WAV2 CAPSMAN Datapaths broken????

Hey All,

Using capsman with WAV2 and trying to get 2 SSID’s working (Internal and guest).

I have created 2 bridges and associated a datapath to each.

The issue is if the Wireless interfaces are locally on the router it works fine, but if the interfaces are on a remote CAP (somewhere else on the network) the DATAPATH does not seem to be linked from the AP to the CAPsMan. I’m only using L2 so no VLANs are involved.

Anyone else seen the same thing or am I looking at this wrong?

Alan Scott

You need 1 bridge and VLAN.
See here:
https://help.mikrotik.com/docs/display/ROS/WifiWave2#WifiWave2-CAPsMAN-CAPVLANconfigurationexample:

The WifiWave2 CAPsMAN doesn’t work in Manager Forwarding Mode, which was available for previous CAPsMAN.

From WifiWave2 docs:


… a ‘system Manager’ (CAPsMAN) that manages the configuration of the APs, it also takes care of client authentication.

WifiWave2 CAPsMAN only passes wireless configuration to the CAP, all forwarding decisions are left to the CAP itself - there is no CAPsMAN forwarding mode.

Therefore CAP datapath doesn’t link to CAPsMAN, but to local network / bridge / interfaces of the CAP.

The CAPsMAN does:


  • provision configuration to CAP,
  • performs authentication, which includes use of wifiwave2 access-list on CAPsMAN, and the connection to RADIUS is also performed from CAPsMAN,
  • facilitates 802.11r/k/v roaming, as transition/roaming to different AP is practically some form of re-authentication.

The normal traffic received by wireless interfaces on CAP is passed to bridge/interfaces on CAP as if CAPsMAN wasn’t used and AP was configured manually.