CAPSMAN add another wifi SSID only on slave node

Hello,
I can’t figure out how to create in capsman wifi related to only second node in my environment.
I want to bind my kitchen appliances to standalone wifi on second node from my capsman environment because they tend to jump to master node, then back from time to time.
Please hint me in right direction.
Thanks!


/caps-man channel
add band=2ghz-g/n extension-channel=XX frequency=2422 name=channel1
/interface bridge
add fast-forward=no name=bridge2
/interface wireless
# managed by CAPsMAN
# channel: 2422/20-Ce/gn(30dBm), SSID: SnSw, local forwarding
set [ find default-name=wlan1 ] antenna-gain=0 band=2ghz-b/g/n country=\
    moldova disabled=no frequency=2427 frequency-mode=manual-txpower mode=\
    ap-bridge ssid=SnSw wireless-protocol=802.11
/interface ethernet
set [ find default-name=ether1 ] speed=100Mbps
set [ find default-name=ether2 ] speed=100Mbps
set [ find default-name=ether3 ] speed=100Mbps
set [ find default-name=ether4 ] speed=100Mbps
set [ find default-name=ether5 ] speed=100Mbps
/caps-man datapath
add bridge=bridge2 client-to-client-forwarding=yes local-forwarding=yes name=\
    datapath1
/caps-man security
add authentication-types=wpa2-psk encryption="" group-encryption=aes-ccm \
    group-key-update=1h name=security1 passphrase=xxxxxxxxxxx
/caps-man configuration
add channel=channel1 datapath=datapath1 mode=ap name=cfg1 rx-chains=0,1,2,3 \
    security=security1 ssid=SnSw tx-chains=0,1,2,3
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
    dynamic-keys supplicant-identity=MikroTik wpa-pre-shared-key=xxxxxxxxxxx \
    wpa2-pre-shared-key=xxxxxxxxxxx
add authentication-types=wpa-psk,wpa2-psk eap-methods="" \
    management-protection=allowed mode=dynamic-keys name=profile1 \
    supplicant-identity="" wpa-pre-shared-key=XXXXXXXX\
    wpa2-pre-shared-key=XXXXXX
/caps-man manager
set enabled=yes
/caps-man provisioning
add action=create-dynamic-enabled master-configuration=cfg1

You can provision specific configuration to specific CAP device by adding rules in /capsman provisioning like this:

add action=create-dynamic-enabled master-configuration=cfg1 radio-mac=E6:8D:8C:49:EE:4A slave-configurations=cfg2

Be sure the additional rule is placed above the general one you currently have, my experience is that rules are evaluated top-to-bottom whichever matches first (the same as e.g. firewall filter rules).
The value of radio-mac parameter is MAC address of wireless interface on CAP where you want to have specific configuration.

Thanks that helped!