Community discussions

MikroTik App
  4. RouterOS
  5. Beginner Basics

Wifi coverage for L009 and hAP AX lite HELP  [SOLVED]

Post Reply
 
yodaman
just joined
Topic Author
Posts: 10
Joined: Sat Sep 30, 2023 8:51 am

Wifi coverage for L009 and hAP AX lite HELP

Thu Feb 01, 2024 5:09 am

I have a L009UiGS-2HaxD-IN and hAP AX lite that are both on version 7.12.1. I've setup CAPsMAN the same as the example in the documentation[1]. I do have some differences in the configuration. I mirrored some settings that the L009 had already which is "wifi 1" and the "cap-wifi 1" is the hAP AX lite. The location is basically a rectangle and two floors. I have the L009 at the center of the house/rectangle but at the top and the hAP AX downstairs somewhat offset from the L009 and I'll admit, probably too close to the L009. The house is wooden frame and drywall and we don't have a lot of other networks close to us.

I'm having a couple different issues. Coverage on the right side of the house isn't great up or down, maybe a bar or two. I can be on the first floor and be fairly close to the center of the house and possibly 20-30ft from the L009 and my signal still isn't strong. Speed wise, I'm getting roughly 40-60mbps. We have 1gig fiber line from the ISP that gets roughly 950+mbps on the wire. So I'm confused why my signal isn't great and why speeds are slow.

I feel like my CAPsMAN configuration isn't setup right and the L009 wifi isn't setup right as if they are not operating as a mesh network multi-access point setup(Sorry, don't know the technical name).

QUESTION:
1. What can I do to improve coverage?
2. What can I do to improve my CAPsMAN configuration? Is there any mistakes?
3. How can I increase wifi speeds?
4. How can I improve the client handoff from AP to AP?

Wifi config:
Code: Select all
[admin@L009] /interface/wifiwave2> actual-configuration print
 0 name="cap-wifi1" mac-address=48:A9:8A:96:C6:34 arp-timeout=auto 
   radio-mac=48:A9:8A:96:C6:34 
   configuration.ssid="SSID_Name" 
   security.authentication-types=wpa2-psk,wpa3-psk 
   .passphrase="password" .connect-priority=0 
   channel.band=2ghz-ax .width=20/40mhz .skip-dfs-channels=10min-cac 

 1 name="wifi1" l2mtu=1560 mac-address=78:9A:18:67:EA:C2 arp-timeout=auto 
   radio-mac=78:9A:18:67:EA:C2 
   configuration.mode=ap .ssid="SSID_Name" .manager=local 
   security.authentication-types=wpa2-psk,wpa3-psk 
   .passphrase="password" .connect-priority=0 
   channel.band=2ghz-ax .width=20/40mhz .skip-dfs-channels=10min-cac
I know there are a handful of other posts similar to this, but I'm new and I'd like ask again with my specific setup and hopefully learn from it. Any suggestions here, please let me know. I'm not a networking professional, but I know more than the average joe. Thank you ahead of time!!!

[1] https://help.mikrotik.com/docs/pages/vi ... ionexample:
Top
 
gigabyte091
Forum Guru
Forum Guru
Posts: 1226
Joined: Fri Dec 31, 2021 11:44 am
Location: Croatia

Re: Wifi coverage for L009 and hAP AX lite HELP  [SOLVED]

Thu Feb 01, 2024 5:38 am

Hello,

Can you please export your full configuration, from that we can say what to improve in your CAPsMAN cofiguration.

To enable roaming you need to enable FT and FT over DS in your capsman configuration.

What can be a problem with speed and range is interference from another APs in your area, also 40 MHz wide channel could decrease speed and coverage if APs are on the same channel, basically they are screaming at each other and interfere with operation. I would set channel to 20 MHz and manually assign frequencies so they don't overlap.
Top
 
yodaman
just joined
Topic Author
Posts: 10
Joined: Sat Sep 30, 2023 8:51 am

Re: Wifi coverage for L009 and hAP AX lite HELP

Thu Feb 01, 2024 6:00 pm

Hello,

Can you please export your full configuration, from that we can say what to improve in your CAPsMAN cofiguration.

To enable roaming you need to enable FT and FT over DS in your capsman configuration.

What can be a problem with speed and range is interference from another APs in your area, also 40 MHz wide channel could decrease speed and coverage if APs are on the same channel, basically they are screaming at each other and interfere with operation. I would set channel to 20 MHz and manually assign frequencies so they don't overlap.
What is "FT and FT over DS"? I haven't set the channels yet, but that makes sense, I should have done that from the start.

Here is the config, I did an "export compact".
Code: Select all
# 2024-02-01 09:54:44 by RouterOS 7.12.1
# software id = 8ZED-C43K
#
# model = L009UiGS-2HaxD
# serial number = HF3093TPNA4
/interface bridge
add admin-mac=78:9A:18:67:EA:BA auto-mac=no comment=defconf name=bridge
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wifiwave2 security
add authentication-types=wpa2-psk,wpa3-psk disabled=no name=sec1
/interface wifiwave2 configuration
add channel.band=2ghz-ax .skip-dfs-channels=10min-cac .width=20/40mhz \
    disabled=no name=2ghz security=sec1 security.connect-priority=0 ssid=\
    "SSID_HERE"
/interface wifiwave2
set [ find default-name=wifi1 ] channel.band=2ghz-ax .skip-dfs-channels=\
    10min-cac .width=20/40mhz configuration=2ghz configuration.manager=local \
    .mode=ap disabled=no security.authentication-types=wpa2-psk,wpa3-psk \
    .connect-priority=0
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp interface=bridge lease-time=10m name=defconf
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=ether6
add bridge=bridge comment=defconf interface=ether7
add bridge=bridge comment=defconf interface=ether8
add bridge=bridge comment=defconf interface=sfp1
add bridge=bridge comment=defconf interface=wifi1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/interface wifiwave2 cap
set enabled=yes
/interface wifiwave2 capsman
set ca-certificate=auto enabled=yes
/interface wifiwave2 provisioning
add action=create-dynamic-enabled master-configuration=2ghz supported-bands=\
    2ghz-ax,2ghz-n,2ghz-g
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=\
    192.168.88.0
/ip dhcp-client
add comment=defconf interface=ether1
/ip dhcp-server lease
add address=192.168.88.60 client-id=1:ec:71:db:33:78:ba comment=Comment \
    mac-address=EC:71:DB:33:78:BA server=defconf
add address=192.168.88.23 client-id=1:de:1a:56:82:21:c3 comment="Comment" \
    mac-address=DE:1A:56:82:21:C3 server=defconf
add address=192.168.88.18 mac-address=CC:6A:10:62:D7:89 server=defconf
add address=192.168.88.14 mac-address=CC:6A:10:62:D7:3D server=defconf
add address=192.168.88.107 client-id=1:80:2b:f9:95:15:cb comment="Comment" \
    mac-address=80:2B:F9:95:15:CB server=defconf
add address=192.168.88.194 comment="Comment" mac-address=BC:D7:D4:FA:2B:82 \
    server=defconf
add address=192.168.88.242 comment="Comment" mac-address=10:59:32:D2:FF:BF \
    server=defconf
add address=192.168.88.25 comment="Comment" mac-address=\
    BC:D7:D4:53:C7:AD server=defconf
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf dns-server=\
    192.168.88.11,8.8.8.8,8.8.4.4 gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
    invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=\
    "defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
    in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
    ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
    ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
    connection-state=established,related hw-offload=yes
add action=accept chain=forward comment=\
    "defconf: accept established,related, untracked" connection-state=\
    established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
    connection-state=invalid
add action=drop chain=forward comment=\
    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
    connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" \
    ipsec-policy=out,none out-interface-list=WAN
/ipv6 firewall address-list
add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
add address=::1/128 comment="defconf: lo" list=bad_ipv6
add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
add address=100::/64 comment="defconf: discard only " list=bad_ipv6
add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
/ipv6 firewall filter
add action=accept chain=input comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
    invalid
add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
    icmpv6
add action=accept chain=input comment="defconf: accept UDP traceroute" port=\
    33434-33534 protocol=udp
add action=accept chain=input comment=\
    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
    udp src-address=fe80::/10
add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
    protocol=udp
add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
    ipsec-ah
add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
    ipsec-esp
add action=accept chain=input comment=\
    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=input comment=\
    "defconf: drop everything else not coming from LAN" in-interface-list=\
    !LAN
add action=accept chain=forward comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
    connection-state=invalid
add action=drop chain=forward comment=\
    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
add action=drop chain=forward comment=\
    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
    hop-limit=equal:1 protocol=icmpv6
add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
    icmpv6
add action=accept chain=forward comment="defconf: accept HIP" protocol=139
add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
    500,4500 protocol=udp
add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
    ipsec-ah
add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
    ipsec-esp
add action=accept chain=forward comment=\
    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=forward comment=\
    "defconf: drop everything else not coming from LAN" in-interface-list=\
    !LAN
/system clock
set time-zone-name=America/Chicago
/system identity
set name=L009
/system note
set show-at-login=no
/system routerboard settings
set enter-setup-on=delete-key
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
Top
 
gigabyte091
Forum Guru
Forum Guru
Posts: 1226
Joined: Fri Dec 31, 2021 11:44 am
Location: Croatia

Re: Wifi coverage for L009 and hAP AX lite HELP

Thu Feb 01, 2024 6:53 pm

When you go to create configuration and you press to create new configuration you have tab FT and there you can find FT and FT over DS, that is for roaming.

You should first set channels, be sure to set it in that way so APs don't overlap. Also scan area for free channels and choose those channels with least amount of interference.
Top
 
yodaman
just joined
Topic Author
Posts: 10
Joined: Sat Sep 30, 2023 8:51 am

Re: Wifi coverage for L009 and hAP AX lite HELP

Thu Feb 01, 2024 7:54 pm

When you go to create configuration and you press to create new configuration you have tab FT and there you can find FT and FT over DS, that is for roaming.

You should first set channels, be sure to set it in that way so APs don't overlap. Also scan area for free channels and choose those channels with least amount of interference.
With the CAPsMAN configuration for the hAP AX Lite and the L009 being self-managed, would Channel settings be something I do in the configuration and then directly on the L009 wifi interface? Sorry still new to this.
Top
 
gigabyte091
Forum Guru
Forum Guru
Posts: 1226
Joined: Fri Dec 31, 2021 11:44 am
Location: Croatia

Re: Wifi coverage for L009 and hAP AX lite HELP

Thu Feb 01, 2024 8:50 pm

So for local interface on your CAPsMAN controller you need to do this changes on local interfaces and for your CAP you do this in configuration you created.

Roaming will work as both CAP and local interface are managed by the same ROS instance.
Top
 
yodaman
just joined
Topic Author
Posts: 10
Joined: Sat Sep 30, 2023 8:51 am

Re: Wifi coverage for L009 and hAP AX lite HELP

Fri Feb 02, 2024 12:50 am

So for local interface on your CAPsMAN controller you need to do this changes on local interfaces and for your CAP you do this in configuration you created.

Roaming will work as both CAP and local interface are managed by the same ROS instance.
I figured that was the case, but wanted to make sure, thank you.

Another question, I'm used to seeing channels for 2.4ghz at channels 1-11, and with Mikrotik it's more in-depth. I set the channel to 20MHz like you recommended, but I'm a bit confused on how to set the frequency. I see online here https://systemzone.net/mikrotik-wifi-fr ... planation/ that I should probably set one AP at Channel 1, so frequency 2401-2423 and then the other AP at channel 11, so 2451-2473. Would that be correct?
Top
 
gigabyte091
Forum Guru
Forum Guru
Posts: 1226
Joined: Fri Dec 31, 2021 11:44 am
Location: Croatia

Re: Wifi coverage for L009 and hAP AX lite HELP

Fri Feb 02, 2024 5:09 am

Yes, so keep APs channels apart if possible to avoid interference. For 2.4 GHz use only channels 1,6 and 11.
Top
 
yodaman
just joined
Topic Author
Posts: 10
Joined: Sat Sep 30, 2023 8:51 am

Re: Wifi coverage for L009 and hAP AX lite HELP

Fri Feb 02, 2024 5:12 am

Yes, so keep APs channels apart if possible to avoid interference. For 2.4 GHz use only channels 1,6 and 11.
Thank you for all your help!!
Top
 
gigabyte091
Forum Guru
Forum Guru
Posts: 1226
Joined: Fri Dec 31, 2021 11:44 am
Location: Croatia

Re: Wifi coverage for L009 and hAP AX lite HELP

Fri Feb 02, 2024 7:38 am

No problem, if you still have any issues come back.
Top
 
yodaman
just joined
Topic Author
Posts: 10
Joined: Sat Sep 30, 2023 8:51 am

Re: Wifi coverage for L009 and hAP AX lite HELP

Wed Feb 07, 2024 10:40 pm

No problem, if you still have any issues come back.
I did have a follow-up on this. So far, signal strength has been good since I made the changes you mentioned(thanks again!). There is another problem now where I can be right next to one of the APs and be on a video call, and it will drop out and then back in. There are no errors on those devices that I can tie them to, but my first guess is having the AP's so close together that the device switches from one to the other. I would run only the L009 if it could cover the whole house, but that's why I have the hAP AX lite cover the downstairs. I can't easily separate the two from being too close to each other. Any thoughts on why this might happen?

The second question is, what coverage distance and speed should I expect? Right now if I'm 20–30 feet away from one of the APs I can get around 30-60mbps, and I'm not upset about that, it seems adequate, but I don't know if that's what I should expect. Since neither AP has a 5ghz range, I'm guessing that's why I don't get higher.
Top
 
gigabyte091
Forum Guru
Forum Guru
Posts: 1226
Joined: Fri Dec 31, 2021 11:44 am
Location: Croatia

Re: Wifi coverage for L009 and hAP AX lite HELP

Tue Apr 09, 2024 7:03 am

One thing that comes to my mind is that your device roams between two APs, that can be checked in logs in winbox. If your APs are too close, make sure that they are on different channels and maybe it could help if you decrease transmit power. I did this in my house because some of my devices likes to stick to downstairs AP so i decreased TX power on CAPs just enough so I don't loose a lot of range in my house and now all my devices roams without a problem.

Regarding speeds, that seems about right for me, 30-60 Mbps on 2.4 GHz band when 20-30 feet away including walls etc. This also can depend on amount of interference in the area.
Top
Post Reply

Who is online

Users browsing this forum: Seekport [Bot] and 21 guests
  4. RouterOS
  5. Beginner Basics