Great to see you guys are doing these videos! Been a fan since replacing a Cisco device at work with an RB2011 years ago. I have Capsman setup at home with hEX S, hAP AC, and hAP AC Lite combo with 3 wifi VLANs. Most solid wifi experience I've had! It's not for the faint of hearts, though.
Bonjour, Hola, G'day Normunds! Great start to a capsman learning series! Please consider adding bridge/vlans + capsman for a next video to address the very common home scenario of having multiple WLANS (home, guest, media, iot).
There is a mistake in the video. If you follow it as it is, you'll be able to ping outside but not browse. You need to add a datapath to the capsman for the bridge that will have the ports your CAPs are connected to.
Thank you! I just spent several hours messing with this repeatedly following the guide step by step and could not figure out why I couldn't pass data. You set me in the right direction!
Mikrotik: Hey, everybody look, CAPSMAN is so easy, just click here and there and it works! Me: Trying to get it working for four hours after watching the video 10 times and finding the solution from a random guy in the comments section...
Not really. It's optional. Some devices have disabled the "local forwarding" setting in the capsman configuration template "datapath" tab. This tutorial assumes you have it checked. Some defices have different defaults, so just mark this checkbox to follow the steps in this tutorial. Local forwarding must be on!
@@mikrotik it should be mentioned then. You can see for yourself there are plenty of people this video doesn't work for. At least my solution gets it working, especially considering how frustrating it is to follow the official video and still have it not work.
Thanks for the video, it was very helpful. However, it was necessary for me to activate under Datapath> Bridge>" Bridge". It would also be great if the video explains how I put Vlan on my cap. A Vlan video in general would be great. Keep it up!
Not really. It's optional. Some devices have disabled the "local forwarding" setting in the capsman configuration template "datapath" tab. This tutorial assumes you have it checked. Some defices have different defaults, so just mark this checkbox to follow the steps in this tutorial. Local forwarding must be on!
Every time I listen to a Mikrotik video, I take it as an history class.. Seing how things were done 4 decades ago. Everything is easy, as long as you read instructions and "how to" for years before you attempt anything. In this era of shortage of everything, CLI and interfaces such as these has no place anymore. I come from an era before the IP stack existed. So I know. I.e. mac address only & 1BaseT. You read correct. 1BASET. And token rings. In the early 80's, I expected interfaces to be far more evolved than that.
It's already available, but not for CAPsMAN yet. For the hAP ac3 you can install the Wave2 package and have it: help.mikrotik.com/docs/display/ROS/WifiWave2
Does this need the new access point to be wired to the main router in order to work? Or can the second access point work as a repeater without the need of an ethernet cable connected to the main router?
I love the sound setup with "shotgun" microphone on a boom like real filmmakers do. Finally great sound without some big cardioid in view or a lavaliere with "chest" sound.
if i install multiple ap-s , roaming is activated by default ? ex: if i have a live skype conference, and i wander around and i connect to a different antenna, will my like skype connection be dropped ?
i have a garage i need wifi in, but there is no ethernet cable out there, can i just take a MK router and put it in caps mode so it can connect to the caps manager in the house or do i need a wired connection? i mean if i have to have a wire then it defeats the purpose doesnt it?
@@stephanszarafinski9001 Actually not so well, roaming in RouterOS relies on loss of signal from current AP to switch to AP with best signal. In result client stays on poorer signal even there are APs with better signal available.
@@karlisirmejs3546 u can configure that too till which signal the client can stay and u can kick it out ,mikrotik is a swiss army knife basically if u know really deep how to use it u can achieve what ever u want but it has learning curve
@@Vinothmanick That's exactly as I said. There can be another APs with better signals around, but client will stick to current radio till signal is too low and only then will roam.
You can mitigate it by setting up access list rules. Tell the system to kick clients that have signal below X and they will be reconnected to the stronger AP automatically.
Please add this information as a comment and pin it to TOP. After 2 hours of trying everything I finally found this under video and it works. UPDATE: BEFORE YOU START, IMPORTANT NOTE! SOME DEVICES HAVE DISABLED THE "LOCAL FORWARDING" SETTING IN THE CAPSMAN CONFIGURATION TEMPLATE "DATAPATH" TAB. THIS TUTORIAL ASSUMES YOU HAVE IT CHECKED.
great video ! i would like to wait for the next video about what we could do to maximize the capsman config, seamles roaming for example, that would be great
Even the config that is shown in this video will work fine with moving client devices, they will seemlessly reconnect to other CAP devices and even voice calls are not dropped.
I have only just gotten my cAP integrated, and in my testing device (wifi analyzer on lenovo tablet), I am seeing that while you don't lose connection, it takes a minute to switch its radio over from the RB4011 to the cAP. I think sometimes, "seamless roaming" is dependent on the client device that's doing the roaming.
Could you add video about Capsman wifi wave2 combined with the old one, I just bought hap ax lite Capsman is not working (I planned to use also hap ax3), could you tell us shortly process to use capsman wifi wave2, what’s happened when I use new capsman wave 2 combined with the old hardware, many thanks in advance.
I understand Mikrotik doesn't like to bind user to certain workflow, but it'd be great if the guide can be titled to show the general structure of an application
Or you can do better - This tutorial assumes you have it checked. Some defices have different defaults, so just mark this checkbox to follow the steps in this tutorial. Local forwarding must be on!
Can I setup capsman on LTE dish, and then distribute this config further via switch which has currently two wireless devices connected - wAP and hAP ac3?
Yes, exactly, you can do that. Those wireless devices will find the capsman server. Config is basically the same as in the video, except you don't have to configure the built-in wireless interface as CAP
@@mikrotik great, thanks! Will try to change config. At the moment my wAP is in bridge mode, is it okay to just hard reset everything there and start from fresh page?
@@mikrotik Thanks, I managed already then set up the capsman managed network. Now I had a question - is it possible to access capsman routers using IP address, like the parent Caps config holder. I wanted to play around containers, but connecting with Mac address to router is quite frustrating. And second issue - CAPs are not able to connect to outside world at the moment, therefore - time is not set correctly, updates have to be brought in via downloading to computer and then uploading it manually, and worst - docker images are not possible to be downloaded.
the internet didnt work till i create a datapaths bridge , the caps ac didnt appear in my remote ac even i tried to boot it many times , and cant see it in winbox even , not sure whats the reason
Not really. It's optional. Some devices have disabled the "local forwarding" setting in the capsman configuration template "datapath" tab. This tutorial assumes you have it checked. Some defices have different defaults, so just mark this checkbox to follow the steps in this tutorial. Local forwarding must be on!
if you cannot see the CAPsMAN own wireless interfaces i think you have a ipv4 firewall issue; to solve this enable the ipv6 package, and, in the wireless interface cap manager choose address :: or ::1
Some devices have disabled the "local forwarding" setting in the capsman configuration template "datapath" tab. This tutorial assumes you have it checked. Some defices have different defaults, so just mark this checkbox to follow the steps in this tutorial. Local forwarding must be on!
@@dragosmotiu2698 Your information worked fine for me. My Radio Tab was also empty even after i enabled the "local forwarding" setting in the capsman configuration template "datapath" tab. - First of all i entered the menu "System -> Packages" and enabled the ipv6. - I also used the opportunity to update the system to the latest version (6.49.8). - After rebooting i entered in the menu "Wireless -> CAP" and deleted the "CAPsMAN Address" 127.0.0.1 replacing it for "::" or for "::1". Both solved the problem. Now the Tab "Radio" show the two radio stations. Thank you so much!
Hi ! Thanks for this detailed explanation. It was easy understandable even for me as a non expert. Hovewer, I could not provision my internal wifi adapter, becouse nothing was shown on my "radio" tab. I followed every step exactly as described. What could be wrong ?
You missed a critical step; you did not set the DataPath in the configuration to Bridge, otherwise, you get no DHCP assigned IP address to the client devices. This video needs an update.
No! Before you start, important note! Some devices have disabled the "local forwarding" setting in the capsman configuration template "datapath" tab. This tutorial assumes you have it checked. Some defices have different defaults, so just mark this checkbox to follow the steps in this tutorial. Local forwarding must be on!
Can we get the same functionality for firewall rules? I have a bunch of remote sites that are hard to keep in sync. Palo Alto does that via Panorama for many many thousands of dollars.
Hi. This is my first time setup up the capsman and i did everything on the video step by step. I can pickup up my ssid but it does not want to obtain a IP
one thing here i am curious ... @16:30 upgrade remote CAPs ... what actually does this feature? does the CAP has to have INTERNET connectivity itself or will it pull the firmware from CAPsMAN or how is that implemented? did not find it on the wiki nor the new help pages. why do i ask? in UniFi controlled environments there is a "Cache" button in the controller so all APs which should be updated, get the firmware from the controller and do not need to connect to the internet directly!
Yes, it works the same way, the CAPsMAN server can upgrade the CAP units without them needing internet. If they are the same architecture as the CAPsMAN server (let's say ARM), you don't need to do anything, but if you have a mix of different devices, you will need to manually upload upgrade files to CAPsMAN server). This is described here: help.mikrotik.com/docs/pages/viewpage.action?pageId=1409149#APController(CAPsMAN)-CAPsMANGlobalConfiguration
i am trying to follow this tutorial, all looks to be fine, I have configured CSR109 as capsman, When I follow this tutorial just like that, I can have SSID broadcast on CSR109 visible on my smartphone, but the caps I configure do not get SSID. I do not understand what I am doing wrong.
I did reset and follow the same steps. But in capsman, radio tab i cant see any devices. Also after i boot the cap ac i also cant see it in the remote radio tab. Does anyone knows what am i missing here?
Some devices have disabled the "local forwarding" setting in the capsman configuration template "datapath" tab. This tutorial assumes you have it checked. Some defices have different defaults, so just mark this checkbox to follow the steps in this tutorial. Local forwarding must be on!
My Radio Tab was also empty even after i enabled the "local forwarding" setting in the capsman configuration template "datapath" tab. Then i followed the tips given by @dragosmotiu2698: - First of all: i entered the menu "System -> Packages" and enabled the ipv6. - Second: i entered in the menu "Wireless -> CAP" and deleted the "CAPsMAN Address" 127.0.0.1 replacing it for "::" or for "::1". Both solved the problem. Now the Tab "Radio" shows the two local wifi radios.
In your Campus or hotel network you want set up your APS so that the neighbouring channels are not overlapping. Can you explain how to to this with caps man ?
I was trying to set this up via wlan interface(had no MAC adapter) and I lost connection. There is an additional step required for me. Once I added the interfaces to capsman I needed ot assign the config to it.
How many devices can this CAPsMAN can handle? What is the maximum number of ap can be connected and managed? I need to know the real life experience. We use ap controller for large working projects where 100-200 devices get connected via 6-10 ap.
can you connect your new device and caps manager to a non-mikrotik switch in the middle? ie the switch does not have the capability of being managed, but an ap attached to it is.
Hi Guys.... I followed the video. Clients can connect to the APs configured via the CAPsMan but cannot connect to the wireless signal of the Master AP. That is the wireless signal of the device acting as master. Feedback will be appreciated.
Have a Mikrotik access point which used to obtain IP adresses for its WiFi client devices via dhcp from my main non-wifi-capable Mikrotik router. I did set up a mesh configuration following your guide as I was adding another Mikrotik AP to my system. The mesh in itself is up and running, but the Wifi client devices which connect via the dynamic mesh interfaces now cannot obtain IP adresses from my 'main' router any more :-( How do I get dhcp relay working for my mesh? Thank you!
If I add 2 or 3 accespoints to my network and setup them using CamsMAN like you explained (one SSID, one password) will that mean that all house will have one wifi network SSID and devices will switch between them flawlessly?
01. Datapath must be set to bridge for devices to receive IPs via dhcp. 02. In the Datapath settings tab, I had to enable Local Forwarding for better bandwidth over wifi. Failure to turn on Local Forwarding caused a heavy load on the main router's CPU, which resulted in half or even less bandwidth, especially on the 5 GHz band. 03. There is no possibility in CAPsMAN for setting the Frequency Mode to Superchannel, and that made me gave up CAPsMAN. Without CAPsMAN with normal wifi configuration I have over 20dBi on cAP ac (RBcAPGi-5acD2nD) and with CAPsMAN enabled only 17dBi (on 5 GHz wifi interface), that resulted in poor or no wifi connection in some spots of the house.
1. I'm using local-forwarding in the video, so datapath is not required at all. 2. Yes, It is on for me in this tutorial 3. Superchannel is illegal to use for regular wifi users, and CAPsMAN is for that. Superchannel can be used if you have some exemption by the regulator.
@@mikrotik Thank you for your answer. 1. min 6:11 local-forwarding not enabled but it's ok, good to know that it's ok using local-forwarding without datapath. 2. ok, I saw only at 6:11 that datapath tab is blank, I may not have noticed when local-forwarding setting was made 3. I was kind of expecting this answer, but I said I'd still write about the superchannel so others can see why they might have a weaker signal when activating CAPsMAN. Yes, it is illegal but it is very useful in different situations. Thank you again. :)
I have an issue with revoked certificates breaking this setup and find no docs on how to issue a replacement without having to reset any existing configurations, This is with layer 3 capsman. I get a message about sulking and I’m using the standard mutual TLS with request certificate option on the cap. Pointers would be useful. I have multiple APs.
@@mikrotik Saprotu vienota pārvaldība ir laba lieta, bet vai var panākt augstu drošību? Un kā monitorēt šos AP? Logs par notikumiem tajos AP un ar tiem arī būs redzams kontroliera logā? Negribētos mocīties un daudzajiem AP katram taisīt syslog targetu lai no tā grepotu ārā ka sākušās kādas problēmas.
Tieši tā, visi wifi logi būs kontrolierī. Caur kontrolieri tiek pārvaldīti visi WiFi uzstādījumi un pašām kontrolētajām ierīcēm vispār vairs nav jāslēdzas klāt. Drošība no tā nemainās.
If i will create second SSID for all my devices i need to create second configuration, second provisioning and i will have double the amount of CAP interfaces? I want to make some guest wifi access.
@@mikrotik ok so example I have 3 houses and I want to configure CapMan? Would I need 3 routers in addition to the one sitting at the main sever room to configure CapMan for AP to manage by one router?
@MikrotikLatvia is it ok for the router if we're not attaching the antenna like in the video? I heard that if we turn it on without antenna attached it will damage the radio module inside it, is that information is true?
Depends on the model, one hAP ac3 comes with antennas, another one comes without antennas. You should check which model you have and follow instructions.
I've followed this process, but don't see the second access point on the remote CAP menu. I can manually connect them with an ethernet cable and provision it that way, but they still don't seem to see each other once I disconnect the ethernet cable. Has anyone had this problem?
Great to see you guys are doing these videos! Been a fan since replacing a Cisco device at work with an RB2011 years ago. I have Capsman setup at home with hEX S, hAP AC, and hAP AC Lite combo with 3 wifi VLANs. Most solid wifi experience I've had! It's not for the faint of hearts, though.
Nice guide. It would be good to see a guide about how to setup the firewall, something that would be very useful for the home user.
Thanks for the idea!
this will be great
If you set it up per Mikrotiks directions it is good. It will not let anything thru even a internet connection.
Just set up 2 acces points with an Ethernet router. Couldn't have done it without this video. Thank you!
Hi
I'm not seeing the APs in CAPSMAN on the CAPSMAN router.
I used a POE switch for the 2 Mikrotik APs (CAP AC)
Any help with it?
I followed you guide and managed to have my RB Cap AP to connect to the capsman running on another RB device. Thank you for such a simplified guide.
Bonjour, Hola, G'day Normunds! Great start to a capsman learning series! Please consider adding bridge/vlans + capsman for a next video to address the very common home scenario of having multiple WLANS (home, guest, media, iot).
There is a mistake in the video. If you follow it as it is, you'll be able to ping outside but not browse. You need to add a datapath to the capsman for the bridge that will have the ports your CAPs are connected to.
Thank you! I just spent several hours messing with this repeatedly following the guide step by step and could not figure out why I couldn't pass data. You set me in the right direction!
Mikrotik: Hey, everybody look, CAPSMAN is so easy, just click here and there and it works!
Me: Trying to get it working for four hours after watching the video 10 times and finding the solution from a random guy in the comments section...
Not really. It's optional. Some devices have disabled the "local forwarding" setting in the capsman configuration template "datapath" tab. This tutorial assumes you have it checked. Some defices have different defaults, so just mark this checkbox to follow the steps in this tutorial. Local forwarding must be on!
@@mikrotik it should be mentioned then. You can see for yourself there are plenty of people this video doesn't work for. At least my solution gets it working, especially considering how frustrating it is to follow the official video and still have it not work.
@@mikrotik
A tutorial that relies the assumption of other of prior setup steps having been taken isn't really much of a tutorial.
This is awesome. You are doing awesome network hardware with affordable price. Thank you MikroTik!
i try alone for 4h and with this video i configure it in 5 min , thanks man
These Mikrotips are great. I hope you will keep making them.
Excellent explanation, awesome video editting and beautiful scene setup with the mic and the shadows. Keep up the good work, I'll try this at home
Thanks for the video, it was very helpful.
However, it was necessary for me to activate under Datapath> Bridge>" Bridge".
It would also be great if the video explains how I put Vlan on my cap.
A Vlan video in general would be great.
Keep it up!
Not really. It's optional. Some devices have disabled the "local forwarding" setting in the capsman configuration template "datapath" tab. This tutorial assumes you have it checked. Some defices have different defaults, so just mark this checkbox to follow the steps in this tutorial. Local forwarding must be on!
Can you do a guide on Mikrotik Mesh?
Audience
Every time I listen to a Mikrotik video, I take it as an history class.. Seing how things were done 4 decades ago. Everything is easy, as long as you read instructions and "how to" for years before you attempt anything. In this era of shortage of everything, CLI and interfaces such as these has no place anymore. I come from an era before the IP stack existed. So I know. I.e. mac address only & 1BaseT. You read correct. 1BASET. And token rings. In the early 80's, I expected interfaces to be far more evolved than that.
When we'll see WPA3? The market urges for security improvements!
It's already available, but not for CAPsMAN yet. For the hAP ac3 you can install the Wave2 package and have it: help.mikrotik.com/docs/display/ROS/WifiWave2
@@mikrotik I didnt know, sorry =/
Nice to see that CAPsMAN is now available for wifiwave2 enabled access points. I would love to see some wifi6e access points by microtik.
Does this need the new access point to be wired to the main router in order to work?
Or can the second access point work as a repeater without the need of an ethernet cable connected to the main router?
When will you add 802.11 k/v/r and WPA3 support to routerOS?
Is this a WiFi Mesh network please ?
Thanks
What if we don’t have cable connection between two locations?
how to use CAPsMAN to add a different router thats not mikrotik like a tp-link?
Great tutorial, it cleared up a lot of grey areas for me
I love the sound setup with "shotgun" microphone on a boom like real filmmakers do. Finally great sound without some big cardioid in view or a lavaliere with "chest" sound.
great presenter. Fantastic job explaining the CAPs feature!
Hi there can I add devices to cspsman without cable? Like mesh or I need a cable?
if i install multiple ap-s , roaming is activated by default ? ex: if i have a live skype conference, and i wander around and i connect to a different antenna, will my like skype connection be dropped ?
i have a garage i need wifi in, but there is no ethernet cable out there, can i just take a MK router and put it in caps mode so it can connect to the caps manager in the house or do i need a wired connection? i mean if i have to have a wire then it defeats the purpose doesnt it?
Free wifi controller is cool, but how about roaming with 802.11k, 802.11r, and 802.11v ?
Roaming on capsman works very well, no need for fancy protocols 😁
@@stephanszarafinski9001 Actually not so well, roaming in RouterOS relies on loss of signal from current AP to switch to AP with best signal. In result client stays on poorer signal even there are APs with better signal available.
@@karlisirmejs3546 u can configure that too till which signal the client can stay and u can kick it out ,mikrotik is a swiss army knife basically if u know really deep how to use it u can achieve what ever u want but it has learning curve
@@Vinothmanick That's exactly as I said. There can be another APs with better signals around, but client will stick to current radio till signal is too low and only then will roam.
You can mitigate it by setting up access list rules. Tell the system to kick clients that have signal below X and they will be reconnected to the stronger AP automatically.
Please add this information as a comment and pin it to TOP. After 2 hours of trying everything I finally found this under video and it works.
UPDATE: BEFORE YOU START, IMPORTANT NOTE! SOME DEVICES HAVE DISABLED THE "LOCAL FORWARDING" SETTING IN THE CAPSMAN CONFIGURATION TEMPLATE "DATAPATH" TAB. THIS TUTORIAL ASSUMES YOU HAVE IT CHECKED.
great video ! i would like to wait for the next video about what we could do to maximize the capsman config, seamles roaming for example, that would be great
Even the config that is shown in this video will work fine with moving client devices, they will seemlessly reconnect to other CAP devices and even voice calls are not dropped.
@@mikrotik The ACL features might be enough to influence roaming by "kicking clients" at certain thresholds.
I have only just gotten my cAP integrated, and in my testing device (wifi analyzer on lenovo tablet), I am seeing that while you don't lose connection, it takes a minute to switch its radio over from the RB4011 to the cAP. I think sometimes, "seamless roaming" is dependent on the client device that's doing the roaming.
when can provide Capsman for wifi2 setup video ?
Very much needed!
Could you add video about Capsman wifi wave2 combined with the old one, I just bought hap ax lite Capsman is not working (I planned to use also hap ax3), could you tell us shortly process to use capsman wifi wave2, what’s happened when I use new capsman wave 2 combined with the old hardware, many thanks in advance.
What I can see here is that ac3 is powered on with no antennas attached... Is it ok nowadays?
it's nice fast roaming, but on app calling, video call still interrupted about 2-3 seconds and reconnecting.
I understand Mikrotik doesn't like to bind user to certain workflow, but it'd be great if the guide can be titled to show the general structure of an application
Tanx for your friendly explaining 🙏🏼
Wireless dveices were not acquiring IP for me untill in Datapaths tab I added bridge
Or you can do better - This tutorial assumes you have it checked. Some defices have different defaults, so just mark this checkbox to follow the steps in this tutorial. Local forwarding must be on!
Hi, I see you are using an Apple MacBook with winbox... How can we run a WinBox on Appl Mac device..?
Install wine and run winbox. It’s in the documentation help.mikrotik.com/docs/display/ROS/Winbox#Winbox-RunWinboxonmacOS
Can I setup capsman on LTE dish, and then distribute this config further via switch which has currently two wireless devices connected - wAP and hAP ac3?
Yes, exactly, you can do that. Those wireless devices will find the capsman server. Config is basically the same as in the video, except you don't have to configure the built-in wireless interface as CAP
@@mikrotik great, thanks! Will try to change config. At the moment my wAP is in bridge mode, is it okay to just hard reset everything there and start from fresh page?
Yes, like in the video, boot the wap when holding button. It will change into cap mode
@@mikrotik Thanks, I managed already then set up the capsman managed network. Now I had a question - is it possible to access capsman routers using IP address, like the parent Caps config holder. I wanted to play around containers, but connecting with Mac address to router is quite frustrating.
And second issue - CAPs are not able to connect to outside world at the moment, therefore - time is not set correctly, updates have to be brought in via downloading to computer and then uploading it manually, and worst - docker images are not possible to be downloaded.
so how the heck to you get this "home mesh "to work , quickset does not seem to do anything either
This is exactly what I was looking for, thank you, awesome help!
Great to hear!
03:15 📍 If you don't see "-- channel: ..." line, your firewall blocks CAPSMAN. Google to open UDP 5246,5247 from/to
Great video just want to ask if will this work for other brands of AP's? or it's just for mikrotik AP.
Only MikroTik devices can be managed like this
Mikrotik please can you show us part of enabling local forwarding as the AP I have is not leasing an IP Address to my devices.
Here is my how I configured my CAPsMAN:
ruclips.net/video/iUIJ8enyJZk/видео.html
Thanks
@5:20 , it just renders it usless as no "supported channels"
I hope that there are configuration tutorial videos of different Mikrotik unit being uploaded to youtube for reference of all Mikrotik users like me.
How do you run Winbox on your Mac? Or, where can I download a Winbox that can run natively on Mac?
Just use softare called Wine.
What is the process for wifiwave2?
Video coming soon.
the internet didnt work till i create a datapaths bridge , the caps ac didnt appear in my remote ac even i tried to boot it many times , and cant see it in winbox even , not sure whats the reason
Not really. It's optional. Some devices have disabled the "local forwarding" setting in the capsman configuration template "datapath" tab. This tutorial assumes you have it checked. Some defices have different defaults, so just mark this checkbox to follow the steps in this tutorial. Local forwarding must be on!
Will there be a guide to how to set this on the new wifiwave2 routers ?
Very useful! Would be nice a part2 with advanced features. Thx!
i got the same setup , but when i click on radio tab in caps man i cant see any devices , anyone knows what am i missing !!
if you cannot see the CAPsMAN own wireless interfaces i think you have a ipv4 firewall issue; to solve this enable the ipv6 package, and, in the wireless interface cap manager choose address :: or ::1
Some devices have disabled the "local forwarding" setting in the capsman configuration template "datapath" tab. This tutorial assumes you have it checked. Some defices have different defaults, so just mark this checkbox to follow the steps in this tutorial. Local forwarding must be on!
@@dragosmotiu2698 Your information worked fine for me. My Radio Tab was also empty even after i enabled the "local forwarding" setting in the capsman configuration template "datapath" tab.
- First of all i entered the menu "System -> Packages" and enabled the ipv6.
- I also used the opportunity to update the system to the latest version (6.49.8).
- After rebooting i entered in the menu "Wireless -> CAP" and deleted the "CAPsMAN Address" 127.0.0.1 replacing it for "::" or for "::1".
Both solved the problem. Now the Tab "Radio" show the two radio stations.
Thank you so much!
Hi !
Thanks for this detailed explanation. It was easy understandable even for me as a non expert. Hovewer, I could not provision my internal wifi adapter, becouse nothing was shown on my "radio" tab. I followed every step exactly as described. What could be wrong ?
What about interference incase of multiple AP does capsman take it into account
Does mikrotik has some kind of system to automaticly choose or optimize channels?
You missed a critical step; you did not set the DataPath in the configuration to Bridge, otherwise, you get no DHCP assigned IP address to the client devices. This video needs an update.
No! Before you start, important note! Some devices have disabled the "local forwarding" setting in the capsman configuration template "datapath" tab. This tutorial assumes you have it checked. Some defices have different defaults, so just mark this checkbox to follow the steps in this tutorial. Local forwarding must be on!
Does this balance load (Bandwidth) when clients visible to 2 or more APs?
So the configuration was missing bridge to be added and internet via wifi didn't work nor dhcp.
You say that it is all automatic about frequency. Every ap choose better frequency or they are all on same channel?
Can we get the same functionality for firewall rules? I have a bunch of remote sites that are hard to keep in sync. Palo Alto does that via Panorama for many many thousands of dollars.
Hi. This is my first time setup up the capsman and i did everything on the video step by step. I can pickup up my ssid but it does not want to obtain a IP
one thing here i am curious ... @16:30 upgrade remote CAPs ...
what actually does this feature? does the CAP has to have INTERNET connectivity itself or will it pull the firmware from CAPsMAN or how is that implemented?
did not find it on the wiki nor the new help pages.
why do i ask? in UniFi controlled environments there is a "Cache" button in the controller so all APs which should be updated, get the firmware from the controller and do not need to connect to the internet directly!
Yes, it works the same way, the CAPsMAN server can upgrade the CAP units without them needing internet. If they are the same architecture as the CAPsMAN server (let's say ARM), you don't need to do anything, but if you have a mix of different devices, you will need to manually upload upgrade files to CAPsMAN server). This is described here: help.mikrotik.com/docs/pages/viewpage.action?pageId=1409149#APController(CAPsMAN)-CAPsMANGlobalConfiguration
@@mikrotik ooh to "package-path" thank you very much for the reply!
finally i'll try to get a grasp with capsman!
you guys rock.
But, no authentication between the capmode client and its server(s)? How do it know it found a trusted server?
Please! Say about datapath!!! It does not work without datapath settings!!!!!
It works if you have default settings. For certain scenarios, it might need additional configuration
@@mikrotik specially resetted mikrotik to default and it didn't work without datapath 🤔
Is it possible to enforce a mac address access list throught capsman?
Is it possible to access my Mikrotik router over the internet when I am not within the local network coverage?
i am trying to follow this tutorial, all looks to be fine, I have configured CSR109 as capsman, When I follow this tutorial just like that, I can have SSID broadcast on CSR109 visible on my smartphone, but the caps I configure do not get SSID. I do not understand what I am doing wrong.
I did reset and follow the same steps.
But in capsman, radio tab i cant see any devices.
Also after i boot the cap ac i also cant see it in the remote radio tab. Does anyone knows what am i missing here?
Some devices have disabled the "local forwarding" setting in the capsman configuration template "datapath" tab. This tutorial assumes you have it checked. Some defices have different defaults, so just mark this checkbox to follow the steps in this tutorial. Local forwarding must be on!
My Radio Tab was also empty even after i enabled the "local forwarding" setting in the capsman configuration template "datapath" tab. Then i followed the tips given by @dragosmotiu2698:
- First of all: i entered the menu "System -> Packages" and enabled the ipv6.
- Second: i entered in the menu "Wireless -> CAP" and deleted the "CAPsMAN Address" 127.0.0.1 replacing it for "::" or for "::1". Both solved the problem. Now the Tab "Radio" shows the two local wifi radios.
In your Campus or hotel network you want set up your APS so that the neighbouring channels are not overlapping. Can you explain how to to this with caps man ?
Does it have a provision for band steering?
I was trying to set this up via wlan interface(had no MAC adapter) and I lost connection.
There is an additional step required for me. Once I added the interfaces to capsman I needed ot assign the config to it.
yeah but how do i set up a mesh network. or when to use capsman vs mesh vs do they work together?????
What about security?, Is the client device accessible via winbox with default admin password?
Securing of all involved devices still must be done separately, just wireless settings are managed by CAPsMAN
Great tutorial, thanks. Q: Can I combine one CAP with another CAP? Will they both work?
How many devices can this CAPsMAN can handle? What is the maximum number of ap can be connected and managed? I need to know the real life experience. We use ap controller for large working projects where 100-200 devices get connected via 6-10 ap.
Nice video. Can you prepare next one "how to manage MT audience MESH and CAPsMAN"
can you connect your new device and caps manager to a non-mikrotik switch in the middle? ie the switch does not have the capability of being managed, but an ap attached to it is.
Hi Guys.... I followed the video. Clients can connect to the APs configured via the CAPsMan but cannot connect to the wireless signal of the Master AP. That is the wireless signal of the device acting as master. Feedback will be appreciated.
Have a Mikrotik access point which used to obtain IP adresses for its WiFi client devices via dhcp from my main non-wifi-capable Mikrotik router. I did set up a mesh configuration following your guide as I was adding another Mikrotik AP to my system. The mesh in itself is up and running, but the Wifi client devices which connect via the dynamic mesh interfaces now cannot obtain IP adresses from my 'main' router any more :-( How do I get dhcp relay working for my mesh? Thank you!
If I add 2 or 3 accespoints to my network and setup them using CamsMAN like you explained (one SSID, one password) will that mean that all house will have one wifi network SSID and devices will switch between them flawlessly?
what if im on routerboard and it doesnt have built in wifi, how do i manage it then?
You can install wireless package on to that routerboard and manage other MikroTik wireless devices, no problem
How do you setup VLANs for different SSIDs on MikroTik APs?
01. Datapath must be set to bridge for devices to receive IPs via dhcp.
02. In the Datapath settings tab, I had to enable Local Forwarding for better bandwidth over wifi. Failure to turn on Local Forwarding caused a heavy load on the main router's CPU, which resulted in half or even less bandwidth, especially on the 5 GHz band.
03. There is no possibility in CAPsMAN for setting the Frequency Mode to Superchannel, and that made me gave up CAPsMAN. Without CAPsMAN with normal wifi configuration I have over 20dBi on cAP ac (RBcAPGi-5acD2nD) and with CAPsMAN enabled only 17dBi (on 5 GHz wifi interface), that resulted in poor or no wifi connection in some spots of the house.
1. I'm using local-forwarding in the video, so datapath is not required at all.
2. Yes, It is on for me in this tutorial
3. Superchannel is illegal to use for regular wifi users, and CAPsMAN is for that. Superchannel can be used if you have some exemption by the regulator.
@@mikrotik Thank you for your answer.
1. min 6:11 local-forwarding not enabled but it's ok, good to know that it's ok using local-forwarding without datapath.
2. ok, I saw only at 6:11 that datapath tab is blank, I may not have noticed when local-forwarding setting was made
3. I was kind of expecting this answer, but I said I'd still write about the superchannel so others can see why they might have a weaker signal when activating CAPsMAN. Yes, it is illegal but it is very useful in different situations.
Thank you again. :)
pls can you update this with the new wifi packages?
I have an issue with revoked certificates breaking this setup and find no docs on how to issue a replacement without having to reset any existing configurations, This is with layer 3 capsman. I get a message about sulking and I’m using the standard mutual TLS with request certificate option on the cap. Pointers would be useful. I have multiple APs.
With this configuration how may SSIDs are seen by a 2.4 and 5 Ghz capable device?
Towards the end of the video, I believe he says that devices see only one SSID
Is it capsman works with different brand access point ?
No
Vai šis veids ir ieteicamāks par klasisko, kur es AP veidoju kā routerus caur mng vlan un data vlan?
Šo būs vieglāk pārvaldīt, ja AP ierīču ir daudz. Viegli mainīt parametrus, viegli vienā tabulā redzēt visā teritorijā esošās WiFi ierīces
@@mikrotik Saprotu vienota pārvaldība ir laba lieta, bet vai var panākt augstu drošību? Un kā monitorēt šos AP? Logs par notikumiem tajos AP un ar tiem arī būs redzams kontroliera logā? Negribētos mocīties un daudzajiem AP katram taisīt syslog targetu lai no tā grepotu ārā ka sākušās kādas problēmas.
Tieši tā, visi wifi logi būs kontrolierī. Caur kontrolieri tiek pārvaldīti visi WiFi uzstādījumi un pašām kontrolētajām ierīcēm vispār vairs nav jāslēdzas klāt.
Drošība no tā nemainās.
can i use ruckus r320 AP ? or it need specific AP ? please need answer
CAPsMAN can only manage MikroTik made devices
@@mikrotik thanks
If i will create second SSID for all my devices i need to create second configuration, second provisioning and i will have double the amount of CAP interfaces? I want to make some guest wifi access.
Hello please I want to know how many mikrotik routers would one need to configure capsMan?
One
@@mikrotik ok so example I have 3 houses and I want to configure CapMan?
Would I need 3 routers in addition to the one sitting at the main sever room to configure CapMan for AP to manage by one router?
@@ebosac8813 the one wireless router can manage it unless you want it separate of the capsman controlled device
Is it possible to turn on a hap ac^3 w/o antennas attach?
can I use asus router as my AP? will this be compatible?
Thank You.
I have question can i use other ap like cisco, tplink and other vender control by capsman?
No
@MikrotikLatvia is it ok for the router if we're not attaching the antenna like in the video? I heard that if we turn it on without antenna attached it will damage the radio module inside it, is that information is true?
Depends on the model, one hAP ac3 comes with antennas, another one comes without antennas. You should check which model you have and follow instructions.
I've followed this process, but don't see the second access point on the remote CAP menu. I can manually connect them with an ethernet cable and provision it that way, but they still don't seem to see each other once I disconnect the ethernet cable. Has anyone had this problem?
Sir Can I use this method, using another device like TP-Link connecting to Mikrotik and setting it to Repeater Mode?
I wasn't able to configure Mikrotik hap AC2 as a CAP with HAP ax2. Both on RouterOS 7.8. Hap ax2 even doesn't have CAPsMAN. FRUSTRATING.
How are you using winbox on that MacBook?
Install Wine 64bit, then open Winbox with Wine
What’s about capstan on routeros 7.X with wave2 package?
Wifiwave2 package is for basic single device setups only.
nice and simple tutorial