Thanks in advance for any help. Recovering Cisco addict.
Have a Mikrotik 3011 running 6.38.1 and a Mikrotik wAP ac running the same
Cisco is running c3560-ipservicesk9-mz.150-2.SE9.bin
I need to have capsman control all wAP ac running.
I have 2 vlans I production vlan and 1 guest
I can get this config working on Cloud Router Switch but I need it to work with the 3011. As I said recovering Cisco guy. Learning Mikrotik and loving so far.
3011 config
/interface bridge
add admin-mac=************* auto-mac=no comment=defconf name=bridge
add name=bridge-vlan100
add name=bridge-vlan200
/interface ethernet
set [ find default-name=ether2 ] name=ether2-master
set [ find default-name=ether5 ] master-port=ether2-master
set [ find default-name=ether6 ] name=ether6-master
set [ find default-name=ether7 ] master-port=ether6-master
set [ find default-name=ether8 ] master-port=ether6-master
set [ find default-name=ether9 ] master-port=ether6-master
set [ find default-name=ether10 ] master-port=ether6-master
/ip neighbor discovery
set ether1 discover=no
/interface vlan
add interface=ether2-master name=eth2-vlan100 vlan-id=100
add interface=ether2-master name=eth2-vlan200 vlan-id=200
/caps-man datapath
add bridge=bridge-vlan200 local-forwarding=yes name=Car*******-DC vlan-id=200
vlan-mode=use-tag
add bridge=bridge-vlan100 local-forwarding=yes name=Gil*********_DC vlan-id=
100 vlan-mode=use-tag
/caps-man configuration
add country=“united states” datapath=Car******-DC datapath.bridge=
bridge-vlan200 datapath.vlan-id=200 datapath.vlan-mode=use-tag mode=ap
name=Gil**********-C ssid=Gil************
/caps-man security
add authentication-types=wpa-psk,wpa2-psk encryption=aes-ccm,tkip
group-encryption=aes-ccm name=Car******-SC passphrase=Car******
add authentication-types=wpa-psk,wpa2-psk encryption=aes-ccm,tkip
group-encryption=aes-ccm name=Gil**********-SC passphrase=*************
/caps-man configuration
add country=“united states” datapath=Car******-DC mode=ap name=Car******-C
security=Car******-SC ssid=Car******
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
add name=dhcp_pool1 ranges=192.168.2.2-192.168.2.254
add name=dhcp_pool2 ranges=192.168.200.2-192.168.200.254
/ip dhcp-server
add address-pool=default-dhcp disabled=no interface=bridge name=defconf
add address-pool=dhcp_pool1 disabled=no interface=bridge-vlan100 name=dhcp1
add address-pool=dhcp_pool2 disabled=no interface=bridge-vlan200 name=dhcp2
/caps-man manager
set enabled=yes
/caps-man provisioning
add action=create-dynamic-enabled master-configuration=Gil***********-C
slave-configurations=Car*****-C
/interface bridge port
add bridge=bridge comment=defconf interface=ether2-master
add bridge=bridge comment=defconf interface=ether6-master
add bridge=bridge comment=defconf interface=sfp1
add bridge=bridge-vlan100 interface=eth2-vlan100
add bridge=bridge-vlan200 interface=eth2-vlan200
add bridge=bridge-vlan100 interface=ether3
add bridge=bridge-vlan200 interface=ether4
/interface ethernet switch vlan
add independent-learning=no ports=ether2-master,ether3,switch1-cpu switch=
switch1 vlan-id=100
add independent-learning=no ports=ether2-master,ether4,switch1-cpu switch=
switch1 vlan-id=200
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=
192.168.88.0
add address=192.168.2.1/24 interface=bridge-vlan100 network=192.168.2.0
add address=192.168.200.1/24 interface=bridge-vlan200 network=192.168.200.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no interface=
ether1
/ip dhcp-server network
add address=192.168.2.0/24 gateway=192.168.2.1
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
add address=192.168.200.0/24 gateway=192.168.200.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router
/ip firewall filter
add action=accept chain=input comment=“defconf: accept ICMP” protocol=icmp
add action=accept chain=input comment=“defconf: accept established,related”
connection-state=established,related
add action=drop chain=input comment=“defconf: drop all from WAN”
in-interface=ether1
add action=fasttrack-connection chain=forward comment=“defconf: fasttrack”
connection-state=established,related
add action=accept chain=forward comment=“defconf: accept established,related”
connection-state=established,related
add action=drop chain=forward comment=“defconf: drop invalid”
connection-state=invalid
add action=drop chain=forward comment=
“defconf: drop all from WAN not DSTNATed” connection-nat-state=!dstnat
connection-state=new in-interface=ether1
/ip firewall nat
add action=masquerade chain=srcnat comment=“defconf: masquerade”
out-interface=ether1
/system clock
set time-zone-name=America/Los_Angeles
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=bridge
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=bridge
Cisco config relevant interfaces
interface GigabitEthernet0/17
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,100,200
switchport mode trunk
!
interface GigabitEthernet0/18
switchport access vlan 100
!
interface GigabitEthernet0/19
switchport access vlan 200
!
interface GigabitEthernet0/20
!
interface GigabitEthernet0/21
!
interface GigabitEthernet0/22
!
interface GigabitEthernet0/23
!
interface GigabitEthernet0/24
!
interface GigabitEthernet0/25
!
interface GigabitEthernet0/26
!
interface GigabitEthernet0/27
!
interface GigabitEthernet0/28
!
interface GigabitEthernet0/29
!
interface GigabitEthernet0/30
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,10,20
switchport mode trunk
!
interface GigabitEthernet0/31
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,10,20,100,200
switchport mode trunk
Mikrotik wAP ac config
/interface bridge
add admin-mac=6C:3B:6B:6C:A3:EE auto-mac=no name=bridgeLocal
/caps-man interface
add disabled=no l2mtu=1600 mac-address=6C:3B:6B:6C:A3:F0 master-interface=
none name=cap1 radio-mac=6C:3B:6B:6C:A3:F0
add disabled=no l2mtu=1600 mac-address=6C:3B:6B:6C:A3:EF master-interface=
none name=cap2 radio-mac=6C:3B:6B:6C:A3:EF
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/caps-man manager
set enabled=yes
/caps-man manager interface
add disabled=no
/interface bridge port
add bridge=bridgeLocal interface=ether1
/interface wireless cap
I can get correct DHCP off of the cisco access ports for vlans 100 and 200
Capsman correctly configures radios with ssids. Authenticates but no ip and network.
Thanks again for any help. Sorry if I left anything out anyone needs to help me. I will post whats needed.