Community discussions

MikroTik App
 
Szesi
just joined
Topic Author
Posts: 5
Joined: Mon Nov 20, 2023 10:32 am

hapax2 roaming problem

Mon Feb 12, 2024 12:43 pm

Hi

I have 2 hapax2 devices chained, one of them is POE powered from the other.
Internet - hapax2_fsz - (POE) - hapax2_em (AP only)

The hapax2_fsz device is running caps manager. Everything is working well but roaming.
When roaming occurs the roamed device has no network data for about 3-5 minutes. Wifi is connected, but no data. After 3-5 minutes it is working again.
The romaing log ok:
MAC@hapax2_em-5g roamed to MAC@hapax2_fsz-5g

May be some MAC learning problem in the central device (hapax2_fsz) after roaming?

Could anyone help?

ROS 7.13.4
SSID: Vanilla, FT enabled

/interface export verbose:
hapax2_fsz
# 2024-02-12 11:26:29 by RouterOS 7.13.4
#
# model = C52iG-5HaxD2HaxD
/interface bridge
add name=bridge-lan port-cost-mode=short protocol-mode=none
/interface ethernet
set [ find default-name=ether1 ] name=ether1-hapax2_em
set [ find default-name=ether2 ] name=ether2-rb750g
set [ find default-name=ether3 ] name=ether3-orangepi
set [ find default-name=ether4 ] name=ether4-nas
set [ find default-name=ether5 ] name=ether5-wan
/interface wireguard
add listen-port=xxxx mtu=1420 name=wireguard1
/interface vlan
/interface pppoe-client
add add-default-route=yes disabled=no interface=ether5-wan max-mtu=1480 name=\
    pppoe-wan1 use-peer-dns=yes user=xxxx-jl2
/interface list
add name="inside LAN"
add name="outside WAN"
add name=discover
/interface wifi channel
add disabled=no frequency=2412 name=01-20MHz width=20mhz
add disabled=no frequency=2437 name=06-20MHz width=20mhz
add disabled=no frequency=2462 name=11-20MHz width=20mhz
add disabled=no frequency=5180 name="36-48(EU42)_80MHz_noDFS" width=\
    20/40/80mhz
add disabled=no frequency=5260 name="52-64(EU58)_80MHz" width=20/40/80mhz
add disabled=no frequency=5500 name="100-112(EU106)_80MHz" width=20/40/80mhz
add disabled=no frequency=5580 name="116-128(EU122)_80MHz" width=20/40/80mhz
add disabled=no frequency=5660 name="132-144(EU138)_80MHz" width=20/40/80mhz
add disabled=no frequency=5745 name="149-161(EU155)_80MHz_noDFS" width=\
    20/40/80mhz
/interface wifi configuration
add country="United States" datapath.bridge=bridge-lan disabled=no mode=ap \
    name=cfg-Vanilla security.authentication-types=wpa2-psk .encryption="" \
    .ft=yes .ft-mobility-domain=0xABC1 .ft-over-ds=yes \
    .management-protection=disabled .wps=disable ssid=Vanilla \
    steering.neighbor-group=Vanilla
add country="United States" datapath.bridge=bridge-lan disabled=no mode=ap \
    name=cfg-Vanilla2 security.authentication-types=wpa2-psk .ft=yes \
    .ft-mobility-domain=0xABC2 .ft-over-ds=yes .management-protection=\
    disabled .wps=disable ssid=Vanilla2 steering.neighbor-group=Vanilla2
add country="United States" datapath.bridge=bridge-lan disabled=no mode=ap \
    name=cfg-VanillaIO security.authentication-types=wpa2-psk .ft=yes \
    .ft-mobility-domain=0xABC3 .ft-over-ds=yes .management-protection=\
    disabled .wps=disable ssid=VanillaIO steering.neighbor-group=VanillaIO
/interface wifi
add channel="149-161(EU155)_80MHz_noDFS" configuration=cfg-Vanilla \
    configuration.mode=ap .tx-power=24 disabled=no mtu=1500 name=hapax2_em-5g \
    radio-mac=78:9A:18:DE:E9:57 steering.neighbor-group=Vanilla
/interface wifi datapath
add bridge=bridge-lan disabled=no name=datapath-lan
/interface wifi security
add disabled=no name=Vanilla wps=disable
/interface wifi
add channel=01-20MHz channel.frequency=2462 configuration=cfg-Vanilla2 \
    configuration.mode=ap .tx-power=24 datapath=datapath-lan disabled=no \
    name=hapax2_em-2g radio-mac=78:9A:18:DE:E9:58 security=Vanilla \
    security.authentication-types=wpa2-psk
add configuration=cfg-VanillaIO configuration.mode=ap disabled=no \
    mac-address=7A:9A:18:DE:E9:58 master-interface=hapax2_em-2g name=\
    hapax2_em-2g-iot
set [ find default-name=wifi2 ] channel=06-20MHz channel.frequency=2437 \
    configuration=cfg-Vanilla2 configuration.mode=ap .tx-power=24 datapath=\
    datapath-lan disabled=no name=hapax2_fsz-2g security=Vanilla
add configuration=cfg-VanillaIO configuration.mode=ap datapath=datapath-lan \
    disabled=no mac-address=7A:9A:18:DE:E9:73 master-interface=hapax2_fsz-2g \
    name=hapax2_fsz-2g-iot security=Vanilla
set [ find default-name=wifi1 ] channel="36-48(EU42)_80MHz_noDFS" \
    channel.frequency=5180 configuration=cfg-Vanilla configuration.mode=ap \
    .tx-power=24 datapath.bridge=bridge-lan disabled=no mtu=1500 name=\
    hapax2_fsz-5g security=Vanilla security.authentication-types=wpa2-psk \
    steering.neighbor-group=Vanilla
/interface bridge port
add bridge=bridge-lan interface=ether1-hapax2_em internal-path-cost=10 \
    path-cost=10
add bridge=bridge-lan interface=ether2-rb750g internal-path-cost=10 \
    path-cost=10
add bridge=bridge-lan interface=ether4-nas internal-path-cost=10 path-cost=10
add bridge=bridge-lan interface=ether3-orangepi internal-path-cost=10 \
    path-cost=10
/interface detect-internet
set detect-interface-list="outside WAN"
/interface list member
add interface=ether1-hapax2_em list=discover
add interface=ether2-rb750g list=discover
add interface=ether3-orangepi list=discover
add interface=ether4-nas list=discover
add interface=pppoe-wan1 list="outside WAN"
add interface=bridge-lan list="inside LAN"
/interface wifi access-list
/interface wifi capsman
set enabled=yes interfaces=bridge-lan package-path="" \
    require-peer-certificate=no upgrade-policy=none
/interface wireguard peers
hapax2_em
# 2024-02-12 11:26:07 by RouterOS 7.13.4
#
# model = C52iG-5HaxD2HaxD
/interface bridge
add name=bridge-lan port-cost-mode=short protocol-mode=none
/interface ethernet
set [ find default-name=ether1 ] name=ether1-hapax2_fsz
/interface wifi channel
add disabled=no frequency=2412 name=01-20MHz width=20mhz
add disabled=no frequency=2437 name=06-20MHz width=20mhz
add disabled=no frequency=2462 name=11-20MHz width=20mhz
add disabled=no frequency=5180 name="36-48(EU42)_80MHz_noDFS" width=\
    20/40/80mhz
add disabled=no frequency=5260 name="52-64(EU58)_80MHz" width=20/40/80mhz
add disabled=no frequency=5500 name="100-112(EU106)_80MHz" width=20/40/80mhz
add disabled=no frequency=5580 name="116-128(EU122)_80MHz" width=20/40/80mhz
add disabled=no frequency=5660 name="132-144(EU138)_80MHz" width=20/40/80mhz
add disabled=no frequency=5745 name="149-161(EU155)_80MHz_noDFS" width=\
    20/40/80mhz
/interface wifi configuration
add channel="36-48(EU42)_80MHz_noDFS" country="United States" \
    datapath.bridge=bridge-lan disabled=no mode=ap name=cfg-Vanilla \
    security.authentication-types=wpa2-psk .ft=yes .wps=disable ssid=Vanilla
add channel=06-20MHz country="United States" datapath.bridge=bridge-lan \
    disabled=no mode=ap name=cfg-Vanilla2 security.authentication-types=\
    wpa2-psk .ft=yes .wps=disable ssid=Vanilla2
add country="United States" datapath.bridge=bridge-lan disabled=no mode=ap \
    name=cfg-VanillaIO security.authentication-types=wpa2-psk .ft=yes .wps=\
    disable ssid=VanillaIO
/interface wifi datapath
add bridge=bridge-lan disabled=yes name=datapath-lan
/interface wifi security
add authentication-types=wpa2-psk disabled=no encryption="" ft=yes name=\
    Vanilla wps=disable
add authentication-types=wpa2-psk disabled=yes encryption="" ft=yes name=\
    Vanilla-guest wps=disable
/interface wifi
# managed by CAPsMAN
# mode: AP, SSID: Vanilla2, channel: 2462/ax
set [ find default-name=wifi2 ] channel=11-20MHz channel.frequency=2462 \
    configuration=cfg-Vanilla2 configuration.manager=capsman .mode=ap \
    disabled=no name=hapax2_em-2g security=Vanilla
# managed by CAPsMAN
# mode: AP, SSID: VanillaIO
add configuration=cfg-VanillaIO configuration.mode=ap datapath=datapath-lan \
    disabled=no mac-address=7A:9A:18:DE:E9:58 master-interface=hapax2_em-2g \
    name=hapax2_em-2g-iot security=Vanilla
# managed by CAPsMAN
# mode: AP, SSID: Vanilla, channel: 5745/ax/Ceee
set [ find default-name=wifi1 ] channel.frequency=5745 configuration.country=\
    "United States" .manager=capsman .mode=ap .ssid=Vanilla datapath.bridge=\
    bridge-lan disabled=no name=hapax2_em-5g security=Vanilla \
    security.authentication-types=wpa2-psk
/interface wifi steering
add disabled=no name=steering1
/interface bridge port
add bridge=bridge-lan interface=ether3 internal-path-cost=10 path-cost=10
add bridge=bridge-lan interface=ether1-hapax2_fsz internal-path-cost=10 \
    path-cost=10
add bridge=bridge-lan interface=ether2 internal-path-cost=10 path-cost=10
add bridge=bridge-lan interface=ether4 internal-path-cost=10 path-cost=10
add bridge=bridge-lan interface=ether5 internal-path-cost=10 path-cost=10
/interface wifi access-list
/interface wifi cap
set discovery-interfaces=bridge-lan enabled=yes slaves-static=yes

 
ips
Frequent Visitor
Frequent Visitor
Posts: 78
Joined: Mon Oct 09, 2023 6:48 pm
Location: Italy

Re: hapax2 roaming problem

Mon Feb 12, 2024 10:03 pm

Documentation (https://help.mikrotik.com/docs/display/ROS/WiFi) says:
If the CAP is hAP ax2 or hAP ax3, it is strongly recommended to enable RSTP in the bridge configuration, on the CAP

configuration.manager should only be set on the CAP device itself, don't pass it to the CAP or configuration profile that you provision.
Not completely sure what does it mean, but I would try to change the protocol mode (of both bridges?)
 
erlinden
Forum Guru
Forum Guru
Posts: 1975
Joined: Wed Jun 12, 2013 1:59 pm
Location: Netherlands

Re: hapax2 roaming problem

Tue Feb 13, 2024 9:02 am

How did the hapax2_em get all these settings? Just reset with no default and set it to CAPS Mode (haven't tested it):
/system reset-configuration caps-mode=yes
Or by pressing the reset button:
https://help.mikrotik.com/docs/display/ROS/Reset+Button

And indeed, use RSTP:
https://help.mikrotik.com/docs/display/ ... e+Protocol

And set the connect-priority=0/1
 
Szesi
just joined
Topic Author
Posts: 5
Joined: Mon Nov 20, 2023 10:32 am

Re: hapax2 roaming problem

Wed Feb 14, 2024 2:18 pm

Documentation (https://help.mikrotik.com/docs/display/ROS/WiFi) says:
If the CAP is hAP ax2 or hAP ax3, it is strongly recommended to enable RSTP in the bridge configuration, on the CAP

configuration.manager should only be set on the CAP device itself, don't pass it to the CAP or configuration profile that you provision.
Not completely sure what does it mean, but I would try to change the protocol mode (of both bridges?)

I will try RSTP at home.
Configuration manager setting not set in the provisioned CAPSMAN profile, only at the CAP device wifi interface.
thx
 
Szesi
just joined
Topic Author
Posts: 5
Joined: Mon Nov 20, 2023 10:32 am

Re: hapax2 roaming problem

Wed Feb 14, 2024 2:35 pm

How did the hapax2_em get all these settings? Just reset with no default and set it to CAPS Mode (haven't tested it):
/system reset-configuration caps-mode=yes
Or by pressing the reset button:
https://help.mikrotik.com/docs/display/ROS/Reset+Button

And indeed, use RSTP:
https://help.mikrotik.com/docs/display/ ... e+Protocol

And set the connect-priority=0/1

CAP settings has a discovery function. I used "capsman-address" setting previously but it is not needed. Possibly caused by the ip discovery function.
CAPSMAN - CAP configuration working well, there is no problem here.
/ip neighbor discovery-settings
set discover-interface-list=all

I will try RSTP at home

thx
 
Szesi
just joined
Topic Author
Posts: 5
Joined: Mon Nov 20, 2023 10:32 am

Re: hapax2 roaming problem

Thu Feb 15, 2024 11:25 am

Hi

I enabled RSTP on both device and it fixed the roaming problem!!!

RSTP means Rapid Spanning Tree Protocol, its task is to avoid Layer2 loops...
But works

thank you very much
 
Szesi
just joined
Topic Author
Posts: 5
Joined: Mon Nov 20, 2023 10:32 am

Re: hapax2 roaming problem

Fri Feb 16, 2024 6:37 pm

I think it is some hw-offload problem. RSTP set hw-offloading disabled.

"Currently, HW offloaded bridge support for the IPQ-PPE switch chip is still a work in progress. We recommend using, the default, non-HW offloaded bridge (enabled RSTP)."
https://help.mikrotik.com/docs/display/ ... Offloading

Who is online

Users browsing this forum: No registered users and 4 guests