WiFi, device roaming

RouterOS Wireless Networking
1

Hello guys, I’ve recently bought two device: cAP AX^2, wAP AX;
I set up capsman for two device, and my iphone can roaming and generate log:

98:xx:xx:xx:xx:xx@wifi1 roamed to 98:xx:xx:xx:xx:xx@cap-wifi2, signal strength -70



98:xx:xx:xx:xx:xx@cap-wifi2 roamed to xx:xx:xx:xx:xx:xx@wifi1, signal strength -73

in /interface/wifi/registration-table
i can found recoad:

mac-address=98:xx:xx:xx:xx:xx auth-type=ft-wpa3-psk

But my other device roam failed, and I’m not sure if they even support roaming.
Also, once they connect, i get /interface/wifi/registration-table:

auth-type=wpa2-psk

they all no “ft-”
So can I say my capsman configuration is OK? just the other device can’t support roaming?

And i tried this:
Win10+AX200 => auth-type=wpa2-psk
Ubuntu+AX200 => auth-type=ft-wpa3-psk
Same laptop. Ubunt can roaming. win10 can’t.
i think this win10 bug.

2

You are correct. Fast transition is not supported by all devices, by setting connect-priority=0/1 (which is part of the security settings), in my experience, these devices will roam as well.

3

Thank you for you answer.
for more question.
i have 2 radio.

Columns: NAME, CONFIGURATION.SSID

NAME CONFIGURATION.SSID



1 MDB cap-wifi2 SSID_5G



2 MDB wifi1 SSID_5G

should i set different connect-priority for two wifi?

4

That depends, can you share your config?

/export file=anynameyoulike

Remove serial and any other private info, post between code tags by using the </> button.

5

hap-ax2:

2025-03-03 17:37:12 by RouterOS 7.18

software id = IYMR-2F6S

model = C52iG-5HaxD2HaxD

serial number = ****

/interface wifi

operated by CAP F4:1E:57:80:5C:5F%bridge1

add name=cap-wifi1 radio-mac=F4:1E:57:80:5C:61
/interface wifi datapath
add bridge=bridge1 disabled=no name=datapath1
/interface wifi security
add authentication-types=wpa2-psk,wpa3-psk disabled=no ft=yes ft-over-ds=yes
name=sec1
/interface wifi configuration
add country=China datapath=datapath1 disabled=no hide-ssid=yes name=cfg-2g4
security=sec1 security.authentication-types=wpa2-psk,wpa3-psk ssid=
Aperture-2G4
add country=China datapath=datapath1 disabled=no name=cfg-5G security=sec1
security.authentication-types=wpa2-psk,wpa3-psk ssid=Aperture-5G
/interface wifi capsman
set enabled=yes interfaces=all package-path="" require-peer-certificate=no
upgrade-policy=none
/interface wifi provisioning
add action=create-dynamic-enabled disabled=no master-configuration=cfg-5G
supported-bands=5ghz-ax
add action=create-dynamic-enabled disabled=no master-configuration=cfg-2g4
radio-mac=D4:01:C3:36:15:14 supported-bands=2ghz-ax

wap-ax:

2025-03-03 17:44:58 by RouterOS 7.18

software id = I4M5-ZMK7

model = wAPG-5HaxD2HaxD

serial number = ****

/interface wifi

managed by CAPsMAN D4:01:C3:36:15:0F%bridge1

set [ find default-name=wifi1 ] configuration.manager=capsman datapath=capdp disabled=no

managed by CAPsMAN D4:01:C3:36:15:0F%bridge1, traffic processing on CAP

mode: AP, SSID: Aperture-5G, channel: 5320/ax/eeeeeeeC/D

set [ find default-name=wifi2 ] configuration.manager=capsman datapath=capdp disabled=no
/interface wifi cap
set discovery-interfaces=bridge1 enabled=yes slaves-datapath=capdp
/interface wifi datapath
add bridge=bridge1 comment=defconf disabled=no name=capdp

6

You could change to this:

# 2025-03-03 17:37:12 by RouterOS 7.18
# software id = IYMR-2F6S
#
# model = C52iG-5HaxD2HaxD
# serial number = ****
/interface wifi
# operated by CAP F4:1E:57:80:5C:5F%bridge1
add name=cap-wifi1 radio-mac=F4:1E:57:80:5C:61
/interface wifi datapath
add bridge=bridge1 disabled=no name=datapath1
/interface wifi security
add authentication-types=wpa2-psk,wpa3-psk disabled=no name=sec1
/interface wifi configuration
add country=China datapath=datapath1 disabled=no hide-ssid=yes name=cfg-2g4 security=sec1 ssid=Aperture-2G4
add country=China datapath=datapath1 disabled=no name=cfg-5G security=sec1 security.connect-priority=0/1 .ft=yes .ft-over-ds=yes ssid=Aperture-5G
/interface wifi capsman
set enabled=yes interfaces=all package-path="" require-peer-certificate=no \
upgrade-policy=none
/interface wifi provisioning
add action=create-dynamic-enabled disabled=no master-configuration=cfg-5G supported-bands=5ghz-ax
add action=create-dynamic-enabled disabled=no master-configuration=cfg-2g4 radio-mac=D4:01:C3:36:15:14 supported-bands=2ghz-ax

There won’t be FT in regards to the 2.4GHz radio (as there is only one involved).
The radio-mac for 2ghz-ax supported bands is unneccesary.

7

:smiley: