Can someone tell me how to make a Capsman guest network with new drivers? AX and AC devices

RouterOS Wireless Networking
1

As i understand from the video i need to set the correct datapath profile in the slaves datapath section of the CAP menu? But how do i do that? In datapath menu on CAP i can only select default bridge. Do i need to create a separate bridge and a VLAN on every CAP device for this to work?

I looked at the help on
https://help.mikrotik.com/docs/display/ROS/WiFi

but i’m not realy sure how to aply all this, since description there is, to have separate VLAN for HOME Wifi and separate VLAN for Guest Wifi. I want my home wifi traffic to stay in the same DHCP range as my main bridge.

Working with Mikrotiks for years for my own satisfaction and still i feel lika a total noob sometimes :slight_smile:

Some guidance would be very much appreciated.

Cannot create a guests Wi-Fi network.
Need help to create a guests network.
2

So, create separate VLAN for guest WiFi, tag it for your bridge and port going to your CAP, and create datapath with new VLAN and your default bridge.

Create hybrid port (untag your home VLAN and tag your guest VLAN) and that should be it, create virtual WLAN interface, assign SSID, desired VLAN, security profile etc.

3

Assuming your guest network is your only wifi slave interface, you can setup a separate bridge for guest network and assign it with “/interface/wifi/cap/set slaves-datapath=bridge-guest” (before provisioning) on the CAP.
Alternatively, it might be possible to provision static wifi interfaces without any datapath/bridge at all. Afterwards add them to your vlan-filtering bridge on each CAP manually.


Unfortunately datapath vlan is currently not supported on AC devices with new wifi drivers.

4

Yes, guest network is the only slave interface. So i should create separate bridge on each of the CAP devices in then add it to slaves-datapath?

Could you elaborate this part a bit more? “Afterwards add them to your vlan-filtering bridge on each CAP manually.” Should i just enable VLAN filtering on bridge of the each CAP and leave PVID on 1?

5

This is how I did it:

  • Created a guest VLAN interface on the cable connected ethernet interface on the CAPsMAN and CAP device
  • Created a bridge-guest on the CAPsMan an CAP device and added the created guest vlan-interface to that bridge
  • On the CAPsMAN device, added the guest IP-address to the bridge-guest and configured the DHCP-server and settings and selected bridge-guest as interface to enable the DHCP-server on.
  • On the CAPsMAN device, created firewall rules so guests cannot reach other subnets and the Mikrotik management interfaces (think about the Mac Winbox server too, restrict access only from LAN, etc)
  • On the CAP, created a datapath with bridge-guest as device and select that datapath as ‘slaves datapath’ in the WIFI => CAP settings
  • I don’t use VLAN filtering on the bridge-guest or the default bridge
6

Almost a year after, running 7.15.3, google keeps throwing me back to this post, but I can’t seem to get it working following your exact steps. Nevertheless, I thank you for the type of post that was easy enough to follow through for someone like me who is not an actual networking educated guy.
Can someone please point me to a step-by-step working tutorial for having a slave guest wifi network on capsman with ac and ax ap devices? My network consists of a Hex S (running capsman), two ac3, an ac2 and an hax lite. Until recently I have been using the wireless drivers and things worked. Now I’ve tried the qcom drivers and can’t set it up how I want it to be. The numerous youtube tutorials I found seem to be outdated.