Hi All, I went scorched earth and reset the the router and the cAP Lites (2). This got rid of the weird *11 and *13 in the interface. All three devices are running on 7.13.3. Packages that are active is routeros and wireless.
Couple of things I can't seem to get to work, I cannot seem to select an interface under /Wireless/CAP. I have no choice for interfaces. So I can't enable CAP manager. In CAPsMAN/CAP Interface I do show two interfaces cap1 and cap2 which are my two connected cAP Lites. The issue here is that cap1 and cap2 are the only available interfaces under Master Interface. I thought that the router should be the master. These are both inactive as well which seems to be because they have no Master Interface.
Under /interfaces/Interface cap1 and cap 2 are on the list. But there is no activity. Interestingly, the network is broadcasting, but my device cannot connect. When i drill into eithr cap1 or cap2, thy are both inactive. The status where it calls out Slave, running etc, is blank.
It seems that I am missing something very silly somewhere, I just don;t no where. How do I make my L009UiGS-RM the master interface/CAPsManager?
Thanks in advance for the help.
This is the config for one of the cAP Lite. Note that the MAC in "add admin-mac=" is the MAC of the cAP Lite itself. This seems off to me...
Couple of things I can't seem to get to work, I cannot seem to select an interface under /Wireless/CAP. I have no choice for interfaces. So I can't enable CAP manager. In CAPsMAN/CAP Interface I do show two interfaces cap1 and cap2 which are my two connected cAP Lites. The issue here is that cap1 and cap2 are the only available interfaces under Master Interface. I thought that the router should be the master. These are both inactive as well which seems to be because they have no Master Interface.
Under /interfaces/Interface cap1 and cap 2 are on the list. But there is no activity. Interestingly, the network is broadcasting, but my device cannot connect. When i drill into eithr cap1 or cap2, thy are both inactive. The status where it calls out Slave, running etc, is blank.
It seems that I am missing something very silly somewhere, I just don;t no where. How do I make my L009UiGS-RM the master interface/CAPsManager?
Thanks in advance for the help.
Code:
# 2024-01-31 19:44:53 by RouterOS 7.13.3# software id = 53EN-F7BG## model = L009UiGS# serial number = HFD097JFA82/interface bridgeadd admin-mac=XX:XX:XX:XX:XX:XX auto-mac=no comment=defconf name=local/interface ethernetset [ find default-name=ether7 ] rx-flow-control=auto tx-flow-control=autoset [ find default-name=ether8 ] rx-flow-control=auto tx-flow-control=auto/caps-man securityadd authentication-types=wpa-psk,wpa2-psk encryption=aes-ccm name=security1/caps-man configurationadd country="united states" installation=indoor mode=ap name=cfg1 security=\ security1 ssid=XXXXXXXX/caps-man interfaceadd configuration=cfg1 datapath.bridge=local disabled=no l2mtu=1600 \ mac-address=48:YY:8A:YY:AD:YY master-interface=none name=cap1 radio-mac=\ 48:YY:8A:YY:AD:YY radio-name=48A98A6FAD88 security=security1/interface listadd comment=defconf name=WANadd comment=defconf name=LANadd name=listbridgeadd include=all name=wlan/caps-man datapathadd bridge=local interface-list=all name=datapath1/caps-man interfaceadd configuration=cfg1 datapath.bridge=local .interface-list=dynamic \ disabled=no l2mtu=1600 mac-address=DC:2C:6E:DD:20:7F master-interface=\ cap1 name=cap2 radio-mac=DC:2C:6E:DD:20:7F radio-name=DC2C6EDD207F \ security=security1/interface wireless security-profilesset [ find default=yes ] supplicant-identity=MikroTikadd authentication-types=wpa2-psk mode=dynamic-keys name=XXXXXXXX \ supplicant-identity=MikroTik/ip pooladd name=default-dhcp ranges=192.168.88.10-192.168.88.254/ip dhcp-serveradd address-pool=default-dhcp interface=local lease-time=10m name=defconf \ server-address=192.168.88.1/portset 0 name=serial0/caps-man managerset ca-certificate=auto certificate=auto enabled=yes/caps-man provisioningadd action=create-dynamic-enabled master-configuration=cfg1/interface bridge portadd bridge=local comment=defconf interface=ether2add bridge=local comment=defconf interface=ether3add bridge=local comment=defconf interface=ether4add bridge=local comment=defconf interface=ether5add bridge=local comment=defconf interface=ether6add bridge=local comment=defconf interface=ether7add bridge=local comment=defconf interface=ether8add bridge=local comment=defconf interface=sfp1/ip neighbor discovery-settingsset discover-interface-list=!dynamic lldp-med-net-policy-vlan=1/interface list memberadd comment=defconf interface=local list=LANadd comment=defconf interface=ether1 list=WAN/interface wifi capset discovery-interfaces=listbridge enabled=yes/interface wireless capset bridge=local/ip addressadd address=192.168.88.1/24 comment=defconf interface=local network=\ 192.168.88.0/ip dhcp-clientadd comment=defconf interface=ether1/ip dhcp-server networkadd address=192.168.88.0/24 comment=defconf dns-server=192.168.88.1 gateway=\ 192.168.88.1/ip dnsset allow-remote-requests=yes/ip dns staticadd address=192.168.88.1 comment=defconf name=router.lan/ip firewall filteradd action=accept chain=input comment=\ "defconf: accept established,related,untracked" connection-state=\ established,related,untrackedadd action=drop chain=input comment="defconf: drop invalid" connection-state=\ invalidadd action=accept chain=input comment="defconf: accept ICMP" protocol=icmpadd action=accept chain=input comment=\ "defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1add action=drop chain=input comment="defconf: drop all not coming from LAN" \ in-interface-list=!LANadd action=accept chain=forward comment="defconf: accept in ipsec policy" \ ipsec-policy=in,ipsecadd action=accept chain=forward comment="defconf: accept out ipsec policy" \ ipsec-policy=out,ipsecadd action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ connection-state=established,related hw-offload=yesadd action=accept chain=forward comment=\ "defconf: accept established,related, untracked" connection-state=\ established,related,untrackedadd action=drop chain=forward comment="defconf: drop invalid" \ connection-state=invalidadd action=drop chain=forward comment=\ "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ connection-state=new in-interface-list=WAN/ip firewall natadd action=masquerade chain=srcnat comment="defconf: masquerade" \ ipsec-policy=out,none out-interface-list=WANadd action=masquerade chain=srcnat out-interface=ether1add action=dst-nat chain=dstnat in-interface=ether1 port=3389 protocol=tcp \ to-addresses=192.168.88.254/ipv6 firewall address-listadd address=::/128 comment="defconf: unspecified address" list=bad_ipv6add address=::1/128 comment="defconf: lo" list=bad_ipv6add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6add address=100::/64 comment="defconf: discard only " list=bad_ipv6add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6/ipv6 firewall filteradd action=accept chain=input comment=\ "defconf: accept established,related,untracked" connection-state=\ established,related,untrackedadd action=drop chain=input comment="defconf: drop invalid" connection-state=\ invalidadd action=accept chain=input comment="defconf: accept ICMPv6" protocol=\ icmpv6add action=accept chain=input comment="defconf: accept UDP traceroute" port=\ 33434-33534 protocol=udpadd action=accept chain=input comment=\ "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\ udp src-address=fe80::/10add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \ protocol=udpadd action=accept chain=input comment="defconf: accept ipsec AH" protocol=\ ipsec-ahadd action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\ ipsec-espadd action=accept chain=input comment=\ "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsecadd action=drop chain=input comment=\ "defconf: drop everything else not coming from LAN" in-interface-list=\ !LANadd action=accept chain=forward comment=\ "defconf: accept established,related,untracked" connection-state=\ established,related,untrackedadd action=drop chain=forward comment="defconf: drop invalid" \ connection-state=invalidadd action=drop chain=forward comment=\ "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6add action=drop chain=forward comment=\ "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \ hop-limit=equal:1 protocol=icmpv6add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\ icmpv6add action=accept chain=forward comment="defconf: accept HIP" protocol=139add action=accept chain=forward comment="defconf: accept IKE" dst-port=\ 500,4500 protocol=udpadd action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\ ipsec-ahadd action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\ ipsec-espadd action=accept chain=forward comment=\ "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsecadd action=drop chain=forward comment=\ "defconf: drop everything else not coming from LAN" in-interface-list=\ !LAN/system clockset time-zone-name=America/Detroit/system identityset name=R1/system noteset show-at-login=no/system routerboard settingsset auto-upgrade=yes enter-setup-on=delete-key/tool mac-serverset allowed-interface-list=listbridge/tool mac-server mac-winboxset allowed-interface-list=listbridgeCode:
# 2024-01-31 20:39:28 by RouterOS 7.13.2# software id = 01Y1-P6ZC## model = RBcAPL-2nD# serial number = F10D0F6CF956/caps-man configurationadd channel.band=2ghz-b country="united states" distance=indoors \ installation=indoor mode=ap name=cfg1 security.authentication-types=\ wpa2-psk .encryption=aes-ccm ssid=XXXXXXXXadd channel.band=5ghz-n/ac .control-channel-width=20mhz .extension-channel=\ XXXX country="united states" datapath.client-to-client-forwarding=yes \ .local-forwarding=yes name=cfg-5ghz-ac ssid=""add channel.band=5ghz-onlyn .control-channel-width=20mhz .extension-channel=\ XX country="united states" datapath.client-to-client-forwarding=yes \ .local-forwarding=yes name=cfg-5ghz-an ssid=""/interface bridgeadd admin-mac=DC:XX:XX:XX:XX:XX auto-mac=no comment=defconf name=bridgeLocal/interface wireless# managed by CAPsMAN# channel: 2462/20/b(28dBm), SSID: XXXXXXXX, CAPsMAN forwardingset [ find default-name=wlan1 ] ssid=MikroTik/interface listadd name=WANadd name=LAN/interface wireless security-profilesset [ find default=yes ] supplicant-identity=MikroTik/ip hotspot profileset [ find default=yes ] html-directory=hotspot/caps-man managerset enabled=yes/caps-man provisioningadd action=create-dynamic-enabled master-configuration=cfg1add action=create-dynamic-enabled hw-supported-modes=ac master-configuration=\ cfg-5ghz-ac name-format=prefix-identity name-prefix=5ghz-acadd action=create-dynamic-enabled hw-supported-modes=an master-configuration=\ cfg-5ghz-an name-format=prefix-identity name-prefix=5ghz-an/interface bridge portadd bridge=bridgeLocal comment=defconf interface=ether1/interface list memberadd interface=ether1 list=WANadd interface=wlan1 list=LAN/interface wireless cap# set bridge=bridgeLocal caps-man-addresses=192.168.88.1 discovery-interfaces=\ bridgeLocal enabled=yes interfaces=wlan1/ip dhcp-clientadd comment=defconf interface=bridgeLocal/system clockset time-zone-name=America/Detroit/system identityset name=Copper/system noteset show-at-login=noStatistics: Posted by anotherdamnnewby — Thu Feb 01, 2024 3:44 am