Post

Mikrotik - Mutiple SSID with CAPsMAN

Pre-requisites

The ports on the switches where the APs are to be connected, should be configured with the following VLANs:

1
2
VLAN 6 (HOME): not tagged
VLAN 12 (HOME-Guest): tagged

Quickset Mode

In this mode configure the following settings as follows:

Configuration

1
Mode: Bridge

System

1
Password: (enter new admin password)

Press the Apply Configuration button.

Terminal

CAPs-Man

  • Create appropriate CAPsMan datapath template

    1
    2
    
      /caps-man datapath add client-to-client-forwarding=yes local-forwarding=yes name=datapath-HOME vlan-id=6 vlan-mode=no-tag
      /caps-man datapath add client-to-client-forwarding=yes local-forwarding=yes name=datapath-Guest vlan-id=12 vlan-mode=use-tag
    
  • Create appropriate CAPsMan security template

    1
    2
    
      /caps-man security add authentication-types=wpa-psk,wpa2-psk name=security-HOME passphrase=h0m3w1f1
      /caps-man security add authentication-types=wpa-psk,wpa2-psk name=security-Guest passphrase=home-guest
    
  • Create appropriate CAPsMan configurations

    1
    2
    
      /caps-man configuration add country=portugal datapath=datapath-HOME name=config-HOME security=security-HOME ssid=HOME 
      /caps-man configuration add country=portugal datapath=datapath-Guest name=config-Guest security=security-Guest ssid=HOME-Guest
    

    We are going to create a single CAPsMAN provisioning rule to create the HOME and the HOME-Guest SSIDs on a single device, each connects CAP is going to create these SSIDs automatically.

    1
    
      /caps-man provisioning add action=create-dynamic-enabled master-configuration=config-HOME slave-configurations=config-Guest
    
  • Enable the CAPsMAN manager

    1
    
      /caps-man manager set enabled=yes package-path=/ upgrade-policy=suggest-same-version
    
  • Enable the Wireless of the AP to be managed by the CAP

    1
    
      /interface wireless cap
    
This post is licensed under CC BY 4.0 by the author.