Everything work, but ho hardware offload on ethernet ports.
So i try configuration with switch chip vlans but cannot understand how to configure wifi. My config
In such configuration WIfi connect to capsman, Client’s can authenticate but cannot get ip via dhcp from rb5009
log’s are empty (only connect-disconect msg for wifi client)
is it possible to create config with vlans using switch chip features and working wifi?
Where to look for possible misconfiguration/how to debug such situation ?
Thank you
It is possible, but it involves quite a few tricks outside “the beaten path” … so not for the faint of heart. Before taking that path one has to ask himself what gains are expected … realistically.
Are you planning to use wired ports on your devices or you just want wireless ? In that case you really don’t need to complicate your life with VLANs on switch chip. You just do it like usual and in that case no configuration has to be done on CAP, only on CAPsMAN controller itself.
Doesn’t see any problem to spend free time to make some interesting configuration and if at the end there be some benefit (eg. full speed on ether ports ) why not?
It’s not for production or office use. It’s mo like homelab.
It’s interesting for me.
Basically: you need a bridge for every VLAN needed for wifi interfaces. And the missing part: how to configure capsman datapath so that provisioned interface is attached to the right bridge.
Not gonna comment much on the config above, if you’re up to the task, you won’t need any comments
Just leave this config here, maybe somebody will have interest to explain how it’s work ^)
Yesterday while experimenting with adding wifi via additional bridge and see incorrect l2 configuration from mikrotik doc’s decide try just fo fan… strange
There config work perfect - no cpu load while traffic pass from physical port to physical port. wifi also perfectly work, of cause traffic going via CPU in such case
[satan@HAP-AC2-TEST] > export compact
# 2024-02-13 18:18:13 by RouterOS 7.13.4
# software id = 0G6N-6W60
#
# model = RBD52G-5HacD2HnD
# serial number = zzzzzzzzzzzzzzzz
/interface bridge
add admin-mac=B8:69:F4:aa:bb:cc auto-mac=no name=Guest-BR
add admin-mac=B8:69:F4:aa:bb:cc auto-mac=no name=MAIN-BRIDGE port-cost-mode=short
/interface ethernet
set [ find default-name=ether1 ] name=Trunk
/interface wifi
# managed by CAPsMAN
# mode: AP, SSID: Satan TEST, channel: 2452/n
set [ find default-name=wifi1 ] configuration.manager=capsman .mode=ap disabled=no
# managed by CAPsMAN
# mode: AP, SSID: Satan TEST, channel: 5745/ac/Ceee
set [ find default-name=wifi2 ] configuration.manager=capsman .mode=ap disabled=no
# managed by CAPsMAN
# mode: AP, SSID: Satan TEST2
add configuration.mode=ap disabled=no mac-address=BA:69:F4:xx:yy:DE master-interface=wifi1 name=wifi3
# managed by CAPsMAN
# mode: AP, SSID: Satan TEST2
add configuration.mode=ap disabled=no mac-address=BA:69:F4:xx:yy:DF master-interface=wifi2 name=wifi4
/interface veth
add address="" gateway="" gateway6="" name=veth1
/interface vlan
add interface=MAIN-BRIDGE name=GUEST-VL vlan-id=20
add interface=MAIN-BRIDGE name=MAIN vlan-id=10
/interface ethernet switch port
set 0 vlan-mode=secure
set 1 default-vlan-id=10 vlan-header=always-strip vlan-mode=secure
set 2 default-vlan-id=10 vlan-header=always-strip vlan-mode=secure
set 3 default-vlan-id=10 vlan-header=always-strip vlan-mode=secure
set 5 vlan-mode=secure
/interface wifi datapath
add bridge=Guest-BR disabled=no name=datapath1
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/interface bridge port
add bridge=MAIN-BRIDGE interface=Trunk internal-path-cost=10 path-cost=10
add bridge=MAIN-BRIDGE interface=ether2 internal-path-cost=10 path-cost=10
add bridge=MAIN-BRIDGE interface=ether3 internal-path-cost=10 path-cost=10
add bridge=MAIN-BRIDGE edge=yes interface=ether4 internal-path-cost=10 path-cost=10 point-to-point=yes
add bridge=MAIN-BRIDGE interface=ether5 internal-path-cost=10 path-cost=10
add bridge=Guest-BR frame-types=admit-only-vlan-tagged interface=GUEST-VL
add bridge=Guest-BR frame-types=admit-only-untagged-and-priority-tagged interface=wifi1 pvid=10
add bridge=Guest-BR frame-types=admit-only-untagged-and-priority-tagged interface=wifi2 pvid=10
add bridge=Guest-BR frame-types=admit-only-untagged-and-priority-tagged interface=wifi3 pvid=20
add bridge=Guest-BR frame-types=admit-only-untagged-and-priority-tagged interface=wifi4 pvid=20
add bridge=Guest-BR frame-types=admit-only-untagged-and-priority-tagged interface=veth1 pvid=20
/ipv6 settings
set accept-redirects=no accept-router-advertisements=no disable-ipv6=yes
/interface ethernet switch vlan
add independent-learning=yes ports=switch1-cpu,Trunk,ether2,ether3,ether4 switch=switch1 vlan-id=10
add independent-learning=yes ports=switch1-cpu,Trunk switch=switch1 vlan-id=20
/interface wifi cap
set caps-man-addresses=192.168.50.1 enabled=yes slaves-datapath=datapath1 slaves-static=yes
/ip address
add address=192.168.50.5/23 interface=MAIN network=192.168.50.0
add address=192.168.20.2/24 interface=veth1 network=192.168.20.0
/ip dns
set servers=192.168.50.1
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=192.168.50.1 routing-table=main suppress-hw-offload=no
/system identity
set name=HAP-AC2-TEST
