I’m Implement 3 sites each site have 5units of CAP ax and got same experience. When my customers connected to 5GHz the WIFI get connected but didn’t get IP neither traffic passthrough ethernet while 2.4GHz work just find
I’ve 1 bridge with ether,wifi1 and wifi2 as member port. Problem happened no matter I’m set up config as individual AP or controlled with CAPsMAN.
Any solution? please.
Thank you.
What RouterOS version are you running?
Can you share the (relevant part of the) config?
Thank you,
Cap AX using RouterOS7.14.1, some upgraded to RouterOS7.14.3 and nothing different for this issue.
this is a the configuration, only get problem on client connected wifi1 interface.
/interface bridge
add name=Guest
/interface vlan
add interface=ether1 name=50-Management vlan-id=50
add interface=ether1 name=e1v60 vlan-id=60
/interface wifi datapath
add bridge=Guest disabled=no name=datapath1
/interface wifi security
add authentication-types=wpa-psk,wpa2-psk disabled=no encryption=ccmp name=sec1 passphrase=xxxxxxxx
/interface wifi
set [ find default-name=wifi1 ] channel.band=5ghz-ac .skip-dfs-channels=all .width=20/40mhz configuration.country=Thailand .mode=ap .ssid=Guest \
datapath=datapath1 disabled=no security=sec1
set [ find default-name=wifi2 ] channel.band=2ghz-n .width=20mhz configuration.country=Thailand .mode=ap .ssid=GSC_Guest_2.4GHz datapath=datapath1 \
disabled=no security=sec1
add bridge=Guest interface=e1v60
/interface wifi access-list
add action=accept disabled=no signal-range=-76..120
add action=reject disabled=no signal-range=-120..-77
/ip dhcp-client
add interface=50-Management
As a certified Mikrotik trainer you should know in those cases a FULL config export is needed (minus passwd, serial, …).
Not only the parts you think are needed because you’re leaving out parts which may be relevant.
E.g. where is wifi1 connected to a bridge ?
Are there multiple bridges ? (not recommended)
How’s the complete VLAN config ?
Can’t explain why 2.4GHz is actually working. And why this config is working at all…
Sure this config is complete?
I would expect:
Can you make a network diagram of how you want it to work? I.e. is eth1 supposed to be a trunk or a hybrid port?
At last: wpa-psk (that must be required by the customer!?).
Stop being faster, @holvoetn
Not related to the issue, but: you limited your wifi to 5ghz-ac and 2ghz-n. On a CAP AX you should use 5ghz-ax and 2ghz-ax.
It’s just simply AP other config just for ip dhcp-client, ntp and disable ip serivces, this is the whole exported for this AP 
# 2024-05-24 13:08:11 by RouterOS 7.14.1
# software id = xxxxxxx
#
# model = cAPGi-5HaxD2HaxD
# serial number = xxxxxxx
/interface bridge
add name=Guest
/interface vlan
add interface=ether1 name=50-Management vlan-id=50
add interface=ether1 name=e1v60 vlan-id=60
/interface wifi datapath
add bridge=Guest disabled=no name=datapath1
/interface wifi security
add authentication-types=wpa-psk,wpa2-psk disabled=no encryption=ccmp name=sec1 passphrase=xxxxxxxx
/interface wifi
set [ find default-name=wifi1 ] channel.band=5ghz-ac .skip-dfs-channels=all .width=20/40mhz configuration.country=Thailand .mode=ap .ssid=GSC_Guest \
datapath=datapath1 disabled=no security=sec1
set [ find default-name=wifi2 ] channel.band=2ghz-n .width=20mhz configuration.country=Thailand .mode=ap .ssid=GSC_Guest_2.4GHz datapath=datapath1 \
disabled=no security=sec1
/system logging action
set 0 memory-lines=5000
set 1 disk-lines-per-file=5000
/interface bridge port
add bridge=Guest interface=e1v60
/ipv6 settings
set disable-ipv6=yes
/interface wifi access-list
add action=accept disabled=no signal-range=-76..120
add action=reject disabled=no signal-range=-120..-77
/ip cloud
set ddns-enabled=yes update-time=no
/ip dhcp-client
add interface=50-Management
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www port=81
set api disabled=yes
set api-ssl disabled=yes
/system clock
set time-zone-name=Asia/Bangkok
/system identity
set name=3rdFloor
/system note
set show-at-login=no
/system ntp client
set enabled=yes
/system ntp client servers
add address=ntp.ku.ac.th
add address=th.pool.ntp.org
/tool bandwidth-server
set enabled=no
/tool graphing interface
add
/tool graphing queue
add
/tool graphing resource
add
answer the question 
/interface vlan
add interface=ether1 name=e1v60 vlan-id=60
(not bridge filter VLAN) so it does not need to turn on Bridge VLAN filter
but as you see wifi1 and wifi2 already in the "Guest" bridge but traffic of wifi1 not passthrough ethernet but wifi2 just fine as usually.
I’ve seen hap ax2 5GHz becoming unusable with ROS 7.13.5. I think this might be related to certain guest devices being present.
Hasn’t happened yet since I updated the device to 7.15rc3, maybe the wifi-qcom driver update improved things?
Have you tried adding the vlan-id to the datapath?
I’ll try to downgrade to something below 7.13.5 or try 7.15rc3, Thank you.
I’ll try, just wonder why it doesn’t work only with wifi1 (5ghz) interface because clients connected to wifi2 (2.4ghz) are work like charm.
I agree. But it is so simple that’s worth trying.
Problem Solved by put VLAN-ID to Datapath, Thank you very much.
