Horray! I have a CAP AX now. Plugged it in, followed the ten second button press and plugged a cable in… and nothing. Well, nearly nothing. I can see that there is something on the port but I can’t seem to find the device anywhere and I certainly don’t have anything broadcasting the two ssid’s. But my config is really close to the example config. What am I missing? Do note that I configured the VLAN settings and matched it as close as I could to the documentation. The one exception is that I only want 2.4Ghz on the Isolated network, and there are some defaults settings that seem to show up that I haven’t figured out how to turn off that are different then the docs, but it’s really close…
[Edit] Oh! Oh! No changes at all to the config below. Just restarted the CAP AX and now the Isolated wifi is up! But it puts me on the VLAN 4 network… Huh? scratches head
[admin@MikroTik-CRS310-8G+2S+] > export
# 2025-03-01 22:14:39 by RouterOS 7.17.2
# software id = AHR5-N6U8
#
# model = CRS310-8G+2S+
# serial number = {snip}
/interface bridge
add admin-mac={snip} auto-mac=no comment=defconf name=bridge vlan-filtering=yes
/interface ethernet
set [ find default-name=ether3 ] name=OffBridge3
/interface vlan
add interface=bridge name=Blue-V6 vlan-id=6
add interface=bridge name=MGMT-V4 vlan-id=4
/interface list
add name=LAN
add name=TRUSTED
/interface wifi datapath
add bridge=bridge name=MGMT-V4 vlan-id=4
add bridge=bridge name=Blue-V6 vlan-id=6
/interface wifi security
add authentication-types=wpa2-psk,wpa3-psk disabled=no ft=yes ft-over-ds=yes name=Security_Test
add authentication-types=wpa2-psk,wpa3-psk disabled=no ft=yes ft-over-ds=yes name=Security_Isolated
/interface wifi configuration
add datapath=MGMT-V4 disabled=no name=MGMT-V4 security=Security_Test ssid=Test
add disabled=no name=Blue-V6 security=Security_Isolated ssid=TestIsolated
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/ip pool
add name=dhcp_pool0 ranges=192.168.6.100-192.168.6.254
/ip dhcp-server
add address-pool=dhcp_pool0 interface=Blue-V6 name=dhcp1
/interface bridge port
add bridge=bridge comment=eth1 frame-types=admit-only-untagged-and-priority-tagged interface=ether1 pvid=4
add bridge=bridge comment=eth2 frame-types=admit-only-untagged-and-priority-tagged interface=ether2 pvid=4
add bridge=bridge comment=eth4 frame-types=admit-only-untagged-and-priority-tagged interface=ether4 pvid=5
add bridge=bridge comment="Hybrid Port" interface=ether5 pvid=4
add bridge=bridge comment=eth6 frame-types=admit-only-untagged-and-priority-tagged interface=ether6 pvid=6
add bridge=bridge comment="trunk to capax" frame-types=admit-only-vlan-tagged interface=ether7 pvid=4
add bridge=bridge comment=Trunk_Uplink frame-types=admit-only-vlan-tagged interface=ether8 pvid=4
add bridge=bridge comment=defconf interface=sfp-sfpplus1
add bridge=bridge comment=defconf interface=sfp-sfpplus2
/ip neighbor discovery-settings
set discover-interface-list=TRUSTED
/interface bridge vlan
add bridge=bridge comment=Orange tagged=ether5,ether7,ether8 untagged=ether4 vlan-ids=5
add bridge=bridge comment=Blue tagged=ether5,ether7 untagged=ether6 vlan-ids=6
add bridge=bridge comment=Green tagged=bridge,ether7,ether8 untagged=ether1,ether2,ether5 vlan-ids=4
/interface list member
add interface=OffBridge3 list=LAN
add interface=ether1 list=LAN
add interface=ether2 list=LAN
add interface=ether4 list=LAN
add interface=ether5 list=LAN
add interface=ether6 list=LAN
add interface=ether7 list=LAN
add interface=ether8 list=LAN
add interface=MGMT-V4 list=TRUSTED
add interface=OffBridge3 list=TRUSTED
/interface wifi cap
set enabled=yes
/interface wifi capsman
set enabled=yes interfaces=bridge package-path="" require-peer-certificate=no upgrade-policy=require-same-version
/interface wifi provisioning
add action=create-dynamic-enabled master-configuration=MGMT-V4 slave-configurations=Blue-V6 supported-bands=2ghz-ax
add action=create-dynamic-enabled master-configuration=MGMT-V4 supported-bands=5ghz-ax
/ip address
add address=192.168.55.1/16 interface=OffBridge3 network=192.168.0.0
add address=192.168.4.8/24 comment=Management interface=MGMT-V4 network=192.168.4.0
add address=192.168.6.1/24 comment=Blue interface=Blue-V6 network=192.168.6.0
/ip dhcp-server network
add address=192.168.6.0/24 dns-server=192.168.6.1 gateway=192.168.6.1
/ip dns
set servers={snip}
/system identity
set name=MikroTik-CRS310-8G+2S+
/system note
set show-at-login=no
/system ntp client
set enabled=yes
/system ntp client servers
add address={snip}
/tool mac-server
set allowed-interface-list=none
/tool mac-server mac-winbox
set allowed-interface-list=TRUSTED