MikroTIk RouterOS CAPsMAN

Here are the notes from Uldis Cernevskis presentation at the US MUM in Pittburgh, PA.

MikroTik CAPsMAN is a wireless provisioning and management system for MikroTIk wireless AP’s.

Controlled Access Point system Manager (CAPsMAN) allows centralization of wireless network management and if necessary, data processing. When using the CAPsMAN feature, the network will consist of a number of ‘Controlled Access Points’ (CAP) that provide wireless connectivity and a ‘system Manager’ (CAPsMAN) that manages the configuration of the APs, it also takes care of client authentication and optionally, data forwarding.

When a CAP is controlled by CAPsMAN it only requires the minimum configuration required to allow it to establish connection with CAPsMAN. Functions that were conventionally executed by an AP (like access control, client authentication) are now executed by CAPsMAN. The CAP device now only has to provide the wireless link layer encryption/decryption.

There is not narrative, just a brain dump.

CAPsMAN Features

  • CapsMan is a centralized management of RouterOS AP’s
  • Dual band support
  • provisioning
  • Certificate support
  • Radius MAC Authentication
  • Custom config support
  • Layer 3 management of off site AP’s

Requirements

  • Newest version 6 version
  • Wireless-fp package installed

Setup

  • Enable CAPSMAN Service
  • Create abridge
  • Add IP to bridge
  • Create CAPsMAN Configuration
  • Create provisioning rule
  • Enable CAP mode on AP’s

Other Features

  • Works on MAC layer 2 or UDP via layer 3
  • CAP attempts to contact a CAPsMAN and is listed in the CAP list

 

Steve Discher

Steve Discher was born in Apple Valley, California and today makes his home in College Station, Texas with his wife and three children. He is a 1987 graduate of Texas A-M University and owns ISP Supplies, a wireless distribution company, and conducts MikroTik training classes. His hobbies include flying his Piper Cub and RV camping with his family.

Recent Posts

  • Using MikroTik LHG as a UE With a Baicells eNodeB

    This has been a dream for a long time, and a DIY project for those industrious individuals willing to cobble it together, but now it is a reality in a production device. First of all why would you want to …

  • New ISP Supplies App

    Now available on the Playstore and the iPhone Appstore, the ISP Supplies App! With great features like a powerful search engine and a reorder list, it makes it fast and easy to place orders on the go. Favorite products for quick …

  • Update: Block Countries Based on IP Addresses and Networks

    If you never used my web site https://mikrotikconfig.com to build firewalls and QOS, you have been working too hard! I recently (today) updated the database of IP addresses by Country to generate MikroTik IP Address Lists by country. Check it …

See More News