Community discussions

MikroTik App
 
gabacho4
Member Candidate
Member Candidate
Topic Author
Posts: 242
Joined: Mon Dec 28, 2020 12:30 pm
Location: Earth

New CapAX - config sanity check requested

Mon Sep 18, 2023 11:07 pm

Hello all,

I decided to grab a Mikrotik CapAX in order to get some experience configuring their APs, all well as to see how the 'Tik wifi really performs. I've seem plenty of people declare that it is less than amazing, while others say that it works just fine for them. It was a little weird to put my head around but I think I've at least understood the concept? Undoubtedly there is much for me to learn. And before someone screams at me, I left the freq settings to auto just because I was merely trying to get things to work before I fine tune. One immediate question is why my phone is able to see the Homestar2 and Strongbad2 networks (5ghz) while my laptop is unable to but sees the 2ghz networks just fine. Laptop is able to see 5ghz on my Unifi AP AC PRO running OPENWRT just fine. It is a freq or bandwidth issue? Appreciate the help and criticism in advance.

Config is as follows:
# 2023-09-18 16:00:53 by RouterOS 7.11.2
# software id = IILR-ELWI
#
# model = cAPGi-5HaxD2HaxD
# serial number = Nunya
/interface bridge
add name=bridge1 vlan-filtering=yes
/interface ethernet
set [ find default-name=ether2 ] poe-out=off
/interface wifiwave2
set [ find default-name=wifi2 ] channel.band=2ghz-ax .width=20mhz \
    configuration.country="United States" .mode=ap .ssid=Homestar disabled=no \
    name=Homestar2Ghz security.authentication-types=wpa2-psk,wpa3-psk
set [ find default-name=wifi1 ] channel.band=5ghz-ax .skip-dfs-channels=all \
    .width=20/40/80mhz configuration.country="United States" .mode=ap .ssid=\
    Homestar2 disabled=no name=Homestar5Ghz security.authentication-types=\
    wpa2-psk,wpa3-psk
add configuration.mode=ap .ssid=Trogdor disabled=no mac-address=\
    4A:A9:8A:CA:1B:31 master-interface=Homestar2Ghz name=IoT2Ghz \
    security.authentication-types=wpa2-psk,wpa3-psk
add configuration.mode=ap .ssid=Strongbad disabled=no mac-address=\
    4A:A9:8A:CA:1B:30 master-interface=Homestar2Ghz name=Strongbad2Ghz \
    security.authentication-types=wpa2-psk,wpa3-psk
add configuration.mode=ap .ssid=Strongbad2 disabled=no mac-address=\
    4A:A9:8A:CA:1B:2E master-interface=Homestar5Ghz name=Strongbad5Ghz \
    security.authentication-types=wpa2-psk,wpa3-psk
/interface vlan
add interface=bridge1 name=MGMT vlan-id=100
/interface list
add include=all name=Access
/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 frame-types=admit-only-untagged-and-priority-tagged \
    interface=Homestar2Ghz pvid=160
add bridge=bridge1 frame-types=admit-only-untagged-and-priority-tagged \
    interface=Homestar5Ghz pvid=160
add bridge=bridge1 frame-types=admit-only-untagged-and-priority-tagged \
    interface=Strongbad2Ghz pvid=120
add bridge=bridge1 frame-types=admit-only-untagged-and-priority-tagged \
    interface=IoT2Ghz pvid=200
add bridge=bridge1 frame-types=admit-only-untagged-and-priority-tagged \
    interface=Strongbad5Ghz pvid=120
add bridge=bridge1 frame-types=admit-only-untagged-and-priority-tagged \
    interface=*12 pvid=200
/ip neighbor discovery-settings
set discover-interface-list=all
/interface bridge vlan
add bridge=bridge1 tagged=ether1,bridge1 vlan-ids=100
add bridge=bridge1 tagged=ether1 untagged=Strongbad2Ghz,Strongbad5Ghz \
    vlan-ids=120
add bridge=bridge1 tagged=ether1 untagged=Homestar2Ghz,Homestar5Ghz vlan-ids=\
    160
add bridge=bridge1 tagged=ether1 untagged=IoT2Ghz vlan-ids=200
/interface list member
add interface=MGMT list=Access
add interface=ether1 list=Access
add interface=ether2 list=Access
add interface=bridge1 list=Access
add interface=Homestar5Ghz list=Access
add interface=Homestar2Ghz list=Access
/ip dhcp-client
add interface=MGMT
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set winbox port=56473
set api-ssl disabled=yes
/system clock
set time-zone-name=America/New_York
/system note
set show-at-login=no
/system routerboard settings
set auto-upgrade=yes
/tool mac-server
set allowed-interface-list=none
/tool mac-server mac-winbox
set allowed-interface-list=Access
 
holvoetn
Forum Guru
Forum Guru
Posts: 3765
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: New CapAX - config sanity check requested

Mon Sep 18, 2023 11:23 pm

Don't use auto.
Set frequency yourself to a non used channel.

Probably that's why your laptop can't see it.
 
gabacho4
Member Candidate
Member Candidate
Topic Author
Posts: 242
Joined: Mon Dec 28, 2020 12:30 pm
Location: Earth

Re: New CapAX - config sanity check requested

Mon Sep 18, 2023 11:37 pm

Ok, I'll tackle the freq next. Does the rest of the config look alright? If I got it 99.9% right the first time, I'd probably drop dead.
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 17447
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: New CapAX - config sanity check requested

Tue Sep 19, 2023 12:14 am

Why not wait for capAXE and wifiwave3
Or
capAX7 and wifiwave4? :-0
 
gabacho4
Member Candidate
Member Candidate
Topic Author
Posts: 242
Joined: Mon Dec 28, 2020 12:30 pm
Location: Earth

Re: New CapAX - config sanity check requested

Tue Sep 19, 2023 12:24 am

Why not wait for capAXE and wifiwave3
Or
capAX7 and wifiwave4? :-0
With any luck, Zerotier for non-ARM devices will come first!

But seriously, tell me more about my config. If it's great I'll port it over to capXXX or wifiwaveX.
 
holvoetn
Forum Guru
Forum Guru
Posts: 3765
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: New CapAX - config sanity check requested

Tue Sep 19, 2023 6:16 am

Brief comments:

I do assume there is another router in front which takes care of all router-services (DHCP, DNS, routing, ...) ?

add bridge=bridge1 frame-types=admit-only-untagged-and-priority-tagged \
interface=*12 pvid=200

Interface deleted afterwards ?

Use of interface lists without any form of firewall is useless. But it doesn't hurt either.

As a dumb AP, there is not much else to look at 8)

Now for Wifi ...
2.4GHz: probably crowded, try to use the channel in 1/6/11 scheme (if that's being followed in your area) which is the least occupied. Don't go sit in between channels, you'll make things worse for yourself and everyone else.

5GHz: more options but given that earlier remark about your laptop, be sure to use a frequency which your devices can handle.
Choose a CLEAR channel and make sure you have room for that 80MHz-width.
Use this as guideline to select the correct 20/40/80 blocks:
https://en.wikipedia.org/wiki/List_of_W ... h/n/ac/ax)
 
erlinden
Forum Guru
Forum Guru
Posts: 1605
Joined: Wed Jun 12, 2013 1:59 pm
Location: Netherlands

Re: New CapAX - config sanity check requested

Tue Sep 19, 2023 8:25 am

/system routerboard settings
set auto-upgrade=yes
I prefer to decide when to upgrade and where to.
 
gabacho4
Member Candidate
Member Candidate
Topic Author
Posts: 242
Joined: Mon Dec 28, 2020 12:30 pm
Location: Earth

Re: New CapAX - config sanity check requested

Tue Sep 19, 2023 3:04 pm

Don't use auto.
Set frequency yourself to a non used channel.

Probably that's why your laptop can't see it.
Just to follow up, manually setting the freq absolutely solved my issue with the lappy. Running strong and fast now.
 
gabacho4
Member Candidate
Member Candidate
Topic Author
Posts: 242
Joined: Mon Dec 28, 2020 12:30 pm
Location: Earth

Re: New CapAX - config sanity check requested

Tue Sep 19, 2023 3:12 pm

/system routerboard settings
set auto-upgrade=yes
I prefer to decide when to upgrade and where to.
This doesn't update the packages, it just updates the routerboard firmware at the same time I update the packages manually. Device reboots twice and I'm done versus having to update the packages, reboot, then log in and manually update the firmware, and then reboot.

Who is online

Users browsing this forum: No registered users and 5 guests