MikroTik

gigabyte091

My bad, didn't look carefully enough...

my 2 cents, scan area to see which channel is less crowded, set your frequency manually to the least crowded one, don't leave it on auto. Is there a lot of 5GHz networks around you ?

gigabyte091

My hAP ax2 came loaded with 7.5 but I upgraded to 7.6 straight away before looking around it much when I first got it mid October 2022.
Does the controller need to be arm64, ie can I use a CHR hyper-V to try controlling the radios instead of the hap ax2 ?

Why will you use separate controller ?

gigabyte091

You can't tell anything from this configuration you posted... Show us full configuration minus sensitive information. Show r50 and f24 configuration.

gigabyte091

Have RB4011 as main router in our office. ROS 7.12.1 is running and i have no problems whatsoever.

Maybe if you can open support ticket with attached supout.rif file so support can check if something is wrong.

gigabyte091

Newest stable release is ROS 7.12.1. How are you connecting to your router ? Wire or wireless ?

gigabyte091

No problem with reboots or shutdowns on 3.40.

gigabyte091

As far as i can see it failed to select channel because radar was detected on 5680 MHz and you set freq.range from 5650 to 5690.

You should set more frequencies. Set for eg. 3 channels or try to set channel that is not DFS channel.

gigabyte091

Yea, but OP doesn't use solar panels, and cheap DC-DC converter are available everywhere. But for eg. I would rather spend a little bit more money to have more reliable UPS power for my network equipment. Personally I wouldn't trust chinese UPS with lithium batteries... My setup involves true sinewa...

gigabyte091

Well for that price maybe is better for you to buy used UPS with a bad battery and replace battery.

gigabyte091

It can take up to 10 minutes

gigabyte091

Then it's better to add DC-DC converter instead of burning excess heat in linear regulator. But I don't think there would be any problem with 27.2V on router input.

gigabyte091

So you can adjust voltage from as low as 23V i think. Have in mind that at the same time you adjust battery charge voltage. So i could recommend you to set output voltage to 27V so you have charge voltage of about 13.5V per battery. I use that PSU a lot in my field of work and over the past 4 years ...

gigabyte091

This:

https://www.meanwell-web.com/en-gb/ac-d ... drc--100b

And two 12V 12Ah batteries and you have no problem with achieving 8h backup time.

gigabyte091

On your CAPsMAN controller go to your configuration and under FT tab and FT enable set to yes and FT over DS set to yes

gigabyte091

Just put 24V PSU... Current difference is negligible and its much easier to find 24V PSU.

gigabyte091

I posted my config in another topic where you asked a question.

If your AP is CAP and by some configuration it is then it's not default configuration on it... You are using service tag why ?

gigabyte091

Here you go, my old setup that is working (now I use RB5009 instead of ax3) and between CAP and controller there is a CSS610 switch CAPsMAN: # 2023-11-23 05:13:16 by RouterOS 7.13beta1 # software id = # # model = C53UiG+5HPaxD2HPaxD # serial number = /disk set usb1 type=hardware set usb2 type=hardwa...

gigabyte091

So, create separate VLAN for guest WiFi, tag it for your bridge and port going to your CAP, and create datapath with new VLAN and your default bridge. Create hybrid port (untag your home VLAN and tag your guest VLAN) and that should be it, create virtual WLAN interface, assign SSID, desired VLAN, se...

gigabyte091

Sorry for waiting, so if your RB4011 is router, why are you using cAP ax as CAPsMAN ? On your device that acts as CAPsMAN controller you don't touch CAP menu because that is only if that device is CAP and not CAPsMAN controller. You said this: ON AP: System>Reset Configuration->Checked CAPS Mode and...

gigabyte091

I must agree with @holvoetn, there is no need to mess with CAP settings. Whole point of CAPsMAN is that everything is managed in one place.

gigabyte091

Supout and contact support, if you have warranty try to return it.

gigabyte091

Today one more ax lite lte deployed, so far no problems with LTE interface. I hope i will not face the same problems as they are used in quite delicate application...

gigabyte091

Maybe @holvoetn can sharw config, if im not wrong he have ax2 as CAP.

gigabyte091

You are right, thanks for pointing that out

gigabyte091

Nothing is wrong with using 40 MHz channel width. I'm using 40MHz on my 5GHz radios as all my wireless devices doesn't access my NAS or any other service on LAN that requires high speed and my internet connection is 150/150 so 573Mbps is plenty for my use case.

gigabyte091

No, I mean did you added VLANs yourself in CAP ? Because that is not necessary. You put device in CAP mode, on router you create hybrid port where mgmt or trusted network is untagged and VLANs that you want to use are tagged. Everyrhing else is done on CAPsMAN controller. There is no need to touch C...

gigabyte091

Did you mess with the settings in CAP ?

gigabyte091

Did you maybe try to set default config an connect without using CAPsMAN ?

gigabyte091

So for CAP you should have your mgmt or any network that you have CAPsMAN running untagged and VLANs that you want to use on that CAP tagged. Does your CAP have connection with CAPsMAN controller ?

gigabyte091

Well, @anav here gave you as much information as possible because he doesn't know your configuration. You should export your configuration, redact any sensitive information and post it here. By default L2 communication between VLANs is blocked. L3 is not so if you can't access your switch maybe ther...

gigabyte091

That router can't output multiple voltages. In your case only 48V is available.

Only device that I know that is capable of 24V passive and 48V active poe at the same time is CSS610-8P-2S+IN

gigabyte091

Are you planning to implement PPSK in near future ?

gigabyte091

And WiFi 7 is coming to Mikrotik in 2030

gigabyte091

Okay, so now it's clear to me, tnx @mkx

gigabyte091

Yesterday, around 5:45pm, but in my case ax3 is capsman controller and router wireless interfaces are disabled. This is at my parents house. I can enable interfaces to test them.

gigabyte091

Okay, I updated ax3 to 7.13beta1, only ROS package, nothing else, do I need to install another package or what ?

gigabyte091

hAP ax lite LTE6 7.13beta1 working without a problem (wifi, VLANs, WG, LTE)

gigabyte091

on the v7.13?

Yes, on 7.13, works without a problem.

Tested Wireguard on hex S and it's working without a problem.

gigabyte091

I tried Wireguard now (BTH) and it's working fine, did you check the config after the update ?

gigabyte091

Capsman works fine in my case, vlans and everything

gigabyte091

Is it normal that there is no more wifiwave2 tab ? Now it's called just wifi. It's on ax3

gigabyte091

Tested with RB5009, AX3, cAP ax. Everything works fine for now. This is quite a large number of changes, good work guys. Few questions, PPSK maybe ?? :D And now on my CAPsMAN controller in WiFi menu i dont have any more that interfaces are controlled by capsman but on CAPs I have that. This is somet...

gigabyte091

Can you post your configuration ?

gigabyte091

But statement was about is BTH available in 7.12 not are all functions available in Winbox :PPP

gigabyte091

My honest advice, go with RB5009, it's powerful router and you are future proof with him. And you have PoE version if needed, you have USB port so maybe some containers and you have SFP+ port.

gigabyte091

Please post your configuration, without that it would be difficult to give you any advice.

gigabyte091

It's possible to use isolated DC-DC converter here or try to reverse polarity on the plug. Right now you are tripping your circuit breaker because protection circuit inside router (probably just a diode connected across supply pins) shunt current and shorts out PSU.

gigabyte091

Can you post your configuration ?

gigabyte091

Yea, I find netinstall very flaky... At least windows version... Once i netinstalled ax2, same packages, 3 times no luck, same old version, 4th time new version but no default config...

As soon as I removed wifiwave2 package from netinstall everything worked.

gigabyte091

Try without wifiwave2 package, only ros package. I had problem like your before when netinstalling ros.

I always netinstall pure ROS and then I add packages I need.

gigabyte091

Updated 3 devices with similar config from 7.11.2 to 7.12 stable:
1. Hex s - works fine, including DoH.
2. Hap ac3- DoH doesnot work.
3. Rb4011 - DoH doesnot work, BtH - unable to connect.

Tested with RB5009 and AX3 and BTH is working without a problem. Will test with my RB4011 tomorrow.

gigabyte091

AX3, cAP ax, RB5009 updated. No problems so far

gigabyte091

Correction, it's available in 7.12 stable.

gigabyte091

That is not a good PSU if you see 47V peaks on 24V rail... That kind of overshoot could damage electronics...

Did you measure after you replaced capacitor ?

gigabyte091

You don't need to use service tag. Okay now you created VLANs, did you try to assing VLAN to any interface so you can test it ?

gigabyte091

I do believe that this is a client problem. At least in my case, only one device have this problem. In my case we are talking about Xiaomi phone. Same model, year apart from my wife's phone, her phone roams, my doesn't. I also noticed that it likes to hang onto 5GHz radio... When we are in our yard ...

gigabyte091

Android rulz

gigabyte091

No iOS, Android only

Honestly, I don't care, as long as her wifi is good i'm happy. I still have flashbacks to ROS 7.9 and wifi fiasco... I can still hear her voice... WIFI IS NOT WORKING AGAIN !!!

gigabyte091

I can see @anav buying couple of cAP ax's to replace existing AP ih his home

I tested now at one of my customer site's, they are using TP-Link for AP's, same thing, phone is holding for one AP...

gigabyte091

I experienced the same thing but wife and I have same phones, exactly the same model, only difference is color and her phone is a year younger so i'm thinking different revision ?? Her phone roams without a problem, my sticks to the downstairs AP and won't let go... It's like his life depends on it....

gigabyte091

I think it would be best to merge this topic and this one: viewtopic.php?t=201201 because OP have same questions in two different places.

gigabyte091

What is this ?? add address=0.0.0.0/24 dns-server=0.0.0.0 gateway=0.0.0.0 netmask=24 You said without tagging on the bridge but you tagged VLANs on the bridge: /interface bridge vlan add bridge=bridgeLAN-WLAN tagged=bridgeLAN-WLAN vlan-ids=10 add bridge=bridgeLAN-WLAN tagged=bridgeLAN-WLAN vlan-ids=...

gigabyte091

I don't know for CAP but it you could see it on CAPsMAN for sure.

gigabyte091

Well DFS or Dynamic Frequency Selection is a WiFi feature where 5GHz radio is allowed to use frequencies that are normally allocated for use in various radar equipment but in case that radar signal is detected it must stop to transmit on that channel so it would not interfere with radar signal. But ...

gigabyte091

Agree, Mikrotik should make series on youtube about CAPsMAN2, maybe 2-3 parts in detail about configuration.

gigabyte091

As far as I can see there is no mention of capsman here and every AP is on separate subnet, so why you don't just untag them and leave trunks between AC3, CISCO and USW ? 1. On AC3 you need only one bridge, there is no need for more bridges and you add all ports as a bridge member expect port you ar...

gigabyte091

Maybe it's ignoring frequencies you set because radar is detected. I had similar problem, radar was detected and other frequencies were used.

As for VLAN as @holvoetn said, there is no other settings needed on CAP.

gigabyte091

I think that something from Noctua would be good replacement, this is 4 pin, i don't know if there is a 4 pin fan inside CRS but there is a 3 pin version also.

https://noctua.at/en/nf-a4x10-pwm

gigabyte091

Are you able to connect to the WiFi now ?

gigabyte091

Did you manually added config to 2G radio ? Be aware that radio on device that acts like capsman controller isn't controlled by capsman, it's controlled locally.

What logs show when clients disconnects ?

gigabyte091

I would like to use CRS328-24P-4S+RM to power IP cameras but in reality I go with TP-Link or Hikvision switches because I can't justify the price difference.

gigabyte091

This is on you cAP ax that is acting as CAPsMAN ? Did you try to enable them ?

gigabyte091

@anav Come to the dark side... We have CAPsMAN... @EricM81 You don't have to use separate SSIDs for 5 and 2.4, that is just the example from Mikrotik. So you can use one of the cAP ax as CAPsMAN controller (wireless interfaces on controller will be managed locally but you will have roaming etc becau...

gigabyte091

Is same possible on TP-Link without Omada controler ? Or on Ubiquiti when they are working as standalone AP ?

For ubiquiti i know that for roaming you need to have controler.

Why such "hate" towards CAPsMAN ?

gigabyte091

You can start here: https://help.mikrotik.com/docs/display/ ... ve2CAPsMAN

And then if you get stuck you can always ask here.

gigabyte091

I'm using 2 cAP ax and RB5009 as CAPsMAN controller and while I can't speak for CAPsMAN with legacy drivers with wifiwave2 drivers I have no problem, devices are roaming without a problem. I have multiple SSIDs for IoT, CCTV, etc and each one is on separate VLAN. After Mikrotik sorted things out wit...

gigabyte091

Yeah, it's true that there is additional complexity but it's not that bad to configure... I mean I'm running CAPsMAN and I'm not some kind of an expert. Also there is roaming. (don't know if that is possible without capsman

)

gigabyte091

What is your CPU usage on RB750 when running iperf test ?

gigabyte091

Are you going to use CAPsMAN ?

gigabyte091

I totally agree with you.

+1 for this and +1 for poe unmanaged version if possible for IP cameras.

gigabyte091

That seems to be inductor, what number is on it ? Its probably a part of a power supply so no wonder it wont work.

But in case of a lightning strike... Hardly there is only one component faulty...

gigabyte091

I don't know if something is changed but if you enable VLAN filtering on CAP Wifi goes haywire... So best thing is don't touch cAP, everything is done on controller router. I have RB5009 and 2 cAPs and everthing is done on RB5009. Just untag your network where CAPsMAN resides and tag other VLANs. Th...

gigabyte091

So, I came back from security summit where ax lite lte was used as an router and CSS610 poe version was used as a poe switch for powering equipment. I wanted to see how it will preform in high noise environment and believe me, that is very high noise environment with not only 2.4GHz WiFi blasting al...

gigabyte091

It's possible, if you have spare power adapter you can try.

gigabyte091

I think only way to see that is in client itself.

gigabyte091

You should export your configuration and paste it here using code function. Without a configuration it's hard to say what's happening.

gigabyte091

I agree with @vinigas, it would be nice to have dark mode...

gigabyte091

Regarding Wireguard you can open another topic and I'm sure that our local Wireguard guru @anav will help you with that.

Just be sure to draw network diagram and specify what do you need.

gigabyte091

Yea, that's about it, everything is working now ?

gigabyte091

What is CPU usage on ax2 when you start speedtest ?

gigabyte091

How I did it on my network, all VLANs are member of LAN list but only one VLAN is also member of MGMT list and that is my trusted network or main network. With simple firewall rules I block traffic from any VLAN to my trusted VLAN but I allow trusted VLAN to access other VLANs (for eg. CCTV camera c...

gigabyte091

This is not correct, you must untag physical port not VLAN. Also you set ether4 as tagged, so you are sending this VLAN tagged to another device. /interface bridge vlan add bridge=BR1 tagged=ether4 untagged=VL10 vlan-ids=10 Should be: /interface bridge vlan add bridge=BR1 tagged=BR1 untagged=ether4 ...

gigabyte091

It shouldn't cause any problem with non-PoE devices because if you leave PoE configuration to AUTO there is no voltage present on the port until PoE negotiation is done and that negotiation is defined in 802.3at/af standards. But you must be careful, your device can output 24V as well so if you set ...

gigabyte091

For that i think it's the best to start a new thread.

gigabyte091

They arrived earlier then...

Well if you are using default config for wan there shouldn't be any problems.

gigabyte091

So now everything is working ?

gigabyte091

Maybe because of the User Manager ? License L5 only allows 50 active sessions.

gigabyte091

Did you tag your bridge on all VLANs ? I can see only VL100 that is tagged on ether3 and bridge.

gigabyte091

It depends on the internal structure of your small home. I have a similar small appartment but straight through the middle there is a concrete wall (part of the structure of the building), while all other walls are plasterboard. I do require two WiFi devices for reasonable coverage. Otherwise the s...

gigabyte091

Are you using two bridges ? From your configuration it seems so. I will put your configuration here so anybody can see it and maybe help you quicker. # 1970-01-03 01:33:05 by RouterOS 7.11 # software id = U2BP-38L2 # # model = C52iG-5HaxD2HaxD # serial number = *********** /interface bridge add name...

gigabyte091

I can see that you don't have VLAN filtering enabled on your bridge. If you have problems with VLANs that could be one of the reasons why.

gigabyte091

For that small home and if your ac2 had good signal then maybe you should look at ax3 maybe

gigabyte091

Can you export your configuration here ? For bringing port off bridge you don't need to mess with a firewall rules.

gigabyte091

You see, when you are using it right there is no problem

gigabyte091

So I presume you didn't create off bridge port for configuration ?

gigabyte091

My ax3 is upstairs and im testing downstairs and i get full connection speed on my phone. I don't see any problems...

gigabyte091

It depends what area you want to cover with wifi, its not the same small apartment and large house. For my house i have combo RB5009 and 2 cAP ax and it works great for me. For eg. two cap ax would cost you another 250$ Of course you can look at another APs, you have tp link, ubiquiti. At the end yo...

gigabyte091

For only 250$ i really think that you will not find what you want.

What I would do is buy RB5009 but maybe PoE version, so you have really future proof router and use ac2 as AP until you decide to buy another AP.

gigabyte091

Well, there is no point in releasing something that isn't tested just to release it. I'm sure there is version ready to be released.

gigabyte091

You have plenty of time then, maybe even for relaxing

gigabyte091

Well if you are willing to learn then I can recommend you this topic: https://forum.mikrotik.com/viewtopic.php?t=182373 It have pretty much everything you need. Read it, learn something, try on your own and of course if you get stuck you can always ask for help on the forum. :D :D Don't use multiple...

gigabyte091

Why are you using two bridges ? Is there a particular reason you have your WAN interfaces on another bridge ?

gigabyte091

Maybe if you try to contact Mikrotik support and explain situation they can help you with your license.

Sent them supout.rif file

gigabyte091

On the 760 I have WifiWave2 while on the 952 I have CAPsMAN.
Can I configure it on the 760 router or do I have to configure it on the 952 ?

Sorry I thought because of this that you are mixing versions.

gigabyte091

Unfortunately I don't have any iOS device to test on my network.

It's a long shot and probably doesn't matter but can you set 2 GHz to b/g/n and 5 GHz to ac instead of ax ?

gigabyte091

CAPsMAN v1 is not compatible with wifiwave2 CAPsMAN so you can't control devices with different versions of capsman.

gigabyte091

2.4 GHz is working like it should ? You said you have problem with apple devices, do you have any android device or laptop ?

gigabyte091

Just put one frequency, 5180 MHz. Why did you put range from 2300 MHz to 5180 MHz on 5 GHz radio ?

gigabyte091

I think that mr.Hector here is talking about what is needed for another relay station for BTH.

I think that best option is to contact Mikrotik support directly.

gigabyte091

There is a special circle of hell for that kind of ISP...

gigabyte091

I see that you are using 5745 MHz, did you try lower frequency ? Some devices may have problems with that... Try 5180 for eg, maybe that helps ?

Can you update to 7.12beta9 ?

gigabyte091

Did you try to disable management protection in security tab ?

gigabyte091

So now everything is working now ? Because this is pretty much default configuration and there shouldn't be any problems.

gigabyte091

Can you export your configuration ? Go to terminal then enter export file=anynameyouwant, then in files you can find that new file is created, download it to PC, open in notepad or word editor of your choice and remove any serial number, passwords, usernames etc and copy configuration here using cod...

gigabyte091

And what your logs says when devices disconnects ?

gigabyte091

You can find it under interface security settings. Go to Winbox - > Wireless -> WiFi Wave2, security tab and select profile you created for your network, There you can find this:

Mgmt_protection.jpg

gigabyte091

He is not OP ? I didn't see that... sorry...

gigabyte091

You are OP

post pictures here so if there is somebody with same problem can see possible solution.

gigabyte091

You are probably using legacy wifi drivers while OP uses wifiwave2 drivers.

For OP, skip all dfs channels, set your frequency manually, don't leave it on auto. Choose channel with least amount of interference.

What your log say when device disconnects ?

gigabyte091

Well if it works for you, and you are aware of security risk then why not turn it off, I mean in home application it's better that way... Less dropouts and unhappy family members

gigabyte091

As @holvoetn said:

Use URL for rc package and modify as needed.

It worked for me just fine.

gigabyte091

BTH is only available in beta versions of ROS for now. You need to install beta version of ROS if you want to use BTH.

gigabyte091

So if you power router for the first time you connect via MAC address and then you will see that there is default configuration applied. You can choose to keep default configuration or delete it. If you keep default configuration then by default you can access your router with IP 192.168.88.1 If you...

gigabyte091

Why two routers ? Are you using TP-Link as AP ?

gigabyte091

Each VLAN will have their network address, IP pool, dhcp server and gateway. For eg I have VLAN_88, Network is 10.10.88.0/24, IP pool is 10.10.88.1 - 10.10.88.254 and gateway is 10.10.88.1 and I can access my router on that IP.

gigabyte091

In status tab you can see TX power, antenna gain probably only in CLI.

gigabyte091

You can find it in Wireless -> WiFi Wave2 -> then when you select interface you want to configure you will get this:

TX.jpg

Here you have TX power and antenna gain. I leave antenna gain default and change tx power if needed.

gigabyte091

My advice, reset to default configuration on RB3011 and we will start from there then. You will get default firewall rules that are good enough for like 99% of the users.

gigabyte091

Thank you both

gigabyte091

You don't have any firewall rules ?

Something like this:

;;; defconf: accept to local loopback (for CAPsMAN)
      chain=input action=accept dst-address=127.0.0.1

gigabyte091

When you connect PC or laptop to ether10, do you get IP address from 192.168.1.0/24 network ?

gigabyte091

Can you go to Winbox -> Terminal, there enter this:

/interface/bridge/vlan print detail

and show what you get ?

gigabyte091

Does anybody know where I can download 7.12beta9 for arm64 ? Main and extra packages. Can't find it on Mikrotik web site... Can't update to 7.12RC1 because I need BTH.

gigabyte091

Then you should tag your VLANs 20 and 30 for ether10 as well because you are expecting those VLANs on CAP. Untag ether10 for VLAN1 because on default VLAN you have 192.168.1.0/24 network and it's assigned to bridge, and that is where CAPsMAN is listening.

gigabyte091

Only thing that would be great is that we can configure switchOS from winbox.

But I also prefer SWOS

gigabyte091

In that case your ax2 can be CAP, and your RB5009 if you buy it can be capsman controller. I have no doubt that you will be satisfied with your ax2, it's a great little device. Here you can find excellent tutorial for new users: https://forum.mikrotik.com/viewtopic.php?t=182373 It's a lot of reading...

gigabyte091

Well, router is not something you will change every year so I believe that it's maybe better for you in the long run to go with RB5009 with PoE. I was also in this dilemma and at the end I bought RB5009 PoE version and combined with 2 cAP ax's it's pretty powerful setup. It was over my budget but no...

gigabyte091

Looking at config, only ether 8,9 and 10 are bridge members. What is with the other ports ? As @holvoetn said, you set listening interface to bridge but ether5 is not a bridge member so it's normal that there is no connection between cap and manager. Add ether5 as bridge member, untag PVID 1 on ethe...

gigabyte091

Is your cAP ax comnceted to ether5 of your RB3011 ?

gigabyte091

Did you try to connect them to some other router if you have any ?

gigabyte091

Onvif is pretty much standard in cctv, it enables you to connect cameras from one vendor to network recorder of another vendor because many, if not all of them use their proprietary protocols (Hikvision have their protocol, Bosch have their) But ONVIF shouldn't affect network settings. One more thin...

gigabyte091

What model do you have ?

Some models have integrated PoE switch and DHCP server, and some are network recorders, with one ethernet port and you have to connect camera to your network.

gigabyte091

I don't know for 7.12rc1 but on 7.12beta9 it's possible, I tested that few days ago, I removed datapaths, tag VLANs that i want to use on CAP and that's it, no configuration was done on CAP itself. User manager assign VLAN to wireless clients as defined in user groups. https://forum.mikrotik.com/vie...

gigabyte091

Why would you need to collect your guest's MAC address, phone and name for security purposes ?? Doesn't your hotel requires some kind of ID at check in ?

I hope your hotel is not in Europe because I'm sure you will be violating some kind of GDPR...

gigabyte091

If it's working then leave it, i checked with my cameras, 2 hik cameras also have status waiting in dhcp lease and they are working without a problem. (Lease is static in DHCP)

gigabyte091

But OP have cAP ax, so can replace RB2011 with something like ax3 or maybe RB5009. Then capsman can be used and OP will have newer devices to work with

gigabyte091

Then this could mean that your client device or your cameras in this case doesn't request an IP address from DHCP server and server is waiting for request.

What happens when you reboot camera ? It should request address from dhcp server.

gigabyte091

What is your lease time ? Too short time could cause that behaviour.

gigabyte091

You set static IP address on cameras or you made dhcp lease static on the router ?

gigabyte091

For RB2011 to work as CAPsMAN for ax devices or ac devices that supports wifiwave2 drivers you also need to install wifiwave2 package onto your RB2011. Problem is, RB2011 doesn't support wifiwave2 drivers... Workaroud is to use one of your devices that have wifiwave2 drivers installed as capsman con...

gigabyte091

Yea... unfortunately that are your only options right now.

gigabyte091

Personally I have 2.4 GHz on 20 MHz channel width, and 5 GHz on 40MHz channel width. This will help you if you are in a crowded area.

Other recommendations are scan area, set your channel to something that is free or less crowded. Don't leave frequency on auto.

gigabyte091

Why ? leave it untouched so it defaults to default antenna gain...

gigabyte091

So there is CAPsMAN that works with legacy WiFi drivers and then there is CAPsMAN that works with new wifiwave2 drivers that are in all new ax devices. There is no way of installing legacy drivers to ax devices nor legacy capsman can work with new one and vice versa. Your current CAPs don't support ...

gigabyte091

In that case I will try to netinstall new ROS and then tried reset button method again, without quick set.

gigabyte091

Disconnect power from cAP ax, press and hold reset button, connect power again and wait until LED became solid green then release the button. Now cAP ax should be in CAP mode. No other configuration is required on device. That's the way i configured my 2 cAP ax's and any other device that needs to b...

gigabyte091

keep us updated, if there is no problem for at least a week then it's okay.

gigabyte091

Maybe you had problems with radar detection ? Can you see in logs if radar is being detected ?

gigabyte091

So I removed datapath from configuration and now Mikrotik_2 as expected receive IP address from default VLAN1, but Mikrotik_1 still gets IP address from VLAN that is specified in User Manager. So it appears that datapath in this case is not needed and VLANs are managed by user manager... Ofcourse, V...

gigabyte091

I'm an idiot... I didn't change that... It's working now. I noticed that for eg, I have 2 SSIDs, one is Mikrotik_1 and it's on VLAN60 and Mikrotik_2 that's on VLAN70 configured by datapath and right now I have user manager configured just for Mikrotik_1, but in user manager i assign vlan70 to user c...

gigabyte091

Is it possible, can't hurt to try it... If you experience same thing then you should create support ticket and you should create supout.rif file when your wireless interfaces crashes.

gigabyte091

Are you using original power adapter with ax2 ? Do you have any other adapter to test ?

gigabyte091

Best thing right now, open support ticket, attach supout.rif file when opening the ticket.

gigabyte091

Can you post your configuration ?

gigabyte091

You know, my colleague once said to me... but why so much security ? Are you running a bank ?

gigabyte091

As I promised, I tried to play a little bit with user manager. I created two VLAN's, I have CAPsMAN up and running and that part is working, I get correct VLAN assigned, I have internet access. I tried to setup User manager but it doesn't do anything, like I connect to wifi but user manager is ignor...

gigabyte091

I noticed the same thing... Probably a bug...

gigabyte091

Right now I have 5 of them active on different sites and I didn't encounter this problem... I hope it's not some kind of serial defect...

Modem is soldered to the board so in case of modem fault easiest solution would be to replace whole unit...

gigabyte091

First one is more of a switch instead of the router so i don't think so...

For the second one I don't know, you will have to wait for someone more knowledgeable.

gigabyte091

Why so many VLANs ?? I would put phones and your and your wife's PC in same VLAN or are you trying to say that you don't trust your wife ?? :lol: :lol: Kids camera in the same VLAN as your IoT devices, office stuff can go in separate VLAN. I can recommend you VLAN guide from pcunite so you became fa...

gigabyte091

Thank you for information, tomorrow i will create test setup to play a little bit with it. Good thing is that I don't have "dynamic" network so to say, all my devices are fixed, cameras, etc... There is no guest network and honestly nobody asks me for a wifi password so i really didn't see...

gigabyte091

My main network that is in active use is RB5009 and 2 cAP ax controlled by capsman. For testing purposes I have RB4011 with wifiwave2 package installed and ax2 as cap. How do you activate mac authentication on wifiwave2 ? @pe1chl suggested to use password as well as mac filtering and I tried that an...

gigabyte091

Did anybody tried to configure user manager with capsman (wifiwave2) ?

Asked support about this but they are not responding.

I tried User manager with standard legacy drivers and single AP and it good workaround until Mikrotik implements PPSK.

(Thanks to the @pe1chl for help with user manager)

gigabyte091

You didn't use it enough

ROS is a little bit intimidating at the beginning but when you learn something you see all the possibilities.

I have Aruba switch packed neatly in a box, it's replaced with Mikrotik

gigabyte091

OP already said that he tried that...

What is your procedure when doing netinstall ?

gigabyte091

Closest I was able to find is this: https://www.cnx-software.com/2022/12/08/gowin-r86s-mini-pc-10gbe-2-5gbe-networking/ It have 3×2.5Gig ports and 2×10Gig sfp ports but for supporting PPPoE at full speed you will have to wait somebody more knowledgeable. Or this: https://www.amazon.com/MOGINSOK-Fire...

gigabyte091

And what exactly is your problem here ? Why are you not showing whole configuration ? If using VLANs you will block L2 communication between clients but for L3 you need to create firewall rules to do that.

gigabyte091

One neat way to send ethernet is by using Moca adapters if you have coax wired in through your house.

gigabyte091

For IoT devices you can create separate VLAN network and SSID with WPA2 only network.

gigabyte091

For testing purposes disable WPA3 if possible

gigabyte091

In my opinion it will take years until WiFi7 became mainstream (and then couple of years more until mikrotik releases their be device :-P :-P ) A lot of laptops are still using ac standard but it's not a problem to change wireless card, ax200 are fairly available, phones are better in this as more a...

gigabyte091

Fast roaming is working for far longer then latest beta release.

gigabyte091

Not only netinstall but also RouteOS. I clicked "Provision" and "Upgrade" in "Remote CAP" and all APs shut down and failed to reboot. The RouteOS seemed like flying.

Tried to reproduce this with cAP ax and ax3 as controller but i couldn't reproduce this problem.

gigabyte091

I missed that... As @tdw said you are missing 10.10.1.0/24 in ip addresses. When you add that, route will be created automatically.

gigabyte091

Never had problems with ax2 freezing on me. What ROS are you using ?

gigabyte091

Did you enabled VLAN filtering on the bridge ?

gigabyte091

That and remove one port from bridge, assing IP address to it, add it to the interface list and do your config from that port.

That way even if you screw something up you won't get locked out of your router.

gigabyte091

Well done, you really decided to bring that router back

I think firmware could be protected on that chip...

gigabyte091

Nobody would be more happier than me that every switch I install is in the rack

In reality its more like basements, warehouses, some of them are outside in custom made enclosures.

gigabyte091

I had problems with that, especially with mobile operators...

Search found 895 matches