I recently added a second wAP AC to my wireless network and dumped the same config I use on this device as my other AP. Now I cant connect to the 5 ghz wifi on either wAP AC, but the 2 ghz radios are working fine. My cAP AC is still working fine. Also my internet speed has come to a crawl. Can anyone take a look at my configuration and see what I might be missing to resolve the slow speed and WIFI connectivity issue?
Thanks for any help!
Code: Select all
/command Use command at the base level
[admin@MikroTik] > export hide-sensitive
# dec/09/2021 23:59:36 by RouterOS 6.49.1
# software id = P73V-QLYE
#
# model = RB2011UiAS-2HnD
# serial number = B9080BFFC483
/caps-man channel
add band=2ghz-onlyn control-channel-width=20mhz name=channel1
add band=5ghz-a/n/ac control-channel-width=20mhz name=channel2
/interface bridge
add admin-mac=C4:AD:34:59:11:92 auto-mac=no comment=defconf name=bridge
/interface ethernet
set [ find default-name=ether1 ] advertise="10M-half,10M-full,100M-half,100M-ful\
l,1000M-half,1000M-full,2500M-full,5000M-full,10000M-full"
set [ find default-name=ether10 ] poe-out=off
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX \
country="united states" disabled=no distance=indoors frequency=auto mode=\
ap-bridge ssid="MikroTik 2GHz" station-roaming=enabled wireless-protocol=\
802.11
/caps-man datapath
add bridge=bridge name=datapath1
/caps-man rates
add basic=1Mbps ht-basic-mcs="mcs-3,mcs-4,mcs-5,mcs-6,mcs-7,mcs-11,mcs-12,mcs-13\
,mcs-14,mcs-15,mcs-19,mcs-20,mcs-21,mcs-22,mcs-23" ht-supported-mcs="mcs-3,m\
cs-4,mcs-5,mcs-6,mcs-7,mcs-11,mcs-12,mcs-13,mcs-14,mcs-15,mcs-19,mcs-20,mcs-\
21,mcs-23" name=rate1 supported=24Mbps,36Mbps,48Mbps,54Mbps vht-basic-mcs=\
mcs0-9 vht-supported-mcs=mcs0-9
/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
name=security1
/caps-man configuration
add channel=channel1 datapath=datapath1 datapath.bridge=bridge mode=ap name=\
2ghz rates=rate1 security=security1 ssid="MikroTik 2GHz"
add channel=channel2 datapath=datapath1 datapath.bridge=bridge mode=ap name=\
5ghz rates=rate1 security=security1 ssid="MikroTik 5GHz"
/caps-man interface
add configuration=2ghz disabled=no l2mtu=1600 mac-address=B8:69:F4:78:56:5E \
master-interface=none name="Barn 2 GHZ" radio-mac=B8:69:F4:78:56:5E \
radio-name=B869F478565E security=security1
add configuration=5ghz disabled=no l2mtu=1600 mac-address=B8:69:F4:78:56:5D \
master-interface=none name="Barn 5GHZ" radio-mac=B8:69:F4:78:56:5D \
radio-name=B869F478565D security=security1
add configuration=2ghz disabled=no l2mtu=1600 mac-address=B8:69:F4:FF:49:3D \
master-interface=none name="Garage 2GHZ" radio-mac=B8:69:F4:FF:49:3D \
radio-name=B869F4FF493D security=security1
add configuration=5ghz disabled=no l2mtu=1600 mac-address=B8:69:F4:FF:49:3C \
master-interface=none name="Garage 5 GHZ" radio-mac=B8:69:F4:FF:49:3C \
radio-name=B869F4FF493C security=security1
add configuration=2ghz disabled=no l2mtu=1600 mac-address=C4:AD:34:E7:14:F2 \
master-interface=none name="Upstairs 2GHZ" radio-mac=C4:AD:34:E7:14:F2 \
radio-name=C4AD34E714F2 security=security1
add channel.band=5ghz-a/n/ac channel.control-channel-width=20mhz configuration=\
5ghz disabled=no l2mtu=1600 mac-address=C4:AD:34:E7:14:F3 master-interface=\
none name="Upstairs 5 GHZ" radio-mac=C4:AD:34:E7:14:F3 radio-name=\
C4AD34E714F3 security=security1
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk eap-methods="" \
mode=dynamic-keys supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge name=defconf
/queue simple
add max-limit=384k/10M name="All Bandwidth" target=192.168.88.0/24
/caps-man access-list
add action=accept allow-signal-out-of-range=10s disabled=yes signal-range=\
-88..120 ssid-regexp=""
add action=reject allow-signal-out-of-range=10s disabled=yes signal-range=\
-120..-89 ssid-regexp=""
/caps-man manager
set enabled=yes
/caps-man provisioning
add action=create-dynamic-enabled disabled=yes identity-regexp="cap[1-6]" \
master-configuration=2ghz
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=ether6
add bridge=bridge comment=defconf interface=ether7
add bridge=bridge comment=defconf interface=ether8
add bridge=bridge comment=defconf interface=ether9
add bridge=bridge comment=defconf interface=ether10
add bridge=bridge comment=defconf interface=sfp1
add bridge=bridge comment=defconf interface=wlan1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface detect-internet
set detect-interface-list=all
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/interface wireless access-list
add interface=wlan1 mac-address=20:DF:B9:51:98:F8
add interface=wlan1 mac-address=66:4B:13:01:FB:FB
add interface=wlan1 mac-address=9C:7B:EF:F7:2D:A1
add interface=wlan1 mac-address=E4:75:DC:1A:D2:E0
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=\
192.168.88.0
/ip dhcp-client
add comment=defconf disabled=no interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan
/ip firewall address-list
add address=0.0.0.0/8 comment="Self-Identification [RFC 3330]" list=Bogons
add address=10.0.0.0/8 comment="Private[RFC 1918] - CLASS A # Check if you need \
this subnet before enable it" list=Bogons
add address=127.0.0.0/8 comment="Loopback [RFC 3330]" list=Bogons
add address=169.254.0.0/16 comment="Link Local [RFC 3330]" list=Bogons
add address=172.16.0.0/12 comment="Private[RFC 1918] - CLASS B # Check if you ne\
ed this subnet before enable it" list=Bogons
add address=192.0.2.0/24 comment="Reserved - IANA - TestNet1" list=Bogons
add address=192.88.99.0/24 comment="6to4 Relay Anycast [RFC 3068]" list=Bogons
add address=198.18.0.0/15 comment="NIDB Testing" list=Bogons
add address=198.51.100.0/24 comment="Reserved - IANA - TestNet2" list=Bogons
add address=203.0.113.0/24 comment="Reserved - IANA - TestNet3" list=Bogons
add address=224.0.0.0/4 comment=\
"MC, Class D, IANA # Check if you need this subnet before enable it" list=\
Bogons
/ip firewall filter
add action=accept chain=forward comment="defconf: accept established,related" \
connection-state=established,related
add action=drop chain=forward comment="defconf: drop invalid" connection-state=\
invalid
add action=accept chain=input port=69 protocol=udp
add action=accept chain=forward port=69 protocol=udp
add action=drop chain=forward comment=\
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new disabled=yes in-interface=ether1
add action=drop chain=forward comment="Drop to bogon list" disabled=yes \
dst-address-list=Bogons
add action=accept chain=input protocol=icmp
add action=accept chain=input connection-state=established
add action=accept chain=input connection-state=related
add action=drop chain=input disabled=yes in-interface=ether1
add action=accept chain=input comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=\
"defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related
add action=accept chain=forward comment=\
"defconf: accept established,related, untracked" connection-state=\
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=\
invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" \
connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=\
out,none out-interface-list=WAN
/lcd
set enabled=no touch-screen=disabled
/lcd interface pages
set 0 interfaces=wlan1
/system clock
set time-zone-name=America/New_York
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
[admin@MikroTik] >