EDIT: You can find my latest configuration here: No WiFi - CAPsMAN - #7 by bloodynetworker
The issue: I’ve setup CAPsMAN and the CAPs, but they’re not casting any WiFi signals (my devices do not see any of those provisioned WiFis) even though they’re claiming that they’re connected to the CAPsMAN (see screenshot).
I have two hAP ax S. One of them (called “Office“) is connected to the other one (called “Main“). The “Main“ is used as the switch of the entire home network. Therefore, it makes sense to configure “Main“ as the CAPsMAN, but I want it to be a CAP as well. This is possible and a proposed solution from MikroTik.
I followed that guide and also this one on how to manually setup the “Office“ CAP.
I don’t see what I might’ve misconfigured, I followed the guides and both CAPs don’t offer any of the provisioned WiFis!
“Main“ configuration:
/interface bridge
add admin-mac=D0:EA:11:3D:E0:96 auto-mac=no comment=defconf fast-forward=no name=bridge
/interface list
add name=LAN
/interface wifi channel
add band=5ghz-ax disabled=no frequency=5150-5250,5250-5350,5470-5725 name=channel_5ghz skip-dfs-channels=10min-cac width=20/40mhz
add band=2ghz-ax disabled=no frequency=2412,2432,2472 name=channel_2ghz width=20mhz
/interface wifi security
add authentication-types=wpa2-psk,wpa3-psk disabled=no encryption=ccmp ft=yes ft-over-ds=yes ft-preserve-vlanid=yes management-encryption=cmac \
management-protection=allowed name=sec_FAM wps=disable
add authentication-types=wpa2-psk,wpa3-psk comment="includes NTR and IOT" disabled=no encryption=ccmp ft=yes ft-over-ds=yes ft-preserve-vlanid=yes \
management-encryption=cmac management-protection=allowed name=sec_not_FAM wps=push-button
/interface wifi steering
add disabled=no name=steering1 neighbor-group=dynamic-home.34_5-7e02348a rrm=yes wnm=yes
/interface wifi configuration
add channel=channel_5ghz country=Germany disabled=no installation=indoor manager=capsman mode=ap name=cfg_home.34_5 security=sec_FAM ssid=home.34_5 steering=\
steering1
add channel=channel_2ghz country=Germany disabled=no installation=indoor manager=capsman mode=ap name=cfg_home.34_2 security=sec_FAM ssid=home.34_2 steering=\
steering1
add channel=channel_2ghz country=Germany disabled=no installation=indoor manager=capsman mode=ap name=cfg_home.34_2_NTR security=sec_not_FAM ssid=home.34_2_NTR \
steering=steering1
add channel=channel_2ghz country=Germany disabled=no installation=indoor manager=capsman mode=ap name=cfg_home.34_2_IOT security=sec_not_FAM ssid=home.34_2_IOT \
steering=steering1
/disk settings
set auto-media-interface=bridge auto-media-sharing=yes auto-smb-sharing=yes
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=sfp1
add bridge=bridge comment=defconf interface=*2
add bridge=bridge comment=defconf interface=*3
add bridge=bridge interface=ether1
/ipv6 settings
set disable-ipv6=yes
/interface list member
add comment=defconf interface=bridge list=LAN
/interface wifi cap
set caps-man-addresses=127.0.0.1 certificate=request discovery-interfaces=lo enabled=yes
/interface wifi capsman
set enabled=yes interfaces=bridge,lo upgrade-policy=suggest-same-version
/interface wifi provisioning
add action=create-dynamic-enabled disabled=no master-configuration=cfg_home.34_2 slave-configurations=cfg_home.34_2_NTR,cfg_home.34_2_IOT supported-bands=2ghz-ax
add action=create-dynamic-enabled disabled=no master-configuration=cfg_home.34_5 supported-bands=5ghz-ax
/ip address
add address=10.0.0.10/24 comment=defconf interface=bridge network=10.0.0.0
/ip dns
set allow-remote-requests=yes servers=10.0.0.1
/ip dns static
add address=10.0.0.10 comment=defconf name=router.lan type=A
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=10.0.0.1
/system clock
set time-zone-name=Europe/Berlin
/system identity
set name=Main
“Office“ configuration:
/interface bridge
add admin-mac=D0:EA:11:3D:DC:1A auto-mac=no comment=defconf name=bridge
/interface wifi
# managed by CAPsMAN D0:EA:11:3D:E0:96%bridge
set [ find default-name=wifi1 ] configuration.manager=capsman .mode=ap datapath.bridge=bridge disabled=no
# managed by CAPsMAN D0:EA:11:3D:E0:96%bridge
set [ find default-name=wifi2 ] configuration.manager=capsman .mode=ap datapath.bridge=bridge disabled=no
/interface list
add comment=defconf name=LAN
/disk settings
set auto-media-interface=bridge auto-media-sharing=yes auto-smb-sharing=yes
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=sfp1
add bridge=bridge comment=defconf interface=*8
add bridge=bridge comment=defconf interface=*9
add bridge=bridge interface=ether1
/ipv6 settings
set disable-ipv6=yes
/interface list member
add comment=defconf interface=bridge list=LAN
/interface wifi cap
set caps-man-addresses=10.0.0.10 certificate=request discovery-interfaces=bridge enabled=yes
/ip address
add address=10.0.0.20/24 comment=defconf interface=bridge network=10.0.0.0
/ip dns
set allow-remote-requests=yes servers=10.0.0.1
/ip dns static
add address=10.0.0.20 comment=defconf name=router.lan type=A
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=10.0.0.1
/system clock
set time-zone-name=Europe/Berlin
/system identity
set name=Office
… Correct me if I’m wrong, otherwise I’ll just manually remove them from the uploaded config scripts so they’re more readable for you. Aside from that, thanks for pointing out that I have duplicate frequency settings! I find it very ease in WinBox to have duplicate settings and your not even noticing it. I think MicroTik should add a feature that points out duplicate settings to the user via the UI in a more noticeable manner. Those duplicate settings were part of the old COPY configuration that I didn’t apply to my wifi interfaces. Currently, I’m only applying the “basic“ config your recommending me.
)