MikroTik: How to configure CAPsMAN

hello everyone so in today's video i want us to go through and see how we can be able to configure capsman capsman is really essentials in situations whereby you have several routers that you want to control and manage their wireless interfaces and uh probably it's a cumbersome job or it's a tiresome job to go to each and every access point and do configuration to it so cubsman gives you that is that simplicity of doing all those configuration just from one point so what i have with me here are two routers my first router which is the main router i've given it an identity called capsman and then i have a second router with me which i've given it an identity and i've called it router 1 so let's start the con the configuration we are going to start with our first the main router so what you need to do is you just need to come to capsman click on manager and then click enable so that is all that you need to do to enable the capsman functionality on your first router which is going to control all the other routers that you have connected to it so after that is done let's close that so let's come now to our second router and on our second router now all you need to do is you need to come to the wireless tab then come and click on a cap and uh just before i forget this is a router which is it's in its default state of uh i have actually reset it and it has no configuration at all so let's just see yeah so as you can see there's no configuration on this router so after coming to the wireless tab you come and click on cap then we are going to enable this and then our interface the interface that we want to control is the w lan interface let me just widen this and then our destination interface is going to be ether2 why eta2 ether2 is where my cable is connected to the cable from the first router comes from i think yeah it comes from ether 4 and then it goes to ether2 of router 1. so that's why i'm using ether2 it can be either three four five whatever port that you're using to to connect to it so i'm going to check to pick ether2 as my discovery interface and then i'm just going to apply that okay so after doing that you can now be able to see that router one is now managed by capsman and then if we also come to our first router click on capsman you can now be able to see from the cup interface there's a a router that has been added the name is capone you can be able to change this name if you want to if you come to remote cap you can also be able to see the same router that has been added so that is all that you need to do secondly i would also want to add my first router i would also want it to be managed using the capsman so for this same uh capsman router it has a wireless interface that wireless interface can also be managed from the capsman so what you need to do is you just need to come to wireless click on the cap and then click enable and then now for this you don't need to input the discovery interface what you now need to do is to input the capsman address this is going to be the local address of this same router so it's going to be 172.0.0.1 [Music] this is the same address that you would also use for for your case so after inputting that we are going to apply this okay and you can now also see that our local router itself is also been managed by the capsman within itself so if we come back to capsman tab you can now see we have two routers that we are managing now from this capsman so that is how you are able to manage your routers so a little bit more uh configuration into it so you would want a situation where you want maybe to change the ssid you want to change the password and all that note that when you come let's say you come to our router one you can see it says that it's been managed by capsman so even if you come to and open this and maybe say you want to change this ssid let's say maybe you want to let's just use a simple word test apply you see that you cannot be able to make that change because it's been managed from the capsman manager of our core router so you need to note that so what you need to do for you to be able to change the ssid and stuff like that let's minimize this you have to come to your main router which is the capsman then there are two ways of doing it the first way is you come to the router that you want to change the ssid or the password for so maybe you come and click on that then you have a ssid here where maybe you can put your ssid you can also maybe input your country okay i'm not finding but i'm not finding my country i'm not sure why but uh this is how you are supposed to change your country there it is then the type of installation these could be indoor outdoor whatever use or whatever location the router is located and then just click apply okay this change is going to affect this particular cap1 router that is the first way of doing it i'm forgetting to show you the security parts all you need to do is come to security then authentication type click those first two and maybe enter your passphrase as you wish so that is how that is the first way of doing it the second way you need to come to the configuration tabs tab here then click add come to the wireless tab ssid let's give it maybe [Music] just anything cups test so that is going to be our ssid then uh what else do i need to choose uh everything looks okay maybe the country as well so that it goes in line with the regulations of your country let me just scroll down and look for kenya okay i'm not sure why i'm having difficulties finding it okay just a minute as we look for it yeah there it is and our installation type is uh definitely indoor then for the security uh you come to authentication type i will check that i will check that then my pass phrase i would put one two three four five six seven eight but definitely that is just for demonstration purposes you need to put a stronger password and one thing i also want you to take a note of is this name cfg1 basically a short form for configuration one you can change that name if you want to i've decided just to leave it as it is so apply okay so what i now need to do is i need to come to the cap interface under each and every cup that i'm managing let's say cup one i would click that come to the wireless section then configuration the drop down you can now see where cfg is now coming from and uh it does not only have to be one configuration you can have maybe a particular configuration for fast flow you can have a particular configuration for second flow with the different ssid so you'll just be going to the various caps and then choosing the configuration name that you've just created so for now because we only have one configuration it's definitely going to be cfg1 then apply that okay we go to cap2 same configuration it's going to be configuration one apply that okay so we've managed now to input ssid and username for our caps so the next thing that i want us to do is i want us now to look at the security part of it because as it is right now anybody who has a configured not a configured a reset router and they just go to caps and they enable that they come to cap and then they enable this uh this person is able their route is now able to be managed using your capsman so you want to have a situation where you have some a bit of control on who is getting connected to your network so what you would do is that you would come to your call to your capsman router come to manager and then let me just make this a little bit smaller and then on the certificate here just make that auto see a certificate also make that auto then click apply uh give it a minute also so that it generates those certificates and once the certificates are generated they will be populated right here you can see they've now been generated so you can now see that the certificates have been generated so click ok and then after doing that you now need to come back to your routers and uh let's go to the first router then you need to come and click on cap certificate click on the drop down and then pick request then apply that and it's going to make a request so that it gets those certificates and once that is done the certificate is going to appear right here as you can see it has already appeared so click ok you can now see it the router is still being managed by the capsman that is uh the first part regarding security another thing that you now need to do after you've requested for after you've requested for the for the certificates for your routers maybe in first second floor what you now need to do is uh okay i haven't requested for my local router let me just do it wireless cap requests that one i have done okay let me go to the capsman manager the wireless interface and also re do a request certificate request apply let's give it a minute so that it gets that certificate and you'll just see it populate at the requested certificate over here yeah you can now be able to see that it has also been given a certificate so you apply that so now guys when you come back to the caps mana and then go back to manager and then click require peer certificate when you click on that when you enable that click apply okay nobody else is now going to be able to receive a certificate from capsman so if anybody else comes with a router and tries to plug it in maybe somewhere where you have a switch that router will not be managed by our capsman that is one two you can also go to your to the routers and uh instruct the routers to only get certificates from your from there from your core capsman router which you you you know so how do you do that you come to caps and then after that just pick the certificate from the from the drop down then click lock to capsman then apply that okay let's go to the second one we need to come to wireless cap and then we are just going to do the same thing the certificate we are going to choose the certificate that it has been given and as you can see it's this one over here 77d there it is then enable that that just click that checkbox log to capsman apply that okay it will also take uh some few seconds for it to get that setting so it's back on lane so when you come to our caps mana and maybe have a look at our remote cups you are able to see both of them and the status is they are all running so guys that is how you are able to configure capsman uh in case you have any questions regarding it just leave a comment down below and i'll definitely answer each and every one of them so guys that's it for today and uh see you in the next video

Channel: Mr. WISP_254

Views: 449

Keywords: mikrotik, ubiquiti, ubnt, pppoe, hotspot, wisp, bandwidth management, xceednet, network, wifi, mr.wisp254, Mr. WISP_254, brian onuko, onuko, oktiq, internet, vlan, unms, unifi, unifi controller, static ip, ip, mikrotik configuration, ubiquiti configuration, wisp africa, haplite, winbox, mikrotik for beginners, ubiquiti for beginners, tenda, tp link, tplink, router configuration, router, dashboard, dhcp

Id: yqwUCPdO7_w

Length: 17min 44sec (1064 seconds)

Published: Sat Nov 27 2021