Hi all, I run two access points at home, one hAP-ax2 and one hAP-ax3. Wired uplinks. Great devices, no complaints whatsoever. They provide strictly layer 2 connectivity, SSIDs mapped to VLANs, APs connected to a CRS-326-24G-2S+IN switch, also running RouterOS and limited to layer 2 services. Every…

[image] pmh: Am I correct that I need to install “wireless” to run CAPsMAN? No. :woozy_face: To simplify life to their users :wink: the good Mikrotik guys have made TWO CAPSMAN, completely different but with the same name. One (the old one) is under the "wireless" menu (and in the "wireless…

You are right, I see it now. 7.22.1 - I don’t know at which version I checked and I swear I could not find it in the “WiFi” menu. But then maybe I just wasn’t wearing my glasses. But assumed I still want a central instance for all APs even with only two of them (see above about the “testbed”) - wha…

Just use one of the AX's, CAPsMAN is basically a provisioner (unless all traffic is handled by CAPsMAN). All smart things are handled by the CAP itself. As it doesn´t use any resources, feel free to choose either AX..

OK, maybe to get a feel for it. But in production with a dozen APs over two offices …? I want to be able to replace devices at will just reprovisioning them. And have the central configuration tool somewhere with its VM image on ZFS with hourly snapshots and off site backups like I have for all ot…

You can run CAPsMAN in a CHR, sure. If it’s remote from any APs just be aware that the AP radios stop when the CAPsMAN is inaccessible. So if the remote link goes down, so does wifi. [image] pmh: And then: how does that SSID to VLAN mapping work? I could not get an idea from reading the docs. …

[image] cpunk: You can run CAPsMAN in a CHR, sure. If it’s remote from any APs just be aware that the AP radios stop when the CAPsMAN is inaccessible. So if the remote link goes down, so does wifi. Ah. That’s different from Unifi where the controller does not have to be online for the APs to …

Usually It Is easier to comment/give suggestions on text configuration (as opposed to screenshots) as some related settings may be in other sections (not seen in screenshots). Post your configuration, Instructions here: Forum rules - #5 by gigabyte091

/interface bridge port add bridge=bridge comment="LAN 5 GHz" frame-types=admit-only-untagged-and-priority-tagged interface=wifi1 add bridge=bridge comment="GUE 2.4 GHz" frame-types=admit-only-untagged-and-priority-tagged interface=wifi2 pvid=7 add bridge=bridge comment=Uplink interface=bonding1 add …

Touché /interface bridge add admin-mac=D4:01:C3:C5:4E:23 auto-mac=no comment=Switch mvrp=yes name=bridge vlan-filtering=yes /interface wifi set [ find default-name=wifi1 ] channel.band=5ghz-ax .width=20/40mhz comment="LAN 5 GHz" configuration.country=Germany .mode=ap .ssid=Khazad-dum disable-runnin…

Need some help to get started with CAPsMAN - or maybe not :-)

RouterOS Wireless Networking

jaclaz April 12, 2026, 8:59pm 10

Well, the point was (Is) that you should post your FULL, COMPLETE, configuration, not the snippets you believe are relevant.
That Is Rule #12.

vlan-id=1

Rules #1 and #2, JFYI: