbor report responses. What more would yo...

*) wifiwave2 - automatically add wifi interfaces to appropriate bridge VLAN when wireless clien´t work forments with new VLAN IDs connect; Doesn´t work for me. In the bridge the VLAN-ID is still VLAN-ID 1, instead of 99 for my guest-WLAN. Check the /interface/bridge/vlan menu, not /interface/bridge...

Is access list broken ? /interface wifiwave2 access-list add action=reject disabled=no interface=2GHz signal-range=-120..-51 I wana kick clients at home with very strong signal from 2ghz to force them to roam to 5ghz, its not working for me. If you want to kick clients with strong signal, you shoul...

Is it a known quirk, that wifi3-wifi6 CAPSMAN controlled slave interfaces disappear and then re-appear on enrolled APs with different reference names? Yes, the 'create-enabled' provisioning policy ensures that interface IDs stay static on the CAPsMAN, but not the cAP. You can ensure wireless interf...

What meen this bug fix? What interface hangs? Starting with RouterOS 7.9, IPQ-6010 wifi interfaces would malfunction under certain conditions. The malfunctions would cause client device disconnections and subsequent key handshake timeouts until the AP is rebooted. This fix prevents the malfunction ...

Yes. The relevant line in the changelog is the one about fixed interface hangs.

7.9rc4 Regression: Using RouterOS 7.9rc4 in IP -> ARP list or IP -> DHCP Server -> Leases tab, “unknown” is reported in “Bridge Port” column for all hosts connected to wifi (both Webfig and Winbox). In Bridge -> Hosts -> Interface column field is empty for wifi hosts. Please open a support ticket r...

Hello.
Could you please elaborate on what use case you require it for?

device can't connect with wpa2-psk ccmp while it worked fine with ros 6.x on hap ac same config.

Does the issue persist if you set security.disable-pmkid to 'no'?
If so, please open a support ticket regarding this.

I use a CHR as CAPsMANv3 with 7.9RC3 and a hAP AX2 as CAP with 3 SSID´s, two of them with VLAN tag (Guest and IoT). But in none of my configs (I´ve tried several onces) the automatically add VLAN-tagged interface to the appropriate bridge VLAN is working. The wifi interface is only automatically ad...

I’ve just found one possible bug, when activating ft=yes old iPads Air 2 running iPadOS 15.7.4 could not connect anymore (activating ft-over-ds do not help neither), always requesting for password and telling bad password. In my case valid authentication are wpa2-psk and wpa3-psk only (checked also...

Tx Power for 2.4 GHz interface on hAP ax2 is limited to 15 dBm. Tested with different Country configured. Moreover, right after changing a country 20 dBm is displayed for a while and then it falls to 15 dBm. The monitor command will report transmitter (radio) power. As rextended pointed out, 15dBm ...

Only change in defconf between v7.8 defaults and v7.9beta4 is a stylistic choice in setting lease-time implicitly in 7.9 vs being explicit: Well spotted, but it's not just a stylistic choice. The default DHCP server lease time for newly created servers has been increased to 30 minutes and the defau...

According to my tests on hAP ax² 7.8rc1 has 15..20% lower WiFi speed comparing to 7.7.

Are you testing on a static channel and controlling for co-channel and adjecent-channel interference?

A workaround for non-ax interfaces would be to have static interface configurations and manually add wifi interfaces as bridge ports with the desired pvid like in this example https://help.mikrotik.com/docs/display/ ... ccessPorts

Only 802.11ax wifiwave2 interfaces support vlan tagging by the wireless interface. I suppose the changelog entry regarding this could have been clearer. All VLAN tagging in wifiwave2 is 'per-user' VLAN tagging. Setting datapath.vlan-id, you set the default VLAN id for users connecting on that interf...

The storage requirement for architectures that do not require local wifi interface drivers and firmware files is significantly lower.
The mmips package for the RB750Gr3 is 200kB.

You need to install the wifiwave2 package on the RB3011, yes.

I'm unable to reproduce the issue going just by the description.
Please open a support ticket and include supouts from both capsman and the affected cap.

Is it possible to connect from ax3 device back to ros6 for capsman config ? I don't see where you specify the capsman address or the discovery interface in the CLI - thank you. Devices running the wifiwave2 package (like the hAP ax^3), can only be managed by capsman from other devices running with ...

Now that this is stable, I'm experimenting for the first time with the new wifiwave2 capsman support. I can't find the local-forwarding setting for wifiwave2, and the "bridge" setting in the CAP configuration seems to be missing. I've added the interfaces manually as bridge ports on the C...

With wifiwave2/capsman has anyone had any success with WPA(1/2/3) enabled? What seems to be the issue? Did you follow the example in the wifiwave2 documentation? You may need to set `/interface/wifiwave2/cap set discovery-interfaces=all` on the cAP as well as add wifi interfaces to a bridge for wir...

The reason you cannot run both guest-wlan and private-guest2 interfaces at the same time is that you've configured identical MAC addresses for both of them.

It again shows that the architecture used for CAPsMAN is not reasonable. There should be no need at all to have support for a local wireless interface on the controller. CAPsMAN does not architecturally require support for local wireless interfaces. Bundling CAPsMAN with drivers for supporting loca...

802.11v has not yet been implemented.
It is a large ammendment, so suggestions on which features of it users are most interested in would be welcome. If you have such suggestions, please make a dedicated thread or a support ticket.

Hi,
im just wonderng if we can expect 802.11 k support? This is the latest missing....

Support for 802.11k for the wifiwave2 package was introduced in RouterOS 7.5

hAP ax³ (and the rest of our IPQ6010-based devices) supports OFDMA and full bandwidth UL MU-MIMO

also, GCMP encryption should work with WPA3-Personal? Unable to connect any device. In theory, yes. In practice, the vast majority of client devices we test compatibility with, will only accept CCMP (128) for WPA2/3 and, (if they support it) GCMP-256 for WPA3-EAP-192. Exceptions to this rule are Ro...

WPA3 on hAP AC3 stopped working after update from 7.4 - there is no error info in log. 7.5rc1 still same issue, With 7.4.1 all works fine. As suggested by Simonej, you can try setting security.sae-pwe to 'hunting-and-pecking', but please open a support ticket and provide more information on the cli...

Some users have reported that the they still experience issues with wireless on Intel Haswell and older x86 platforms.
This will be addressed in future releases.

The fix was tested with our R11 series wireless cards. Failure to detect a nearby AP may be due to the scan-list (governed by the country setting) not covering frequencies that the APs are operating on. If you've ensured that the settings are correct, but the interface still does not work, please op...

For 802.11r - you mentioned 'local' interfaces. Does this include those connected/generated by CAPsMan? Could you define 'local' in this case? 'Local' in this case means interfaces using radios of a single routerboard. In practice, this means that fast BSS transition is supported between the 2.4GHz...

*) wifiwave2 - added initial support for roaming (802.11r) between local AP interfaces; Anything special to be configured for this to function ? Support for fast BSS transitions can be enabled with /interface/wifiwave2/set wifi1,wifi2 security.ft=yes And a client device will only consider roaming b...

I confirm this issue with Samsung phones.

Please open a support ticket and include a supout file, or at least the output of '/interface/wifiwave2/export'.

@hecatae ww2 works on 7.3rc1. but still no go for samsung phones on WPA3 & Android 12 I've not encountered any issues connecting a Samsung phone with Android 12 to a wifiwave2 AP using either only WPA3-PSK or WPA2-PSK/WPA3-PSK transition mode. Please open a support ticket if you have not alread...

My audience wifiwave2 is finally stable on latest rc builds. It has been very unstable on betas, dropping clients sometimes every few minutes. Thanks for fixing this! I haven’t spotted however anything on any tv release notes which would explain improvement. Thank you for the feedback. When changes...

Windows 10 just hangs , and then about 1 minute later the time-out is mentioned in the log. (Timeout set at the RADIUS client is 600ms) 145 seconds later in the file : The tablet seems to generate exactly the same packets , and the tablet connects. Thank you for the packet captures. In the User Man...

https://forum.mikrotik.com/viewtopic.php?p=887577#p887577 Windows PEAP logon failure has been adressed V7.1rc5 ! Not tested yet ... EDIT: no success. Tablet OK, Windows PC .... "cannot connect to this network" Klembord-2.jpg In internal testing, our issues with Windows 10 PEAP clients wer...

Anyone else having trouble creating certificates in RouterOS v7.1rc5? I create a CA certificate but cannot sign it. The changes in 7.1rc5 introduced an issue that causes a certificate to not be signed if the user does not explicitly specify the digest algorithm. This will be addressed in the next r...

v7.1rc5 broke /interface/wifiwave2/channel usage in wifiwave2 interfaces:

Thank you for the report. This will be fixed in the next release.

v7.1rc2 still doesn't know how to properly bring OWE interfaces up. Is this issue known? Should I report to support? Thank you for the configuration example. I've reported it internally. The issue arises when both of the linked transition-mode interfaces are virtual APs. To work around it for now, ...

Does wifiwave2 have four address mode support yet?

Not yet, no.

Creating a new WIFI Wave 2 interface and assigning the same country code as the physical interfaces reports "Country not allowed"

I cannot create a sub interface whatsoever.

This is an issue on boards with country locks. It will be fixed in rc2.

Wifi LED on Hap ac^3 doesn't seem to work after installing the wifiwave2 package and there's no way to configure it in the system/LEDs panel.

By the way, does the wifiwave2 on ROS support airtime fairness?

Airtime fairness is enabled by default for wifiwave2 interfaces.

Wave 2 on audience can't do vlan tagging. srsly.....

You can tag wifiwave2 wireless traffic by following the generic bridge vlan configuration example shown here.
The vlan tagging settings in the regular wireless package were redundant and so have not been ported to wifiwave2.

Are you sure you have the correct CVE numbers here or does this just means that Samsung Galaxy is there issues was noted that also requires a server side fix? The reason CVE-2020-26144 and CVE-2020-26146 reference a particular device is that they are classified as flaws in implementations of the 80...

---------------------- !) wireless - fixed all affecting 'FragAttacks' vulnerabilities (CVE-2020-24587, CVE-2020-24588, CVE-2020-26144, CVE-2020-26146, CVE-2020-26147); ---------------------- Does this have an expected performance hit? In the tests conducted so far, no meaningful differences in CPU...

What's new in 7.1beta6 (2021-May-18 14:49): !) ported features and fixes introduced in v6.49; All the features of v6.49beta46? Regards, The changes (in the form of features and fixes) introduced with 6.49beta46, are included in 7.1beta6. That said, there are features of RouterOS v6, which RouterOS ...

I know it was said that there are no plans for AR9300 to be supported in WiFiWave2 package. However are there any plans of supporting running both wifiwave2 and the normal wireless package alongside? There are no plans to support running both packages at the same time, no. The wifiwave2 package bet...

Some of the disclosed flaws do affect our devices. Fixes for implementation flaws and mitigations for at least some design flaws will be included in all future releases of RouterOS.

The "united states3" country setting limits the EIRP of devices to 30dB. Could you please explain, where you're getting the 42dB figure from?

WifiWave2 in 2.4GHz wireless work on RB4011iGS+5HacQ2HnD?

There are no plans to add support for AR9300 interfaces to the wifiwave2 package.

However now after less than 1h all my devices disconnect and can’t connect anymore and reboot is needed. There is absolutely nothing in logs which would indicate any problem. Even no unsuccessful authentication or anything. WiFi however is still advertised by the ap, just can’t join. This seems to ...

Has anybody managed to actually ever save any config change for wifivawe in web ui ? I am getting error saying that exactly one must be set: Mac or master. But I have mac only set through cli, but UI tries to set master each time as there is no disabled/blank option. The WebFig interface for wifiwa...

Does wifiwave2 have bridging support yet? I tried it on my audience in beta3 a few months ago and it seemed to work, but the issue was that I need to use the 5GHz uplink radio on the audience to get back to my main router and this bridging did not work (no equivalent of station bridge or wds). 4-ad...

edit: options for 5G AX are showing up too. I tried to select it but says no supported channels Wireless standard support is limited by the capabilities of the hardware. You can find out, which bands an interface supports, by checking the 'Radios' section in WinBox, or running '/interface/wifiwave2...

1. False-positive radar detections can be triggered by sources other than radar or reflections of the AP's own signal. The last 2 LTS releases do not include any changes relating to DFS, so your observed increase in false positive radar detections is most likely caused by either an introduction of a...

Unlike with MCS, there is no mechanism in the 802.11 standard to signal that only 40MHz channel width is supported. Implementing a 40MHz only operating mode would require a proprietary extension to the standard, supported by both ends of a wireless link and a modification to the algorithm RouterOS u...

Is 802.11ax included in wave2 drivers?
Or is it just an image?

As stated before, the wifiwave2 package is being developed for future products. Devices compatible with the package that are on sale currently are limited to 802.11ac by their hardware.

Updated my HAP AC2 from beta2 to beta3 and the device is constantly rebooting at about 1 minute of uptime. There was only one critical log entry, the device restarted because of a kernel failure. Downgraded back to beta2. Please report this to support@mikrotik.com and attach either a supout file fr...

And the IPQ4019 devices with 16MB storage like HAP AC2 e CHATEAU LTE12??? It's possible to use external memory on usb2 port for the driver? Unfortunately, it's not. The wifiwave2 package is a preview of the wireless driver and configuration interface being built for future products and an opportuni...

What about devices with 16MB storage and 128MB of RAM? This new driver is way too big. 10MB. Does this mean that IPQ4018 devices are left behind? Unfortunately, reducing the size of the driver and its memory usage further was not found to be feasible at this point. Perhaps when RouterOS 7 and the w...

Search found 87 matches