Community discussions

MikroTik App
 
sindudas
newbie
Topic Author
Posts: 36
Joined: Thu Aug 16, 2012 2:59 pm

CAPsMAN v7.x CAPs Radio's stop working

Mon Jun 05, 2023 12:50 pm

Hi,

I have a hAP ac2 as the CAPsMAN and CAP, 2 cAP ac and a RB951G-2HnD. Usually I have to press the "provision" button and many others restart the device (CAP) for the Radio to work again.
I mostly have 2.4Ghz IoT devices, and I usually detect that a Radio fails because the IoT devices have problems or lose connection. Some times less than 24 hours since CAP reboot.
Doesn't show any error message on CAP, only when joined CAPsMAN
Now all are in v 7.9.2

89 Rules on the access-list
46 Devices registered only on IOT and 15 devices on the LAN
/caps-man channel
add extension-channel=disabled frequency=2412 name=ch1-2.4
add extension-channel=disabled frequency=2437 name=ch6-2.4
add extension-channel=disabled frequency=2462 name=ch11-2.4
add band=5ghz-a/n/ac extension-channel=Ceee frequency=5180 name=ch42-5
add band=5ghz-a/n/ac extension-channel=XXXX frequency=5260 name=ch58-5
add band=5ghz-a/n/ac extension-channel=XXXX frequency=5500 name=ch106-5
/caps-man configuration
add name=cfg-empty
/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm group-key-update=5m name=IOT
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm group-key-update=5m name=LAN
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm group-key-update=5m name=GUEST
/caps-man access-list
...
/caps-man configuration
add country=spain datapath=dp-LAN mode=ap name=cfg-LAN security=LAN ssid=LAN
add country=spain datapath=dp-IOT mode=ap name=cfg-IOT security=IOT ssid=IOT
add country=spain datapath=dp-GUEST mode=ap name=cfg-GUEST security=GUEST ssid=GUEST
/caps-man datapath
add bridge=bridge_LAN client-to-client-forwarding=yes local-forwarding=yes name=dp-LAN vlan-id=1 vlan-mode=no-tag
add bridge=bridge_LAN client-to-client-forwarding=yes local-forwarding=yes name=dp-IOT vlan-id=60 vlan-mode=use-tag
add bridge=bridge_LAN client-to-client-forwarding=yes local-forwarding=yes name=dp-GUEST vlan-id=70 vlan-mode=use-tag
/caps-man interface
add configuration=cfg-GUEST disabled=no l2mtu=1600 mac-address=XXXX master-interface=2n-AP1-LAN name=2n-AP1-GUEST radio-mac=00:00:00:00:00:00 radio-name=XXXX
add configuration=cfg-IOT disabled=no l2mtu=1600 mac-address=XXXX master-interface=2n-AP1-LAN name=2n-AP1-IOT radio-mac=00:00:00:00:00:00 radio-name=XXXX
add channel=ch1-2.4 configuration=cfg-LAN disabled=no l2mtu=1600 mac-address=XXXX master-interface=none name=2n-AP1-LAN radio-mac=XXXX radio-name=XXXX
add configuration=cfg-GUEST disabled=no l2mtu=1600 mac-address=XXXX master-interface=2n-AP2-LAN name=2n-AP2-GUEST radio-mac=00:00:00:00:00:00 radio-name=XXXX
add configuration=cfg-IOT disabled=no l2mtu=1600 mac-address=XXXX master-interface=2n-AP2-LAN name=2n-AP2-IOT radio-mac=00:00:00:00:00:00 radio-name=XXXX
add channel=ch11-2.4 channel.tx-power=15 configuration=cfg-LAN disabled=no l2mtu=1600 mac-address=XXXX master-interface=none name=2n-AP2-LAN radio-mac=XXXX radio-name=XXXX
add configuration=cfg-IOT datapath.vlan-mode=no-tag disabled=no l2mtu=1600 mac-address=XXXX master-interface=2n-AP3-LAN name=2n-AP3-IOT radio-mac=00:00:00:00:00:00 radio-name=XXXX
add channel=ch6-2.4 configuration=cfg-LAN disabled=no l2mtu=1600 mac-address=XXXX master-interface=none name=2n-AP3-LAN radio-mac=XXXX radio-name=XXXX
add configuration=cfg-GUEST disabled=no l2mtu=1600 mac-address=XXXX master-interface=5ac-AP1-LAN name=5ac-AP1-GUEST radio-mac=00:00:00:00:00:00 radio-name=XXXX
add channel=ch42-5 channel.tx-power=20 configuration=cfg-LAN disabled=no l2mtu=1600 mac-address=XXXX master-interface=none name=5ac-AP1-LAN radio-mac=XXXX radio-name=XXXX
add configuration=cfg-GUEST disabled=no l2mtu=1600 mac-address=XXXX master-interface=5ac-AP2-LAN name=5ac-AP2-GUEST radio-mac=00:00:00:00:00:00 radio-name=XXXX
add channel=ch106-5 channel.tx-power=20 configuration=cfg-LAN disabled=no l2mtu=1600 mac-address=XXXX master-interface=none name=5ac-AP2-LAN radio-mac=XXXX radio-name=XXXX
add configuration=cfg-GUEST disabled=yes mac-address=XXXX master-interface=5ac-GW-LAN name=5ac-GW-GUEST radio-mac=00:00:00:00:00:00 radio-name=XXXX
add channel=ch58-5 channel.tx-power=20 configuration=cfg-LAN disabled=no l2mtu=1600 mac-address=XXXX master-interface=none name=5ac-GW-LAN radio-mac=XXXX radio-name=XXXX
/caps-man manager
# bad package path
set ca-certificate=CA certificate=GW enabled=yes package-path=/firmware
/caps-man manager interface
set [ find default=yes ] forbid=yes
add disabled=no interface=vlan1
/caps-man provisioning
add action=create-enabled hw-supported-modes=ac master-configuration=cfg-LAN name-format=prefix-identity name-prefix=5ac slave-configurations=cfg-GUEST
add action=create-enabled hw-supported-modes=gn master-configuration=cfg-LAN name-format=prefix-identity name-prefix=2n slave-configurations=cfg-IOT,cfg-GUEST
add action=create-disabled master-configuration=cfg-empty
Any idea why this problem is happening?
 
erlinden
Forum Guru
Forum Guru
Posts: 1900
Joined: Wed Jun 12, 2013 1:59 pm
Location: Netherlands

Re: CAPsMAN v7.x CAPs Radio's stop working

Mon Jun 05, 2023 1:00 pm

I prefer to have as much explicit as possible.
Can you add band to the 2.4GHz radios (assuming you don't want to use 802.11b):
add band=2ghz-g/n extension-channel=disabled frequency=2462 name=ch11-2.4
Can you set band and extension channels with more sense (assuming you don't want to use 802.11a):
add band=5ghz-n/ac extension-channel=Ceee frequency=5180 name=ch42-5
add band=5ghz-n/ac extension-channel=Ceee frequency=5260 name=ch58-5
add band=5ghz-n/ac extension-channel=Ceee frequency=5500 name=ch106-5
I'll have another look at the config...
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11383
Joined: Thu Mar 03, 2016 10:23 pm

Re: CAPsMAN v7.x CAPs Radio's stop working

Mon Jun 05, 2023 1:02 pm

When wireless network goes haywire, is there anything in logs (both CAPsMAN device and CAP devices) indicating problems?

Can you post full config of one of CAP devices?
 
sindudas
newbie
Topic Author
Posts: 36
Joined: Thu Aug 16, 2012 2:59 pm

Re: CAPsMAN v7.x CAPs Radio's stop working

Tue Jun 06, 2023 2:37 pm

Right now I have a CAP that is not working since last night.

There is nothing in the CAPsMAN or CAP log, I have forced "Provision" to the radio from CAPsMAN, but nothing changes.

And here the config from one CAP:
/interface bridge
add admin-mac=XXXX auto-mac=no name=bridge_LAN protocol-mode=none
/interface wireless
# managed by CAPsMAN
set [ find default-name=wlan1 ] antenna-gain=0 country=no_country_set frequency-mode=manual-txpower ssid=MikroTik \
    station-roaming=enabled
# managed by CAPsMAN
# channel: 5180/20-Ceee/ac/P(20dBm), SSID: LAN, local forwarding
set [ find default-name=wlan2 ] antenna-gain=0 country=no_country_set disabled=no frequency-mode=manual-txpower ssid=\
    MikroTik station-roaming=enabled
add mac-address=XXXX master-interface=wlan1 mode=station name=wlan3
add mac-address=XXXX master-interface=wlan1 mode=station name=wlan4
# managed by CAPsMAN
# SSID: GUEST, local forwarding
add disabled=no mac-address=XXXX master-interface=wlan2 mode=station name=wlan5
add mac-address=XXXX master-interface=wlan2 mode=station name=wlan6
add mac-address=XXXX master-interface=wlan1 mode=station name=wlan7
/interface bridge port
add bridge=bridge_LAN ingress-filtering=no interface=ether1
/interface bridge vlan
add bridge=bridge_LAN comment=LAN untagged=bridge_LAN,ether1,wlan1,wlan2 vlan-ids=1
add bridge=bridge_LAN comment=IOT tagged=ether1 untagged=wlan3 vlan-ids=60
add bridge=bridge_LAN comment=GUEST tagged=ether1 untagged=wlan6,wlan7 vlan-ids=70
/interface wireless cap
# 
set bridge=bridge_LAN discovery-interfaces=bridge_LAN enabled=yes interfaces=wlan1,wlan2 static-virtual=yes
/ip dhcp-client
add interface=bridge_LAN
/system ntp client
set enabled=yes
/system ntp client servers
add address=XXXX
/tool romon
set enabled=yes
Set band onlyN (all must work with 802.11n, if any issue i'll change to b/g). Then the CAP that was not working still not working, I'm going to reboot to restore the service.

Thanks for the contributions!
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11383
Joined: Thu Mar 03, 2016 10:23 pm

Re: CAPsMAN v7.x CAPs Radio's stop working

Tue Jun 06, 2023 2:48 pm

The config is weird combination of local and CAP configuration. In principle everything related to wireless interfaces should be let to be provisioned by CAPsMAN. Including virtual wireless interfaces, adding wireless interfaces to bridge etc.

I can't say how much this combination adds to the problem (perhaps it doesn't at all), but it's definitely something you should clean up. There were quite a few weird problems reported on this forum in the past which went away after device in question was configured properly.
 
holvoetn
Forum Guru
Forum Guru
Posts: 5327
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: CAPsMAN v7.x CAPs Radio's stop working

Tue Jun 06, 2023 3:13 pm

Reset device to caps mode so there will be no default config left which could cause issues.

Then see what happens and rebuilt from there without touching anything related to wifi.
It should come from capsman.
 
sindudas
newbie
Topic Author
Posts: 36
Joined: Thu Aug 16, 2012 2:59 pm

Re: CAPsMAN v7.x CAPs Radio's stop working

Tue Jun 06, 2023 5:17 pm

This way of configuring it is from a long time ago, when it comes to avoiding problems with VLANs. Possibly some bug at that time or some problem with the configuration.

Now the two cAP ac and the RB951G-2HnD factory reset and configured the minimum. Nothing in the wireless part and in the bridge only the VLANs without including any wlanXX

The result is no "Static Virtual" option enabled and no manually added wireless interface on the bridge.

The router itself was also wireless enabled in 2.4 and 5Ghz, but I transferred the 2.4Ghz radio to the RB951G-2HnD. And I only left 5Ghz with a single SSID. And it could be that since then this CAP had not had problems like the others.

Now with all these changes I hope it is stable. Thank you very much for the help

I'm going to wait a week to check that it doesn't fail again, and confirm that it works Ok.
 
User avatar
Ca6ko
Member
Member
Posts: 498
Joined: Wed May 04, 2022 10:59 pm
Location: Kharkiv, Ukraine

Re: CAPsMAN v7.x CAPs Radio's stop working

Tue Jun 06, 2023 5:29 pm

You were told to reset to CAP mode.
Then there is no need to configure anything at all

Reset button
The reset button has three functions:

Hold this button during boot time until LED light starts flashing, release the button to reset RouterOS configuration (total 5 seconds).
Keep holding for 5 more seconds, LED turns solid, release now to turn on CAP mode. The device will now look for a CAPsMAN server (total 10 seconds).
Or Keep holding the button for 5 more seconds until LED turns off, then release it to make the RouterBOARD look for Netinstall servers (total 15 seconds).
 
sindudas
newbie
Topic Author
Posts: 36
Joined: Thu Aug 16, 2012 2:59 pm

Re: CAPsMAN v7.x CAPs Radio's stop working

Tue Jun 06, 2023 7:17 pm

You were told to reset to CAP mode.
Then there is no need to configure anything at all

Reset button
The reset button has three functions:

Hold this button during boot time until LED light starts flashing, release the button to reset RouterOS configuration (total 5 seconds).
Keep holding for 5 more seconds, LED turns solid, release now to turn on CAP mode. The device will now look for a CAPsMAN server (total 10 seconds).
Or Keep holding the button for 5 more seconds until LED turns off, then release it to make the RouterBOARD look for Netinstall servers (total 15 seconds).
The reset can also be done from the Terminal with:
/system/reset-configuration caps-mode=yes
This is the way I've done on cAP ac and the RB951G-H2nD.
But there is other settings to set:
Identity, RoMoN, NTP, SNMP, and VLAN definitions to be able to enable vlan-filtering (especially on the RB951G-H2nD which is acting as a switch)
 
User avatar
Ca6ko
Member
Member
Posts: 498
Joined: Wed May 04, 2022 10:59 pm
Location: Kharkiv, Ukraine

Re: CAPsMAN v7.x CAPs Radio's stop working

Tue Jun 06, 2023 9:12 pm

I'm sorry, I don't quite understand you.
 
holvoetn
Forum Guru
Forum Guru
Posts: 5327
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: CAPsMAN v7.x CAPs Radio's stop working

Tue Jun 06, 2023 9:20 pm

The first 4 I understand (that's on my list as well for new devices).

The last one not, except for perhaps RB951G-H2nD and only the ethernet ports.
On the caps devices themselves, this VLAN handling should not be needed ?
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11383
Joined: Thu Mar 03, 2016 10:23 pm

Re: CAPsMAN v7.x CAPs Radio's stop working

Tue Jun 06, 2023 10:17 pm

If one configures vlan-mode=use-tag vlan-id=XY on datapath, then relevant bridge (in case of local forwarding that's bridge on CAP device) has to be configured with needed VLANs ... the wired part that is. Either on bridge with vlan-filtering enabled or on switch chip (if I got it right, that's the way @sindudas wants it on his RB951G and I can only agree with it).

So back to roots: CAPsMAN only provisions wireless interface(s), the rest of setup has to be done on device itself. If LAN is "plain", then bare defaults are enough. If LAN is anything else (e.g. has VLANs), then CAP device needs to be configured to seamlessly communicate with other LAN devices before it can get wireless interfaces provisioned by CAPsMAN. E.g. CAPsMAN doesn't enable vlan-filtering on bridge if vlan is enabled in datapath.
 
sindudas
newbie
Topic Author
Posts: 36
Joined: Thu Aug 16, 2012 2:59 pm

Re: CAPsMAN v7.x CAPs Radio's stop working

Thu Jun 08, 2023 11:25 am

In less than 12 hours a CAP has already failed. Now for 12 hours it has been without Wi-Fi associations.

On the CAP no log messages, only the last "CAP joined <CAPsMAN NAME> (MAC/15/0).

Pressing the button "PROVISION" on the Radio Tab from CAPsMAN makes no changes.

Making a MAC change on the LANBridge of the Router/CAPsMAN (a brief connectivity outage for the CAPs) has caused the CAP that was not working to be disconnected and re-provisioned.

The MAC change is because it was not entirely correct, it corresponded to a port that ceased to be a member of the Bridge to function as a dedicated ethernet. It shouldn't cause anything, except for the outage for changing it.

Any ideas? something to add to be able to analyze what happens, more detail of some type of specific log?

Thank you very much for the help
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11383
Joined: Thu Mar 03, 2016 10:23 pm

Re: CAPsMAN v7.x CAPs Radio's stop working

Thu Jun 08, 2023 12:10 pm

Making a MAC change on the LANBridge of the Router/CAPsMAN (a brief connectivity outage for the CAPs) has caused the CAP that was not working to be disconnected and re-provisioned.

This might indicate that the problem lies in configuration of CAPsMAN itself, not of CAP devices. So you may want to start configuration of CAPsMAN from defaults as well, gradually proceed with complexity and see where things start to fail (again).
 
sindudas
newbie
Topic Author
Posts: 36
Joined: Thu Aug 16, 2012 2:59 pm

Re: CAPsMAN v7.x CAPs Radio's stop working

Thu Jun 08, 2023 1:27 pm

Making a MAC change on the LANBridge of the Router/CAPsMAN (a brief connectivity outage for the CAPs) has caused the CAP that was not working to be disconnected and re-provisioned.

This might indicate that the problem lies in configuration of CAPsMAN itself, not of CAP devices. So you may want to start configuration of CAPsMAN from defaults as well, gradually proceed with complexity and see where things start to fail (again).
It is a problem to make a factory default. There are many things configured apart from CAPsMAN. There are VPN and 6to4 tunnels, firewall, installed certificates, DHCPs, and more.

On the other hand, I just verified that even isolating the CAP from the CAPsMAN to force it to reconnect, it does not recover. Something that I have verified is that if I try to do a "CAPs Scanner" it does not show any results. And if from the CAPs itself, I remove the WLAN 2.4 from the management by CAPsMAN, any option like "Scan/Freq. Usage/Snooper" does not show any results.
The only thing that has worked for me has been to restart the CAP, then the local "Scan" works, and once provisioned by CAPsMAN too.

Enabling "debug" in the log in the same CAP, I have not seen anything relevant about the problem
 
holvoetn
Forum Guru
Forum Guru
Posts: 5327
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: CAPsMAN v7.x CAPs Radio's stop working

Thu Jun 08, 2023 1:37 pm

Sounds like behavior I've seen being reported by others. Only restart of cap fixes the lock.

I suppose you did not think about making a supout of cap and capsman controller for further investigation ?
 
sindudas
newbie
Topic Author
Posts: 36
Joined: Thu Aug 16, 2012 2:59 pm

Re: CAPsMAN v7.x CAPs Radio's stop working

Thu Jun 08, 2023 7:34 pm

I suppose you did not think about making a supout of cap and capsman controller for further investigation ?
at this point it looks like it will be the way to go

Who is online

Users browsing this forum: Ahrefs [Bot], Amazon [Bot], Omerik and 37 guests