cAP ax, CRS112-8P-4S and CAPsMAN

RouterOS Wireless Networking
1

Hello everybody,

First of all, thanks in advance for your patience and help. I’m a novice Mikrotik user and at a complete loss.

For some reason I’m not able to get my cAP ax to register to CAPsMAN.

My setup consists of one CRS112-8P-4S and two cAP ax’s. The CRS is used for switching only. It has CAPsMAN configured as far as I can tell. The CRS and cAP’s are all reachable in the same IP subnet. I have rebooted the cAP’s in CAP mode via de software option and by disconnecting POE and using te reset procedure. A gazillion times by now. No luck sofar. Ik did update the CRS and cAP’s to the latest SW releases (7.15.3 (stable)).

I could use some help.

2

AX devices are controlled by new CAPsMAN, which is located in the WIFI menu, not in the Wireless menu.

WiFi → Remote CAP → CAPSMAN

3

Thank you so much for your time.

Yes, I found out that I have to use “Wifi” instead of “CAPsMAN”. However…in the “Remote CAP” tab, there still is a CAPsMAN option, that is why I mentioned CAPsMAN. I did also create a bunch of profiles.

I did a lot of searching and reading, to no avail I have to admit. I also came across this document https://help.mikrotik.com/docs/display/ROS/WiFi#WiFi-Overview. That didn’t help me, so I must be missing something obvious.

Thanks again for your help and patience.

4

Post your configs, both sides…

/export file=FILENAME

remove license and serial number

5

Thanks!

I removed serial number, didn’t find a reference to license however.

The configs for both the cAP’s are identical (except for MAC and serial of course). However…in de web interface one cAP has “Wifi” and “Wireguard” greyed out. So there sure seems to be a slight difference.
cAP_EXPORT.rsc (745 Bytes)
CRS_EXPORT.rsc (4.8 KB)

6

Do you have wifi-qcom package on that device ?
It’s needed as of 7.13.

If it’s not present, load that package, let it activate (reboot) and then reset the device again to caps mode.

7

What packages does the cAP have installed?
The CRS needs no extra packages, capsman functionality is built in

8

Both cAP’s have routeros (7.15.3) en wifi-qcom (7.15.3) installed and enabled
CRS has routeros (7.15.3) installed end enabled, wireless (7.15.3) is installed but DISabled

9

But what is the issue exactly?

All you need to do is setup capsman.

  1. enable capsman in “remote cap” tab of the CRS
  2. in “configuration” tab add one config template, that is all you need. don’t enter anything else except SSID name and wireless password (select WPA2 and all cyphers except TKIP)
  3. in “provisioning” tab, create new rule with “master configuration = cfg1” (which you added in step 2), and action “create dynamic enabled”
  4. in “Radios” tab you should see your cAP ax if they are indeed in “CAP MODE”. There click on them and click “Provision” to send the config
10

Looks like you are missing wifi interface setup on the CAP

set [ find default-name=wifi1 ] configuration.manager=capsman .mode=ap \
datapath.bridge=bridgeLocal disabled=no
set [ find default-name=wifi2 ] configuration.manager=capsman .mode=ap \
datapath.bridge=bridgeLocal disabled=no

Also this is weird on CAPsMAN

/interface wifi provisioning
add action=create-dynamic-enabled disabled=no master-configuration=LAN_2GHz_G \
    supported-bands=5ghz-ax
add action=create-dynamic-enabled

this shouldn’t be there either

/interface wifi cap
set discovery-interfaces=br0 enabled=yes
11

@neki
thanks, but I didn’t want to change everything at the same time

@normis
ok…thanks for the swift reply.

  1. CAPsMAN is (and was) enabled
  2. I removed ALL my previous templates and created one new configuration template as you pointed out
  3. I created a provisioning template based on the previous created single configuration template
  4. I put both cAP’s in CAP mode using the power down procedure (wait for green flickering, then wait for solid, then release reset button), but no radio’s appear in my “radio” tab

so, for the question about what my issue is… I think my issue is that I can not get my cAP radio’s to pop up in the CRS radio tab. There is IP connectivity between the CRS and cAP’s because I’m able to ping between those devices within the same IP subnet.

12

do you see wifi interfaces on CAP itself?

13

Is the cAP directly plugged into the CRS and powered on? It could be possible it is not in CAP mode after all. To put it into CAP mode, unplug ethernet, then hold Reset button on cAPax, then plug in Ethernet, while still holding the reset button on cAP. Wait until USR LED starts to blink. When it stops blinking and turns to solid green color, release reset button

Then it should appear in REMOTE CAP list

14

@neki

Yes they do, but…

On both cAP’s is says “no connection to CAPsMAN” for both radio’s. They are all four disabled. There is another little thing. On the cAP where “wifi” and “wireguard” are greyed out, there also is missing the wifi icons in the “Name” column. Also…both cAP’s stopped transmitting their initial SSID’s. I don’t know when that happend, or should be happening.

@normis

The cAP’s are directly connected to the CRS (using POE) with (for now) 2 meter cables. I followed the exact reset procedure about a million times…nothing in “Radios” or “Remote CAP” however

15

Sorry…mistake here

16

Reachable how? …another thing is, that you have VLANs configured on CRS, but there are no VLANs on CAP? Counldn’t that be the issue?

I really doubt that you could get “no connection to CAPsMAN” with config you posted, because the interface wasn’t configured to be managed by CAPsMAN.

If you are lost in what you have already tried, it will be best to start over…

17

The CRS and cAP’s are IP reachable. They discover the network and each other via LLDP, I can use HTTP for management, SSH for management and ICMP also. They have been updated from the internet. I would say that qualifies is IP reachable and IP connectivity capable.

As for the VLAN’s you are correct that I only configured one VLAN on de cAP’s. The only VLAN with IP connectivity for the moment, so I don’t see why that would be an issue since there is IP connectivity all over the place.

Starting over? If I knew what I was doing, but I obviously don’t. I will start with a configuration reset of the cAP’s

18

If you use VLAN, your caps need to be able to use that same VLAN to reach CRS/capsman.

19

As I mentioned. cAP’s, CRS and my laptop are all reachable via the same IP subnet. All wired connected by the way and no routing required. Ik kan ping from any device to any other device. Just no CAPsMAN for some strange reason.

20

/interface wifi capsman
set ca-certificate=auto certificate=auto enabled=yes interfaces=br0

Did you try to use VLAN interface?