i have a main device RB3011UiAS, and i decided to create a capsman network in our office, and we need two SSID’s, first main wlan for private needs with hidden wifi network, and second for guest, customers and other who come to our office.
So, i created and configured CAPSMAN propely
Set up DHCP for both networks, and create two bridge interfaces for private and guest network,
But i stucked in the one thing. When i connect to the private network, it’s ok, i’ve got an ip address and have a n internet access, but when i tryed to connect to guest network, i also get ip address, but no internet access, and also i can’t ping my router from the connected device.
When i connect to the private network, it’s ok, i’ve got an ip address and have a n internet access, but when i tryed to connect to guest network, i also get ip address, but no internet access, and also i can’t ping my router from the connected device.
I assume you mean the internet router plugged to the CAPsMAN controller? If so, check that masquerade applies equally for both networks (e.g. is applied on the out-interface criteria.)
Can the open network client ping gateway IP handed out by DHCP (10.35.0.1, watch out you set it as a /32)?
Exporting the relevant sections (DHCP, IP Addresses, IP Firewall, Routes, etc.) and c&p here will help, pictures are barely readable and don’t include all the relevant details.
thx for you answer, sorry for poor quality of picture, here is a config, i hope it’ll help. My knowledge is not so deep, i don’t know which info i need to share
1.- Get an IP?
2.- post ipconfig/all or ifconfig & cat /etc/resolv.conf on a open client
3.- post a netstat -rn on an open client
4.- ping 10.35.0.1 fine?
Many thanks for very useful video. I tried to follow these instructions, but only get success on main wi-fi network. Guest network no internet. I also tried the tutorial from wiki with even less success. Can someone please help me setup capsman?
I’ll assume you want to set up a virtual AP to run guest WiFi and that you’ll use VLANs to separate traffic of both APs between each other.
So the setup steps are more or less the following:
in /caps-man datapath create two datapaths appropriate for both traffic sources (VAPs). Set appropriate properties, such as vlan-mode=use-tag vlan-id=
in /caps-man security create two security profiles with appropriate settings (authentication and encryption types, PSK if used, …), one for each VAP
in /caps-man configuration create two configuration sets appropriate for each VAP as if they were independent. One of properties that can be defined is channels= … I’m not sure if defining it in a configuration that is used for slave wireless interface throws an error, but defining it in this case doesn’t make sense anyway
Leaving out this part means CAP can use any supported&allowed channel which often is just fine.
in /caps-man provisioning everything is then put in place:
Property name (slave-configuration**s**) hints at possibility to use several slave configurations to create several VAPs on same physical AP… I never tried to run more than one VAP on CAP, but I assume value of this property should be comma-separated list of configuration names.
This is what I tried more or less by using the wiki tutorial: https://wiki.mikrotik.com/wiki/Manual:CAPsMAN_with_VLANs
however, 2 issues for me there: first I don’t know which of 2 types described there are aplicable to me (local forwarding or capsman forwarding) - this is my home setup where i what one master wifi for me and one slave network for guest, home apliencies etc (so they need only access to internet but not to each other or my home network).
And second issue is that when I follow the tutorial with VLANs I never can get CAPs to acctually appear in the caps menu, even I have ticked Enable option for each.
I will try of course to find my mistake, but would be good to know which type of setup I need to apply to my case described above.
Generally local forwarding is more resource friendly for both CAP and CAPsMAN devices. It is about how the data from wireless get flushed to network … locally to CAP or via CAPsMAN device. If you’re configuring VLANs, then with local forwarding you have to configure VLANs on all LAN boxes between CAP device and CAPsMAN device. With capsman forwarding you don’t have to do that as there’s a tunnel built between both devices and intermediate boxes are not aware of anything fancy, but CAP and CAPsMAN devices have to encrypt/decrypt all the traffic flowing through that tunnel.
I have managed to get the capsman work on my home setup which is a rb2011 as manager and 2 caps. I have wifi on both caps but for some reason I cannot make work the wireless on my manager RB2011
