Hi
I got my hap AC3 working as intented with 6 SSID (1 on 2.4 for my IoT and the others on 5.0).
Now I want to add 3 additional cap to the mix. I have read pages but most talk about 1 SSID.
One of the cap is connected to port 5 of hap ac3, and it shows up under [REMOTE CAP]
Questions
- Under PROVISIONING, which of the SSID do I set as master and which as slave?
- Do I create a provision for each SSID?
- Is there a way to see these SSID being broadcasted on the cap via winbox?
- When I manually try to provision the cap via the [RADIOS] tap on the hap ac2, they show up as disabled in the interface list of the hap ac3. Is this normal?
Here is my export
CAPsMAN
/interface bridge
add name=bridgeLAN-WLAN vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] name="PORT1[WAN]"
set [ find default-name=ether2 ] name=PORT2
set [ find default-name=ether3 ] name=PORT3
set [ find default-name=ether4 ] name=PORT4
set [ find default-name=ether5 ] name=PORT5
/interface wifiwave2
add name=cap-wifi1
add name=cap-wifi2
set [ find default-name=wifi1 ] configuration.hide-ssid=yes .mode=ap .ssid=WWW disabled=no name=hAP_wifi1-2.4
security.authentication-types=wpa3-eap
/interface vlan
add interface=bridgeLAN-WLAN name=int-vlan10-mjoy vlan-id=10
add interface=bridgeLAN-WLAN name=int-vlan20-mfavor vlan-id=20
add interface=bridgeLAN-WLAN name=int-vlan30-mpeace vlan-id=30
add interface=bridgeLAN-WLAN name=int-vlan40-mhope vlan-id=40
add interface=bridgeLAN-WLAN name=int-vlan50-mIoT vlan-id=50
add interface=bridgeLAN-WLAN name=int-vlan60-mguests vlan-id=60
/interface list
add name=WAN
add name=LAN
add name=VLAN
/interface wifiwave2 channel
add band=2ghz-ax disabled=no frequency=2414 name=channel1 width=20mhz
add band=2ghz-ax disabled=no frequency=2442 name=channel6 width=20mhz
add band=2ghz-ax disabled=no frequency=2472 name=channel11 width=20mhz
/interface wifiwave2 configuration
add channel.band=2ghz-n .skip-dfs-channels=disabled country=Canada disabled=no mode=ap name=cfg-mIoT
security.authentication-types=wpa2-psk,wpa3-psk .wps=disable ssid=MIoT4
add channel.band=5ghz-n .skip-dfs-channels=disabled country=Canada disabled=no mode=ap name=cfg-mjoy
security.wps=disable ssid=#MJoy4
add channel.band=5ghz-n .skip-dfs-channels=disabled country=Canada disabled=no mode=ap name=cfg-mfavor
security.authentication-types=wpa2-psk,wpa3-psk .wps=disable ssid=#MFavor4
add channel.band=5ghz-n .skip-dfs-channels=disabled country=Canada disabled=no mode=ap name=cfg-mfruit
security.authentication-types=wpa2-psk,wpa3-psk .wps=disable ssid=MFruits4
add channel.band=5ghz-n .skip-dfs-channels=disabled country=Canada disabled=no mode=ap name=cfg-mpeace
security.authentication-types=wpa2-psk,wpa3-psk .wps=disable ssid=#MPeace4
add channel.band=5ghz-n .skip-dfs-channels=disabled country=Canada disabled=no mode=ap name=cfg-mhope
security.authentication-types=wpa2-psk,wpa3-psk .wps=disable ssid=#MHope4
add channel.band=5ghz-n .skip-dfs-channels=disabled country=Canada disabled=no mode=ap name=cfg-mguests
security.authentication-types=wpa2-psk,wpa3-psk .wps=disable ssid=#MGuests
/interface wifiwave2
set [ find default-name=wifi2 ] configuration=cfg-mfruit configuration.mode=ap disabled=no name=hAP_wifi2-5.0
add configuration=cfg-mjoy configuration.mode=ap disabled=no mac-address=4A:A9:8A:7C:FC:25 master-interface=
hAP_wifi2-5.0 name=v-wifi10-mjoy-5.0
add configuration=cfg-mfavor configuration.mode=ap disabled=no mac-address=4A:A9:8A:7C:FC:26 master-interface=
hAP_wifi2-5.0 name=v-wifi20-mfavor-5.0
add configuration=cfg-mpeace configuration.mode=ap disabled=no mac-address=4A:A9:8A:7C:FC:27 master-interface=
hAP_wifi2-5.0 name=v-wifi30-mpeace-5.0
add configuration=cfg-mhope configuration.mode=ap disabled=no mac-address=4A:A9:8A:7C:FC:28 master-interface=
hAP_wifi2-5.0 name=v-wifi40-mhope-5.0
add configuration=cfg-mIoT configuration.mode=ap disabled=no mac-address=4A:A9:8A:7C:FC:29 master-interface=
hAP_wifi1-2.4 name=v-wifi50-mIoT
add configuration=cfg-mguests configuration.mode=ap disabled=no mac-address=4A:A9:8A:7C:FC:2A master-interface=
hAP_wifi2-5.0 name=v-wifi60-mguests-5.0
/interface wifiwave2 datapath
add bridge=bridgeLAN-WLAN client-isolation=yes disabled=no name=datapath-vlan20 vlan-id=20
add bridge=bridgeLAN-WLAN client-isolation=yes disabled=no name=datapath-vlan10 vlan-id=10
add bridge=bridgeLAN-WLAN client-isolation=yes disabled=no name=datapath-vlan30 vlan-id=30
add bridge=bridgeLAN-WLAN client-isolation=yes disabled=no name=datapath-vlan40 vlan-id=40
add bridge=bridgeLAN-WLAN client-isolation=yes disabled=no name=datapath-vlan50 vlan-id=50
add bridge=bridgeLAN-WLAN client-isolation=yes disabled=no name=datapath-vlan60 vlan-id=60
/ip pool
add name=dhcp_pool0 ranges=192.168.10.50-192.168.10.199
add name=dhcp_pool1 ranges=10.10.10.50-10.10.10.99
add name=dhcp_pool2 ranges=10.10.20.50-10.10.20.99
add name=dhcp_pool3 ranges=10.10.30.50-10.10.30.99
add name=dhcp_pool4 ranges=10.10.40.50-10.10.40.99
add name=dhcp_pool5 ranges=10.10.50.50-10.10.50.99
add name=dhcp_pool6 ranges=10.10.60.50-10.10.60.99
/ip dhcp-server
add address-pool=dhcp_pool0 interface=bridgeLAN-WLAN name=dhcp1
add address-pool=dhcp_pool1 interface=v-wifi10-mjoy-5.0 name=dhcp10-mjoy
add address-pool=dhcp_pool2 interface=v-wifi20-mfavor-5.0 name=dhcp20-mfavor
add address-pool=dhcp_pool3 interface=v-wifi30-mpeace-5.0 name=dhcp30-mpeace
add address-pool=dhcp_pool4 interface=v-wifi40-mhope-5.0 name=dhcp40-mhope
add address-pool=dhcp_pool5 interface=v-wifi50-mIoT name=dhcp50-miot
add address-pool=dhcp_pool6 interface=v-wifi60-mguests-5.0 name=dhcp60-mguests
/interface bridge port
add bridge=bridgeLAN-WLAN interface=PORT2
add bridge=bridgeLAN-WLAN interface=PORT3
add bridge=bridgeLAN-WLAN interface=PORT4
add bridge=bridgeLAN-WLAN interface=PORT5
add bridge=bridgeLAN-WLAN interface=*1B
add bridge=bridgeLAN-WLAN interface=*1C
add bridge=bridgeLAN-WLAN interface=hAP_wifi2-5.0
add bridge=bridgeLAN-WLAN interface=hAP_wifi1-2.4
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface bridge vlan
add bridge=bridgeLAN-WLAN tagged=bridgeLAN-WLAN vlan-ids=10
add bridge=bridgeLAN-WLAN tagged=bridgeLAN-WLAN vlan-ids=20
add bridge=bridgeLAN-WLAN tagged=bridgeLAN-WLAN vlan-ids=30
add bridge=bridgeLAN-WLAN tagged=bridgeLAN-WLAN vlan-ids=40
add bridge=bridgeLAN-WLAN tagged=bridgeLAN-WLAN vlan-ids=50
add bridge=bridgeLAN-WLAN tagged=bridgeLAN-WLAN vlan-ids=60
/interface list member
add interface="PORT1[WAN]" list=WAN
add interface=bridgeLAN-WLAN list=LAN
add interface=int-vlan10-mjoy list=VLAN
add interface=int-vlan20-mfavor list=VLAN
add interface=int-vlan30-mpeace list=VLAN
add interface=int-vlan40-mhope list=VLAN
add interface=int-vlan50-mIoT list=VLAN
add interface=int-vlan60-mguests list=VLAN
/interface wifiwave2 capsman
set ca-certificate=auto certificate=auto enabled=yes interfaces=bridgeLAN-WLAN package-path=""
require-peer-certificate=no upgrade-policy=none
/interface wifiwave2 provisioning
add action=create-dynamic-enabled disabled=no radio-mac=00:00:00:00:00:00 supported-bands=2ghz-ax,5ghz-ax
/ip address
add address=192.168.10.254/24 interface=bridgeLAN-WLAN network=192.168.10.0
add address=10.10.10.254/24 interface=v-wifi10-mjoy-5.0 network=10.10.10.0
add address=10.10.20.254/24 interface=v-wifi20-mfavor-5.0 network=10.10.20.0
add address=10.10.30.254/24 interface=v-wifi30-mpeace-5.0 network=10.10.30.0
add address=10.10.40.254/24 interface=v-wifi40-mhope-5.0 network=10.10.40.0
add address=10.10.50.254/24 interface=v-wifi50-mIoT network=10.10.50.0
add address=10.10.60.254/24 interface=v-wifi60-mguests-5.0 network=10.10.60.0
/ip dhcp-client
add interface="PORT1[WAN]"
/ip dhcp-server network
add address=10.10.10.0/24 gateway=10.10.10.254
add address=10.10.20.0/24 gateway=10.10.20.254
add address=10.10.30.0/24 gateway=10.10.30.254
add address=10.10.40.0/24 gateway=10.10.40.254
add address=10.10.50.0/24 gateway=10.10.50.254
add address=10.10.60.0/24 gateway=10.10.60.254
add address=192.168.10.0/24 dns-server=10.0.0.1 gateway=192.168.10.254 netmask=24
/ip dns
set servers=192.168.10.254
/ip firewall filter
add action=drop chain=forward connection-nat-state=!dstnat connection-state=new in-interface="PORT1[WAN]" log=yes
log-prefix=10.50
add action=fasttrack-connection chain=forward connection-state=established,related hw-offload=yes
add action=fasttrack-connection chain=forward connection-state=established,related hw-offload=yes
add action=accept chain=input protocol=icmp
add action=accept chain=input connection-state=established
add action=accept chain=input connection-state=related
add action=drop chain=input in-interface-list=!LAN
add action=drop chain=forward connection-state=invalid
/ip firewall nat
add action=masquerade chain=srcnat out-interface-list=WAN
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh address=192.168.10.0/24 port=2281
set api disabled=yes
set winbox address=192.168.10.0/24
set api-ssl disabled=yes
/system clock
set time-zone-name=America/Vancouver
/system identity
set name=BOL_hAP_AC3
/system note
set show-at-login=no
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
cAPs
/interface bridge
add admin-mac=48:A9:8A:CA:17:2C auto-mac=no comment=defconf name=bridgeLocal
/interface wifiwave2 datapath
add bridge=bridgeLocal comment=defconf disabled=no name=capdp
/interface wifiwave2
managed by CAPsMAN
set [ find default-name=wifi1 ] configuration.manager=capsman .mode=ap datapath=capdp disabled=no
name=cap_Top_wifi1
managed by CAPsMAN
set [ find default-name=wifi2 ] configuration.manager=capsman .mode=ap datapath=capdp disabled=no
name=cap_Top_wifi2
/interface bridge port
add bridge=bridgeLocal comment=defconf interface=ether1
add bridge=bridgeLocal comment=defconf interface=ether2
/interface wifiwave2 cap
set discovery-interfaces=bridgeLocal enabled=yes slaves-datapath=capdp
/ip dhcp-client
add comment=defconf interface=bridgeLocal
/system clock
set time-zone-name=America/Vancouver
/system identity
set name=cAP_Top_AX
/system note
set show-at-login=no