Community discussions

MikroTik App
  4. RouterOS
  5. Wireless Networking

hap ax3 CAPsMAN with hap ac2

Post Reply
 
mickytren
just joined
Topic Author
Posts: 10
Joined: Sat Jun 29, 2024 3:59 pm

hap ax3 CAPsMAN with hap ac2

Fri Jan 24, 2025 10:06 pm

I have the hap ax3 model as my main router, and they gave me another hap ac2 router. I want to put the hap ac2 as CAP, is it possible? If it is, what package do I have to have on Hap ax3, wireless, wifi-qcom-ac, wifi-qcom? and in hap ac2?
Thank you
Top
 
ConnyMercier
Forum Veteran
Forum Veteran
Posts: 777
Joined: Tue Dec 17, 2019 1:08 pm

Re: hap ax3 CAPsMAN with hap ac2

Fri Jan 24, 2025 11:23 pm

You don`t have to install any additional Packages on the hAPax3.
You configure Capsman via the WIFI menu, see online documentation
https://help.mikrotik.com/docs/spaces/R ... iFiCAPsMAN

Having said that, you do need to install the wifi-qcom-ac on the hAPac2 to enable the "WIFI" menu.
Additional, information is also available here.
https://help.mikrotik.com/docs/spaces/R ... ss'package
Top
 
mickytren
just joined
Topic Author
Posts: 10
Joined: Sat Jun 29, 2024 3:59 pm

Re: hap ax3 CAPsMAN with hap ac2

Sat Jan 25, 2025 12:35 am

On the hap ac2 I have already installed the wifi-qcom-ac package. I have activated the CAP option in the wifi menu. Then, on the hap ax3 I have activated CAPsMAN, and in the Remote Cap menu I see the other hap ac2, but it does not pass the wireless configuration. Why could this be?
Top
 
ConnyMercier
Forum Veteran
Forum Veteran
Posts: 777
Joined: Tue Dec 17, 2019 1:08 pm

Re: hap ax3 CAPsMAN with hap ac2

Sat Jan 25, 2025 12:41 am

On the hAPac2,
you need to Configure "Wifi1" and "Wifi2" interfaces to use Capsman
under Configuration-> Manager and select "Capsman"
24-01-_2025_23-41-15.png
You do not have the required permissions to view the files attached to this post.
Top
 
mickytren
just joined
Topic Author
Posts: 10
Joined: Sat Jun 29, 2024 3:59 pm

Re: hap ax3 CAPsMAN with hap ac2

Sat Jan 25, 2025 4:20 pm

Hi, thank you. It's woks fine, but now i have a problem with roaming, there are devices that they connect with hap ac2 instead hap ax3 while they are more nearly to hap ax3. Are there any configuration to improve this situation? or this depends only on the device's wifi?
Regards
Top
 
erlinden
Forum Guru
Forum Guru
Posts: 2801
Joined: Wed Jun 12, 2013 1:59 pm
Location: Netherlands

Re: hap ax3 CAPsMAN with hap ac2

Sat Jan 25, 2025 6:17 pm

Please share your config:

/export file=anynameyoulike

Remove serial and any other private info.
Top
 
mickytren
just joined
Topic Author
Posts: 10
Joined: Sat Jun 29, 2024 3:59 pm

Re: hap ax3 CAPsMAN with hap ac2

Sun Jan 26, 2025 11:38 am

Hi, this is my configuration without firewall config and others:

Code: Select all
# 2025-01-26 10:28:21 by RouterOS 7.17
# software id = 2KEN-HS1Y
#
# model = C53UiG+5HPaxD2HPaxD
# serial number = XXXXXXXXXXX
/interface bridge
add admin-mac=78:9A:18:EA:02:1E auto-mac=no comment=defconf name=bridge \
    port-cost-mode=short
/interface ethernet
set [ find default-name=ether1 ] advertise="10M-baseT-half,10M-baseT-full,100M\
    -baseT-half,100M-baseT-full,1G-baseT-half,1G-baseT-full" comment=WAN \
    mac-address=78:9A:18:EA:02:1D
set [ find default-name=ether2 ] mac-address=78:9A:18:EA:02:1E
set [ find default-name=ether3 ] mac-address=78:9A:18:EA:02:1F
set [ find default-name=ether4 ] mac-address=78:9A:18:EA:02:20
set [ find default-name=ether5 ] mac-address=78:9A:18:EA:02:21
/interface vlan
add interface=ether1 name="VLAN DATOS" vlan-id=6
add interface=bridge name="VLAN PRUEBAS-VPN" vlan-id=10
add interface=ether1 name=VLAN-VOZ vlan-id=3
/interface pppoe-client
add add-default-route=yes disabled=no interface="VLAN DATOS" name=pppoe-out1 \
    service-name=Movistar use-peer-dns=yes user=adslppp@telefonicanetpa
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wifi configuration
add channel.band=5ghz-ac country=Spain datapath.bridge=bridge disabled=no \
    mode=ap name=cfg5GHZ security.authentication-types=wpa2-psk,wpa3-psk .ft=\
    yes .ft-over-ds=yes ssid=JUJUMAESIN-PLUS station-roaming=yes
add channel.band=2ghz-n country=Spain datapath.bridge=bridge disabled=no \
    mode=ap name=cfg2GHZ security.authentication-types=wpa2-psk,wpa3-psk .ft=\
    yes .ft-over-ds=no ssid=JUJUMAESIN station-roaming=yes
/interface wifi
set [ find default-name=wifi2 ] configuration=cfg2GHZ configuration.mode=ap \
    disabled=no name=wifi2GHZ
set [ find default-name=wifi1 ] configuration=cfg5GHZ configuration.mode=ap \
    disabled=no name=wifi5GHZ security.ft=yes
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp interface=bridge lease-time=8h name=defconf
/ip smb users
add name=miguel
/routing rip instance
add disabled=no name=rip-instance-VOZ redistribute=""
/ip smb
set domain=CASA enabled=yes
/interface bridge port
add bridge=bridge comment=defconf interface=ether2 internal-path-cost=10 \
    path-cost=10
add bridge=bridge comment=defconf interface=ether3 internal-path-cost=10 \
    path-cost=10
add bridge=bridge comment=defconf interface=ether4 internal-path-cost=10 \
    path-cost=10
add bridge=bridge comment=defconf interface=ether5 internal-path-cost=10 \
    path-cost=10
add bridge=bridge comment=defconf interface=*6 internal-path-cost=10 \
    path-cost=10
add bridge=bridge comment=defconf interface=*7 internal-path-cost=10 \
    path-cost=10
/interface bridge settings
set use-ip-firewall=yes use-ip-firewall-for-pppoe=yes \
    use-ip-firewall-for-vlan=yes
/ip firewall connection tracking
set udp-timeout=10s
/ip neighbor discovery-settings
set discover-interface-list=LAN
/ip settings
set tcp-syncookies=yes
/interface bridge vlan
add bridge=bridge comment="VLAN DATOS" vlan-ids=6
add bridge=bridge comment="VLAN VOZ" vlan-ids=3
add bridge=bridge comment="VLAN PRUEBAS-VPN" vlan-ids=10
/interface detect-internet
set detect-interface-list=all
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
add interface=pppoe-out1 list=WAN
add interface=ether5 list=LAN
add interface=wireguard-movil list=LAN
/interface ovpn-server server
add mac-address=FE:81:AF:1E:F8:C3 name=ovpn-server1
/interface wifi access-list
add action=accept comment="Pixel 4A Mama-5Ghz" disabled=no interface=all \
    mac-address=0E:C4:6D:28:2D:F3
add action=accept comment="Pixel 4A Mama-2Ghz" disabled=no interface=all \
    mac-address=0E:0B:89:B8:4A:0E
add action=accept comment="Alexa Echo" disabled=no interface=all mac-address=\
    50:DC:E7:27:D1:9F
add action=accept comment="Galaxy A15 Esther-2Ghz" disabled=no interface=all \
    mac-address=0A:05:91:C2:2E:BA
add action=accept comment="Pixel 4A Papa-5Ghz" disabled=no interface=all \
    mac-address=AE:29:63:84:08:38
add action=accept comment="TV Sony-2Ghz" disabled=no interface=wifi5GHZ \
    mac-address=10:B1:DF:4A:A5:D3
add action=accept comment="Motorola G04S Marcos-2Ghz" disabled=no interface=\
    all mac-address=16:6B:F8:8D:5A:AC
add action=accept comment="Tablet Galaxy Tab-5Ghz" disabled=no interface=all \
    mac-address=4A:E3:55:D7:88:63
add action=accept comment="Nintendo Switch-5Ghz" disabled=no interface=all \
    mac-address=94:58:CB:B0:DE:F7
add action=accept comment="Pixel 4A Papa-5Ghz" disabled=no interface=all \
    mac-address=AE:29:63:84:08:38
add action=accept comment="Pixel 4A Mama-5Ghz" disabled=no interface=all \
    mac-address=0E:C4:6D:28:2D:F3
add action=accept comment="Galaxy A15 Esther-2Ghz" disabled=no interface=all \
    mac-address=0A:05:91:C2:2E:BA
add action=accept comment="Iphone Ines-5Ghz" disabled=no interface=all \
    mac-address=D8:BE:1F:81:EE:99
add action=accept comment="Pixel 4A Papa-5Ghz" disabled=no interface=all \
    mac-address=AE:29:63:84:08:38
add action=accept comment="MSI Papa" disabled=no interface=all mac-address=\
    C0:E4:34:DA:E6:1F
add action=accept
/interface wifi capsman
set enabled=yes interfaces=bridge package-path="" require-peer-certificate=no \
    upgrade-policy=none
/interface wifi provisioning
add action=create-dynamic-enabled disabled=no master-configuration=cfg2GHZ \
    supported-bands=2ghz-n
add action=create-dynamic-enabled disabled=no master-configuration=cfg5GHZ \
    supported-bands=5ghz-ac
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=\
    192.168.88.0
add address=192.168.0.1/28 comment="Interfaz Wireguard" disabled=yes \
    interface=wireguard-movil network=192.168.0.0
add address=172.16.2.1/24 interface="VLAN PRUEBAS-VPN" network=172.16.2.0
add address=172.16.4.2/24 comment="Interfaz WireGuard-Javi" interface=\
    wireguardJavi network=172.16.4.0
/ip arp
add address=10.23.64.1 interface=VLAN-VOZ mac-address=00:07:72:B3:F0:94
/ip cloud
set ddns-enabled=yes
/ip dhcp-client
add comment=defconf interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf dns-server=\
    208.67.222.222,208.67.220.220 gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes servers=208.67.222.222,208.67.220.220
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan type=A
/ip route
add comment="Regla para hacer ping desde la ip del router" distance=1 \
    dst-address=172.16.1.1/32 gateway=bridge pref-src=172.16.2.1
/routing rip interface-template
add disabled=no instance=rip-instance-VOZ interfaces=VLAN-VOZ
/system clock
set time-zone-name=Europe/Madrid
/system identity
set name=hap-ax3-Router
/system logging
add topics=wireless,debug
add action=disk disabled=yes topics=ipsec
add topics=wireless,debug
add disabled=yes topics=ipsec
/system note
set show-at-login=no
Top
 
erlinden
Forum Guru
Forum Guru
Posts: 2801
Joined: Wed Jun 12, 2013 1:59 pm
Location: Netherlands

Re: hap ax3 CAPsMAN with hap ac2

Sun Jan 26, 2025 11:56 am

Can you adjust according this:
Code: Select all
/interface wifi configuration
add channel.band=5ghz-ac country=Spain datapath.bridge=bridge disabled=no mode=ap name=cfg5GHZ  security=JUJUMAESIN-PLUS-SEC ssid=JUJUMAESIN-PLUS
add channel.band=2ghz-n country=Spain datapath.bridge=bridge disabled=no mode=ap name=cfg2GHZ security=JUJUMAESIN-SEC ssid=JUJUMAESIN
	
/interface wifi security
add name=JUJUMAESIN-PLUS-SEC authentication-types=wpa2-psk,wpa3-psk ft=yes ft-over-ds=yes connect-priority=0/1 
add name=JUJUMAESIN-SEC authentication-types=wpa2-psk,wpa3-psk ft=yes ft-over-ds=yes connect-priority=0/1 

/interface wifi
set [ find default-name=wifi2 ] configuration=cfg2GHZ disabled=no name=wifi2GHZ
set [ find default-name=wifi1 ] configuration=cfg5GHZ disabled=no name=wifi5GHZ
This way, you are repeating yourself less. Passphrase is missing, you can add that yourself. Unless you are using accesslists for that (I have no experience with using that for authentication).

Do you want different SSID's? Because there is no roaming between different SSID's...
Top
 
mickytren
just joined
Topic Author
Posts: 10
Joined: Sat Jun 29, 2024 3:59 pm

Re: hap ax3 CAPsMAN with hap ac2

Sun Jan 26, 2025 6:57 pm

I want SSID to 2Ghz and other to SSID 5Ghz.
Thanks
Top
Post Reply
  4. RouterOS
  5. Wireless Networking