I recently learned this configuration and now I have it installed in three locations with the following configuration. In all three locations, I am facing problems while working with networked and regular printers. It works once and does not work several times. It is not visible on phones, both Android and iOS. Please guide me to solve the problem.
Screenshots are more difficult to understand, and in any case they are a PARTIAL representation, post instead your COMPLETE exported configuration, following these instructions:
Please don't use WPA-PSK, that is totally unsafe.
Can you share the exact hardware involved and how everything is connected (wired/wireless)?
Hi
Thanks for exporting config instructions.
# oct/11/2025 21:24:12 by RouterOS 6.49.19
#
#
# model = RB3011UiAS
#
/interface bridge
add name=bridge1-Cam
add name=bridge1-LAN
add name=bridge2-WAN
/interface ethernet
set [ find default-name=ether1 ] name=ether1-WAN
set [ find default-name=ether2 ] name=ether2-NET
set [ find default-name=ether3 ] name=ether3-
set [ find default-name=ether4 ] name=ether4-
set [ find default-name=ether5 ] name=ether5-
set [ find default-name=ether6 ] name=ether6-Mik-1
set [ find default-name=ether7 ] name=ether7-Mik-2
set [ find default-name=ether8 ] name=ether8-Mik-3
/caps-man configuration
add country="united states" datapath.bridge=bridge1-LAN name=cfg1 \
security.authentication-types=wpa2-psk security.passphrase=\*\*\* ssid=\\
\*\*\*
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
add dns-name=*** hotspot-address=10.5.50.1 name=hsprof1
/ip pool
add name=hs-pool-12 ranges=10.5.50.2-10.5.50.254
/ip dhcp-server
add address-pool=hs-pool-12 disabled=no interface=bridge1-LAN lease-time=1h \
name=dhcp1
/ip hotspot
add address-pool=hs-pool-12 interface=bridge1-LAN name=hotspot1 profile=\
hsprof1
/caps-man manager
set enabled=yes
/caps-man manager interface
set [ find default=yes ] forbid=yes
add disabled=no interface=bridge1-LAN
/caps-man provisioning
add action=create-dynamic-enabled master-configuration=cfg1 name-format=\
identity
/interface bridge port
add bridge=bridge1-Cam interface=ether4-
add bridge=bridge1-Cam interface=ether5-
add bridge=bridge1-LAN interface=ether6-Mik-1
add bridge=bridge1-LAN interface=ether7-Mik-2
add bridge=bridge1-LAN interface=ether8-Mik-3
add bridge=bridge1-Cam interface=ether3-
add bridge=bridge2-WAN interface=ether1-WAN
/ip address
add address=*** interface=ether1-WAN network=172.16.0.0
add address=*** interface=ether4- network=192.168.99.0
add address=10.5.50.1/24 comment="hotspot network" interface=bridge1-LAN \
network=10.5.50.0
add address=*** interface=ether1-WAN network=172.16.0.0
add address=*** interface=ether1-WAN network=172.16.0.0
add address=*** interface=ether1-WAN network=172.16.0.0
/ip dhcp-client
add disabled=no interface=ether2-NET
/ip dhcp-server network
add address=10.5.50.0/24 comment="hotspot network" gateway=10.5.50.1
/ip dns
set allow-remote-requests=yes
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
/ip service
set www port=***
/lcd
set enabled=no
/system clock
set time-zone-name=Asia/Baghdad
/system identity
set name=***
/tool graphing interface
add
/tool graphing queue
add
/tool graphing resource
add
The images come from Mikrotik help pages:
they represent the basic CAPsMAN settings (and the idea is that the AP's are later connected as CAPS by connecting them via ethernet and setting them automatically in CAP mode via pressing the reset button).
Without some more descriptions of the general network and the actual configuration of one of the AP's it is difficult to understand what the issue is.
Your 3011 seems to be used as a router between 10.5.50.0/24 (local wireless network) and 172.16.0.0, but you have no routes, nor NAT settings (let alone firewall rules) so I wonder what actually it is supposed to do.
The firewall and NAT and a number of other configurations have been removed at the request of the employer. Currently, 3011 acts as a router and 3 951s act as access points, each connected to 3011 with a cable. This configuration is working very well and the employer is completely satisfied. The only problem is with the printers, which disconnect and reconnect, especially when they want to print from their phones.The point is that with this configuration and removing the capsman, the printer problem will be solved.
Hi
Is there any solution to fix it? Please help me.
If any config is necessary, please tell me to share it with you or is there any config that I can relay to it l, please tell me.
Thanks