kris11
December 9, 2021, 7:36am
1
I’m configuring a hotspot on our new CRS328-24P-4S+ router. The hostspot is a slave configuration without any security configured:
[admin@MikroTik] /caps-man configuration<SAFE> export hide-sensitive
# dec/09/2021 08:33:16 by RouterOS 6.48.5
# software id = Z28R-MV5A
#
# model = CRS328-24P-4S+
/caps-man configuration
add country=hungary datapath.bridge=bridge datapath.vlan-mode=no-tag name=Config_WORK security.authentication-types=wpa-psk,wpa2-psk ssid=budavar-iroda
add country=hungary datapath.bridge=bridge datapath.vlan-id=20 datapath.vlan-mode=use-tag name=media security.authentication-types=wpa2-psk ssid=budavar-media
add country=hungary datapath.bridge=bridge datapath.vlan-id=30 datapath.vlan-mode=use-tag name=office security.authentication-types=wpa2-psk ssid=budavar-office
add country=hungary datapath.bridge=bridge datapath.vlan-id=10 datapath.vlan-mode=use-tag name=hotspot security.authentication-types="" ssid=budavar-hotspot
/caps-man provisioning
add action=create-dynamic-enabled master-configuration=Config_WORK slave-configurations=hotspot,media,office
The three networks with security enabled work without any issue, only connection to the hotspot WLAN is not possible.
Any ideas what this can be?
Godd Morning again,
This is wrong :
The export should be :
kris11
December 9, 2021, 11:48am
3
Unfortunately it still doesn’t fly, I need to massage it further.
NetworkManager keeps re-connecting:
Dec 9 12:27:41 capella wpa_supplicant[782]: wlp1s0: SME: Trying to authenticate with de:2c:6e:0c:0b:e2 (SSID=‘budavar-hotspot’ freq=2412 MHz)
and then
Dec 9 12:28:26 capella NetworkManager[166577]: [1639049306.5909] dhcp4 (wlp1s0): request timed out
But I assume it can be something beyond DHCP as if I assign manually an IP to the wireless interface on the workstation it still cannot communicate.
And what I see is that the dynamic cap appears on /interface bridge vlan 10 so the router sees that the workstation is connected.
kris11
December 9, 2021, 3:03pm
4
The difficult thing is that if I enable authentication then all of a sudden it starts working. Connection, DHCP, everything.
Very strange.
kris11
December 9, 2021, 3:38pm
5
I tried to add an access list in Capsman that lets any mac to connect… no success
Good Evening Kris,
I wasn’t able to reproduce the Error…
kris11
December 10, 2021, 6:56am
7
Thanks for looking at this!
This morning I was thinking about upgrading the router to 7.x stablemikrotik_20211210.rsc (6.46 KB)
kris11
December 10, 2021, 5:35pm
8
Today’s update: I still couldn’t connect from the workstation, but all of a sudden I saw a client out of the blue in the DHCP leases… meaning for some clients it works ?!
I’d say lets park this now, I’ll need to arrange somebody on site to debug this with me.
kris11
April 5, 2022, 8:24am
10
So this topic is still with me, interestingly it impacts only Ubuntu/Linux clients, various mobile devices can connect.
Again:
as soon as i change the network security in Capsman, everything works
there is traffic on the interfaces on the Linux box, I see both RX/TX increasing
with tcpudump i see unanswered ARPs/DHCP initiated by the Linux box not answered by the router
I see router LLDP as well
I know it is most probably something Linux related, but any hints are appreciated.
kris11
April 9, 2022, 7:32pm
11
Apparently Android and Windows devices can connect to the hotspot, only iOS and Linux devices have the problem. I did some sniffing, but it didn’t help too much:
DHCP client packets cannot be seen on the router
If I manually assign IP I see the incoming packets on the router but nothing is sent back
I clearly see the device in the CAPsMAN registration table.
If it was a firewall issue then how can it be that other OS/devices work well?
I’m totally clueless.
