Opsætning af Wifi med CapsMan
Noget tid efter at have købt min Mikrotik router ville jeg prøve at bruge Mikrotik accesspoints også, og helt håndtere dem via CapsMan, så alt opsætning blev gjort i selve routeren.
Jeg købte en CAP AC og prøve at opsætte den, efter en masse eder og forbandelser lykkedes det at få den forbundet til CapsMan, senere tilføjede jeg et WAP AC. Planen nu er dog at vente på at der kommer nogle Wifi 6 access points fra Mikrotik, med den nye Hap AX3 er der håb forude.
What is important about wifi is that default settings are not nescessarily those that are the best for your environment at home, so you should expect to do some tweaking. One of the most important things is to find set wifi to a channel with no or little use in the neighbourhood.
Jeg har brugt nedenstående konfiguration hvilket giver omkring 350-400 Mbit/s
interface bridge
add name=BR1 protocol-mode=none vlan-filtering=yes
/interface wireless
set [ find default-name=wlan2 ] band=5ghz-n/ac basic-rates-a/g=12Mbps \
channel-width=20/40/80mhz-XXXX country=denmark disabled=no installation=\
indoor mode=ap-bridge name=Wifi1 ssid=Wifi1 supported-rates-a/g=\
12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps wps-mode=disabled
set [ find default-name=wlan1 ] band=2ghz-g/n disabled=no frequency=2462 mode=\
ap-bridge ssid=wifi-slow
/interface list
add name=BASE
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods=”” mode=\
dynamic-keys supplicant-identity=MikroTik wpa2-pre-shared-key=Password1
add authentication-types=wpa2-psk eap-methods=”” mode=dynamic-keys name=Guest \
supplicant-identity=MikroTik wpa2-pre-shared-key=password2
add authentication-types=wpa2-psk eap-methods=”” management-protection=allowed \
mode=dynamic-keys name=IOT supplicant-identity=”” wpa2-pre-shared-key=\
Password3
/interface wireless
add disabled=no keepalive-frames=disabled mac-address=E6:8D:8C:72:A1:57 \
master-interface=wifi1 multicast-buffering=disabled name=IOT \
security-profile=IOT ssid=IOT wds-cost-range=0 wds-default-cost=0 wps-mode=\
disabled
add disabled=no keepalive-frames=disabled mac-address=E6:8D:8C:72:A1:58 \
master-interface=Wifi1 multicast-buffering=disabled name=guests \
security-profile=Guest ssid=WiFi_GUEST wds-cost-range=0 wds-default-cost=0 \
wps-mode=disabled
/interface bridge port
add bridge=BR1 frame-types=admit-only-untagged-and-priority-tagged \
ingress-filtering=yes interface=wlan1
add bridge=BR1 frame-types=admit-only-untagged-and-priority-tagged \
ingress-filtering=yes interface=Wifi1
add bridge=BR1 frame-types=admit-only-vlan-tagged ingress-filtering=yes \
interface=ether1
add bridge=BR1 frame-types=admit-only-untagged-and-priority-tagged \
ingress-filtering=yes interface=IOT pvid=80
add bridge=BR1 frame-types=admit-only-untagged-and-priority-tagged \
ingress-filtering=yes interface=guests pvid=20
/ip neighbor discovery-settings
set discover-interface-list=BASE
/interface bridge vlan
add bridge=BR1 tagged=ether1 untagged=Wifi1,wlan1 vlan-ids=1
add bridge=BR1 tagged=ether1 untagged=A vlan-ids=20 add bridge=BR1 tagged=BR1,ether1 vlan-ids=99 add bridge=BR1 tagged=ether1 untagged=A vlan-ids=80
/ip dhcp-client
add disabled=no interface=BR1
/system clock
set time-zone-name=Europe/Copenhagen
/system identity
set name=AccessPoint