[SOLVED] CAPsMAN local CAP - ARP issues

Hi,
I am a happy RouterOS user for years now, using the RB751U-2HnD and a 5.x RouterOS version.
However there was an issue with wireless performance on some area’s, so I decided to buy a small RBmAP2n to extend the wireless coverage.

I ended up with this configuration:
Device RBmAP2n:

  • RouterOS v6.26 - CAPsMAN v2
  • CAP “the remote CAP”
    Device RB751U:
  • RouterOS v6.26 - CAPsMAN v2
  • CAPsMAN
  • CAP (locally connected to CAPsMAN)
  • 1 Bridge including the 2 CAPsMAN interfaces (1 local, 1 remote), and the local Ethernet.

The 2 CAP’s have the same settings.

Problem:
The remote CAP works perfectly, but the local CAP has ARP problems.
Symptoms:

  1. Ethernet: pinging to hosts works fine
  2. WIFI - remote CAP:
    I have disabled the local CAP interface on the CAPsMAN router (RB751U), so only the remote CAP interface provides the wireless connection:
    → Pinging to local network hosts works fine.
  3. WIFI - local CAP:
    I have disabled the remote CAP interface on the CAPsMAN router (RB751U), so only the local CAP interface provides the wireless connection:
    → Pinging to local network hosts fails

Investigation:
I have fired up wireshark on my laptop, and found that there were no ARP responses coming back on the ARP requests (switching from local CAP to remote CAP immediately solves the problem)
Then i fired up the packet sniffer in the CAPsMAN router (RB751U), and sniffed ARP packets on the local CAP interface: there I could see the ARP responses! They just don’t make it through the wireless connection?


Settings: (hopefully of interest)

The local CAP

[admin@MikroTik] > /interface wireless cap print   
                            enabled: yes
                         interfaces: wlan1
                        certificate: none
                   lock-to-caps-man: no
               discovery-interfaces: bridge-local
                 caps-man-addresses: 
                     caps-man-names: 
  caps-man-certificate-common-names: 
                             bridge: bridge-local

The CAP interfaces

[admin@MikroTik] > /caps-man interface print 
Flags: M - master, D - dynamic, B - bound, 
X - disabled, I - inactive, R - running 
 #      NAME                  RADIO-MAC         MASTER-INTERFACE                 
 0 M BX cap1_remote         4C:5E:00:B9:00:00 none                             
 1 M BR cap2_local           D4:CA:00:7F:00:00 none

The CAPsMAN configuration

[admin@MikroTik] > /caps-man configuration print 
 0 name="cfg1" mode=ap ssid="xxxx" security=security1 channel=channel1

The actual? inferface configuration

[admin@MikroTik] > /caps-man actual-interface-configuration print 
Flags: M - master, D - dynamic, B - bound, 
X - disabled, I - inactive, R - running 
 0 M BX name="cap1_remote" mtu=1500 l2mtu=1600 mac-address=4C:5E:00:B9:00:00
        arp=enabled radio-mac=4C:5E:00:B9:00:00 master-interface=none 
        configuration.mode=ap configuration.ssid="xxxx" 
        security.authentication-types=wpa2-psk security.encryption=aes-ccm 
        security.passphrase="xxxx" channel.frequency=2422 channel.width=20 
        channel.band=2ghz-b/g/n 

 1 M B  name="cap2_local" mtu=1500 l2mtu=1600 mac-address=D4:CA:00:7F:00:00
        arp=enabled radio-mac=D4:CA:00:7F:00:00 master-interface=none 
        configuration.mode=ap configuration.ssid="xxxx" 
        security.authentication-types=wpa2-psk security.encryption=aes-ccm 
        security.passphrase="xxxx" channel.frequency=2422 channel.width=20 
        channel.band=2ghz-b/g/n

Does anybody have an idea? Thanks!

please make support output files from CAP and the CAPsMAN and send both of them to support@mikrotik.com

I thought I was using the CAPsMAN v2 package - but I wasn’t.

After upgrading both routers to v6.27 and installing the wireless-cm2 package it was fixed

CAPs are connected to CAPsMAN in L2 or L3 ? (in particular the local CAP)

This problem is fixed in CAPsMAN v2 using wireless-cm2 package.