(CAPsMAN)

- Connect your windows computer to omnitik (main router) using winbox, connect internet
to POE other end (Using the HAP you don’t need POE, plug the internet into the first port
and for every additional unit do the same – connect them to the main unit by using the AP
first port.
- Leave the default configuration (not necessary to remove default config)

- Setup the IP / CLOUD – enable DDNS feature, Apply – if you get an error try to update
the routerboard firmware first

(copy the public address and DNS address to redmine so they can create a remote access
for this router)
Set password to router : System - Password
Setup an Identity for the router. – System - Identity

System – Packages – Check for updates – Download and Install

- After rebooting wireless packages should be enabled

System – Routerboard Check the firmware, and update if its necessary. ( If current version has
a lower number than Upgrade then upgrade. If current has a higher number then.

Reboot
Bridge – click on defconfig – General tab – change ARP to proxy arp - apply
IP – Firewall – NAT tab – double click on existing def config - click on Copy – change out
interface to All ppp

Enable CAPSMAN- Capsman – Manager

Check the wireless interface under Wireless menu it should show as wlan1 and you should be
able to connect with any device (since you did not set SSID it has the original Microtik ssid name)
( If you are using HAP dual band device you will see wlan 1 and wlan 2)

In Wireles menu – Wireless Tables press CAP, and enable it!

Interfaces : wlan1

HAP: choose wlan2 as the second interface

Cert.: request

If everything is okay, a cap1 interface appears. (using dual band HAP: cap1,cap2)

Create a configuration set with the SSID, and the region!

Click on Capsman – Configuration - + sign

Click on Wireless tab

Name: cfg1

Mode:ap

SSID: choose one

country: usa

Under Datapath tab set the Bridge to bridge-local, and set up the Client-to-client forward if its
necessary for your system. Disable it if you want to use as a Guest Wifi!
Under the security tab set up the security.

Note: not necessary to create more config file only when using guest wifi

Reboot router after creating the config file otherwise CAP1 won’t appear.
Once we done cap1 will show up (cap2 is HAP)

Under Cap1 interface, select the cfg1. Capsman –Interfaces – double clik on cap1 and go
Wireless tab – choose cfg 1 for configuration and click apply. Mode, SSID,Country will fill out

(automatically.
Test if we are able to see the SSID and security settings are good
Adding extra already set up APs to the network

After we connected a set up AP will see that connection is active (RSMB)

After we set the another AP, the cap2 interface will appear.

HAP: cap3 and cap4

Load the cfg for that.

We can test which AP is being used if disable and enabled one of the interface. Capsman with X
sign
Set up Additional access point (AP)

Remove config (important otherwise it could have the same ip address as the main unit)

Reboot

Set up a dhcp client for the router IP- DHCP CLIENT - + sign- either 1 interface
Check if its bounding or not if you see an ip address it is good.

Setup the Clock sync and the DDNS feature. Ip cloud how you did with the main unit
Add an Identity. System - IDentity

Check the version, update if its necessary how you did with the main router

Create the same bridge, name it as before

Bridge - + sign – General tab name should be bridge.

Change name to bridge-local as before
Switch tabs to STP tab & set protocol mode to NONE
There should show up a bridge row, switch to Port tab and enable wlan1 (set wlan2 for dual band
WAP) interface- + sign and choose Interface.

Update packages same way as you did with main unit – System - Packages
Wireless tables - Enable CAPSMAN with the following settings: - click on CAP

WAP: choose wlan2 as the second interface

If its connected, the managed by CAPSMAN appears, like this:

Add AP what is already configured:

Wireless tables- Cap – turn off Enabled – ok

System – Certificates – Delete everything

Reboot

Wireless – Cap – Enable- wait for Certificate

Then load config files on main unit see details above

NOTES

On the AP remove the original IP address if it is the same as the first router. If you cannot get an
internet connection on it.

When setting the Band in the CAPsMAN interface use 5ghz-a/n if you are using a 5ghz router and AP.

If the AP is not broadcasting a SSID check the interface in CAPsMAN and make sure the new interface
is using the cfg 1 configuration.