After much testing and troubleshooting with CAP AC and VLAN and even CAPSman on my CCR, I decided to start from scratch and slowly build up my the CAP and see where it fails.
Now I have the CAP running with Vlans on a trunk port - next step will be to connect it to the CAPSman. However I have a question regarding bridging, to get my connection to work I have bridged the Wlans to ether1 as you can see below - but CAPSman creates its own wlans when I create new or change config, would it then be better that I just bridge all interfaces on the CAP or just all dynamic interfaces ?
/interface bridge port
add bridge=bridge interface=ether1
add bridge=bridge interface=wlan1
add bridge=bridge interface=wlan2
add bridge=bridge interface=wlan3-notagged
add bridge=bridge interface=wlan-Vlan10
add bridge=bridge interface=wlan-vlan20
Second question - today I have my regular lan on VLAN1, as far as I can see that is not always a good idea, would it be better to move that to another number and then only let 1 be management ?