Community discussions

MikroTik App
 
TomSF
Member Candidate
Member Candidate
Topic Author
Posts: 109
Joined: Tue Jun 27, 2017 2:12 am

Some CAPs seen from both WiFi and Wireless CAPSMAN

Wed Apr 30, 2025 6:29 pm

This is not a new problem, I am just getting around to asking about it. WiFi CAPSMAN sees two MIPSBE APs (boards RBwAPG-5HacT2HnD and RB962UiGS-5HacT2HnT). Both of those APs have the wireless package. I have two other identical APs (same model and board) but WiFi CAPSMAN does not see them. They too have the wireless package. Wireless CAPSMAN sees all 4 of them. WiFi CAPSMAN can successfully upgrade the MIPSE APs, but does not provision them, i.e. it does not show their radios. Why does WiFi see only 2 of the 4 mipsbe APs? Any idea how to make it see all 4 so I could upgrade all my APs from one CAPSMAN?
 
erlinden
Forum Guru
Forum Guru
Posts: 3051
Joined: Wed Jun 12, 2013 1:59 pm
Location: Netherlands

Re: Some CAPs seen from both WiFi and Wireless CAPSMAN

Wed Apr 30, 2025 6:36 pm

Please provide configs of all devices involved:
/export file=anynameyoulike
Remove serial and any other private info, post between code tags by using the </> button.
 
TomSF
Member Candidate
Member Candidate
Topic Author
Posts: 109
Joined: Tue Jun 27, 2017 2:12 am

Re: Some CAPs seen from both WiFi and Wireless CAPSMAN

Wed Apr 30, 2025 7:31 pm

I will restrict this to one board type.
I'm not sure what you mean by "post between code tags by using the </> button" but I'll try.
Seen by both capsman's
/
# 2025-04-30 10:10:03 by RouterOS 7.19rc1
# software id = GFDB-9JEH
#
# model = RB962UiGS-5HacT2HnT
# serial number = xxxxx
/interface bridge
add admin-mac=CC:2D:E0:3F:2C:9B auto-mac=no name=bridge port-cost-mode=short \
priority=0x9000
/interface wireless
# managed by CAPsMAN
# channel: 2412/20-Ce/gn(28dBm), SSID: xxxxx, local forwarding
set [ find default-name=wlan1 ] band=2ghz-b/g/n disabled=no mode=ap-bridge \
ssid=KGLAN station-roaming=enabled wireless-protocol=802.11 wps-mode=\
disabled
# managed by CAPsMAN
# channel: 5180/20-Ceee/ac(27dBm), SSID: KGLAN, local forwarding
set [ find default-name=wlan2 ] band=5ghz-onlyac channel-width=20/40mhz-Ce \
disabled=no mode=ap-bridge ssid=xxxx station-roaming=enabled \
wireless-protocol=802.11 wps-mode=disabled
/interface ethernet
set [ find default-name=sfp1 ] advertise=\
10M-baseT-half,10M-baseT-full,100M-baseT-half,100M-baseT-full
/interface list
add name=WAN
add name=LAN
/interface lte apn
set [ find default=yes ] ip-type=ipv4 use-network-apn=no
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk mode=dynamic-keys \
supplicant-identity=MikroTik
/ip smb users
set [ find default=yes ] disabled=yes
/routing table
add fib name=""
/interface bridge port
add bridge=bridge ingress-filtering=no interface=ether2 internal-path-cost=10 \
path-cost=10
add bridge=bridge ingress-filtering=no interface=ether3 internal-path-cost=10 \
path-cost=10
add bridge=bridge ingress-filtering=no interface=ether4 internal-path-cost=10 \
path-cost=10
add bridge=bridge ingress-filtering=no interface=ether5 internal-path-cost=10 \
path-cost=10
add bridge=bridge ingress-filtering=no interface=sfp1 internal-path-cost=10 \
path-cost=10
add bridge=bridge ingress-filtering=no interface=ether1 internal-path-cost=10 \
path-cost=10
add bridge=bridge interface=wlan2
add bridge=bridge interface=wlan1
/ip firewall connection tracking
set udp-timeout=10s
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/ip settings
set max-neighbor-entries=8192
/ipv6 settings
set accept-router-advertisements=yes max-neighbor-entries=8192
/interface list member
add interface=ether1 list=WAN
add interface=bridge list=LAN
/interface ovpn-server server
add auth=sha1,md5 mac-address=FE:39:05:63:8E:F9 name=ovpn-server1
/interface wifi cap
set discovery-interfaces=all enabled=yes
/interface wireless cap
#
set bridge=bridge discovery-interfaces=ether1 enabled=yes interfaces=\
wlan1,wlan2
/ip address
add address=192.168.1.17/24 interface=bridge network=192.168.1.0
/ip dhcp-client
# DHCP client can not run on slave or passthrough interface!
add interface=ether1
/ip ipsec profile
set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
/ip smb shares
set [ find default=yes ] directory=/flash/pub
/ipv6 nd
set [ find default=yes ] advertise-dns=no
/system clock
set time-zone-name=America/Denver
/system identity
set name=MTAP-SHP
/system package update
set channel=testing
/system routerboard settings
# Firmware upgraded successfully, please reboot for changes to take effect!
set auto-upgrade=yes boot-device=nand-only
/tool bandwidth-server
set authenticate=no
/

Seen by one capsman (wireless)
# 2025-04-30 10:07:12 by RouterOS 7.19rc1
# software id = YKQF-RKBK
#
# model = RB962UiGS-5HacT2HnT
# serial number = xxxxx
/interface bridge
add admin-mac=CC:2D:E0:32:9B:E7 auto-mac=no comment=defconf name=bridgeLocal \
port-cost-mode=short
/interface wireless
# managed by CAPsMAN
# channel: 2442/20-Ce/gn(28dBm), SSID: xxxxx, local forwarding
set [ find default-name=wlan1 ] band=2ghz-g/n disabled=no mode=ap-bridge \
ssid=KGLAN station-roaming=enabled wireless-protocol=802.11 wps-mode=\
disabled
# managed by CAPsMAN
# channel: 5805/20-eeeC/ac(27dBm), SSID: xxxxx, local forwarding
set [ find default-name=wlan2 ] band=5ghz-onlyac channel-width=20/40mhz-Ce \
disabled=no mode=ap-bridge ssid=xxxxx station-roaming=enabled \
wireless-protocol=802.11 wps-mode=disabled
/interface ethernet
set [ find default-name=sfp1 ] advertise=\
10M-baseT-half,10M-baseT-full,100M-baseT-half,100M-baseT-full
/interface ethernet switch
set 0 cpu-flow-control=no
/interface list
add name=WAN
add name=LAN
/interface lte apn
set [ find default=yes ] ip-type=ipv4 use-network-apn=no
/interface wireless security-profiles
set [ find default=yes ] authentication-types=\
wpa-psk,wpa2-psk,wpa-eap,wpa2-eap group-ciphers=tkip,aes-ccm \
group-key-update=30m mode=dynamic-keys supplicant-identity=MikroTik \
unicast-ciphers=tkip,aes-ccm
/ip smb users
set [ find default=yes ] disabled=yes
/interface bridge port
add bridge=bridgeLocal comment=defconf ingress-filtering=no interface=ether1 \
internal-path-cost=10 path-cost=10
add bridge=bridgeLocal comment=defconf ingress-filtering=no interface=ether2 \
internal-path-cost=10 path-cost=10
add bridge=bridgeLocal comment=defconf ingress-filtering=no interface=ether3 \
internal-path-cost=10 path-cost=10
add bridge=bridgeLocal comment=defconf ingress-filtering=no interface=ether4 \
internal-path-cost=10 path-cost=10
add bridge=bridgeLocal comment=defconf ingress-filtering=no interface=ether5 \
internal-path-cost=10 path-cost=10
add bridge=bridgeLocal comment=defconf ingress-filtering=no interface=sfp1 \
internal-path-cost=10 path-cost=10
add bridge=bridgeLocal interface=wlan2
add bridge=bridgeLocal interface=wlan1
/ip firewall connection tracking
set udp-timeout=10s
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/ip settings
set max-neighbor-entries=8192
/ipv6 settings
set accept-router-advertisements=yes max-neighbor-entries=8192
/interface list member
add interface=ether1 list=WAN
add interface=bridgeLocal list=LAN
/interface ovpn-server server
add auth=sha1,md5 mac-address=FE:5C:D5:EB:7E:38 name=ovpn-server1
/interface wireless cap
#
set bridge=bridgeLocal discovery-interfaces=bridgeLocal enabled=yes \
interfaces=wlan1,wlan2
/ip address
add address=192.168.1.12/24 interface=bridgeLocal network=192.168.1.0
/ip dhcp-client
# Interface not active
add comment=defconf interface=ether1
/ip ipsec profile
set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
/ip smb shares
set [ find default=yes ] directory=/flash/pub
/ipv6 firewall filter
add action=drop chain=forward disabled=yes in-bridge-port=ether3 log=yes \
log-prefix=Polisy protocol=tcp
add action=drop chain=forward disabled=yes log=yes log-prefix=Polisy \
out-bridge-port=ether3 protocol=tcp
/system clock
set time-zone-name=America/Denver
/system identity
set name=MTAP-GC
/system package local-update mirror
set enabled=yes primary-server=192.168.1.1 user=admintjk
/system package local-update update-package-source
add address=192.168.1.1 user=xxxxx
/system package update
set channel=testing
/system routerboard settings
# Firmware upgraded successfully, please reboot for changes to take effect!
set auto-upgrade=yes
/tool bandwidth-server
set authenticate=no
/tool sniffer
set file-name=Roku filter-mac-address="34:97:F6:B6:D4:CE/FF:FF:FF:FF:FF:FF,AC:\
AE:19:EE:2D:31/FF:FF:FF:FF:FF:FF,C8:3A:6B:F6:89:85/FF:FF:FF:FF:FF:FF" \
memory-limit=1000KiB
/
 
TrevinLC1997
newbie
Posts: 32
Joined: Mon Jan 06, 2025 7:51 am

Re: Some CAPs seen from both WiFi and Wireless CAPSMAN

Sat May 03, 2025 2:17 am

This is not a new problem, I am just getting around to asking about it. WiFi CAPSMAN sees two MIPSBE APs (boards RBwAPG-5HacT2HnD and RB962UiGS-5HacT2HnT). Both of those APs have the wireless package. I have two other identical APs (same model and board) but WiFi CAPSMAN does not see them. They too have the wireless package. Wireless CAPSMAN sees all 4 of them. WiFi CAPSMAN can successfully upgrade the MIPSE APs, but does not provision them, i.e. it does not show their radios. Why does WiFi see only 2 of the 4 mipsbe APs? Any idea how to make it see all 4 so I could upgrade all my APs from one CAPSMAN?

WiFi capsman only works with those that support the wifi-qcom package. For those AP's that aren't seen. Do you have the wireless package installed or the wifi-qcom? (wifi-qcom-ac for wifi 5 or wifi-qcom for >= wifi 6)
Screenshot_20250428_125658png.png
Also I looked through your config you posted and the one that can be seen has the line, which indicates that you have wifi-qcom installed
/interface wifi cap
while the one that can't be seen doesn't, so I do believe this is your problem
You do not have the required permissions to view the files attached to this post.
 
TomSF
Member Candidate
Member Candidate
Topic Author
Posts: 109
Joined: Tue Jun 27, 2017 2:12 am

Re: Some CAPs seen from both WiFi and Wireless CAPSMAN

Sat May 03, 2025 3:26 am

I think you are right but things do not add up. Winbox only shows the wireless package installed for both. However, the one that can be seen by both wifi and wireless capsman has both a wifi and wireless interface in the configuration I posted. The one that can only be seen by wireless only has a wireless interface in the configuration I posted. For the one that can be seen by both, Winbox does not show a WiFi interface in Interfaces or an interface in WiFi but it is in the configuration I posted. The only thing Winbox shows me are wireless interfaces. Any idea where that wifi interface in the posted configuration came from and why I cannot see it anywhere in winbox?
 
TrevinLC1997
newbie
Posts: 32
Joined: Mon Jan 06, 2025 7:51 am

Re: Some CAPs seen from both WiFi and Wireless CAPSMAN

Sat May 03, 2025 3:46 am

I think you are right but things do not add up. Winbox only shows the wireless package installed for both. However, the one that can be seen by both wifi and wireless capsman has both a wifi and wireless interface in the configuration I posted. The one that can only be seen by wireless only has a wireless interface in the configuration I posted. For the one that can be seen by both, Winbox does not show a WiFi interface in Interfaces or an interface in WiFi but it is in the configuration I posted. The only thing Winbox shows me are wireless interfaces. Any idea where that wifi interface in the posted configuration came from and why I cannot see it anywhere in winbox?
Did some more digging and learned that the wifi-qcom (WiFi capsman) is unsupported by any device with a MIPSBE cpu which both of your units have. The direct quote from the Mikrotik WiFi documentation, "Incompatible: RB4011iGS+5HacQ2HnD-IN (no support for the 2.4GHz interface), Cube 60Pro ac (no support for 60GHz interface), wAP ac (RBwAPG-5HacT2HnD) and all other devices with a MIPSBE CPU"

So that is likely why you can't see it in packages. I also manually downloaded the extra files to see if it's included in there which its not. Only thing I could assume is if the package was manually installed somehow.
 
TomSF
Member Candidate
Member Candidate
Topic Author
Posts: 109
Joined: Tue Jun 27, 2017 2:12 am

Re: Some CAPs seen from both WiFi and Wireless CAPSMAN

Sat May 03, 2025 4:23 am

Yes, I had always understood that wifi-qcom did not work with MIPSBE and I too looked for it in the extra packages. In the early days when routerOS first introduced WiFi capsman, there were instructions to delete some packages, install some packages, etc. I do not remember the exact instructions. Chances are I did not follow those instructions exactly and ended up with a wifi interface where there shouldn't be one and it has just hung around in the background.
 
TomSF
Member Candidate
Member Candidate
Topic Author
Posts: 109
Joined: Tue Jun 27, 2017 2:12 am

Re: Some CAPs seen from both WiFi and Wireless CAPSMAN

Sun May 04, 2025 6:24 pm

I figured this out. Those that could be seen by wifi capsman had wifi cap enabled on the MIPSBE APs with a discovery interface of All. There are no wifi interfaces but cap can still be configured, enabled and disabled. Once enabled, wifi capsman can see the APs. Although there is nothing that can be configured with wifi capsman, I can upgrade the APs with wifi capsman. Thanks to TrevinLC1997 for looking at the config files and spotting the wifi cap entry.