hap ax^2+wireless+capsman
Добавлено: 16 сен 2026, 23:43
djrust
Добрый вечер!
Помогите понять проблему.
Есть hap ax^2 на нем установлен пакет wireless(Он же является Шлюзом для всей сети)
На нем есть VLAN20 VLAN30 + настроенный capsman
ether5 (hap ax^2 R0S7) trunk port до ether5 (2011UiAS-2HnD R0S6)
hap ax^2 -- 2011UiAS-2HnD -- RBcAP2nD
CAP1(RBcAP2nD) получает настройки от capsman(Сети видны). Но подключиться к ним не получается.
Если capsman поднять на 2011UiAS-2HnD с идентичными настройками, то все начинает работать.
Есть какие то нюансы в настройке ROS7 с пакетом wareless?
Если смотреть порты Бридж после установки соединения с 2011UiAS-2HnD,то там появляется два порта cap1 и cap2
Если смотреть порты Бридж после установки соединения с hap ax^2,то там пусто
Конфиг 2011UiAS-2HnD
С одной проблемой разобрался. Стояла галка Local forwarding и точки в бридж не попадали.
Осталось понять как настроить точки доступа со включенной этой галкой
Помогите понять проблему.
Есть hap ax^2 на нем установлен пакет wireless(Он же является Шлюзом для всей сети)
На нем есть VLAN20 VLAN30 + настроенный capsman
ether5 (hap ax^2 R0S7) trunk port до ether5 (2011UiAS-2HnD R0S6)
hap ax^2 -- 2011UiAS-2HnD -- RBcAP2nD
CAP1(RBcAP2nD) получает настройки от capsman(Сети видны). Но подключиться к ним не получается.
Если capsman поднять на 2011UiAS-2HnD с идентичными настройками, то все начинает работать.
Есть какие то нюансы в настройке ROS7 с пакетом wareless?
Если смотреть порты Бридж после установки соединения с 2011UiAS-2HnD,то там появляется два порта cap1 и cap2
Если смотреть порты Бридж после установки соединения с hap ax^2,то там пусто
Конфиг 2011UiAS-2HnD
# sep/17/2026 09:23:50 by RouterOS 6.49.21
# software id = MKFG-K4Y0
#
# model = 2011UiAS-2HnD
# serial number = 467304ADE3A3
/caps-man channel
add band=2ghz-onlyn control-channel-width=20mhz frequency=2412 name=2GHz-2412
/interface bridge
add name=B-WL
add name=B-WL-GUEST
add arp=proxy-arp name=bridge vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] comment="1 \EF\EE\F0\F2(\C7\E0\EB)"
set [ find default-name=ether2 ] comment="2 \EF\EE\F0\F2(\C7\E0\EB)"
set [ find default-name=ether3 ] comment="3 \EF\EE\F0\F2(\C7\E0\EB)"
set [ find default-name=ether5 ] comment="hap ac^3(eth5-eth5)"
/interface wireless
set [ find default-name=wlan1 ] ssid=MikroTik
/interface vlan
add interface=bridge name=V-2 vlan-id=2
add interface=bridge name=V-3 vlan-id=3
add interface=bridge name=V-5 vlan-id=5
add interface=bridge name=V-10 vlan-id=10
add interface=bridge name=V-11 vlan-id=11
add interface=bridge name=V-15 vlan-id=15
add interface=bridge name=V-18 vlan-id=18
add interface=bridge name=V-20 vlan-id=20
add interface=bridge name=V-21 vlan-id=21
add interface=bridge name=V-30 vlan-id=30
add interface=bridge name=V-33 vlan-id=33
add interface=bridge name=V-35 vlan-id=35
add interface=bridge name=V-50 vlan-id=50
add interface=bridge name=V-85 vlan-id=85
add interface=bridge name=V-99 vlan-id=99
add interface=bridge name=V-200 vlan-id=200
/caps-man datapath
add bridge=B-WL name=dp-wl
add bridge=B-WL-GUEST name=dp-wl-guest
/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
name=RS passphrase=12345678
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
name=RS-GUEST passphrase=Qwerty123
/caps-man configuration
add channel=2GHz-2412 country=russia3 datapath=dp-wl distance=indoors \
installation=indoor max-sta-count=5 mode=ap name=cfg1 security=RS ssid=RS
add channel=2GHz-2412 country=russia3 datapath=dp-wl-guest distance=indoors \
installation=indoor max-sta-count=5 mode=ap name=cfg1-guest security=\
RS-GUEST ssid=RS-GUEST
/caps-man interface
add channel=2GHz-2412 configuration=cfg1 datapath=dp-wl disabled=no l2mtu=\
1600 mac-address=CC:2D:E0:27:F9:7A master-interface=none name=cap1 \
radio-mac=CC:2D:E0:27:F9:7A radio-name=CC2DE027F97A security=RS
add channel=2GHz-2412 configuration=cfg1-guest datapath=dp-wl-guest disabled=\
no l2mtu=1600 mac-address=CC:2D:E0:27:F9:7B master-interface=cap1 name=\
cap2 radio-mac=00:00:00:00:00:00 radio-name=CC2DE027F97B security=\
RS-GUEST
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/caps-man manager
set enabled=yes
/caps-man provisioning
add action=create-enabled master-configuration=cfg1 name-format=\
prefix-identity name-prefix=cap radio-mac=CC:2D:E0:27:F9:7A \
slave-configurations=cfg1
/interface bridge port
add bridge=bridge frame-types=admit-only-vlan-tagged interface=ether1
add bridge=bridge frame-types=admit-only-vlan-tagged interface=ether2
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged \
interface=ether3 pvid=18
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged \
interface=ether4 pvid=18
add bridge=bridge frame-types=admit-only-vlan-tagged interface=ether5
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged \
interface=ether6 pvid=18
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged \
interface=ether7 pvid=18
add bridge=bridge interface=ether8
add bridge=bridge interface=ether9
add bridge=bridge interface=ether10
add bridge=B-WL interface=V-20
add bridge=B-WL-GUEST interface=V-30
/interface bridge vlan
add bridge=bridge tagged=bridge,ether5,ether1,ether2 vlan-ids=18
add bridge=bridge tagged=bridge,ether5,ether1 vlan-ids=3
add bridge=bridge tagged=bridge,ether5,ether1 vlan-ids=10
add bridge=bridge tagged=bridge,ether5,ether1,ether2 vlan-ids=20
add bridge=bridge tagged=bridge,ether5,ether1,ether2 vlan-ids=30
add bridge=bridge tagged=bridge,ether5,ether1 vlan-ids=85
add bridge=bridge tagged=bridge,ether1,ether5 vlan-ids=99
add bridge=bridge tagged=bridge,ether5,ether1 vlan-ids=35
add bridge=bridge tagged=bridge,ether5,ether1 vlan-ids=11
add bridge=bridge tagged=bridge,ether5,ether1,ether2 vlan-ids=15
add bridge=bridge tagged=bridge,ether5,ether1 vlan-ids=5
add bridge=bridge tagged=bridge,ether5,ether1 vlan-ids=33
add bridge=bridge tagged=bridge,ether1,ether5 vlan-ids=200
add bridge=bridge tagged=bridge,ether5,ether1 vlan-ids=2
add bridge=bridge tagged=bridge,ether5,ether1 vlan-ids=21
add bridge=bridge tagged=bridge,ether5,ether1 vlan-ids=50
/ip address
add address=192.168.18.253/24 interface=V-18 network=192.168.18.0
add address=192.168.3.253/24 interface=V-3 network=192.168.3.0
add address=192.168.20.253/24 interface=V-20 network=192.168.20.0
add address=192.168.30.253/24 interface=V-30 network=192.168.30.0
add address=192.168.85.253/24 interface=V-85 network=192.168.85.0
add address=192.168.99.253/24 interface=V-99 network=192.168.99.0
add address=192.168.35.253/24 interface=V-35 network=192.168.35.0
add address=192.168.10.253/24 interface=V-10 network=192.168.10.0
add address=192.168.15.253/24 interface=V-15 network=192.168.15.0
add address=192.168.1.253/24 interface=V-10 network=192.168.1.0
add address=192.168.5.253/24 interface=V-5 network=192.168.5.0
add address=192.168.33.253/24 interface=V-33 network=192.168.33.0
add address=192.168.200.253/24 interface=V-200 network=192.168.200.0
add address=192.168.2.253/24 interface=V-2 network=192.168.2.0
add address=192.168.21.253/24 interface=V-21 network=192.168.21.0
add address=192.168.50.253/24 interface=V-50 network=192.168.50.0
/ip dns
set servers=8.8.8.8,8.8.4.4
/ip firewall service-port
set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set sip disabled=yes
set pptp disabled=yes
set udplite disabled=yes
set dccp disabled=yes
set sctp disabled=yes
/ip route
add distance=1 gateway=192.168.18.254
/ip service
set telnet disabled=yes
set ftp disabled=yes
set ssh disabled=yes
set api disabled=yes
set winbox disabled=yes
set api-ssl disabled=yes
/system clock
set time-zone-name=Europe/Moscow
/system identity
set name=SWITCH1
/system ntp client
set enabled=yes primary-ntp=88.147.254.230 secondary-ntp=88.147.254.227
# software id = MKFG-K4Y0
#
# model = 2011UiAS-2HnD
# serial number = 467304ADE3A3
/caps-man channel
add band=2ghz-onlyn control-channel-width=20mhz frequency=2412 name=2GHz-2412
/interface bridge
add name=B-WL
add name=B-WL-GUEST
add arp=proxy-arp name=bridge vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] comment="1 \EF\EE\F0\F2(\C7\E0\EB)"
set [ find default-name=ether2 ] comment="2 \EF\EE\F0\F2(\C7\E0\EB)"
set [ find default-name=ether3 ] comment="3 \EF\EE\F0\F2(\C7\E0\EB)"
set [ find default-name=ether5 ] comment="hap ac^3(eth5-eth5)"
/interface wireless
set [ find default-name=wlan1 ] ssid=MikroTik
/interface vlan
add interface=bridge name=V-2 vlan-id=2
add interface=bridge name=V-3 vlan-id=3
add interface=bridge name=V-5 vlan-id=5
add interface=bridge name=V-10 vlan-id=10
add interface=bridge name=V-11 vlan-id=11
add interface=bridge name=V-15 vlan-id=15
add interface=bridge name=V-18 vlan-id=18
add interface=bridge name=V-20 vlan-id=20
add interface=bridge name=V-21 vlan-id=21
add interface=bridge name=V-30 vlan-id=30
add interface=bridge name=V-33 vlan-id=33
add interface=bridge name=V-35 vlan-id=35
add interface=bridge name=V-50 vlan-id=50
add interface=bridge name=V-85 vlan-id=85
add interface=bridge name=V-99 vlan-id=99
add interface=bridge name=V-200 vlan-id=200
/caps-man datapath
add bridge=B-WL name=dp-wl
add bridge=B-WL-GUEST name=dp-wl-guest
/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
name=RS passphrase=12345678
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
name=RS-GUEST passphrase=Qwerty123
/caps-man configuration
add channel=2GHz-2412 country=russia3 datapath=dp-wl distance=indoors \
installation=indoor max-sta-count=5 mode=ap name=cfg1 security=RS ssid=RS
add channel=2GHz-2412 country=russia3 datapath=dp-wl-guest distance=indoors \
installation=indoor max-sta-count=5 mode=ap name=cfg1-guest security=\
RS-GUEST ssid=RS-GUEST
/caps-man interface
add channel=2GHz-2412 configuration=cfg1 datapath=dp-wl disabled=no l2mtu=\
1600 mac-address=CC:2D:E0:27:F9:7A master-interface=none name=cap1 \
radio-mac=CC:2D:E0:27:F9:7A radio-name=CC2DE027F97A security=RS
add channel=2GHz-2412 configuration=cfg1-guest datapath=dp-wl-guest disabled=\
no l2mtu=1600 mac-address=CC:2D:E0:27:F9:7B master-interface=cap1 name=\
cap2 radio-mac=00:00:00:00:00:00 radio-name=CC2DE027F97B security=\
RS-GUEST
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/caps-man manager
set enabled=yes
/caps-man provisioning
add action=create-enabled master-configuration=cfg1 name-format=\
prefix-identity name-prefix=cap radio-mac=CC:2D:E0:27:F9:7A \
slave-configurations=cfg1
/interface bridge port
add bridge=bridge frame-types=admit-only-vlan-tagged interface=ether1
add bridge=bridge frame-types=admit-only-vlan-tagged interface=ether2
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged \
interface=ether3 pvid=18
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged \
interface=ether4 pvid=18
add bridge=bridge frame-types=admit-only-vlan-tagged interface=ether5
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged \
interface=ether6 pvid=18
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged \
interface=ether7 pvid=18
add bridge=bridge interface=ether8
add bridge=bridge interface=ether9
add bridge=bridge interface=ether10
add bridge=B-WL interface=V-20
add bridge=B-WL-GUEST interface=V-30
/interface bridge vlan
add bridge=bridge tagged=bridge,ether5,ether1,ether2 vlan-ids=18
add bridge=bridge tagged=bridge,ether5,ether1 vlan-ids=3
add bridge=bridge tagged=bridge,ether5,ether1 vlan-ids=10
add bridge=bridge tagged=bridge,ether5,ether1,ether2 vlan-ids=20
add bridge=bridge tagged=bridge,ether5,ether1,ether2 vlan-ids=30
add bridge=bridge tagged=bridge,ether5,ether1 vlan-ids=85
add bridge=bridge tagged=bridge,ether1,ether5 vlan-ids=99
add bridge=bridge tagged=bridge,ether5,ether1 vlan-ids=35
add bridge=bridge tagged=bridge,ether5,ether1 vlan-ids=11
add bridge=bridge tagged=bridge,ether5,ether1,ether2 vlan-ids=15
add bridge=bridge tagged=bridge,ether5,ether1 vlan-ids=5
add bridge=bridge tagged=bridge,ether5,ether1 vlan-ids=33
add bridge=bridge tagged=bridge,ether1,ether5 vlan-ids=200
add bridge=bridge tagged=bridge,ether5,ether1 vlan-ids=2
add bridge=bridge tagged=bridge,ether5,ether1 vlan-ids=21
add bridge=bridge tagged=bridge,ether5,ether1 vlan-ids=50
/ip address
add address=192.168.18.253/24 interface=V-18 network=192.168.18.0
add address=192.168.3.253/24 interface=V-3 network=192.168.3.0
add address=192.168.20.253/24 interface=V-20 network=192.168.20.0
add address=192.168.30.253/24 interface=V-30 network=192.168.30.0
add address=192.168.85.253/24 interface=V-85 network=192.168.85.0
add address=192.168.99.253/24 interface=V-99 network=192.168.99.0
add address=192.168.35.253/24 interface=V-35 network=192.168.35.0
add address=192.168.10.253/24 interface=V-10 network=192.168.10.0
add address=192.168.15.253/24 interface=V-15 network=192.168.15.0
add address=192.168.1.253/24 interface=V-10 network=192.168.1.0
add address=192.168.5.253/24 interface=V-5 network=192.168.5.0
add address=192.168.33.253/24 interface=V-33 network=192.168.33.0
add address=192.168.200.253/24 interface=V-200 network=192.168.200.0
add address=192.168.2.253/24 interface=V-2 network=192.168.2.0
add address=192.168.21.253/24 interface=V-21 network=192.168.21.0
add address=192.168.50.253/24 interface=V-50 network=192.168.50.0
/ip dns
set servers=8.8.8.8,8.8.4.4
/ip firewall service-port
set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set sip disabled=yes
set pptp disabled=yes
set udplite disabled=yes
set dccp disabled=yes
set sctp disabled=yes
/ip route
add distance=1 gateway=192.168.18.254
/ip service
set telnet disabled=yes
set ftp disabled=yes
set ssh disabled=yes
set api disabled=yes
set winbox disabled=yes
set api-ssl disabled=yes
/system clock
set time-zone-name=Europe/Moscow
/system identity
set name=SWITCH1
/system ntp client
set enabled=yes primary-ntp=88.147.254.230 secondary-ntp=88.147.254.227
Осталось понять как настроить точки доступа со включенной этой галкой