Why Won't Capsman Provision Second cAP ax?

RouterOS Wireless Networking
1 
/interface bridge
add name=BR1 vlan-filtering=yes
/interface vlan
add interface=BR1 name=VLAN20_IOT vlan-id=20
add interface=BR1 name=VLAN30_GUEST vlan-id=30
add interface=BR1 name=VLAN40_TRUSTED vlan-id=40
/interface list
add name=WAN
add name=LAN
/interface wifi channel
add name=ch-5ghz skip-dfs-channels=all width=20/40/80mhz
add name=ch-2ghz width=20mhz
/interface wifi datapath
add bridge=BR1 name=dp-trusted traffic-processing=on-capsman vlan-id=40
add bridge=BR1 name=dp-iot traffic-processing=on-capsman vlan-id=20
add bridge=BR1 name=dp-guest traffic-processing=on-capsman vlan-id=30
/interface wifi security
add authentication-types=wpa2-psk disabled=no management-protection=disabled name=sec-trusted
add authentication-types=wpa2-psk management-protection=disabled name=sec-iot
add authentication-types=wpa2-psk management-protection=disabled name=sec-guest
add authentication-types=wpa2-psk management-protection=disabled name=sec-iot-2ghz
/interface wifi configuration
add channel=ch-5ghz country="United States" datapath=dp-trusted disabled=no name=cfg-trusted-5ghz security=sec-trusted security.authentication-types=wpa2-psk ssid=Redacted
add channel=ch-2ghz country="United States" datapath=dp-trusted disabled=no name=cfg-trusted-2ghz security=sec-trusted ssid=Redacted
add channel=ch-2ghz country="United States" datapath=dp-iot disabled=no name=cfg-iot security=sec-iot security.authentication-types=wpa2-psk ssid=Redacted
add channel=ch-2ghz country="United States" datapath=dp-guest disabled=no name=cfg-guest security=sec-guest ssid=Redacted
/interface wifi
# operated by CAP Redacted%VLAN40_TRUSTED, traffic processing on CAPsMAN (no encryption)
add configuration=cfg-trusted-5ghz disabled=no name=cap-wifi1 radio-mac=Redacted
# operated by CAP Redacted%VLAN40_TRUSTED, traffic processing on CAPsMAN (no encryption)
add configuration=cfg-guest disabled=no mac-address=Redacted master-interface=cap-wifi1 name=cap-wifi1-virtual1
# operated by CAP Redacted%VLAN40_TRUSTED, traffic processing on CAPsMAN (no encryption)
add configuration=cfg-trusted-2ghz disabled=no name=cap-wifi2 radio-mac=Redacted
# operated by CAP Redacted%VLAN40_TRUSTED, traffic processing on CAPsMAN (no encryption)
add configuration=cfg-iot disabled=no mac-address=Redacted master-interface=cap-wifi2 name=cap-wifi2-virtual1
# operated by CAP Redacted%VLAN40_TRUSTED, traffic processing on CAPsMAN (no encryption)
add configuration=cfg-guest disabled=no mac-address=Redacted master-interface=cap-wifi2 name=cap-wifi2-virtual2
/ip dhcp-server option
add code=138 name=capsman_ip value=Redacted
/interface wifi cap
set enabled=yes
/interface wifi capsman
set enabled=yes interfaces=VLAN40_TRUSTED require-peer-certificate=no upgrade-policy=none
/interface wifi provisioning
add action=create-enabled disabled=no identity-regexp="" master-configuration=cfg-trusted-5ghz slave-configurations=cfg-guest supported-bands=5ghz-ax
add action=create-enabled disabled=no identity-regexp="" master-configuration=cfg-trusted-2ghz slave-configurations=cfg-iot,cfg-guest supported-bands=2ghz-ax

The first cap is working fine. Used netinstaller on second and booted into cap. I can see the second cap in winbox when plugged into ether2 but not ether1, and the rb5009 sees the remote cap but not the radios.

2

Can you provide the config of the CAP? Could be a lot of causes, from forgetting to install the wifi-qcom driver to the device not being in CAPS mode. Also, comparing configs of both CAPS can provide insights.

Are both CAPS connected in an equal way?

3

cap2

/interface wifi
# SSID not set
set [ find default-name=wifi1 ] disabled=no
# SSID not set
set [ find default-name=wifi2 ] disabled=no
/interface wifi cap
set discovery-interfaces=ether1 enabled=yes
[admin@MikroTik] >

cap1

/interface bridge
add name=BR1 vlan-filtering=yes
/interface wifi
# managed by CAPsMAN Redacted%VLAN40_MGMT, traffic processing on CAPsMAN (no encryption)
# mode: AP, SSID: Redacted, channel: 5845/ax/eCee
set [ find default-name=wifi1 ] configuration.manager=capsman .mode=ap disabled=no
# managed by CAPsMAN Redacted%VLAN40_MGMT, traffic processing on CAPsMAN (no encryption)
# mode: AP, SSID: Redacted, channel: 2412/ax
set [ find default-name=wifi2 ] configuration.manager=capsman .mode=ap disabled=no
/interface vlan
add interface=BR1 name=VLAN40_MGMT vlan-id=40
/interface bridge port
add bridge=BR1 interface=ether1 pvid=40
add bridge=BR1 interface=ether2
add bridge=BR1 frame-types=admit-only-untagged-and-priority-tagged interface=wifi1 pvid=40
add bridge=BR1 frame-types=admit-only-untagged-and-priority-tagged interface=wifi2 pvid=40
add bridge=BR1 frame-types=admit-only-untagged-and-priority-tagged interface=*20 pvid=20
add bridge=BR1 frame-types=admit-only-untagged-and-priority-tagged interface=*22 pvid=20
add bridge=BR1 frame-types=admit-only-untagged-and-priority-tagged interface=*21 pvid=30
add bridge=BR1 frame-types=admit-only-untagged-and-priority-tagged interface=*23 pvid=30
/interface bridge vlan
add bridge=BR1 tagged=BR1,ether1 vlan-ids=20
add bridge=BR1 tagged=BR1,ether1 vlan-ids=30
add bridge=BR1 tagged=BR1,ether1 vlan-ids=40
/interface wifi cap
set discovery-interfaces=VLAN40_MGMT enabled=yes
/ip dhcp-client
add comment="Management plane IP" interface=BR1
/system identity
set name=Redacted
4

The CAP (cap2) is not in CAPS mode.
The functioning CAP (cap1) doesn't have a default config.

You could use the config of the working CAP (cap1) and import it (without MAC Address, identity, other? and after resetting it) on the non functioning CAP (cap2).

Hope it makes sense?

5

Yes it does. I did clone it but I forgot to delete the macs and it obviously caused problems. I'll try again.