(ASK) Upgrade Mikrotik ac2 v6 to Mikrotik ax2 v7

RouterOS Wireless Networking
1

Help me please..

I have router mikrotik ac2 v6 connecting to internet by this script. I want upgrade mikrotik ax2 v7, this script can not work on mikrotik ax2 v7 :


/interface wireless security-profiles

add authentication-types=wpa-eap,wpa2-eap eap-methods=peap
management-protection=allowed mode=dynamic-keys mschapv2-password=123456
mschapv2-username=111222333444@wifi.id name=seamless-1
supplicant-identity=111222333444@wifi.id tls-mode=dont-verify-certificate

/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n comment=MAC-2-Ghz
disabled=no distance=1 mac-address=77:44:22:55:77:33 name=wlan1
radio-name=BACKUP-1 security-profile=seamless-1 ssid=seamless@wifi.id
station-roaming=enabled
v7.10, 7.10.1 and more [stable] are released!
v7.11beta [testing] is released!
v7.11beta [testing] is released!
2

AC2 = legacy wifi
AX2= wifiwave2
Completely different environments, command-wise.

Best to open winbox on AX2 and enter the needed parts manually.

3

To clarify, you changed devices and want “similar settings” on the new model?

4

I can not found in command line and winbox on AX2 :

management-protection=allowed
mode=dynamic-keys
mschapv2-password=
mschapv2-username=
supplicant-identity=
tls-mode=dont-verify-certificate

5

Yes, I want change old mikrotik ac2 to mikrotik ax2.

Can yau help me please

6

It’s not there anymore.

Again, legacy wifi and wifiwave2 are totally different things.

7

You can’t set those settings. They are not needed in new wireless chips.

8

How i connect internet by that authentication ?

9

So, how i connet internet use that authentication ?

10

I’ve already tried Mikrotik AC2 which was connected normally using version 6.48.7, so I upgraded to version 7.10.2 it can’t even connect to internet.

I think can connect internet Mikrotik Ac2 after upgrade to new version 7.10.2

Log in Mikrotik Ac2 v7 : established connection on 2462000, SSID seamless@wifi.id

11

Judging by the fact that radio-name=BACKUP-1, you are using backups. Therefore, clear the configuration completely, as the work with routing tables has changed in v7.

12

Thanks for your respon.
I’ve already tried Mikrotik AC2 which was connected normally using version 6.48.7, so I upgraded to version 7.10.2 it can’t even connect to internet.

management-protection=allowed
mode=dynamic-keys
mschapv2-password=
mschapv2-username=
supplicant-identity=

Can’t run auth on router v7

13

Try setting it up like this
Screenshot_10.jpg
Screenshot_11.jpg

14

Thank Ca6ko for your respon.
I try it, but can not connect.
This screen shoot on v6, how i use on v7
Screenshot_20230715-215655_AnyDesk.jpg
Screenshot_20230715-215605_AnyDesk.jpg

15

On hAP ac^2, the settings between v6 and v7 have not changed.
On hAP ax^2, the configuration menu differs from hAP ac^2.
‘mode=dynamic-keys’ is deprecated. The wifiwave2 package only supports authentication with dynamic keys, so there’s no need to set it.
‘mschapv2-password’ is now security.eap-password
‘mschapv2-username’ is security.eap-username parameter
‘supplicant-identity’ is security.eap-anonymous-identity
‘tls-mode’ is security.eap-certificate-mode
‘managagment-protection’ is security.management-protection

If you want more help, please share the output of /interface/wifiwave2/export.

16

Thank for your respon FToms

  • Where From hAP AC v7 or AX2 v7 i export ?
  • Why hAP AC v6 can connect, so after i upgrade v7 can not connect without change configur ?
17

I can not found configuration on AX2 authentication type UNICAST CHIPER & GROUP CIPHERS.
How about it ?

Screenshot_20230719-103330_Gallery.jpg
Screenshot_20230719-103330_Gallery.jpg1065×1014 118 KB

18

On AX2 CAN NOT CONNECT v7
[pendy@android-AX2] > /interface/wifiwave2/export

# 1970-01-13 07:03:28 by RouterOS 7.10.1
# software id = FR6R-KYA2
#
# model = C52iG-5HaxD2HaxD
# serial number = <serial>
/interface wifiwave2
set [ find default-name=wifi2 ] configuration.mode=ap
/interface wifiwave2 security
add authentication-types=wpa-eap,wpa2-eap disabled=no eap-anonymous-identity=\
    111222333444@wifi.id eap-certificate-mode=dont-verify-certificate \
    eap-methods=peap eap-username=111222333444@wifi.id management-protection=\
    allowed name=seamless
/interface wifiwave2
set [ find default-name=wifi1 ] channel.band=5ghz-ac .width=20mhz \
    configuration.mode=station .ssid=seamless@wifi.id disabled=no \
    mac-address=A0:C9:A0:8A:44:93 name=wifi1-hp-note security=seamless \
    security.eap-methods=peap

On hAP AC CAN CONNECT v6
[pendy@BACKUP-2] > /interface wireless export

# jul/18/2023 13:32:52 by RouterOS 6.48.7
# software id = R5EU-Z4KY
#
# model = RBcAPGi-5acD2nD
# serial number = <serial>
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa-eap,wpa2-eap eap-methods=peap \
    management-protection=allowed mode=dynamic-keys mschapv2-password=123456 \
    mschapv2-username=111222333444@wifi.id name=seamless-1 supplicant-identity=\
    111222333444@wifi.id tls-mode=dont-verify-certificate
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n comment=MAC-suci2_2-Ghz \
    disabled=no distance=1 frequency=2462 mac-address=74:4D:28:54:76:36 name=\
    Ether1-ISPUMUM radio-name=BACKUP-1 security-profile=seamless-1 ssid=\
    seamless@wifi.id station-roaming=enabled
set [ find default-name=wlan2 ] band=5ghz-a/n/ac comment=MAC-Suci1_DELL_5-Ghz \
    country=no_country_set disabled=no frequency=5805 mac-address=
    B8:6B:23:E9:97:B5 name=Ether3-ISPUNLIAPPS radio-name=BACKP-3 \
    security-profile=seamless-1 ssid=seamless@wifi.id station-roaming=enabled
19

You’ve not applied the specified security profile to the interface.
Also, you’ve not set an SSID. And the ‘wifi2’ interface is configured to be in AP mode.

/interface/wifiwave2/set wifi2 security=seamless configuration.mode=station configuration.ssid=seamless@wifi.id
20

@elbantany
It looks like you didn’t notice that the channels were swapped in AC and AX2. In AX2, 2GHz is wlan2, 5GHz is wlan1.