I've used capsman for a couple of years, provisioning 2 dual band APs. I've had problems moving between 2 access points, loosing connections etc. I fired up InSSIDer and found that my 2.4 GHZ bands are very wide and overlap (attached). Sometimes they're on top of each other. My configs (attached) call for 20 MHz band width with no extension channels for either the 2.4 or 5 GHz bands. I think my capsman configs and provisioning are very simple and basic. What am I doing wrong?

Help appreciated!

Regards,

Dave
# aug/16/2020 23:20:15 by RouterOS 6.47.1
# software id = M86E-F0VR
#
# model = RB4011iGS+
# serial number = 968A09471487
/caps-man configuration
add channel.band=2ghz-onlyn channel.control-channel-width=20mhz \
channel.reselect-interval=3h4m5s channel.save-selected=no country=\
"united states3" datapath.bridge=bridge \
datapath.client-to-client-forwarding=yes datapath.local-forwarding=yes \
max-sta-count=30 name="2.4 WAP" security.authentication-types=wpa2-psk \
security.encryption=aes-ccm security.group-key-update=1h \
security.passphrase=XXXXXXXXX ssid=WAP
add channel.band=5ghz-onlyac channel.control-channel-width=20mhz \
channel.reselect-interval=2h5m7s channel.save-selected=no country=\
"united states3" datapath.bridge=bridge \
datapath.client-to-client-forwarding=yes datapath.local-forwarding=yes \
max-sta-count=30 name="5 WAP" security.authentication-types=wpa2-psk \
security.encryption=aes-ccm security.group-key-update=1h \
security.passphrase=XXXXXXX ssid=WAP
add datapath.bridge=bridge datapath.local-forwarding=yes datapath.vlan-id=10 \
datapath.vlan-mode=use-tag max-sta-count=5 name="2.4 Guest" \
security.authentication-types=wpa2-psk security.encryption=aes-ccm \
security.passphrase="YYYYYYY" ssid=Guest
add datapath.bridge=bridge datapath.vlan-id=10 datapath.vlan-mode=use-tag \
max-sta-count=5 name="5 Guest" security.authentication-types=wpa2-psk \
security.encryption=aes-ccm security.passphrase="421 Central" ssid=Guest
add datapath.bridge=bridge datapath.vlan-id=20 datapath.vlan-mode=use-tag \
hide-ssid=yes max-sta-count=30 name="2.4 IOT" \
security.authentication-types=wpa2-psk security.encryption=aes-ccm \
security.passphrase="IOT" ssid=IOT
add datapath.bridge=bridge datapath.vlan-id=20 datapath.vlan-mode=use-tag \
hide-ssid=yes max-sta-count=20 name="5 IOT" \
security.authentication-types=wpa2-psk security.encryption=aes-ccm \
security.passphrase="IOT" ssid=IOT
add datapath.bridge=bridge datapath.vlan-id=30 datapath.vlan-mode=use-tag \
max-sta-count=10 name="2.4 HotSpot" ssid=HotSpot
add datapath.bridge=bridge datapath.vlan-id=30 datapath.vlan-mode=use-tag \
max-sta-count=20 name="5 HotSpot" ssid=HotSpot
/caps-man access-list
add action=reject allow-signal-out-of-range=5s disabled=no signal-range=\
-120..-81 ssid-regexp=""
add action=accept allow-signal-out-of-range=5s disabled=no signal-range=\
-80..120 ssid-regexp=""
/caps-man manager
set enabled=yes
/caps-man provisioning
add action=create-dynamic-enabled hw-supported-modes=gn master-configuration=\
"2.4 WAP" name-format=prefix-identity name-prefix="2.4 " \
slave-configurations="2.4 Guest,2.4 IOT,2.4 HotSpot"
add action=create-dynamic-enabled hw-supported-modes=ac master-configuration=\
"5 WAP" name-format=prefix-identity name-prefix=5 slave-configurations=\
"5 Guest,5 IOT,5 HotSpot"

Make sure extension-channel=disabled. By default they are enabled.

Thanks, @biomesh. That helped a lot! I don't recall seeing that as a default.

You may be an expert, so here's another question: What's the difference in these country settings?

United States
United States CAPAC
United States rbd22
United States rbd23
United States 2
United States 3
US 2.4 5.8
US 2.4 crossroads
US rb951g
US 5.8 Direct

Set channel width to 20 is a pretty good rule for 2.4 too.