Could you share your current config?
Sure. Wifiwave2 related part included.
Pretty basic.
- setup channels to be used
- setup security to be used
- make configurations needed based on channels and security defined before
- create interfaces based on configurations (1x 2.4Ghz SSID plus slave IoT SSID, 1x 5GHz channel with own SSID)
Do not change settings related to security or channels when defining interfaces since you will overrule the ones you made before (as you did in your config).
If you know how to use capsman, it works conceptually exactly the same.
security.ft=no was something I tried for the new 802.11r features (which don't work cross-AP yet, so I disabled it again since my SSIDs are different across radios)
# jul/16/2022 14:47:48 by RouterOS 7.4rc2
# software id = LB29-6B5U
#
# model = RBD53iG-5HacD2HnD
# serial number = <serial>
/interface wifiwave2 channel
add band=2ghz-n frequency=2412,2437,2462 name=ch1_6_11 width=20mhz
add band=5ghz-ac frequency=5500 name=ch5500 width=20/40/80mhz
/interface wifiwave2 security
add authentication-types=wpa2-psk name=security1 passphrase=<super-secret>
add authentication-types=wpa2-psk name=IoT passphrase=<super-secret2>
/interface wifiwave2 configuration
add country=Belgium mode=ap name=name1 security=security1 ssid=SSID1
add country=Belgium mode=ap name=name2 security=security2 ssid=SSID2
add channel.frequency="" country=Belgium mode=ap name=IoT security=IoT ssid=IoT
/interface wifiwave2
set [ find default-name=wifi1 ] arp-timeout=auto channel=ch1_6_11 \
configuration=name1 configuration.mode=ap disabled=no name=wifi1 security.ft=no
set [ find default-name=wifi2 ] arp-timeout=auto channel=ch5500 \
configuration=name2 configuration.mode=ap disabled=no \
name=wifi2 security.ft=no
add arp-timeout=auto configuration=IoT configuration.mode=ap disabled=no \
master-interface=wifi1 name=wifi3 \
security.ft=no
/interface wifiwave2 access-list
add action=accept allow-signal-out-of-range=30s disabled=no interface=dynamic \
signal-range=-86..120 ssid-regexp=""
add action=reject allow-signal-out-of-range=1s disabled=no interface=dynamic \
signal-range=-120..-87 ssid-regexp=""