Previously had an Hap-ac3 setup and config and have moved to ax2 devices controlled via capsman via a rb5009. Now I am finding I cannot add all my smart lights I previously set up. the devices just never add and gain an ip address. I tried adding thewifi6n to see if it picked up a sipler radio but my app just saw it as 5g so wouldnt use it. Any ideas most welcome, thanks

/interface wifi
add configuration=cfg2 disabled=no name=wifi1 radio-mac=78:9A:18:59:B4:xx
add configuration=cfg1 disabled=no name=wifi2 radio-mac=78:9A:18:59:B4:xx
add configuration=cfg4 configuration.mode=ap .ssid=wifi6n disabled=no mac-address=7A:9A:18:59:B4:xx\
master-interface=wifi2 name=wifi3 security.ft=yes
add configuration=cfg2 disabled=no name=wifi4 radio-mac=48:A9:8A:E7:EC:bb
add configuration=cfg1 disabled=no name=wifi5 radio-mac=48:A9:8A:E7:EC:bc
add configuration=cfg2 disabled=no name=wifi6 radio-mac=48:A9:8A:E7:EC:ee
add configuration=cfg1 disabled=no name=wifi7 radio-mac=48:A9:8A:E7:EC:ef
/interface wifi cap
set discovery-interfaces=bridge
/interface wifi capsman
set ca-certificate=auto certificate=auto enabled=yes package-path="" require-peer-certificate=no upgrade-policy=\
none
/interface wifi configuration
add channel.band=2ghz-ax .width=20/40mhz country=Australia datapath.bridge=bridge disabled=no mode=ap name=cfg1 \
security=sec1 security.ft=yes .ft-over-ds=yes .wps=push-button ssid=Wifi6
add channel.band=5ghz-ax .width=20/40/80mhz country=Australia datapath.bridge=bridge disabled=no mode=ap name=\
cfg2 security=sec1 security.ft=yes .ft-over-ds=yes .wps=push-button ssid=wifi65g
add channel.band=5ghz-ac .width=20/40/80mhz country=Australia datapath.bridge=bridge disabled=no mode=ap name=\
cfg3 security=sec1 security.ft=yes .ft-over-ds=yes ssid=wifi6MT5g
add channel.band=2ghz-n .width=20mhz country=Australia datapath.bridge=bridge disabled=no mode=ap name=cfg4 \
security=sec1 security.ft=yes .ft-over-ds=yes ssid=wifi6mt
/interface wifi provisioning
add action=create-enabled disabled=no master-configuration=cfg1 name-format="" supported-bands=2ghz-ax
add action=create-enabled disabled=no master-configuration=cfg2 name-format="" supported-bands=5ghz-ax
add action=create-dynamic-enabled disabled=no master-configuration=cfg3 name-format="" supported-bands=5ghz-ac
add action=create-enabled disabled=no master-configuration=cfg4 name-format="" supported-bands=2ghz-n

All I can add here is that some older devices just don't seem to work with Wi-Fi 6 even if you disable WPA3 PSK and stick with WPA/WPA2. For example, my ten year old Kindle can't even see the network. Could be barking up the wrong tree?

Your posted config shows a security profile "sec1" being used but I don't see it declared anywhere. Can you please post it? My best guess is that you are trying to use WPA3. A lot of IoT devices only do WPA2.

Your posted config shows a security profile "sec1" being used but I don't see it declared anywhere. Can you please post it? My best guess is that you are trying to use WPA3. A lot of IoT devices only do WPA2.

/interface wifi security
add authentication-types=wpa2-psk,wpa3-psk disable-pmkid=yes disabled=no encryption="" name=sec1 wps=push-button

Have you tried setting the encryption ciphers? I have the CCMP and GCMP ones selected on my setup. Or perhaps try setting nothing more than wpa2.

Have you tried setting the encryption ciphers? I have the CCMP and GCMP ones selected on my setup. Or perhaps try setting nothing more than wpa2.

Just tried adding those cyphers, no luck. will have to try fiddling with lower security maybe on a new security profile just for this

Aside from the chitty chatty nature of some IoT products, I've gotten pretty exasperated at how hard it is to get them to play with modern, secure networks. I'd be curious to see what you can sort out.

In my case, adding log of wifi,debug helped me a lot to troubleshoot a similar case with an old wireless printer.

I've already had a device only able to connect via WPA (water conditioner, installed in 2021 so it's not that it's ancient). Nothing else worked.
Separate SSID on separate isolated VLAN and done.

You were correct I had to add a second config with wpa-psk and they all now connect. currently that is on a hidden ssid but looks like I will have to add a seperate Vlan for them ( I havent done VLans yet as there is a lot of differing info on how to do them for wifi devices so if anyone has a simplified config for that would love to see it.

Here https://github.com/ngoehring/cAP-AX-con ... N%20config is the config for my cAP AX with a number of vlans. Perhaps it's of help.