Mikrotik支持AX协议的[wifiwave2-capsman]通用简单配置脚本分享
# start# apr/12/2023 15:07:36 by RouterOS 7.8
# model = C52iG-5HaxD2HaxD
# 几点说明：
# `适用于wiFiwave2。
# `需要至少有一个bridge。
# `适配5G和2.4G双频ax协议的设备，三频、以及双频但2.4G不支持ax协议的未做测试。
# `hapax2和ax3测试可用。
# `完成配置后，建议重启下caps和cap。
# `/interface wifiwave2 radio provision 官方未找到是什么操作，但是确实会影响到wifiwave2-capsman配置自身的wireless网卡。
# `/interface/wifiwave2/set wifi1,wifi2 configuration.manager=capsman，默认为capsman，也根据自己需求改为capsman-or-local。
# `/interface wifiwave2 provisioning add action=create-dynamic-enabled或者add action=create-enabled，测试发现create-dynamic-enabled多少有些bug。这里都使用了create-enabled。
# 如何使用：
# 自行替换自己的ssid和wifi密码。
# 复制全部内容到文本文档或者其他文本编辑器，非word等，然后另存为name.rsc,进入ros后台命令行，输入import file=name.rsc。等待即可。
# edit by GD。
# update 04/12/2023。
:local chms;
:local rosver;
:local mainbridge;
:local 2GSSID;
:local 5GSSID;
:local WiFiKey;
:set mainbridge ( [ /interface bridge get num=0 name ] );
:set chms ([ :pick 0 2 ] . [ :pick [/system \
clock get time ] 3 5 ] . [ :pick [ /system clock get time ] 6 8 ] )
:set rosver ( [:pick [ /system resource get version ] 0 3] )
:set 2GSSID "Your_2.4G_SSID";
:set 5GSSID "Your_5G_SSID";
:set WiFiKey "Your_WiFi_Password";
/interface wifiwave2
exp file="ros$rosver_wifiwave2_$chms.rsc"
/
/interface wifiwave2 channel
add disabled=no frequency=5745-5825:20 name=5G_C149-165_2-4-80M width=\
20/40/80mhz
add disabled=no frequency=2412 name=2.4G_C01_20M width=20mhz
add disabled=no frequency=2437 name=2.4G_C06_20M width=20mhz
add disabled=no frequency=2462 name=2.4G_C11_20M width=20mhz
add disabled=no frequency=2472 name=2.4G_C13_20M width=20mhz
add disabled=no frequency=2412-2462:25 name=2.4G_C01-06-11_20M width=20mhz
add disabled=no frequency=5180-5240:20 name=5G_C36-48_2-4-80M width=\
20/40/80mhz
add disabled=no frequency=5180-5240:20 name=5G_C36-48_2-40M width=20/40mhz
add disabled=no frequency=5745-5825:20 name=5G_C149-165_2-40M width=20/40mhz
/
/interface wifiwave2 datapath
add bridge="$mainbridge" disabled=no name=Datapath01
/
/interface wifiwave2 security
add authentication-types=wpa2-psk,wpa3-psk disable-pmkid=yes disabled=no \
encryption=ccmp,gcmp,ccmp-256,gcmp-256 ft=yes group-encryption=ccmp \
group-key-update=30m name=WiFiSec_WPA23 wps=disable \
passphrase="$WiFiKey"
add authentication-types=wpa-psk,wpa2-psk disable-pmkid=yes disabled=no \
encryption=ccmp,gcmp,ccmp-256,gcmp-256 group-encryption=ccmp \
group-key-update=30m name=WiFiSec_WPA12 wps=disable \
passphrase="$WiFiKey"
/
/interface wifiwave2 configuration
add channel=2.4G_C06_20M channel.band=2ghz-ax country=China datapath=\
Datapath01 disabled=no mode=ap name=2.4GHZ_AX-CH6_WAP23 security=\
WiFiSec_WPA23 ssid=$2GSSID
add channel=5G_C149-165_2-4-80M channel.band=5ghz-ax country=China datapath=\
Datapath01 disabled=no mode=ap name=5GHZ_AX-C149-80M_WPA23 security=\
WiFiSec_WPA23 ssid=$5GSSID
add channel=2.4G_C01-06-11_20M channel.band=2ghz-n country=China datapath=\
Datapath01 disabled=no mode=ap name=2.4GHZ_N-ALL20M_WPA12 security=\
WiFiSec_WPA12 ssid=$2GSSID
add channel=2.4G_C01-06-11_20M channel.band=2ghz-ax country=China datapath=\
Datapath01 disabled=no mode=ap name=2.4GHZ_AX-ALL20M_WPA12 security=\
WiFiSec_WPA12 ssid=$2GSSID
add channel=5G_C36-48_2-4-80M channel.band=5ghz-ax country=China datapath=\
Datapath01 disabled=no mode=ap name=5GHZ_AX-C36-80M_WPA23 security=\
WiFiSec_WPA23 ssid=$5GSSID
add channel=2.4G_C11_20M channel.band=2ghz-ax country=China datapath=\
Datapath01 disabled=no mode=ap name=2.4GHZ_AX-C11_WAP23 security=\
WiFiSec_WPA23 ssid=$2GSSID
add channel=5G_C36-48_2-40M channel.band=5ghz-ac country=China datapath=\
Datapath01 disabled=no mode=ap name=5GHZ_AC-C36-40M_WPA12 security=\
WiFiSec_WPA12 ssid=$5GSSID
add channel=5G_C149-165_2-40M channel.band=5ghz-ac country=China datapath=\
Datapath01 disabled=no mode=ap name=5GHZ_AC-C149-40M_WPA12 security=\
WiFiSec_WPA12 ssid=$5GSSID
/
/interface wifiwave2 access-list
add action=accept allow-signal-out-of-range=5s comment=5ghz_acl disabled=no \
signal-range=-80..0 ssid-regexp=$5GSSID
add action=accept allow-signal-out-of-range=5s comment=2.4ghz_acl disabled=no \
signal-range=-75..0 ssid-regexp=$2GSSID
add action=reject comment=rej_acl disabled=no interface=any signal-range=\
-120..-93
/
/interface wifiwave2 capsman
set ca-certificate=none enabled=yes interfaces="$mainbridge" package-path="" \
require-peer-certificate=no upgrade-policy=none
/
/interface wifiwave2 provisioning
add action=create-enabled comment=5GAX-C149_AC159 disabled=no \
identity-regexp="^.*(c|C)(ap|AP).*\$" master-configuration=\
5GHZ_AX-C149-80M_WPA23 supported-bands=5ghz-ax
add action=create-enabled comment=2GAX-C06_AC159 disabled=no identity-regexp=\
"^.*(c|C)(ap|AP).*\$" master-configuration=2.4GHZ_AX-CH6_WAP23 \
supported-bands=2ghz-ax
add action=create-enabled comment=5GAX-C36_AC2468 disabled=no \
identity-regexp="^.*(c|C)(ap|AP).*\$" master-configuration=\
5GHZ_AX-C36-80M_WPA23 supported-bands=5ghz-ax
add action=create-enabled comment=2GAX-C11_AC2468 disabled=no \
identity-regexp="^.*(c|C)(ap|AP).*\$" master-configuration=\
2.4GHZ_AX-C11_WAP23 supported-bands=2ghz-ax
add action=create-enabled comment=5GAC-C036_AC159 disabled=yes \
identity-regexp="^.*(c|C)(ap|AP).*\$" master-configuration=\
5GHZ_AC-C36-40M_WPA12 supported-bands=5ghz-ac
add action=create-enabled comment=2GN-ALL20M_AC159 disabled=yes \
identity-regexp="^.*(c|C)(ap|AP).*\$" master-configuration=\
2.4GHZ_N-ALL20M_WPA12 supported-bands=2ghz-n
/
/interface wifiwave2
disable [ find default-name="wifi1" ]
disable [ find default-name="wifi2" ]
/
:delay 3s;
/interface wifiwave2
reset [ /interface wifiwave2 find default-name="wifi1" ]
reset [ /interface wifiwave2 find default-name="wifi2" ]
/
:delay 3s;
/interface wifiwave2
set [ find default-name="wifi1" ] configuration.manager=capsman \
.mode=ap disabled=no
set [ find default-name="wifi2" ] configuration.manager=capsman \
.mode=ap disabled=no
/
:delay 2s;
/interface wifiwave2 radio
provision [ find radio-mac=[ /interface wifiwave2 \
get [ find default-name="wifi1" ] mac-address ] ]
provision [ find radio-mac=[ /interface wifiwave2 \
get [ find default-name="wifi2" ] mac-address ] ]
/
/interface wifiwave2 cap
set caps-man-addresses=127.0.0.1 certificate=none discovery-interfaces=\
"$mainbridge" enabled=yes
/
:delay 3s;
/interface wifiwave2
set [ find default-name="wifi1" ] configuration.manager=capsman \
.mode=ap disabled=no
set [ find default-name="wifi2" ] configuration.manager=capsman \
.mode=ap disabled=no
/
# end # start
# apr/12/2023 15:07:36 by RouterOS 7.8
# model = C52iG-5HaxD2HaxD
# 几点说明：
# `适用于wiFiwave2。
# `需要至少有一个bridge。
# `适配5G和2.4G双频ax协议的设备，三频、以及双频但2.4G不支持ax协议的未做测试。
# `hapax2和ax3测试可用。
# `完成配置后，建议重启下caps和cap。
# `/interface wifiwave2 radio provision 官方未找到是什么操作，但是确实会影响到wifiwave2-capsman配置自身的wireless网卡。
# `/interface/wifiwave2/set wifi1,wifi2 configuration.manager=capsman，默认为capsman，也根据自己需求改为capsman-or-local。
# `/interface wifiwave2 provisioning add action=create-dynamic-enabled或者add action=create-enabled，测试发现create-dynamic-enabled多少有些bug。这里都使用了create-enabled。
# 如何使用：
# 复制全部内容到文本文档或者其他文本编辑器，非word等，然后另存为name.rsc,进入ros后台命令行，输入import file=name.rsc。等待即可。
# edit by GD。
# update 04/14/2023：一些变量引用加入双引号，否则可能有未知错误。
# update 04/12/2023。
:local chms;
:local rosver;
:local mainbridge;
:local 2GSSID;
:local 5GSSID;
:local WiFiKey;
:set mainbridge ( [ /interface bridge get num=0 name ] );
:set chms ([ :pick 0 2 ] . [ :pick [/system \
clock get time ] 3 5 ] . [ :pick [ /system clock get time ] 6 8 ] )
:set rosver ( [:pick [ /system resource get version ] 0 3] )
:set 2GSSID "Your_2.4G_SSID";
:set 5GSSID "Your_5G_SSID";
:set WiFiKey "Your_WiFi_Password";
/interface wifiwave2
exp file="ros$rosver_wifiwave2_$chms.rsc"
/
/interface wifiwave2 channel
add disabled=no frequency=5745-5825:20 name=5G_C149-165_2-4-80M width=\
20/40/80mhz
add disabled=no frequency=2412 name=2.4G_C01_20M width=20mhz
add disabled=no frequency=2437 name=2.4G_C06_20M width=20mhz
add disabled=no frequency=2462 name=2.4G_C11_20M width=20mhz
add disabled=no frequency=2472 name=2.4G_C13_20M width=20mhz
add disabled=no frequency=2412-2462:25 name=2.4G_C01-06-11_20M width=20mhz
add disabled=no frequency=5180-5240:20 name=5G_C36-48_2-4-80M width=\
20/40/80mhz
add disabled=no frequency=5180-5240:20 name=5G_C36-48_2-40M width=20/40mhz
add disabled=no frequency=5745-5825:20 name=5G_C149-165_2-40M width=20/40mhz
/
/interface wifiwave2 datapath
add bridge="$mainbridge" disabled=no name=Datapath01
/
/interface wifiwave2 security
add authentication-types=wpa2-psk,wpa3-psk disable-pmkid=yes disabled=no \
encryption=ccmp,gcmp,ccmp-256,gcmp-256 ft=yes group-encryption=ccmp \
group-key-update=30m name=WiFiSec_WPA23 wps=disable \
passphrase="$WiFiKey"
add authentication-types=wpa-psk,wpa2-psk disable-pmkid=yes disabled=no \
encryption=ccmp,gcmp,ccmp-256,gcmp-256 group-encryption=ccmp \
group-key-update=30m name=WiFiSec_WPA12 wps=disable \
passphrase="$WiFiKey"
/
/interface wifiwave2 configuration
add channel=2.4G_C06_20M channel.band=2ghz-ax country=China datapath=\
Datapath01 disabled=no mode=ap name=2.4GHZ_AX-CH6_WAP23 security=\
WiFiSec_WPA23 ssid="$2GSSID"
add channel=5G_C149-165_2-4-80M channel.band=5ghz-ax country=China datapath=\
Datapath01 disabled=no mode=ap name=5GHZ_AX-C149-80M_WPA23 security=\
WiFiSec_WPA23 ssid="$5GSSID"
add channel=2.4G_C01-06-11_20M channel.band=2ghz-n country=China datapath=\
Datapath01 disabled=no mode=ap name=2.4GHZ_N-ALL20M_WPA12 security=\
WiFiSec_WPA12 ssid="$2GSSID"
add channel=2.4G_C01-06-11_20M channel.band=2ghz-ax country=China datapath=\
Datapath01 disabled=no mode=ap name=2.4GHZ_AX-ALL20M_WPA12 security=\
WiFiSec_WPA12 ssid="$2GSSID"
add channel=5G_C36-48_2-4-80M channel.band=5ghz-ax country=China datapath=\
Datapath01 disabled=no mode=ap name=5GHZ_AX-C36-80M_WPA23 security=\
WiFiSec_WPA23 ssid="$5GSSID"
add channel=2.4G_C11_20M channel.band=2ghz-ax country=China datapath=\
Datapath01 disabled=no mode=ap name=2.4GHZ_AX-C11_WAP23 security=\
WiFiSec_WPA23 ssid="$2GSSID"
add channel=5G_C36-48_2-40M channel.band=5ghz-ac country=China datapath=\
Datapath01 disabled=no mode=ap name=5GHZ_AC-C36-40M_WPA12 security=\
WiFiSec_WPA12 ssid="$5GSSID"
add channel=5G_C149-165_2-40M channel.band=5ghz-ac country=China datapath=\
Datapath01 disabled=no mode=ap name=5GHZ_AC-C149-40M_WPA12 security=\
WiFiSec_WPA12 ssid="$5GSSID"
/
/interface wifiwave2 access-list
add action=accept allow-signal-out-of-range=5s comment=5ghz_acl disabled=no \
signal-range=-80..0 ssid-regexp="$5GSSID"
add action=accept allow-signal-out-of-range=5s comment=2.4ghz_acl disabled=no \
signal-range=-75..0 ssid-regexp="$2GSSID"
add action=reject comment=rej_acl disabled=no interface=any signal-range=\
-120..-93
/
/interface wifiwave2 capsman
set ca-certificate=none enabled=yes interfaces="$mainbridge" package-path="" \
require-peer-certificate=no upgrade-policy=none
/
/interface wifiwave2 provisioning
add action=create-enabled comment=5GAX-C149_AC159 disabled=no \
identity-regexp="^.*(c|C)(ap|AP).*\$" master-configuration=\
5GHZ_AX-C149-80M_WPA23 supported-bands=5ghz-ax
add action=create-enabled comment=2GAX-C06_AC159 disabled=no identity-regexp=\
"^.*(c|C)(ap|AP).*\$" master-configuration=2.4GHZ_AX-CH6_WAP23 \
supported-bands=2ghz-ax
add action=create-enabled comment=5GAX-C36_AC2468 disabled=no \
identity-regexp="^.*(c|C)(ap|AP).*\$" master-configuration=\
5GHZ_AX-C36-80M_WPA23 supported-bands=5ghz-ax
add action=create-enabled comment=2GAX-C11_AC2468 disabled=no \
identity-regexp="^.*(c|C)(ap|AP).*\$" master-configuration=\
2.4GHZ_AX-C11_WAP23 supported-bands=2ghz-ax
add action=create-enabled comment=5GAC-C036_AC159 disabled=yes \
identity-regexp="^.*(c|C)(ap|AP).*\$" master-configuration=\
5GHZ_AC-C36-40M_WPA12 supported-bands=5ghz-ac
add action=create-enabled comment=2GN-ALL20M_AC159 disabled=yes \
identity-regexp="^.*(c|C)(ap|AP).*\$" master-configuration=\
2.4GHZ_N-ALL20M_WPA12 supported-bands=2ghz-n
/
/interface wifiwave2
disable [ find default-name="wifi1" ]
disable [ find default-name="wifi2" ]
/
:delay 3s;
/interface wifiwave2
reset [ /interface wifiwave2 find default-name="wifi1" ]
reset [ /interface wifiwave2 find default-name="wifi2" ]
/
:delay 3s;
/interface wifiwave2
set [ find default-name="wifi1" ] configuration.manager=capsman \
.mode=ap disabled=no
set [ find default-name="wifi2" ] configuration.manager=capsman \
.mode=ap disabled=no
/
:delay 2s;
/interface wifiwave2 radio
provision [ find radio-mac=[ /interface wifiwave2 \
get [ find default-name="wifi1" ] mac-address ] ]
provision [ find radio-mac=[ /interface wifiwave2 \
get [ find default-name="wifi2" ] mac-address ] ]
/
/interface wifiwave2 cap
set caps-man-addresses=127.0.0.1 certificate=none discovery-interfaces=\
"$mainbridge" enabled=yes
/
:delay 3s;
/interface wifiwave2
set [ find default-name="wifi1" ] configuration.manager=capsman \
.mode=ap disabled=no
set [ find default-name="wifi2" ] configuration.manager=capsman \
.mode=ap disabled=no
/
# end
页:
[1]