Hi friends, I've almost tried everything on my knowledge, the second AP stil on MB status, the parameters are the same for the first AP but it doesn't run. It connects to capman but not possibile to connect to that AP. There is the master CapsMAN .88.1, the first AP .88.2 and the second AP .88.3
Here is the photo,and the config of CapsMAN: thank you for precious help,
[*]# jul/24/2021 16:35:25 by RouterOS 6.47.10
# software id = 11RE-K5D6
#
# model = RB750Gr3
# serial number = CC210D2235B3
/caps-man channel
add band=2ghz-g/n control-channel-width=20mhz extension-channel=disabled \
frequency=2437 name=canale6
add band=2ghz-g/n control-channel-width=20mhz extension-channel=disabled \
frequency=2412 name=canale1
/interface bridge
add admin-mac=08:55:31:B8:99:20 auto-mac=no comment=defconf name=bridge
/interface ethernet
set [ find default-name=ether2 ] advertise=1000M-full name=ether2-DOM \
rx-flow-control=on tx-flow-control=on
set [ find default-name=ether3 ] name=ether3-SAD
/caps-man interface
add disabled=no l2mtu=1600 mac-address=08:55:31:37:88:01 master-interface=\
none name=cap2 radio-mac=08:55:31:37:88:01 radio-name=085531378801
/caps-man datapath
add bridge=bridge name=datapath2GHz
/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm name=security1 \
passphrase=***
/caps-man configuration
add channel=canale6 country=russia datapath=datapath2GHz mode=ap name=\
2.4GHz-ch6 security=security1 ssid=Zaimka
add channel=canale1 country=russia datapath=datapath2GHz mode=ap name=\
2.4GHz-ch1 security=security1 ssid=Zaimka
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=default-dhcp ranges=192.168.88.50-192.168.88.239
/ip dhcp-server
add address-pool=default-dhcp interface=bridge name=defconf
/caps-man manager
set enabled=yes
/caps-man provisioning
add action=create-dynamic-enabled master-configuration=2.4GHz-ch1 \
name-format=identity radio-mac=2C:C8:1B:22:81:E2
add action=create-dynamic-enabled master-configuration=2.4GHz-ch6 \
name-format=identity radio-mac=08:55:31:37:88:01
/interface bridge port
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge interface=ether1
add bridge=bridge interface=ether3-SAD
add bridge=bridge interface=ether4
add bridge=bridge interface=ether2-DOM
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=\
192.168.88.0
/ip dhcp-client
# DHCP client can not run on slave interface!
add comment=defconf disabled=no interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf dns-server=8.8.8.8,1.1.1.1 \
gateway=192.168.88.254
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=\
"defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related
add action=accept chain=forward comment=\
"defconf: accept established,related, untracked" connection-state=\
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
connection-state=invalid
add action=drop chain=forward comment=\
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" \
ipsec-policy=out,none out-interface-list=WAN
/ip route
add distance=1 gateway=192.168.88.254
/system clock
set time-zone-name=Europe/Moscow
/system ntp client
set primary-ntp=193.204.114.232 secondary-ntp=132.163.97.5
/system routerboard settings
set silent-boot=yes
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN