Hello Mikrotik Forum,
I am very new to the whole Mikrotik environment and therefore I hope you can forgive my lack of knowledge in most fields. As the title states I would like to deploy distinct ssids for different vlans. I had been told I would have to create a configuration for both 2.4 and 5GHz bands respectively and provision them accordingly (e.g. cap1 master:xxx_2G + slaves and cap1 master:xxx_5G + slaves). This process can be quite tedious and error-prone with lots of vlans, so I was wondering if it is possible to define one “main” profile for both 2.4GHz and 5GHz set up with proper channels etc and just have additional configuration profiles which only define an ssid and security profile, which would be attached as slave onto the right provisioning band. My apologies for my choppy English, I am not very fluent but I hope the wireless export sheds some light onto what I am trying to say. My main goal is to be able to change the ssid and password via api calls which would be great to accomplish by just editing/updating a single profile rather than two.
Hardware in use:
Router: CCR2116-12G-4S+ (7.20) with wireless package
cAPs : cAP XL ac (7.20) with wireless package.
(Since wifi6 is not needed and vlans are rather annoying to deal with I am not using the wifi-qcom-ac package)
CAPsMan Controller config:
# 2025-11-05 17:02:34 by RouterOS 7.20.2
# software id = BW8A-AMHR
#
# model = CCR2116-12G-4S+
# serial number = HJT0AXV254P
/caps-man channel
add band=2ghz-b/g/n control-channel-width=20mhz frequency=2412,2437,2462 name=2GHZ::AUTO
add band=2ghz-b/g/n control-channel-width=20mhz frequency=2412 name=2GHZ::CH1
add band=2ghz-b/g/n control-channel-width=20mhz frequency=2437 name=2GHZ::CH6
add band=2ghz-b/g/n control-channel-width=20mhz frequency=2462 name=2GHZ::CH11
add band=5ghz-a/n/ac control-channel-width=20mhz frequency=5180,5200,5220,5240 name=5GHZ::NON-DFS
/caps-man datapath
add bridge=bridge1 local-forwarding=no name="vlan154 - Mitarbeiter" vlan-id=154 vlan-mode=use-tag
add bridge=bridge1 client-to-client-forwarding=no local-forwarding=no name=wz1 vlan-id=101 vlan-mode=use-tag
add bridge=bridge1 client-to-client-forwarding=no local-forwarding=no name=wz2 vlan-id=102 vlan-mode=use-tag
/caps-man security
add authentication-types=wpa2-psk name=Mitarbeiter
add authentication-types=wpa2-psk name=wz1
/caps-man configuration
add channel=2GHZ::AUTO country=germany datapath="vlan154 - Mitarbeiter" installation=indoor mode=ap name=Mitarbeiter_2G security=Mitarbeiter ssid="Staff"
add channel=5GHZ::NON-DFS country=germany datapath="vlan154 - Mitarbeiter" installation=indoor mode=ap name=Mitarbeiter_5G security=Mitarbeiter ssid="Staff"
add channel=2GHZ::AUTO comment=wz1 country=germany datapath=wz1 installation=indoor mode=ap name=wz1_2G security=wz1 ssid=wz1
add channel=5GHZ::NON-DFS comment=wz1 country=germany datapath=wz1 installation=indoor mode=ap name=wz1_5G security=wz1 ssid=wz1
/caps-man provisioning
add action=create-dynamic-enabled comment="cAP - WZ1 2G" hw-supported-modes=gn master-configuration=Mitarbeiter_2G name-format=identity radio-mac=04:F4:1C:0E:3B:D2 slave-configurations=wz1_2G,wz2_2G
add action=create-dynamic-enabled comment="cAP - WZ1 5G" hw-supported-modes=ac master-configuration=Mitarbeiter_5G name-format=identity radio-mac=04:F4:1C:0E:3B:D3 slave-configurations=wz1_5G,wz2_5G
Thank you for taking your time to read through this and offering much needed advice and insight on this matter!
Kind Regards.