Community discussions

MikroTik App
  4. RouterOS
  5. Wireless Networking

client-to-client forwarding capsman not working

Post Reply
 
yelti
just joined
Topic Author
Posts: 1
Joined: Tue Feb 20, 2018 12:55 pm

client-to-client forwarding capsman not working

Fri May 25, 2018 1:00 pm

Hi,

I have the following configuration:
1 crs125 and 2 hAp AC.

Wireless on crs125 is disabled and I use only 2 hAp AC's.
Problem is: I cannot ping certain wirless devices (like raspberry pi without ip tables).
I can ping it though my lan interface without a problem.
I enabled local forwarding and client-to-client forwarding, but this doesn't seem to help.

Any ideas?

My configuration:
Mainswitch
Code: Select all
# may/25/2018 11:09:08 by RouterOS 6.42.2
# software id = T0EX-JQU6
#
# model = CRS125-24G-1S-2HnD
/caps-man channel
add band=2ghz-b/g/n frequency=2412 name=channel1
add band=2ghz-b/g/n frequency=2417 name=channel2
add band=2ghz-b/g/n frequency=2422 name=channel3
add band=2ghz-b/g/n frequency=2427 name=channel4
add band=2ghz-b/g/n frequency=2432 name=channel5
add band=2ghz-b/g/n frequency=2437 name=channel6
add band=2ghz-b/g/n frequency=2442 name=channel7
add band=2ghz-b/g/n frequency=2447 name=channel8
add band=2ghz-b/g/n frequency=2452 name=channel9
add band=2ghz-b/g/n frequency=2457 name=channel10
add band=2ghz-b/g/n frequency=2462 name=channel11
add band=2ghz-b/g/n frequency=2467 name=channel12
add band=2ghz-b/g/n frequency=2472 name=channel13
add band=5ghz-a/n/ac control-channel-width=20mhz extension-channel=disabled \
    frequency=5200 name=5Ghz_channel40
add band=5ghz-a/n/ac control-channel-width=20mhz extension-channel=disabled \
    frequency=5180 name=5Ghz_Channel36
add band=5ghz-a/n/ac control-channel-width=20mhz extension-channel=eCee \
    frequency=5220 name=5Ghz_channel44
/interface bridge
add fast-forward=no name=bridge1 vlan-filtering=yes
/interface wireless
set [ find default-name=wlan1 ] disabled=no mode=ap-bridge ssid=MikroTik
/caps-man interface
add disabled=no mac-address=4C:5E:0C:2A:43:54 master-interface=none name=cap1 \
    radio-mac=4C:5E:0C:2A:43:54
add disabled=no mac-address=4C:5E:0C:2A:43:53 master-interface=none name=cap2 \
    radio-mac=4C:5E:0C:2A:43:53
add disabled=no mac-address=CC:2D:E0:3D:1D:87 master-interface=none name=cap3 \
    radio-mac=CC:2D:E0:3D:1D:87
/interface vlan
add interface=bridge1 name=vlan20-iot vlan-id=20
add interface=bridge1 name=vlan30-guest vlan-id=30
add interface=bridge1 name=vlan100-internet vlan-id=100
/caps-man datapath
add bridge=bridge1 client-to-client-forwarding=yes local-forwarding=yes name=\
    datapath-vlan1
add bridge=bridge1 client-to-client-forwarding=yes local-forwarding=yes name=\
    datapath-vlan30 vlan-id=30 vlan-mode=use-tag
add bridge=bridge1 client-to-client-forwarding=yes local-forwarding=yes name=\
    datapath-vlan20 vlan-id=30 vlan-mode=use-tag
/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
    name=SMC_Network passphrase=
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
    name=Guest_Network passphrase=
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
    name=IOT_Network passphrase=
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
    name=TEST passphrase=
/caps-man configuration
add channel=channel11 country=belgium datapath=datapath-vlan1 name=SMC4_CH11 \
    security=SMC_Network ssid=SMC
add channel=channel3 country=belgium datapath=datapath-vlan1 name=SMC4_CH3 \
    security=SMC_Network ssid=SMC
add channel=channel3 country=belgium datapath=datapath-vlan20 name=IOT_CH3 \
    security=IOT_Network ssid=Myhome
add channel=channel11 country=belgium datapath=datapath-vlan20 name=IOT_CH11 \
    security=IOT_Network ssid=Myhome
add channel=channel3 country=belgium datapath=datapath-vlan30 name=Guest_CH3 \
    security=Guest_Network ssid=GastNet
add channel=channel11 country=belgium datapath=datapath-vlan30 name=\
    Guest_CH11 security=Guest_Network ssid=GastNet
add channel=5Ghz_Channel36 country=belgium datapath=datapath-vlan1 name=\
    SMC_5ghz_Chan36 security=SMC_Network ssid=SMC5.0
add channel=5Ghz_channel40 country=belgium datapath=datapath-vlan1 name=\
    SMC_5ghz_Chan40 security=SMC_Network ssid=SMC5.0
add channel=channel6 country=belgium datapath=datapath-vlan1 \
    datapath.client-to-client-forwarding=yes datapath.local-forwarding=no \
    name=net_test security=SMC_Network ssid=TST
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" mode=\
    dynamic-keys supplicant-identity=MikroTik wpa2-pre-shared-key=""
/caps-man manager
set enabled=yes
/caps-man provisioning
add action=create-dynamic-enabled hw-supported-modes=b,g identity-regexp=\
    AP_Living master-configuration=SMC4_CH3 name-format=prefix-identity \
    name-prefix=2.4G slave-configurations=Guest_CH3,IOT_CH3,net_test
add action=create-dynamic-enabled hw-supported-modes=ac identity-regexp=\
    AP_Living master-configuration=SMC_5ghz_Chan36 name-format=\
    prefix-identity name-prefix=5.0G
add action=create-dynamic-enabled hw-supported-modes=b,g identity-regexp=\
    AP_Bathroom master-configuration=SMC4_CH11 name-format=prefix-identity \
    name-prefix=2.4G slave-configurations=Guest_CH11,IOT_CH11
add action=create-dynamic-enabled hw-supported-modes=ac identity-regexp=\
    AP_Bathroom master-configuration=SMC_5ghz_Chan40 name-format=\
    prefix-identity name-prefix=5.0G
/interface bridge port
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
add bridge=bridge1 interface=ether6
add bridge=bridge1 interface=ether7
add bridge=bridge1 interface=ether8
add bridge=bridge1 interface=ether9
add bridge=bridge1 interface=ether10
add bridge=bridge1 interface=ether11
add bridge=bridge1 interface=ether12
add bridge=bridge1 interface=ether13
add bridge=bridge1 interface=ether14
add bridge=bridge1 interface=ether16
add bridge=bridge1 interface=ether17
add bridge=bridge1 interface=ether18
add bridge=bridge1 interface=ether19
add bridge=bridge1 interface=ether20
add bridge=bridge1 interface=ether21
add bridge=bridge1 interface=ether22
add bridge=bridge1 interface=ether15
add bridge=bridge1 interface=ether23 pvid=100
add bridge=bridge1 interface=ether24 pvid=100
/interface bridge vlan
add bridge=bridge1 tagged=bridge1,ether15,ether22 untagged=ether23,ether24 \
    vlan-ids=100
add bridge=bridge1 tagged=ether15,ether21,ether22 vlan-ids=20
add bridge=bridge1 tagged=ether15,ether21,ether22 vlan-ids=30
/ip address
add address=172.16.0.251/24 interface=bridge1 network=172.16.0.0
/ip dns
set servers=172.16.0.1
/ip route
add distance=1 gateway=172.16.0.1
/lcd interface pages
set 0 interfaces=wlan1
/system clock
set time-zone-name=Europe/Brussels
/system identity
set name=LivingMain
/system ntp client
set enabled=yes primary-ntp=194.78.244.172 secondary-ntp=195.200.224.66 \
    server-dns-names=1.europe.pool.ntp.org,3.europe.pool.ntp.org
/system routerboard settings
set silent-boot=no
/tool graphing interface
add
/tool sniffer
set filter-interface=all filter-mac-address=\
    C8:DB:26:06:C3:8E/FF:FF:FF:FF:FF:FF memory-limit=500KiB
First AP:
Code: Select all
# may/25/2018 11:42:34 by RouterOS 6.42.2
# software id = LG1A-YJD5
#
# model = RouterBOARD 962UiGS-5HacT2HnT
/interface bridge
add admin-mac=6C:3B:6B:4E:8E:C9 auto-mac=no comment=defconf name=bridge1 \
    vlan-filtering=yes
/interface wireless
# managed by CAPsMAN
# channel: 2422/20-Ce/gn(20dBm), SSID: SMC, local forwarding
set [ find default-name=wlan1 ] disabled=no mode=ap-bridge ssid=MikroTik
# managed by CAPsMAN
# channel: 5180/20/ac(23dBm), SSID: SMC5.0, local forwarding
set [ find default-name=wlan2 ] disabled=no mode=ap-bridge ssid=MikroTik
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/interface bridge port
add bridge=bridge1 comment=defconf interface=ether1
add bridge=bridge1 comment=defconf interface=ether2
add bridge=bridge1 comment=defconf interface=ether3
add bridge=bridge1 comment=defconf interface=ether4
add bridge=bridge1 comment=defconf interface=ether5
add bridge=bridge1 comment=defconf interface=sfp1
/interface bridge vlan
add bridge=bridge1 tagged=ether5 vlan-ids=20
add bridge=bridge1 tagged=ether5 vlan-ids=30
add bridge=bridge1 tagged=ether5 vlan-ids=100
/interface wireless cap
# 
set bridge=bridge1 discovery-interfaces=bridge1 enabled=yes interfaces=\
    wlan1,wlan2
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no interface=\
    bridge1
/system clock
set time-zone-name=Europe/Brussels
/system identity
set name=AP_Living
/system routerboard settings
set silent-boot=no
Top
Post Reply

Who is online

Users browsing this forum: No registered users and 24 guests
  4. RouterOS
  5. Wireless Networking