WIFI CAPsMAN configuration inheritance

Hi all,

I’ve recently bought some new devices (hAP and wAP ax) that I’d like to manage with CAPsMAN, like I did with previous devices. The first big difference I’ve noticed is that everything is configured under the WIFI menu, while previously there was a dedicated CAPsMan menu.n ROS updated to 7.21.

Anyways, the thing that really confuses me is the number of places where the same configuration items can be set, and how these are inherited. Let’s take for example the WIFI “Security” settings. These can be set in these places:

  • Security tab in the WIFI menu. A Security profile can be created there.
  • By clicking on the Configuration tab, then selecting a profile and going to the Security tab. Additionally, a security profile can be selected here.
  • By clicking on a WIFI interface and going to the security tab there. Here you can also select a profile.

So… Assuming the config parameters are inherited from the profiles, I’ve created a new profile in the "Security” tab inside the topmost “WIFI” section in Winbox beta 4. I’ve then assigned this profile to a configuration profile and finally, I’ve assigned this configuration profile to a WIFI adapter. My assumption was that the security settings would be inherited from the security profile. If I click on the NIC, the only security configuration that is visibly inherited is the passphrease, all other security options are blank.

So… if I now try to force a connection to the new AP managed by CAPsMAN with the above config, I won’t be able to. The SSID isn’t even broadcast. After playing around a while, the one way I managed to get things to work was to configure the security settings (with the exception of the passphrase) directly at the WIFI interface level, as all those required settings (like authentication types and ciphers) don’t seem to get inherited from the Security profile…

I tried to find some more info on how all these config parameters are supposed to propagate but I couldn’t find much around…

Does anybody know how things are supposed to work?

Thanks.

Configuration specifies Security Profile - and Datapath for devices with wifi-qcom driver
Provisioning specifies Configuration

If you look at GUI in WInbox, precedence is from left to right.

If you specify e.g. a security setting in Configuration, it will overwrite whatever you had in Security.

Basis principle: DRY

Don't
Repeat
Yourself

I always set Security in Security, nowhere else.
I always set Channel in Channel.
For me Configuration is only to tie all pieces together.

And then use provisioning rules to apply configuration.

Thank you all for the suggestion… They all work.

Cheers.