Hi,
I returned to Mikrotik after some time switching from Openwrt and trying to get running CAPSMAN.
I have main router RB960PGS, and 2 APs connected over Ethernet - cAPGi-5HaxD2HaxD - all running on 7.12.1 and would like to enable 802.11r with Capsman. What ever I do, I get only state : No Connections to CAPSMAN.
Torch shows me it tries to communicate with RB960PGS on given ports 5246 / 5247 and also tried to disable completely firewall, adding inputs rules for UDP 5246 / 5247 etc. = nothing worked.
I'm obviously missing some key element here - can someone please advice ?
Thank you.
RB960PGScAPGi-5HaxD2HaxD
I returned to Mikrotik after some time switching from Openwrt and trying to get running CAPSMAN.
I have main router RB960PGS, and 2 APs connected over Ethernet - cAPGi-5HaxD2HaxD - all running on 7.12.1 and would like to enable 802.11r with Capsman. What ever I do, I get only state : No Connections to CAPSMAN.
Torch shows me it tries to communicate with RB960PGS on given ports 5246 / 5247 and also tried to disable completely firewall, adding inputs rules for UDP 5246 / 5247 etc. = nothing worked.
I'm obviously missing some key element here - can someone please advice ?
Thank you.
RB960PGS
Code:
# 2023-12-07 23:39:34 by RouterOS 7.12.1# software id = S5MY-N4ZX## model = RB960PGS/interface bridgeadd admin-mac=78:9A:18:4D:75:6F arp=proxy-arp auto-mac=no name=bridge/interface ethernetset [ find default-name=ether1 ] arp=proxy-arpset [ find default-name=ether2 ] arp=proxy-arp comment="AP DOWN"set [ find default-name=ether3 ] arp=proxy-arp comment="AP UP"set [ find default-name=ether4 ] arp=proxy-arpset [ find default-name=ether5 ] arp=proxy-arpset [ find default-name=sfp1 ] comment=\ mac-address=E0:5A:9F:60:0D:2C name="sfp1 IGN WAN"/caps-man datapathadd bridge=bridge client-to-client-forwarding=yes local-forwarding=yes name=\ capdp/caps-man configurationadd channel.band=2ghz-g/n .control-channel-width=40mhz-turbo .save-selected=\ no country="czech republic" datapath=capdp datapath.arp=proxy-arp \ .bridge=bridge mode=ap name=Config24 rates.basic="" \ security.authentication-types=wpa2-psk .disable-pmkid=yes ssid=apmikroadd channel.frequency=5180 country="czech republic" datapath=capdp \ datapath.arp=proxy-arp .bridge=bridge mode=ap name=Cong5Ghz \ security.authentication-types=wpa2-psk .disable-pmkid=no ssid=apmikro/caps-man managerset ca-certificate=auto certificate=auto enabled=yes/caps-man provisioningadd action=create-dynamic-enabled master-configuration=Config24 radio-mac=\ 78:9A:18:51:0E:5Fadd action=create-dynamic-enabled master-configuration=Cong5Ghz radio-mac=\ 78:9A:18:51:0E:5Eadd action=create-dynamic-enabled master-configuration=Cong5Ghz radio-mac=\ 78:9A:18:51:0E:0Eadd action=create-dynamic-enabled master-configuration=Config24 radio-mac=\ 78:9A:18:51:0E:0F/interface bridge portadd bridge=bridge comment=defconf ingress-filtering=no interface=ether2 \ trusted=yesadd bridge=bridge comment=defconf ingress-filtering=no interface=ether3 \ trusted=yesadd bridge=bridge comment=defconf ingress-filtering=no interface=ether4 \ trusted=yesadd bridge=bridge comment=defconf ingress-filtering=no interface=ether5 \ trusted=yes/interface bridge settingsset use-ip-firewall-for-pppoe=yes use-ip-firewall-for-vlan=yes/ip firewall connection trackingset icmp-timeout=30s loose-tcp-tracking=no udp-stream-timeout=6m udp-timeout=\ 30s/interface list memberadd interface=bridge list=LANadd interface="sfp1 IGN WAN" list=WAN/interface wireless capset bridge=bridge/ip addressadd address=10.0.0.1/24 interface=bridge network=10.0.0.0/ip dhcp-clientadd interface="sfp1 IGN WAN"Code:
# 2023-12-07 23:39:24 by RouterOS 7.12.1# software id = 51IY-2PA5## model = cAPGi-5HaxD2HaxD/interface bridgeadd add-dhcp-option82=yes admin-mac=78:9A:18:51:0E:0C arp=proxy-arp auto-mac=\ no dhcp-snooping=yes igmp-snooping=yes name=bridgeDown/interface wifiwave2# no connection to CAPsMAN, managed locallyset [ find default-name=wifi1 ] channel.band=5ghz-ax .frequency=5180 \ .skip-dfs-channels=all .width=20/40/80mhz configuration.country=Czech \ .manager=capsman-or-local .mode=ap .multicast-enhance=enabled .ssid=\ apmikro disabled=no security.authentication-types=wpa2-psk,wpa3-psk .ft=\ yes .ft-over-ds=yes# no connection to CAPsMAN, managed locallyset [ find default-name=wifi2 ] channel.band=2ghz-ax .skip-dfs-channels=\ 10min-cac .width=20/40mhz configuration.country=Czech .manager=\ capsman-or-local .mode=ap .ssid=apmikro disabled=no \ security.authentication-types=wpa2-psk .disable-pmkid=yes .ft=yes \ .ft-over-ds=yes/interface listadd name=LANadd name=WAN/interface wifiwave2 datapathadd bridge=bridgeDown disabled=no name=capdp/interface bridge portadd bridge=bridgeDown comment=WAN interface=ether1 trusted=yesadd bridge=bridgeDown comment=LAN interface=ether2 trusted=yesadd bridge=bridgeDown interface=wifi1 trusted=yesadd bridge=bridgeDown interface=wifi2 trusted=yes/interface detect-internetset detect-interface-list=all/interface list memberadd interface=ether1 list=WANadd interface=bridgeDown list=LAN/interface wifiwave2 capset caps-man-addresses=10.0.0.1 discovery-interfaces=ether1 enabled=yes/ip dhcp-clientadd interface=bridgeDown/ip dhcp-relayadd dhcp-server=10.0.0.1 disabled=no interface=bridgeDown local-address=\ 10.0.0.2 name=relay1Statistics: Posted by sharkys — Fri Dec 08, 2023 12:57 am