Community discussions

MikroTik App
 
fabio
just joined
Topic Author
Posts: 14
Joined: Tue Oct 10, 2023 10:16 pm

CAPsMAN not working on 7.13.4

Mon Feb 19, 2024 3:02 am

Hi all,

I've 2 devices, an L009UiGS-2HaxD with CAPsMAN enabled with 2 cfg for 2ghz and 5Ghz 802.11ax radios and a C53UiG+5HPaxD2HPaxD with CAP client enabled.

The client connects to the capsman but no radio are listed in the proper section. The other strange thing is that on remote CAP i see the device connected but with no IP.
(on IP -> Neighbors i see that device with the IP, BTW these devices are on the same subnet)
Screenshot 2024-02-19 alle 01.56.29.jpg

Any idea on what's happening?

It's the 1st wifi-qcom and capsman configuration.

With past wireless and capsman i never seen this kind of problem.
You do not have the required permissions to view the files attached to this post.
 
holvoetn
Forum Guru
Forum Guru
Posts: 5528
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: CAPsMAN not working on 7.13.4

Mon Feb 19, 2024 9:39 am

Have you tried clearing out all certificates ?
 
fabio
just joined
Topic Author
Posts: 14
Joined: Tue Oct 10, 2023 10:16 pm

Re: CAPsMAN not working on 7.13.4

Mon Feb 19, 2024 10:09 am

Have you tried clearing out all certificates ?
yes, I've tried also to leave default (blank) on Cert and CA fields with the same result.

Question: the CAP client hasn't a cert and doesn't generate a new one. I've to create it manually and set on Wifi -> CAP settings?
 
holvoetn
Forum Guru
Forum Guru
Posts: 5528
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: CAPsMAN not working on 7.13.4

Mon Feb 19, 2024 1:20 pm

Personally I don't use certificates.
I don't see the benefit from using it in my own LAN environment.
 
fabio
just joined
Topic Author
Posts: 14
Joined: Tue Oct 10, 2023 10:16 pm

Re: CAPsMAN not working on 7.13.4

Mon Feb 19, 2024 2:25 pm

Personally I don't use certificates.
I don't see the benefit from using it in my own LAN environment.
me too but leaving blank the related fields or setting to "auto" makes no differences, the cert will be autogenerate (and i suppose used)
 
fabio
just joined
Topic Author
Posts: 14
Joined: Tue Oct 10, 2023 10:16 pm

Re: CAPsMAN not working on 7.13.4

Mon Feb 19, 2024 2:26 pm

I don't know if my steps are wrong or not.

video of all steps done:
https://youtu.be/LHnmF4_-Da0
Last edited by fabio on Mon Feb 19, 2024 3:28 pm, edited 1 time in total.
 
erlinden
Forum Guru
Forum Guru
Posts: 2009
Joined: Wed Jun 12, 2013 1:59 pm
Location: Netherlands

Re: CAPsMAN not working on 7.13.4

Mon Feb 19, 2024 2:31 pm

please see the attached video.
There is no video attached (yet).

Could you please share both configs of CAPS and of CAPsMAN?
/export file=anynameyoulike
Remove serial and any other personal information. If you post the config in between code tags (by using the </> button) it will be more readable.
 
fabio
just joined
Topic Author
Posts: 14
Joined: Tue Oct 10, 2023 10:16 pm

Re: CAPsMAN not working on 7.13.4

Mon Feb 19, 2024 2:55 pm

Main (L009UiGS-2HaxD):
# 2024-02-19 13:39:28 by RouterOS 7.13.4
#
# model = L009UiGS-2HaxD
/disk
set usb1 type=hardware
/interface bridge
add name=bridge-local
/interface ethernet
set [ find default-name=ether1 ] name=ether1
set [ find default-name=ether2 ] name=ether2
set [ find default-name=ether3 ] name=ether3
set [ find default-name=ether4 ] name=ether4
set [ find default-name=ether5 ] name=ether5
set [ find default-name=ether6 ] name=ether6
set [ find default-name=ether7 ] name=ether7
set [ find default-name=ether8 ] name=ether8
set [ find default-name=sfp1 ] name=sfp1-AP
/interface list
add exclude=dynamic name=discover
add name=mactel
add name=mac-winbox
add name=WANs
add name=LANs
/interface wifi channel
add band=2ghz-ax disabled=no name=channel1
/interface wifi datapath
add bridge=bridge-local disabled=no name=datapath1
/interface wifi security
add authentication-types=wpa3-psk disabled=no encryption=ccmp \
    group-encryption=ccmp name=sec1
/interface wifi configuration
add channel=channel1 country=Switzerland datapath=datapath1 disabled=no mode=\
    ap name=cfg1 security=sec1 ssid=Test1234
/port
set 0 name=serial0
/zerotier
set zt1 comment="ZeroTier Central controller - https://my.zerotier.com/" \
    disabled=yes disabled=yes name=zt1 port=9993
/interface wifi
set [ find default-name=wifi1 ] configuration=*1 configuration.mode=ap
/interface bridge port
add bridge=bridge-local ingress-filtering=no interface=ether2
add bridge=bridge-local ingress-filtering=no interface=ether6
add bridge=bridge-local ingress-filtering=no interface=ether4
add bridge=bridge-local ingress-filtering=no interface=ether3
add bridge=bridge-local ingress-filtering=no interface=ether5
add bridge=bridge-local ingress-filtering=no interface=ether7
add bridge=bridge-local interface=ether8
add bridge=bridge-local interface=sfp1-AP
/interface detect-internet
set detect-interface-list=WANs internet-interface-list=WANs \
    lan-interface-list=LANs wan-interface-list=WANs
/interface wifi cap
set certificate=request discovery-interfaces=bridge-local enabled=yes
/interface wifi capsman
set ca-certificate=auto certificate=auto enabled=yes interfaces=bridge-local \
    package-path="" require-peer-certificate=no upgrade-policy=none
/ip address
add address=192.168.88.1/24 comment="default configuration" interface=\
    bridge-local network=192.168.88.0
/system identity
set name=Main
/system logging
add topics=caps,debug
/system note
set show-at-login=no
/system routerboard settings
set enter-setup-on=delete-key
AP1 (C53UiG+5HPaxD2HPaxD):
# 2024-02-19 13:38:58 by RouterOS 7.13.4
#
# model = C53UiG+5HPaxD2HPaxD
/interface bridge
add name=bridge1
/zerotier
set zt1 comment="ZeroTier Central controller - https://my.zerotier.com/" \
    disabled=yes disabled=yes name=zt1 port=9993
/interface bridge port
add bridge=bridge1 interface=ether5
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether1
/interface wifi cap
set certificate=request discovery-interfaces=bridge1 enabled=yes \
    lock-to-caps-man=no
/interface wifi capsman
set package-path="" require-peer-certificate=no upgrade-policy=none
/ip dhcp-client
add interface=bridge1
/system identity
set name=AP1
/system logging
add topics=caps,debug
/system note
set show-at-login=no
 
holvoetn
Forum Guru
Forum Guru
Posts: 5528
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: CAPsMAN not working on 7.13.4

Mon Feb 19, 2024 3:11 pm

L009:

/interface wifi
set [ find default-name=wifi1 ] configuration=*1 configuration.mode=ap
Where is the missing configuration ?

/interface wifi cap
set certificate=request discovery-interfaces=bridge-local enabled=yes
You can not enable caps mode on local interfaces for wave2 device. You need to configure them locally (using 90% the same settings as you would for capsman).
 
fabio
just joined
Topic Author
Posts: 14
Joined: Tue Oct 10, 2023 10:16 pm

Re: CAPsMAN not working on 7.13.4

Mon Feb 19, 2024 3:27 pm

L009:

/interface wifi
set [ find default-name=wifi1 ] configuration=*1 configuration.mode=ap
Where is the missing configuration ?
I don't know, i've exported and cut only routes, dhcp-server, dns, etc
All steps done are shown in this video: https://youtu.be/LHnmF4_-Da0
/interface wifi cap
set certificate=request discovery-interfaces=bridge-local enabled=yes
You can not enable caps mode on local interfaces for wave2 device. You need to configure them locally (using 90% the same settings as you would for capsman).
Yes I agree, i've done it for seeing if there're differences between a remote cap client.
 
fabio
just joined
Topic Author
Posts: 14
Joined: Tue Oct 10, 2023 10:16 pm

Re: CAPsMAN not working on 7.13.4

Mon Feb 19, 2024 10:55 pm

Tried also with 7.13.5 with no success
 
ips
Frequent Visitor
Frequent Visitor
Posts: 88
Joined: Mon Oct 09, 2023 6:48 pm
Location: Italy

Re: CAPsMAN not working on 7.13.4

Tue Feb 20, 2024 9:25 am

My suggestions:
1) disable CAP mode on main
2) apply cfg1 to interface wifi1 on main
3) disable detect internet on main
4) disable capsman on AP1
5) remove "certificate=request" on cap configuration of AP1

Probably, resetting AP1 to CAP mode is the best option (instead of points 4-5).
And please remember that L009UiGS does not have 5GHz radio, AFAIK.
 
ips
Frequent Visitor
Frequent Visitor
Posts: 88
Joined: Mon Oct 09, 2023 6:48 pm
Location: Italy

Re: CAPsMAN not working on 7.13.4

Tue Feb 20, 2024 9:34 am

Side note: the L009 is much less powerful than the hAP ax3. Have you considered to switch the two device roles?
 
fabio
just joined
Topic Author
Posts: 14
Joined: Tue Oct 10, 2023 10:16 pm

Re: CAPsMAN not working on 7.13.4

Tue Feb 20, 2024 10:47 am

Side note: the L009 is much less powerful than the hAP ax3. Have you considered to switch the two device roles?
to be honest i've already tried to switch role of 2 RBs with same result.
I've done video and config dump when in the 2nd scenario but doesn't matter at the moment.

The main problem is that new wifi CAPsMAN is not working following official wiki.
 
ips
Frequent Visitor
Frequent Visitor
Posts: 88
Joined: Mon Oct 09, 2023 6:48 pm
Location: Italy

Re: CAPsMAN not working on 7.13.4

Tue Feb 20, 2024 10:49 am

Have you tried my suggestions 1-5? Can you post the full configs after you applied them?
 
fabio
just joined
Topic Author
Posts: 14
Joined: Tue Oct 10, 2023 10:16 pm

Re: CAPsMAN not working on 7.13.4

Tue Feb 20, 2024 10:55 am

My suggestions:
1) disable CAP mode on main
done with no changes
2) apply cfg1 to interface wifi1 on main
skipped because i'm not interested on L009 wifi
3) disable detect internet on main
why? internet detection is enabled on other interfaces different to local bridge
4) disable capsman on AP1
5) remove "certificate=request" on cap configuration of AP1

Probably, resetting AP1 to CAP mode is the best option (instead of points 4-5).
done, with no changes on capsman, no dynamic remote radio created.....
Screenshot 2024-02-20 alle 09.52.40.jpg
And please remember that L009UiGS does not have 5GHz radio, AFAIK.
Yes, it's only a 2.4 GHZ 802.11ax interface, but at the moment i'm not interested on using it. My goal is to make wifi-qcom CAPsMAN working for adding more HAP ax3 with one as CAPsMAN Main and other 2 pcs as CAP clients.
You do not have the required permissions to view the files attached to this post.
 
fabio
just joined
Topic Author
Posts: 14
Joined: Tue Oct 10, 2023 10:16 pm

Re: CAPsMAN not working on 7.13.4

Tue Feb 20, 2024 11:00 am

Have you tried my suggestions 1-5? Can you post the full configs after you applied them?
Main:
# 2024-02-20 09:58:59 by RouterOS 7.13.5
#
# model = L009UiGS-2HaxD
/interface wifi channel
add band=2ghz-ax disabled=no name=channel1
/interface wifi security
add authentication-types=wpa3-psk disabled=no encryption=ccmp \
    group-encryption=ccmp name=sec1
/interface wifi
set [ find default-name=wifi1 ] configuration=*1 configuration.mode=ap
/interface wifi capsman
set ca-certificate=auto certificate=auto enabled=yes interfaces=bridge-local \
    package-path="" require-peer-certificate=no upgrade-policy=none
/interface wifi configuration
add channel=channel1 country=Switzerland datapath=datapath1 disabled=no mode=\
    ap name=cfg1 security=sec1 ssid=Test1234
/interface wifi datapath
add bridge=bridge-local disabled=no name=datapath1
AP1:
# 2024-02-20 09:57:37 by RouterOS 7.13.5
#
# model = C53UiG+5HPaxD2HPaxD
/interface bridge
add name=bridge1
/zerotier
set zt1 comment="ZeroTier Central controller - https://my.zerotier.com/" \
    disabled=yes disabled=yes name=zt1 port=9993
/interface bridge port
add bridge=bridge1 interface=ether5
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether1
/interface wifi cap
set discovery-interfaces=bridge1 enabled=yes lock-to-caps-man=no
/interface wifi capsman
set package-path="" require-peer-certificate=no upgrade-policy=none
/ip dhcp-client
add interface=bridge1
/system clock
set time-zone-name=Europe/Rome
/system identity
set name=AP1
/system logging
add topics=caps,debug
/system note
set show-at-login=no
 
ips
Frequent Visitor
Frequent Visitor
Posts: 88
Joined: Mon Oct 09, 2023 6:48 pm
Location: Italy

Re: CAPsMAN not working on 7.13.4

Tue Feb 20, 2024 11:04 am

To properly troubleshoot problems it is often useful to reduce potential factors that interferes.
We are trying to help and I never got you were not interested in configuring wifi on L009.

My impression is that your config lacks of provisioning rules.
https://help.mikrotik.com/docs/display/ ... iFiCAPsMAN
 
holvoetn
Forum Guru
Forum Guru
Posts: 5528
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: CAPsMAN not working on 7.13.4

Tue Feb 20, 2024 11:12 am

... which also raises the question:
why use capsman with only ONE Access point ??
 
fabio
just joined
Topic Author
Posts: 14
Joined: Tue Oct 10, 2023 10:16 pm

Re: CAPsMAN not working on 7.13.4

Tue Feb 20, 2024 11:18 am

... which also raises the question:
why use capsman with only ONE Access point ??
I never told that this is the final scenario.
My final config has 3 x HAP ax3 and 1 x L009
 
ips
Frequent Visitor
Frequent Visitor
Posts: 88
Joined: Mon Oct 09, 2023 6:48 pm
Location: Italy

Re: CAPsMAN not working on 7.13.4

Tue Feb 20, 2024 11:27 am

Secondly, you probably missed the following part on the CAP:
/interface/wifi/set wifi1,wifi2 configuration.manager=capsman-or-local
 
holvoetn
Forum Guru
Forum Guru
Posts: 5528
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: CAPsMAN not working on 7.13.4

Tue Feb 20, 2024 11:43 am

I never told that this is the final scenario.
My final config has 3 x HAP ax3 and 1 x L009
In that case you definitely need those provisioning rules and ideally even per radio mac address to steer correct frequency setting for each of those APs (other options also possible. I find MAC address to be the easiest way to be sure what goes where).

PS official help pages do show all this.
Are you sure you are looking at the correct page ?
https://help.mikrotik.com/docs/display/ ... iFiCAPsMAN
 
fabio
just joined
Topic Author
Posts: 14
Joined: Tue Oct 10, 2023 10:16 pm

Re: CAPsMAN not working on 7.13.4  [SOLVED]

Tue Feb 20, 2024 11:44 am

Secondly, you probably missed the following part on the CAP:
/interface/wifi/set wifi1,wifi2 configuration.manager=capsman-or-local
Thanks, this was the missing element!
Since I've done all config in WinBox I've not found the proper section to assign wifi interfaces to capsman.
Screenshot 2024-02-20 alle 10.45.04.jpg
You do not have the required permissions to view the files attached to this post.
 
holvoetn
Forum Guru
Forum Guru
Posts: 5528
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: CAPsMAN not working on 7.13.4

Tue Feb 20, 2024 11:49 am

Since I've done all config in WinBox I've not found the proper section to assign wifi interfaces to capsman.
The 2nd tab when you open that interface.
Configuration and then the field labeled Manager.
 
fabio
just joined
Topic Author
Posts: 14
Joined: Tue Oct 10, 2023 10:16 pm

Re: CAPsMAN not working on 7.13.4

Tue Feb 20, 2024 11:49 am

I never told that this is the final scenario.
My final config has 3 x HAP ax3 and 1 x L009
In that case you definitely need those provisioning rules and ideally even per radio mac address to steer correct frequency setting for each of those APs (other options also possible. I find MAC address to be the easiest way to be sure what goes where).

PS official help pages do show all this.
Are you sure you are looking at the correct page ?
https://help.mikrotik.com/docs/display/ ... iFiCAPsMAN
I've followed this page: https://help.mikrotik.com/docs/pages/vi ... Id=1409149

But I've done all steps with WinBox and missed to configure interface mode....

Thanks
 
ips
Frequent Visitor
Frequent Visitor
Posts: 88
Joined: Mon Oct 09, 2023 6:48 pm
Location: Italy

Re: CAPsMAN not working on 7.13.4

Tue Feb 20, 2024 11:54 am

The structure of the command gives you the hint about where the option is located. However, see https://www.youtube.com/watch?v=37aff6d14Xk minute 4.00 onwards.

Let me point out that you were following the wrong page (old CAPsMAN). The right help page is the one I linked before.

I warmly suggest you to reset to CAPS mode (same youtube video, at minute ~3.00) your future APs.

PS: You probably want to mark the topic as resolved.
 
fabio
just joined
Topic Author
Posts: 14
Joined: Tue Oct 10, 2023 10:16 pm

Re: CAPsMAN not working on 7.13.4

Tue Feb 20, 2024 11:59 am

The structure of the command gives you the hint about where the option is located. However, see https://www.youtube.com/watch?v=37aff6d14Xk minute 4.00 onwards.

Let me point out that you were following the wrong page (old CAPsMAN). The right help page is the one I linked before.

I warmly suggest you to reset to CAPS mode (same youtube video, at minute ~3.00) your future APs.

PS: You probably want to mark the topic as resolved.
You're right, I relied too much on the old capsman setup.

Topic solved, and thanks again.

Who is online

Users browsing this forum: No registered users and 5 guests