Hi, I am experimenting with 1 CRS125-24G and RB951ui in Lab environment. What I’m trying to do is using Capsman to broadcast 3 SSIDs with RB951ui.
The configuration I’m doing in Capsman is working fine. The AP is also broadcasting 3 SSIDs and there is no problem. Local and Hand terminals SSIDs are in separate VLANs therefore I have to create separate bridges for these SSIDs by the AP. The problem starts here because if I reboot the Router, the wlan names created by the Caspsman for virtual APs change dynamically and the bridges do not work at APs which I created for these ports. The AP needs to be rebooted for them to work again. What can I do to overcome this problem? Thank you for your suggestions.
Router
AP
If i reboot the Router, Capsman dynamically create a new wlan names in the AP and my bridge no working anymore.
Router Export
[admin@CivilRouter] > export compact
# mar/16/2017 13:57:23 by RouterOS 6.38.3
# software id = UNNU-YILQ
#
/caps-man channel
add band=2ghz-b/g/n frequency=2412 name=channel1 width=20
add band=2ghz-b/g/n frequency=2437 name=channel6 width=20
add band=2ghz-b/g/n frequency=2462 name=channel11 width=20
/caps-man datapath
add client-to-client-forwarding=yes local-forwarding=yes name=datapath1-Local
add client-to-client-forwarding=yes local-forwarding=yes name=datapath2-Terminals vlan-id=10
add client-to-client-forwarding=no local-forwarding=yes name=datapath3-Hotspot vlan-id=20
/interface ethernet
set [ find default-name=ether1 ] comment=WAN1
set [ find default-name=ether2 ] comment=WAN2
set [ find default-name=ether3 ] comment=WAN3 disabled=yes
set [ find default-name=ether4 ] comment=WAN4 disabled=yes
set [ find default-name=ether5 ] disabled=yes
set [ find default-name=ether6 ] disabled=yes
set [ find default-name=ether7 ] disabled=yes
set [ find default-name=ether8 ] disabled=yes
set [ find default-name=ether9 ] comment=LAN loop-protect=on
set [ find default-name=ether10 ] master-port=ether9
set [ find default-name=ether11 ] disabled=yes loop-protect=on master-port=ether9
set [ find default-name=ether12 ] disabled=yes loop-protect=on master-port=ether9
set [ find default-name=ether13 ] disabled=yes
set [ find default-name=ether14 ] disabled=yes
set [ find default-name=ether15 ] disabled=yes
set [ find default-name=ether16 ] disabled=yes
set [ find default-name=ether17 ] disabled=yes
set [ find default-name=ether18 ] disabled=yes
set [ find default-name=ether19 ] disabled=yes
set [ find default-name=ether20 ] disabled=yes
set [ find default-name=ether21 ] disabled=yes
set [ find default-name=ether22 ] disabled=yes
set [ find default-name=ether23 ] disabled=yes
set [ find default-name=ether24 ] disabled=yes
set [ find default-name=sfp1 ] disabled=yes
/interface pppoe-client
add disabled=no interface=ether2 name=pppoe-out1 password=1007548 user=********@superonline
/interface vlan
add interface=ether9 name=vlan1-Terminals vlan-id=10
add interface=ether9 name=vlan2-Hotspot vlan-id=20
/caps-man security
add authentication-types=wpa-psk,wpa2-psk encryption=aes-ccm name=security1-Local passphrase=12345678
add authentication-types=wpa-psk,wpa2-psk encryption=aes-ccm name=security2-Terminals passphrase=12345678
add authentication-types=wpa-psk,wpa2-psk encryption=aes-ccm name=security3-Hotspot passphrase=12345678
/caps-man configuration
add channel=channel1 country=turkey datapath=datapath1-Local mode=ap name=Local security=security1-Local ssid=Local
add channel=channel6 country=turkey datapath=datapath2-Terminals mode=ap name=Terminals security=security2-Terminals ssid=Terminals
add channel=channel11 country=turkey datapath=datapath3-Hotspot mode=ap name=Hotspot security=security3-Hotspot ssid=Hotspot
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
add dns-name=hotspot.civil.com.tr hotspot-address=192.168.30.1 login-by=http-chap,https name=hsprof1
/ip hotspot user profile
set [ find default=yes ] keepalive-timeout=15s rate-limit=512k/1M shared-users=2
/ip pool
add name=dhcp_pool0 ranges=192.168.10.100-192.168.10.254
add name=dhcp_pool1 ranges=192.168.20.100-192.168.20.254
add name=hs-pool-27 ranges=192.168.30.100-192.168.30.254
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=ether9 name=dhcp1
add address-pool=dhcp_pool1 disabled=no interface=vlan1-Terminals name=dhcp2
add address-pool=hs-pool-27 disabled=no interface=vlan2-Hotspot lease-time=1h name=dhcp3
/ip hotspot
add address-pool=hs-pool-27 disabled=no interface=vlan2-Hotspot name=hotspot1 profile=hsprof1
/system logging action
set 3 bsd-syslog=yes remote=172.16.10.218 syslog-facility=local0
/tool user-manager customer
set admin access=own-routers,own-users,own-profiles,own-limits,config-payment-gw
/tool user-manager profile
add name=Userman_test name-for-users="" override-shared-users=2 owner=admin price=0 starts-at=logon validity=0s
/tool user-manager profile limitation
add address-list="" download-limit=0B group-name="" ip-pool="" name=limit1 owner=admin rate-limit-min-rx=2097152B rate-limit-min-tx=524288B rate-limit-rx=2097152B rate-limit-tx=524288B transfer-limit=0B upload-limit=0B uptime-limit=0s
/caps-man manager
set ca-certificate=auto certificate=auto enabled=yes upgrade-policy=require-same-version
/caps-man provisioning
add action=create-dynamic-enabled master-configuration=Local slave-configurations=Terminals,Hotspot
/ip address
add address=172.16.10.222/24 interface=ether1 network=172.16.10.0
add address=192.168.10.1/24 interface=ether9 network=192.168.10.0
add address=192.168.20.1/24 interface=vlan1-Terminals network=192.168.20.0
add address=192.168.30.1/24 interface=vlan2-Hotspot network=192.168.30.0
/ip dhcp-server network
add address=192.168.10.0/24 dns-server=192.168.10.1 gateway=192.168.10.1
add address=192.168.20.0/24 comment="terminals" dns-server=192.168.20.1 gateway=192.168.20.1
add address=192.168.30.0/24 comment="hotspot network" dns-server=192.168.30.1 gateway=192.168.30.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8
/ip firewall filter
add action=drop chain=input dst-port=53 in-interface=pppoe-out1 protocol=tcp
add action=drop chain=input dst-port=53 in-interface=pppoe-out1 protocol=udp
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" disabled=yes
/ip firewall mangle
add action=mark-routing chain=prerouting new-routing-mark=Local-Traffic passthrough=yes src-address=192.168.10.0/24
add action=mark-routing chain=prerouting new-routing-mark=Local-Traffic passthrough=yes src-address=192.168.20.0/24
add action=mark-routing chain=prerouting new-routing-mark=Hotspot-Traffic passthrough=yes src-address=192.168.30.0/24
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat out-interface=ether1 src-address=192.168.10.0/24
add action=masquerade chain=srcnat out-interface=ether1 src-address=192.168.20.0/24
add action=masquerade chain=srcnat comment="masquerade hotspot network" out-interface=pppoe-out1 src-address=192.168.30.0/24
/ip route
add distance=1 gateway=172.16.10.2 routing-mark=Local-Traffic
add distance=1 gateway=pppoe-out1 routing-mark=Hotspot-Traffic
add distance=1 gateway=172.16.10.2
AP Export
[admin@CivilAp] > export compact
# jan/04/1970 09:04:40 by RouterOS 6.38.3
# software id = CT2Y-R6DA
#
/interface bridge
add name=bridge1-Local
add name=bridge2-Terminals
add name=bridge3-Hotspot
/interface wireless
# managed by CAPsMAN
# channel: 2412/20-Ce/gn(20dBm), SSID: Local, local forwarding
set [ find default-name=wlan1 ] band=2ghz-b/g/n disabled=no mode=ap-bridge ssid=MikroTik
/interface vlan
add interface=ether1 name=vlan1-Terminals vlan-id=10
add interface=ether1 name=vlan2-Hotspot vlan-id=20
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/interface bridge port
add bridge=bridge1-Local interface=ether1
add bridge=bridge1-Local interface=wlan1
add bridge=bridge2-Terminals interface=vlan1-Terminals
add bridge=bridge2-Terminals interface=wlan2
add bridge=bridge3-Hotspot interface=vlan2-Hotspot
add bridge=bridge3-Hotspot interface=wlan3
/interface wireless cap
#
set certificate=request discovery-interfaces=ether1 enabled=yes interfaces=wlan1