Community discussions

MikroTik App
  4. RouterOS
  5. Wireless Networking

CAPsMAN second band - no supported channel  [SOLVED]

Post Reply
 
rupertas
just joined
Topic Author
Posts: 8
Joined: Wed Apr 30, 2025 10:26 am

CAPsMAN second band - no supported channel

Wed Apr 30, 2025 11:48 am

Hello,
hAP ac^3
7.18.2 (stable)
I have successfully configured 5Ghz radio, but get "no supported channel" for 2.4Ghz
Code: Select all
[admin@MTmain] > caps-man export hide-sensitive
# 2025-04-30 11:25:35 by RouterOS 7.18.2
# software id = VYM6-PKBY
#
# model = RBD53iG-5HacD2HnD
# serial number = ****
/caps-man channel
add band=5ghz-a/n/ac control-channel-width=20mhz name=channel5g
add band=2ghz-b/g/n name=channel2g
/caps-man security
add authentication-types=wpa-psk,wpa2-psk encryption=aes-ccm name=\
    "security profile"
/caps-man configuration
add channel=channel5g country=lithuania datapath.bridge=bridge1 installation=\
    any name=cfg-5g security="security profile" ssid=B5AH15
add channel=channel2g country=lithuania datapath.bridge=bridge1 installation=\
    any name=cfg-2g security="security profile" ssid=B5AH12
/caps-man manager
set enabled=yes
/caps-man provisioning
add action=create-dynamic-enabled master-configuration=cfg-5g name-format=\
    identity
add action=create-dynamic-enabled master-configuration=cfg-2g name-format=\
    identity
What I have noticed, that interface is using provisioning of 5g config
What am I doing wrong?

Image
You do not have the required permissions to view the files attached to this post.
Top
 
erlinden
Forum Guru
Forum Guru
Posts: 3056
Joined: Wed Jun 12, 2013 1:59 pm
Location: Netherlands

Re: CAPsMAN second band - no supported channel  [SOLVED]

Wed Apr 30, 2025 12:50 pm

If you set the hw-supported-modes on the provision rule, the correct config is provisioned to the radio. Especially because you have a distinction in channels. Something like:
Code: Select all
/caps-man provisioning
add action=create-dynamic-enabled hw-supported-modes=ac master-configuration=cfg-5g name-format=identity
add action=create-dynamic-enabled hw-supported-modes=gn master-configuration=cfg-2g name-format=identity
This makes me cry:
Code: Select all
/caps-man security
add authentication-types=wpa-psk,wpa2-psk encryption=aes-ccm name="security profile"
wpa-psk is far from safe...please don't use it...ever.
Top
 
rupertas
just joined
Topic Author
Posts: 8
Joined: Wed Apr 30, 2025 10:26 am

Re: CAPsMAN second band - no supported channel

Wed Apr 30, 2025 1:22 pm

Thank you for your reply,
I have removed WPA-PSK.
Added hw-supported-modes and this corrected "no supported channel"

Maybe you could also advice on one more thing?
I have a virtual "GUEST" interface which is not supported when I add it as CAP.
And as it is a sub for CAPsMAN controlled interface - it is no more available
Where do I start digging?
interface2.png
You do not have the required permissions to view the files attached to this post.
Top
 
erlinden
Forum Guru
Forum Guru
Posts: 3056
Joined: Wed Jun 12, 2013 1:59 pm
Location: Netherlands

Re: CAPsMAN second band - no supported channel

Wed Apr 30, 2025 1:49 pm

Guest network can be added by using a slave (besides the master) config in CAPsMAN (no need to change the CAP):
https://help.mikrotik.com/docs/spaces/R ... einterface
Top
 
rupertas
just joined
Topic Author
Posts: 8
Joined: Wed Apr 30, 2025 10:26 am

Re: CAPsMAN second band - no supported channel

Wed Apr 30, 2025 6:08 pm

Guest network can be added by using a slave (besides the master) config in CAPsMAN (no need to change the CAP):
https://help.mikrotik.com/docs/spaces/R ... einterface
thanks once again
it is working, but is it correct?
I have set the guest config as slave to both provisioning rules, what I expect is that GUEST is for client to decide the frequency
Code: Select all
# 2025-04-30 18:03:39 by RouterOS 7.18.2
# software id = VYM6-PKBY
#
# model = RBD53iG-5HacD2HnD
# serial number = E7290D2736DE
/caps-man channel
add band=5ghz-a/n/ac control-channel-width=20mhz name=channel5g
add band=2ghz-g/n control-channel-width=20mhz name=channel2g
/caps-man datapath
add bridge=bridge-guest name=datapath-guest vlan-id=1
/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm name="security profile"
add authentication-types=wpa2-psk encryption=aes-ccm name=security-guest
/caps-man configuration
add channel=channel5g country=lithuania datapath.bridge=bridge1 installation=any name=cfg-5g security="security profile" ssid=B5AH15
add channel=channel2g country=lithuania datapath.bridge=bridge1 installation=any name=cfg-2g security="security profile" ssid=B5AH12
add datapath=datapath-guest mode=ap name=cfg-GUEST security=security-guest ssid=GUEST
/caps-man manager
set enabled=yes
/caps-man provisioning
add action=create-dynamic-enabled hw-supported-modes=ac master-configuration=cfg-5g name-format=identity slave-configurations=cfg-GUEST
add action=create-dynamic-enabled hw-supported-modes=gn master-configuration=cfg-2g name-format=identity slave-configurations=cfg-GUEST
Top
 
erlinden
Forum Guru
Forum Guru
Posts: 3056
Joined: Wed Jun 12, 2013 1:59 pm
Location: Netherlands

Re: CAPsMAN second band - no supported channel

Wed Apr 30, 2025 6:26 pm

it is working, but is it correct?
This is correct. You don't have to set vlan-id on the datapath. Unless you want to work with VLAN's, but then there is a lot more to change.
I have set the guest config as slave to both provisioning rules, what I expect is that GUEST is for client to decide the frequency
Clients do (indeed) decide to which band (either 2.4GHz or 5GHz) they connect. Frequency is handled by the CAP (when scanning for the best available and could be set by the CAPsMAN).
Top
 
rupertas
just joined
Topic Author
Posts: 8
Joined: Wed Apr 30, 2025 10:26 am

Re: CAPsMAN second band - no supported channel

Wed Apr 30, 2025 7:16 pm

I'm deeling with VLANs - have some filter rules for GUEST
Thank you - I'm just learning
Top
Post Reply
  4. RouterOS
  5. Wireless Networking