RB2011UiAS CAPsMAN dont add internal wlan and virtual ap

Hello guys. I have to say, I’m a noob gold member. Made all settings by manuals and with help from my freind. I have 1 problem. On RB2011UiAS
after i enable CAPsMAN - Manage - CAPs manager
and Wireless Tables - CAP - Enabled nothing happens with internal wlan
micr-set02.PNG
but in the same time with 2x connecting of external cAP no problems - they exist in CAPsMAN list and normaly works. Checked with powering external cAPs off 1 by 1.
ext-caps-01.PNG
but if in CAP i enable only interface wlan1 i get Managed by CAPsMAN only in Wireless Tables. When i begin test with dowтloading large file and disable cAPs 1 by 1 and when only 1 internal WLAN working, i lost SIDs by mobile wifi client and dont see 2011 internal AP SIDs.
Guy please can you help me? What i do wrong?

Used manuals common for nubies , CAPsMAN and friend help.
micr-set01.PNG

Hello again. All began work when i disabled 3 last policies in firewall. (and CAPsMAN for internal wifi and UPNP too)

add action=reject chain=input disabled=yes
add action=reject chain=output disabled=yes
add action=reject chain=forward disabled=yes

that i took from that manual

Yes, but that way your router is left vulnerable (all input and forward traffic will be accepted). Probably only thing that was preventing CAPsMAN to work, was that traffic from itself was not allowed on firewall. Try adding the below rule to the top of /ip firewall filter and re-enable the rules you posted. Should work.


add chain=input src-address=127.0.0.1

Regards,

Eduardo Mazutti