Hi all - First time posting here.
Experiencing ongoing issues with calls freezing on Google Meets / Corporate VPN over Mikrotik WiFi. Please note the following regarding this problem and the troubleshooting done to date:
- Running CAPsMAN on HAP Ax3 and remote CAP on CAP Ax (See configs below)
- Mikrotik APs connected to Unifi Gateway Max
- Client Device is Windows 11 on HP Laptop connecting to Corporate network over VPN
- Problem started with new Mikrotik WiFi implementation. No issues with client device with previous ASUS Router running as AP over same Unifi Gateway.
- Client has no issues when connecting directly via ethernet on Unifi Gateway.
- Enabled Debug log level on wireless (See attached logs for device) but video freezing events do not seem to be correlated with events in the Mikrotik logs. For example, in the provided logs the user experienced multiple video freezing events between 8:00 and 9:00 but only her disconnecting from WiFi at 9:01 shows up in the logs.
- Currently running 7.21rc5 to see if it would resolve the issue but was experiencing the exact same problems on 7.20.6
- Disabled all Access List rules - Did not resolve the issue
- Disabled WPA 3 - Did not resolve the issue.
Please advise regarding further troubleshooting given that wireless logs aren’t pointing to root cause. Thanks for your help!
# 2026-01-08 16:55:49 by RouterOS 7.21rc5
# software id = SQBF-L1PS
#
# model = C53UiG+5HPaxD2HPaxD
# serial number =
/interface bridge
add admin-mac=04:F4:1C:8E:2D:BC auto-mac=no comment=defconf name=bridgeLocal
/interface wifi datapath
add bridge=bridgeLocal comment=defconf disabled=no name=capdp \
traffic-processing=on-cap
/interface wifi security
add authentication-types=wpa2-psk disabled=no encryption="" ft=yes \
ft-over-ds=yes name=kmdnetsecurity
/interface wifi configuration
add channel.band=2ghz-ax country=Canada datapath.bridge=bridgeLocal \
.traffic-processing=on-cap disabled=no name=kmdnet_2G_LowPower security=\
kmdnetsecurity ssid=kmdnet tx-power=3
add channel.band=5ghz-ax .skip-dfs-channels=10min-cac country="United States" \
datapath=capdp datapath.traffic-processing=on-cap disabled=no name=\
kmdnet_5G security=kmdnetsecurity ssid=kmdnet tx-power=30
add channel.band=2ghz-ax country=Canada datapath.bridge=bridgeLocal \
.traffic-processing=on-cap disabled=no name=kmdnet_2G_HighPower security=\
kmdnetsecurity ssid=kmdnet tx-power=17
add channel.band=2ghz-ax country=Canada datapath=capdp \
datapath.client-isolation=no disabled=yes name=kmdnet_2G security=\
kmdnetsecurity ssid=kmdnet
/interface wifi
# operated by CAP 192.168.10.25, traffic processing on CAP
add configuration=kmdnet_5G disabled=no name=cap-wifi1 radio-mac=\
F4:1E:57:E7:F8:35
# operated by CAP 192.168.10.25, traffic processing on CAP
add configuration=kmdnet_2G_HighPower disabled=no name=cap-wifi2 radio-mac=\
F4:1E:57:E7:F8:36
set [ find default-name=wifi1 ] configuration=kmdnet_5G disabled=no
set [ find default-name=wifi2 ] configuration=kmdnet_2G_LowPower \
configuration.mode=ap disabled=no
/interface wifi steering
add disabled=no name=kmdsteering neighbor-group=dynamic-kmdnet-34113543 rrm=\
yes wnm=yes
/interface bridge port
add bridge=bridgeLocal comment=defconf interface=ether1
add bridge=bridgeLocal comment=defconf interface=ether2
add bridge=bridgeLocal comment=defconf interface=ether3
add bridge=bridgeLocal comment=defconf interface=ether4
add bridge=bridgeLocal comment=defconf interface=ether5
/interface wifi access-list
add action=reject comment="Reject Kala on 2G Main" disabled=yes interface=\
wifi2 mac-address=18:26:49:91:35:CA
add action=reject comment="Reject Kala on 2G CAP" disabled=yes interface=\
cap-wifi2 mac-address=18:26:49:91:35:CA
add action=accept comment="Accept 2G Main" disabled=yes interface=wifi2 \
signal-range=-60..0
add action=accept comment="Accept 2G CAP" disabled=yes interface=cap-wifi2 \
signal-range=-78..0
add action=reject comment="Reject 2G Main" disabled=yes interface=wifi2 \
signal-range=-120..-61
add action=reject comment="Reject 2G CAP" disabled=yes interface=cap-wifi2 \
signal-range=-120..-77
/interface wifi cap
set caps-man-addresses=127.0.0.1 discovery-interfaces=bridgeLocal \
slaves-datapath=capdp
/interface wifi capsman
set enabled=yes package-path="" require-peer-certificate=no upgrade-policy=\
none
/interface wifi provisioning
add action=create-enabled disabled=no master-configuration=kmdnet_2G_LowPower \
radio-mac=04:F4:1C:8E:2D:C2 supported-bands=2ghz-ax
add action=create-enabled disabled=no master-configuration=kmdnet_5G \
supported-bands=5ghz-ax
add action=create-enabled disabled=no master-configuration=\
kmdnet_2G_HighPower radio-mac=F4:1E:57:E7:F8:36
add action=create-enabled disabled=yes master-configuration=kmdnet_2G
/ip dhcp-client
add comment=defconf interface=bridgeLocal
/system clock
set time-zone-name=America/Edmonton
/system logging
set 3 action=memory
add topics=wireless,debug
# 2026-01-08 16:56:46 by RouterOS 7.21rc5
# software id = ELV4-U0TK
#
# model = cAPGi-5HaxD2HaxD
# serial number =
/interface bridge
add admin-mac=F4:1E:57:E7:F8:33 auto-mac=no comment=defconf name=bridgeLocal
/interface ethernet switch
set 0 cpu-flow-control=yes
/interface wifi datapath
add bridge=bridgeLocal comment=defconf disabled=no name=capdp
/interface wifi
# managed by CAPsMAN 192.168.10.15, traffic processing on CAP
# mode: AP, SSID: kmdnet, channel: 5220/ax/eeCe
set [ find default-name=wifi1 ] configuration.manager=capsman datapath=capdp \
disabled=no
# managed by CAPsMAN 192.168.10.15, traffic processing on CAP
# mode: AP, SSID: kmdnet, channel: 2417/ax/Ce
set [ find default-name=wifi2 ] configuration.manager=capsman datapath=capdp \
disabled=no
/interface bridge port
add bridge=bridgeLocal comment=defconf interface=ether1
add bridge=bridgeLocal comment=defconf interface=ether2
/interface ovpn-server server
add mac-address=FE:46:A9:78:43:EC name=ovpn-server1
/interface wifi cap
set caps-man-addresses=192.168.10.15 enabled=yes slaves-datapath=capdp
/ip dhcp-client
add comment=defconf interface=bridgeLocal
/system clock
set time-zone-name=America/Edmonton
/system package update
set channel=testing
2026-01-07 21:51:38 wireless,info 18:26:49:91:35:CA@wifi1(kmdnet) disconnected, connection lost, signal strength -76
2026-01-07 21:51:38 wireless,debug 18:26:49:91:35:CA@wifi1(kmdnet) disassociated, connection lost, signal strength -76
2026-01-07 21:51:39 wireless,debug 18:26:49:91:35:CA@wifi1(kmdnet) associated, signal strength -75
2026-01-07 21:51:39 wireless,info 18:26:49:91:35:CA@wifi1(kmdnet) connected, signal strength -75
2026-01-08 07:27:13 wireless,info 18:26:49:91:35:CA@wifi1(kmdnet) disconnected, connection lost, signal strength -64
2026-01-08 07:27:13 wireless,debug 18:26:49:91:35:CA@wifi1(kmdnet) disassociated, connection lost, signal strength -64
2026-01-08 07:27:55 wireless,debug 18:26:49:91:35:CA@wifi1(kmdnet) associated, signal strength -64
2026-01-08 07:27:55 wireless,info 18:26:49:91:35:CA@wifi1(kmdnet) connected, signal strength -64
2026-01-08 09:01:07 wireless,info 18:26:49:91:35:CA@wifi1(kmdnet) disconnected, connection lost, signal strength -65
2026-01-08 09:01:07 wireless,debug 18:26:49:91:35:CA@wifi1(kmdnet) disassociated, connection lost, signal strength -65