Local WiFi interfaces "failed to create interface" AC3

jvincze84 · March 17, 2025, 8:11am

Hi All,

I need some help with my hAP ac^3.
Board:

       routerboard: yes              
        board-name: hAP ac^3         
             model: RBD53iG-5HacD2HnD
     serial-number: **************
     firmware-type: ipq4000          
  factory-firmware: 6.47.10          
  current-firmware: 7.18.1           
  upgrade-firmware: 7.18.1

I’m using CAPSMan to manage two other CAP devices. CAPs are working fine, but the local wifi interfaces intermittently go to failed state:

 6 M BI ;;; failed to create interface
        default-name="wifi2" name="wifi1" l2mtu=1560 mac-address=DC:2C:6E:2E:77:04 arp-timeout=auto radio-mac=DC:2C:6E:2E:77:04 configuration=self-rack-2g 
        configuration.mode=ap .ssid="Gomba-Land" .country=Hungary .manager=local 
        security.authentication-types=wpa2-psk,wpa3-psk .encryption=ccmp,ccmp-256,gcmp-256 .passphrase="*********" 
        datapath.bridge=bridge1 
        channel.frequency=2462 .band=2ghz-n .width=20/40mhz 

 7 M BI ;;; failed to create interface
        default-name="wifi1" name="wifi2" l2mtu=1560 mac-address=DC:2C:6E:2E:77:05 arp-timeout=auto radio-mac=DC:2C:6E:2E:77:05 configuration=self-rack-5g 
        configuration.mode=ap .ssid="Gomba-Land" .country=Hungary .manager=local 
        security.authentication-types=wpa2-psk,wpa3-psk .encryption=ccmp,ccmp-256,gcmp-256 .passphrase="**********" 
        datapath.bridge=bridge1 
        channel.frequency=5170-5190 .band=5ghz-ac .width=20/40/80mhz .skip-dfs-channels=disabled

I don’t have provision for these interfaces and “manager=local” is set.

[admin@MikroTikAc3] /interface/wifi/provisioning> print detail 
Flags: X - disabled 
 0   ;;; FamiliRoom-CAP-2GHz
     identity-regexp="FamiliRoom-CAP" supported-bands=2ghz-n action=create-dynamic-enabled master-configuration=familyroom-cap-ac-2g slave-configurations=slave-camera-vlan200 name-format="%I-2ghz" 

 1   identity-regexp="FamiliRoom-CAP" supported-bands=5ghz-ac action=create-dynamic-enabled master-configuration=familyroom-cap-ac-5g slave-configurations=test-5g name-format="%I-5ghz" 

 2   radio-mac=78:9A:18:07:21:FE action=create-dynamic-enabled master-configuration=corridor-cap-ac-2g name-format="%I-2ghz" 

 3   radio-mac=78:9A:18:07:21:FF action=create-dynamic-enabled master-configuration=corridor-cap-ac-5g name-format="%I-5ghz" 

 4 X radio-mac=DC:2C:6E:2E:77:04 action=create-enabled master-configuration=self-rack-2g name-format="%I-2ghz" slave-name-format="" 

 5 X radio-mac=DC:2C:6E:2E:77:05 action=create-enabled master-configuration=self-rack-5g name-format="%I-5ghz"

As I see, somehow, the wifi1 and wifi2 interfaces swapped: default-name=“wifi2” name=“wifi1” and "default-name=“wifi1” name=“wifi2”.
Radios:

[admin@MikroTikAc3] /interface/wifi/radio> print 
Flags: L - LOCAL
Columns: CAP, RADIO-MAC, INTERFACE
#   CAP                                  RADIO-MAC          INTERFACE          
0   FamiliRoom-CAP@74:4D:28:B8:92:ED%*8  74:4D:28:B8:92:EF  FamiliRoom-CAP-2ghz
1   FamiliRoom-CAP@74:4D:28:B8:92:ED%*8  74:4D:28:B8:92:F0  FamiliRoom-CAP-5ghz
2   Corridor-CAP@78:9A:18:07:21:FC%*8    78:9A:18:07:21:FE  Corridor-CAP-2ghz  
3   Corridor-CAP@78:9A:18:07:21:FC%*8    78:9A:18:07:21:FF  Corridor-CAP-5ghz  
4 L                                      DC:2C:6E:2E:77:05  wifi2              
5 L                                      DC:2C:6E:2E:77:04  wifi1

And CAP is disabled:

[admin@MikroTikAc3] /interface/wifi/cap> print 
               enabled: no  
  discovery-interfaces: all 
           certificate: none
      lock-to-caps-man: no  
         slaves-static: no

I really don’t understand what is happening. The only way to fix is resetting the interfaces and reboot the device.

Can somebody please help me to solve this issue?

Thanks a lot!

erlinden · March 17, 2025, 8:21am

Can you share your complete config (of the CAPsMAN)?

/export file=anynameyoulike

Remove serial and any other private info, post between code tags by using the </> button.

What is the purpose of renaming the interface name?
Have you tried to provision the local radios manually?

jvincze84 · March 17, 2025, 11:03am

Can you share your complete config (of the CAPsMAN)?
/export file=anynameyoulike
Remove serial and any other private info, post between code tags by using the </> button.

What is the purpose of renaming the interface name?
Have you tried to provision the local radios manually?

Here is my interface config:

[admin@MikroTikAc3] /interface> export hide-sensitive terse 
# 2025-03-17 11:58:18 by RouterOS 7.18.1
# software id = 51LK-FL29
#
# model = RBD53iG-5HacD2HnD
# serial number = F34E0F033F54
/interface bridge add name=bridge1 port-cost-mode=short vlan-filtering=yes
/interface ethernet set [ find default-name=ether1 ] name=ether1-pppoe
/interface ethernet set [ find default-name=ether2 ] name=ether2-switch
/interface ethernet set [ find default-name=ether4 ] name=ether4-telekom
/interface ethernet set [ find default-name=ether5 ] name=ether5-familyroom-cap
/interface pppoe-client add add-default-route=yes disabled=no interface=ether1-pppoe name=pppoe-out1 user=55500000000000240404@t-online.hu
/interface wireguard add listen-port=51840 name=wireguard1
/interface vlan add interface=bridge1 name=vlan100 vlan-id=100
/interface vlan add interface=bridge1 name=vlan200 vlan-id=200
/interface list add name=WAN
/interface list add name=LAN
/interface list add name=ETH
/interface list add name=ISOLATED-VLANS
/interface wifi channel add band=5ghz-ac disabled=no frequency=2300-7300 name=ac2-5ghz width=20/40/80mhz
/interface wifi channel add band=2ghz-n disabled=no frequency=2462 name=self-rack-2g-ch11 width=20/40mhz
/interface wifi channel add band=5ghz-ac frequency=5170-5190 name=self-rack-5g-ch36 skip-dfs-channels=disabled width=20/40/80mhz
/interface wifi channel add band=2ghz-n comment=channel1 disabled=no frequency=2412 name=familyroom-cap-ac-2g width=20/40mhz
/interface wifi channel add band=5ghz-ac comment=channel56 frequency=5270-5290 name=familyroom-cap-ac-5g skip-dfs-channels=disabled width=20/40/80mhz
/interface wifi channel add band=2ghz-n comment=channel6 disabled=no frequency=2437 name=corridor-cap-ac-2g width=20/40mhz
/interface wifi channel add band=5ghz-ac comment=channel64 frequency=5310-5330 name=corridor-cap-ac-5g skip-dfs-channels=disabled width=20/40/80mhz
/interface wifi datapath add bridge=bridge1 disabled=no name=bridge1
/interface wifi datapath add bridge=bridge1 client-isolation=yes disabled=no name=vlan200
/interface wifi security add authentication-types=wpa2-psk,wpa3-psk disabled=no encryption=ccmp,ccmp-256,gcmp-256 name=jfsz-sb-33-net
/interface wifi security add authentication-types=wpa2-psk,wpa3-psk disabled=no name=sec1
/interface wifi security add authentication-types=wpa-psk,wpa2-psk disabled=no encryption=ccmp,gcmp,ccmp-256,gcmp-256 name=camera
/interface wifi security add disabled=no encryption=ccmp,ccmp-256,gcmp-256 name=nosec
/interface wifi security add authentication-types=wpa2-psk,wpa3-psk disabled=no encryption=ccmp,ccmp-256,gcmp-256 name=Gomba-Land
/interface wifi configuration add channel=self-rack-2g-ch11 country=Hungary datapath=bridge1 disabled=no manager=local mode=ap name=self-rack-2g security=Gomba-Land ssid=Gomba-Land
/interface wifi configuration add channel=self-rack-5g-ch36 country=Hungary datapath=bridge1 disabled=no manager=local mode=ap name=self-rack-5g security=Gomba-Land ssid=Gomba-Land
/interface wifi configuration add antenna-gain=2 channel=familyroom-cap-ac-2g country=Hungary datapath=bridge1 disabled=no mode=ap name=familyroom-cap-ac-2g security=Gomba-Land ssid=Gomba-Land tx-power=10
/interface wifi configuration add channel=familyroom-cap-ac-5g country=Hungary datapath=bridge1 mode=ap name=familyroom-cap-ac-5g security=Gomba-Land ssid=Gomba-Land
/interface wifi configuration add channel=corridor-cap-ac-2g country=Hungary datapath=bridge1 mode=ap name=corridor-cap-ac-2g security=Gomba-Land ssid=Gomba-Land
/interface wifi configuration add channel=corridor-cap-ac-5g country=Hungary datapath=bridge1 mode=ap name=corridor-cap-ac-5g security=Gomba-Land ssid=Gomba-Land
/interface wifi configuration add antenna-gain=2 channel=corridor-cap-ac-2g comment="Test Wifi" country=Hungary disabled=no mode=ap name=test-2g security=nosec ssid=test-2g
/interface wifi configuration add channel=familyroom-cap-ac-5g comment="Test Wifi 5g" country=Hungary disabled=no mode=ap name=test-5g security=nosec ssid=test-5g
/interface wifi configuration add country=Hungary disabled=no mode=ap name=slave-camera-vlan200 security=camera ssid=camera-vlan
/interface wifi
# failed to create interface
set [ find default-name=wifi2 ] channel.frequency=2462 configuration=self-rack-2g configuration.manager=local .mode=ap disabled=no name=wifi1
/interface wifi
# failed to create interface
set [ find default-name=wifi1 ] configuration=self-rack-5g configuration.manager=local .mode=ap disabled=no name=wifi2
/interface bridge port add bridge=bridge1 interface=ether2-switch internal-path-cost=10 path-cost=10
/interface bridge port add bridge=bridge1 interface=ether3 internal-path-cost=10 path-cost=10 pvid=200
/interface bridge port add bridge=bridge1 interface=ether5-familyroom-cap
/interface bridge port add bridge=bridge1 ingress-filtering=no interface=ether4-telekom pvid=100 trusted=yes
/interface bridge vlan add bridge=bridge1 tagged=bridge1,ether2-switch,ether5-familyroom-cap vlan-ids=100,200
/interface list member add disabled=yes interface=ether1-pppoe list=WAN
/interface list member add interface=bridge1 list=LAN
/interface list member add interface=pppoe-out1 list=WAN
/interface list member add interface=ether2-switch list=ETH
/interface list member add interface=ether5-familyroom-cap list=ETH
/interface list member add interface=ether4-telekom list=ETH
/interface list member add interface=ether3 list=ETH
/interface list member add interface=wireguard1 list=LAN
/interface list member add interface=vlan200 list=ISOLATED-VLANS
/interface ovpn-server server add mac-address=FE:00:CF:B3:D2:B1 name=ovpn-server1
/interface wifi cap set certificate=none discovery-interfaces=all lock-to-caps-man=no slaves-static=no
/interface wifi capsman set ca-certificate=WiFi-CAPsMAN-CA-DC2C6E2E76FF certificate=WiFi-CAPsMAN-DC2C6E2E76FF enabled=yes interfaces=bridge1 package-path="" require-peer-certificate=no upgrade-policy=none
/interface wifi configuration add channel=*1 country=Hungary datapath=bridge1 disabled=no mode=ap name=ac2-5ghz security=jfsz-sb-33-net ssid=test-5ghz
/interface wifi provisioning add action=create-dynamic-enabled comment=FamiliRoom-CAP-2GHz disabled=no identity-regexp=FamiliRoom-CAP master-configuration=familyroom-cap-ac-2g name-format=%I-2ghz slave-configurations=slave-camera-vlan200 supported-bands=2ghz-n
/interface wifi provisioning add action=create-dynamic-enabled disabled=no identity-regexp=FamiliRoom-CAP master-configuration=familyroom-cap-ac-5g name-format=%I-5ghz slave-configurations=test-5g supported-bands=5ghz-ac
/interface wifi provisioning add action=create-dynamic-enabled disabled=no master-configuration=corridor-cap-ac-2g name-format=%I-2ghz radio-mac=78:9A:18:07:21:FE
/interface wifi provisioning add action=create-dynamic-enabled master-configuration=corridor-cap-ac-5g name-format=%I-5ghz radio-mac=78:9A:18:07:21:FF
/interface wifi provisioning add action=create-enabled disabled=yes master-configuration=self-rack-2g name-format=%I-2ghz radio-mac=DC:2C:6E:2E:77:04 slave-name-format=""
/interface wifi provisioning add action=create-enabled disabled=yes master-configuration=self-rack-5g name-format=%I-5ghz radio-mac=DC:2C:6E:2E:77:05

What is the purpose of renaming the interface name?

It is not important. I just want "friendly" name.

Have you tried to provision the local radios manually?

Yes, I have tried, but the same happened. That's why the local provisioning is disabled.

Thanks!