Bad performance/lag using CAPsMAN - AP in standalone mode fine

sirlindqvist · Mon Aug 03, 2020 4:09 pm

I have a problem that I cant find any solution for. I'm using an RB3011 as CAPsMANGER. I have one wAP ac connected and provisioned.

When I play games online, I experience several delays almost every minute. Take for example FIFA 20, when I play a match the whole picture / game freezes for 2-3 seconds. I can not control anything and the control does not respond. Then it releases and everything goes very fast for the game to "catch up". Then it can take 30 seconds and then it starts again. So it goes on all the time. I then tried to set up a wAP ac in a standalone mode which is then not controlled by CAPsMAN. When I use this, all the symptoms disappear. What could it be due to? Am I missing something in the configuration?

Here is the configutation of CAPsMAN (don't know if providing the CAPsMAN part is enough or whole router config is needed?):

# aug/03/2020 15:04:34 by RouterOS 6.47
# software id = BUC2-6Z6M
#
# model = RouterBOARD 3011UiAS
# serial number = 783D075A0C9F
/caps-man channel
add band=2ghz-g/n control-channel-width=20mhz extension-channel=disabled frequency=2412,2437,2462 name=2.4GHz reselect-interval=20m
add band=5ghz-n/ac control-channel-width=20mhz extension-channel=XX name=5GHz reselect-interval=20m skip-dfs-channels=yes
/caps-man datapath
add bridge=bridge bridge-horizon=1 client-to-client-forwarding=yes name=capsman
/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm name=capsman
/caps-man configuration
add channel=2.4GHz country=sweden datapath=capsman multicast-helper=full name=capsman2.4 security=capsman ssid="MikroTik CAPsMAN 2.4GHz"
add channel=5GHz country=sweden datapath=capsman multicast-helper=full name=capsman5 security=capsman ssid="MikroTik CAPsMAN 5GHz"
/caps-man interface
add channel.frequency=2412,2437,2462 configuration=capsman2.4 disabled=no l2mtu=1600 mac-address=E4:8D:8C:72:D3:C2 master-interface=none name="2.4GHz-wAP ac-1" radio-mac=E4:8D:8C:72:D3:C2 radio-name=E48D8C72D3C2
add configuration=capsman5 disabled=no l2mtu=1600 mac-address=E4:8D:8C:72:D3:C1 master-interface=none name="5GHz-wAP ac-1" radio-mac=E4:8D:8C:72:D3:C1 radio-name=E48D8C72D3C1
/interface wireless security-profiles
/caps-man manager
set enabled=yes
/caps-man provisioning
add action=create-dynamic-enabled hw-supported-modes=gn master-configuration=capsman2.4 name-format=prefix-identity name-prefix=2.4GHz
add action=create-dynamic-enabled hw-supported-modes=ac master-configuration=capsman5 name-format=prefix-identity name-prefix=5GHz

If using the AP in standalone mode there's a lot more options to choose from than let CAPsMAN do the job.

Can anyone help me?

erlinden · Mon Aug 03, 2020 4:39 pm

Select fixed channels, I use one per radio.
Set extension-channel=Ce (or Ceee) instead of XX
Nothing wrong with DFS
Use local-forwarding (on datapath)

I'll share my config for which I don't experience any of the problems you mention:

/caps-man channel
add band=2ghz-g/n control-channel-width=20mhz extension-channel=disabled frequency=2462 name=f-2462 tx-power=9
add band=5ghz-a/n/ac control-channel-width=20mhz extension-channel=Ceee frequency=5500 name=f-5500 tx-power=25
/caps-man datapath
add client-to-client-forwarding=yes local-forwarding=yes name=dp-50 vlan-id=50 vlan-mode=use-tag
add client-to-client-forwarding=no local-forwarding=yes name=dp-51 vlan-id=51 vlan-mode=use-tag
/caps-man rates
add basic=6Mbps,12Mbps,24Mbps name=rate1 supported=6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps
/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm name=SSID passphrase=PASSWORD
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm name=SSID_Guest passphrase=PASSWORD_Guest
/caps-man configuration
add channel=f-2462 country=netherlands datapath=dp-50 distance=indoors hw-retries=3 installation=indoor mode=ap multicast-helper=full name=Conf-2G \
    rates=rate1 security=SECURITY ssid=SSID
add datapath=dp-51 name=Conf-Guest rates=rate1 security=SECURITY_Guest ssid=SSID_Guest
add channel=f-5500 country=netherlands datapath=dp-50 distance=indoors hw-retries=3 installation=indoor mode=ap multicast-helper=full name=Conf-5G \
    rates=rate1 security=SECURITY ssid=SSID
/caps-man access-list
add action=accept allow-signal-out-of-range=10s disabled=no interface=any signal-range=-85..-10 ssid-regexp=""
add action=reject allow-signal-out-of-range=10s disabled=no interface=any signal-range=-120..-86 ssid-regexp=""
/caps-man manager
set ca-certificate=auto certificate=auto enabled=yes
/caps-man provisioning
add action=create-dynamic-enabled master-configuration=Conf-5G name-format=identity radio-mac=XX:XX:XX:XX:XX:XX slave-configurations=Conf-Guest
add action=create-dynamic-enabled master-configuration=Conf-2G name-format=identity radio-mac=XX:XX:XX:XX:XX:XX slave-configurations=Conf-Guest

In addition, there is an update: 6.47.1

Shy · Mon Aug 03, 2020 7:04 pm

how does enable local forwarding helps?
I am facing quite the same issues over wifi with hEX s (CAPsMAN) + hAP ac^2 (ap)

erlinden · Mon Aug 03, 2020 10:30 pm

how does enable local forwarding helps?

If local-forwarding is not enabled, all traffic will be handled (and encrypted) by the CAPsMAN. This will cause processing power and will therefor always be slower.

Shy · Mon Aug 03, 2020 10:34 pm

ok good to know - you just fixed my slower speeds issues I had

thanks erlinden!
what is client to client forwarding?

erlinden · Mon Aug 03, 2020 11:04 pm

what is client to client forwarding?

From the wiki:

controls if client-to-client forwarding between wireless clients connected to interface should be allowed, in local forwarding mode this function is performed by CAP, otherwise it is performed by CAPsMAN

https://wiki.mikrotik.com/wiki/Manual:C ... n_Profiles

Shy · Mon Aug 03, 2020 11:19 pm

So for better performance it should be disabled?

sirlindqvist · Tue Aug 04, 2020 11:49 am

Select fixed channels, I use one per radio.
Set extension-channel=Ce (or Ceee) instead of XX
Nothing wrong with DFS
Use local-forwarding (on datapath)

I'll share my config for which I don't experience any of the problems you mention:

/caps-man channel
add band=2ghz-g/n control-channel-width=20mhz extension-channel=disabled frequency=2462 name=f-2462 tx-power=9
add band=5ghz-a/n/ac control-channel-width=20mhz extension-channel=Ceee frequency=5500 name=f-5500 tx-power=25
/caps-man datapath
add client-to-client-forwarding=yes local-forwarding=yes name=dp-50 vlan-id=50 vlan-mode=use-tag
add client-to-client-forwarding=no local-forwarding=yes name=dp-51 vlan-id=51 vlan-mode=use-tag
/caps-man rates
add basic=6Mbps,12Mbps,24Mbps name=rate1 supported=6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps
/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm name=SSID passphrase=PASSWORD
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm name=SSID_Guest passphrase=PASSWORD_Guest
/caps-man configuration
add channel=f-2462 country=netherlands datapath=dp-50 distance=indoors hw-retries=3 installation=indoor mode=ap multicast-helper=full name=Conf-2G \
    rates=rate1 security=SECURITY ssid=SSID
add datapath=dp-51 name=Conf-Guest rates=rate1 security=SECURITY_Guest ssid=SSID_Guest
add channel=f-5500 country=netherlands datapath=dp-50 distance=indoors hw-retries=3 installation=indoor mode=ap multicast-helper=full name=Conf-5G \
    rates=rate1 security=SECURITY ssid=SSID
/caps-man access-list
add action=accept allow-signal-out-of-range=10s disabled=no interface=any signal-range=-85..-10 ssid-regexp=""
add action=reject allow-signal-out-of-range=10s disabled=no interface=any signal-range=-120..-86 ssid-regexp=""
/caps-man manager
set ca-certificate=auto certificate=auto enabled=yes
/caps-man provisioning
add action=create-dynamic-enabled master-configuration=Conf-5G name-format=identity radio-mac=XX:XX:XX:XX:XX:XX slave-configurations=Conf-Guest
add action=create-dynamic-enabled master-configuration=Conf-2G name-format=identity radio-mac=XX:XX:XX:XX:XX:XX slave-configurations=Conf-Guest

In addition, there is an update: 6.47.1

I've configured with your settings now. However, provision dont work correct if i dont set Hw. Supported Modes to "gn" for 2.4GHz and "ac" for 5GHz. I get no supported channel on one interface and the 5Ghz interface choose a 2.4GHz channel. Also, do you use guest network with both 2.4 and 5GHz and then use the same SSID for this?

Shy · Tue Aug 04, 2020 10:47 pm

Well i "played" as well with my caps configuration and i found that sometime i get some of loss connection even if the laptop stays in the same spot. I lose some pings (5-6) then the ping rasies to 3000ms and ~2000ms and gets back to normal. When having few zoom calls it just freeze.

It didnt happen to me with meraki on the same spot. Configured with channel 2462 and 5180 with tx power 9 and 25.
Tried to use Ceee and Ce (i think that Ceee works better)
With local forwarding enabled for client to client and enabled in genetal on datapath.
I have 200mbit line connected to the hEX s as CAPsMAN and hAP ac^2 as AP.

Is there any difference between setting the TX power on the channel settings or on global configuration?

Any ideas?
Tnx

/caps-man channel
add band=2ghz-b/g/n control-channel-width=20mhz extension-channel=disabled \
name=channel24 tx-power=9
add band=5ghz-a/n/ac control-channel-width=20mhz extension-channel=Ceee name=\
channel51 skip-dfs-channels=yes tx-power=25
add band=2ghz-g/n control-channel-width=20mhz extension-channel=disabled \
frequency=2462 name=f-2462 tx-power=9
add band=5ghz-a/n/ac control-channel-width=20mhz extension-channel=Ceee \
frequency=5180 name=f-5180 tx-power=25
/caps-man datapath
add bridge=bridge client-to-client-forwarding=yes local-forwarding=yes name=\
datapath1
/caps-man rates
add basic=6Mbps,12Mbps,24Mbps name=rate1 supported=\
6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps
/caps-man security
add authentication-types=wpa2-psk name=security1
/caps-man configuration
add channel=f-2462 datapath=datapath1 mode=ap name=cfg24 rates=rate1 \
security=security1 ssid=hAP
add channel=f-5180 datapath=datapath1 mode=ap name=cfg51 rates=rate1 \
security=security1 ssid=hAP
/caps-man manager
set enabled=yes upgrade-policy=suggest-same-version
/caps-man manager interface
set [ find default=yes ] forbid=yes
add disabled=no interface=bridge
/caps-man provisioning
add action=create-dynamic-enabled hw-supported-modes=gn master-configuration=\
cfg24 name-format=prefix-identity name-prefix=2.4g
add action=create-dynamic-enabled hw-supported-modes=an master-configuration=\
cfg51 name-format=prefix-identity name-prefix=5g

erlinden · Wed Aug 05, 2020 10:35 am

I've configured with your settings now. However, provision dont work correct if i dont set Hw. Supported Modes to "gn" for 2.4GHz and "ac" for 5GHz. I get no supported channel on one interface and the 5Ghz interface choose a 2.4GHz channel. Also, do you use guest network with both 2.4 and 5GHz and then use the same SSID for this?

I use a/n/ac on the 5GHz band.

You should add your MAC addresses to provision the configuration to the correct radio. If you get "not supported", it is because the channel is not supported. What country are you in?

Guest network on both bands, you can't use the same SSID (unless you are using Radius). I use two VLAN's (HOME and GUEST) and set the corresponding SSID's to it. If you only use a single VLAN you can leave all VLAN related config out (the guest network can be added later).

sirlindqvist · Wed Aug 05, 2020 12:31 pm

I've configured with your settings now. However, provision dont work correct if i dont set Hw. Supported Modes to "gn" for 2.4GHz and "ac" for 5GHz. I get no supported channel on one interface and the 5Ghz interface choose a 2.4GHz channel. Also, do you use guest network with both 2.4 and 5GHz and then use the same SSID for this?
I use a/n/ac on the 5GHz band.

You should add your MAC addresses to provision the configuration to the correct radio. If you get "not supported", it is because the channel is not supported. What country are you in?

Guest network on both bands, you can't use the same SSID (unless you are using Radius). I use two VLAN's (HOME and GUEST) and set the corresponding SSID's to it. If you only use a single VLAN you can leave all VLAN related config out (the guest network can be added later).

If i set Hw. supported modes to gn on 2.4ghz provision and ac on 5ghz provision i dont need to manually set any mac address of the radios. Also, same SSID on both 2.4 and 5ghz guest network works if you do create an aditional 5ghz guest config and set the 5ghz channel. Whole config here:

# aug/05/2020 11:30:00 by RouterOS 6.47
# software id = BUC2-6Z6M
#
# model = RouterBOARD 3011UiAS
# serial number = 783D075A0C9F
/caps-man channel
add band=2ghz-g/n control-channel-width=20mhz extension-channel=disabled frequency=2462 name=2.4GHz tx-power=9
add band=5ghz-a/n/ac control-channel-width=20mhz extension-channel=Ceee frequency=5500 name=5GHz tx-power=25
/caps-man datapath
add client-to-client-forwarding=yes local-forwarding=yes name=capsman
add client-to-client-forwarding=no local-forwarding=yes name=capsman_guest
/caps-man rates
add basic=6Mbps,12Mbps,24Mbps name=capsman supported=6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps
/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm name=capsman
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm name=capsman_guest
/caps-man configuration
add channel=2.4GHz country=sweden datapath=capsman distance=indoors hw-retries=3 installation=indoor multicast-helper=full name=capsman2.4 rates=capsman security=capsman ssid="MikroTik CAPsMAN 2.4GHz"
add channel=5GHz country=sweden datapath=capsman distance=indoors hw-retries=3 installation=indoor multicast-helper=full name=capsman5 rates=capsman security=capsman ssid="MikroTik CAPsMAN 5GHz"
add channel=2.4GHz country=sweden datapath=capsman_guest distance=indoors hw-retries=3 installation=indoor multicast-helper=full name=capsman2.4_guest rates=capsman security=capsman_guest ssid="MikroTik CAPsMAN Guest"
add channel=5GHz country=sweden datapath=capsman_guest distance=indoors hw-retries=3 installation=indoor multicast-helper=full name=capsman5_guest rates=capsman security=capsman_guest ssid="MikroTik CAPsMAN Guest"
/caps-man manager
set enabled=yes
/caps-man provisioning
add action=create-dynamic-enabled hw-supported-modes=gn master-configuration=capsman2.4 name-format=prefix-identity name-prefix=2.4GHz slave-configurations=capsman2.4_guest
add action=create-dynamic-enabled hw-supported-modes=ac master-configuration=capsman5 name-format=prefix-identity name-prefix=5GHz slave-configurations=capsman5_guest

Wed Aug 05, 2020 12:47 pm

If your data is on local forwarding then it is going across the bridges on the LAN between the CAP and your main router, so check the bridge config on both, could be related to STP settings, also make sure bridges have an admin-mac set.

Well i "played" as well with my caps configuration and i found that sometime i get some of loss connection even if the laptop stays in the same spot. I lose some pings (5-6) then the ping rasies to 3000ms and ~2000ms and gets back to normal. When having few zoom calls it just freeze.

With local forwarding enabled for client to client and enabled in genetal on datapath.
I have 200mbit line connected to the hEX s as CAPsMAN and hAP ac^2 as AP.

Shy · Wed Aug 05, 2020 6:52 pm

If your data is on local forwarding then it is going across the bridges on the LAN between the CAP and your main router, so check the bridge config on both, could be related to STP settings, also make sure bridges have an admin-mac set.

Well i "played" as well with my caps configuration and i found that sometime i get some of loss connection even if the laptop stays in the same spot. I lose some pings (5-6) then the ping rasies to 3000ms and ~2000ms and gets back to normal. When having few zoom calls it just freeze.

With local forwarding enabled for client to client and enabled in genetal on datapath.
I have 200mbit line connected to the hEX s as CAPsMAN and hAP ac^2 as AP.

Well yes it has admin mac and bridge is set as Rtsp.
I have created nw thread tsince this one was marked ad solved i have attached my config files

viewtopic.php?f=7&t=164557

Bad performance/lag using CAPsMAN - AP in standalone mode fine

Bad performance/lag using CAPsMAN - AP in standalone mode fine

Re: Bad performance/lag using CAPsMAN - AP in standalone mode fine

Re: Bad performance/lag using CAPsMAN - AP in standalone mode fine

Re: Bad performance/lag using CAPsMAN - AP in standalone mode fine

Re: Bad performance/lag using CAPsMAN - AP in standalone mode fine

Re: Bad performance/lag using CAPsMAN - AP in standalone mode fine

Re: Bad performance/lag using CAPsMAN - AP in standalone mode fine

Re: Bad performance/lag using CAPsMAN - AP in standalone mode fine

Re: Bad performance/lag using CAPsMAN - AP in standalone mode fine

Re: Bad performance/lag using CAPsMAN - AP in standalone mode fine

Re: Bad performance/lag using CAPsMAN - AP in standalone mode fine

Re: Bad performance/lag using CAPsMAN - AP in standalone mode fine

Re: Bad performance/lag using CAPsMAN - AP in standalone mode fine

Who is online