Mikrotik支持AX协议的[wifiwave2-capsman]通用简单配置脚本分享

hyes

# start

# apr/12/2023 15:07:36 by RouterOS 7.8
# model = C52iG-5HaxD2HaxD

# 几点说明：
#   `适用于wiFiwave2。
#   `需要至少有一个bridge。
#   `适配5G和2.4G双频ax协议的设备，三频、以及双频但2.4G不支持ax协议的未做测试。
#   `hapax2和ax3测试可用。
#   `完成配置后，建议重启下caps和cap。
#   `/interface wifiwave2 radio provision 官方未找到是什么操作，但是确实会影响到wifiwave2-capsman配置自身的wireless网卡。
#   `/interface/wifiwave2/set wifi1,wifi2 configuration.manager=capsman，默认为capsman，也根据自己需求改为capsman-or-local。
#   `/interface wifiwave2 provisioning add action=create-dynamic-enabled或者add action=create-enabled，测试发现create-dynamic-enabled多少有些bug。这里都使用了create-enabled。

# 如何使用：
#   自行替换自己的ssid和wifi密码。
#   复制全部内容到文本文档或者其他文本编辑器，非word等，然后另存为name.rsc,进入ros后台命令行，输入import file=name.rsc。等待即可。

# edit by GD。
# update 04/12/2023。

:local chms;
:local rosver;
:local mainbridge;
:local 2GSSID;
:local 5GSSID;
:local WiFiKey;

:set mainbridge ( [ /interface bridge get num=0 name ] );
:set chms ([ :pick [/system clock get time ] 0 2 ] . [ :pick [/system \
    clock get time ] 3 5 ] . [ :pick [ /system clock get time ] 6 8 ] )
:set rosver ( [:pick [ /system resource get version ] 0 3] )
:set 2GSSID "Your_2.4G_SSID";
:set 5GSSID "Your_5G_SSID";
:set WiFiKey "Your_WiFi_Password";


/interface wifiwave2
exp file="ros$rosver_wifiwave2_$chms.rsc"
/

/interface wifiwave2 channel
add disabled=no frequency=5745-5825:20 name=5G_C149-165_2-4-80M width=\
    20/40/80mhz
add disabled=no frequency=2412 name=2.4G_C01_20M width=20mhz
add disabled=no frequency=2437 name=2.4G_C06_20M width=20mhz
add disabled=no frequency=2462 name=2.4G_C11_20M width=20mhz
add disabled=no frequency=2472 name=2.4G_C13_20M width=20mhz
add disabled=no frequency=2412-2462:25 name=2.4G_C01-06-11_20M width=20mhz
add disabled=no frequency=5180-5240:20 name=5G_C36-48_2-4-80M width=\
    20/40/80mhz
add disabled=no frequency=5180-5240:20 name=5G_C36-48_2-40M width=20/40mhz
add disabled=no frequency=5745-5825:20 name=5G_C149-165_2-40M width=20/40mhz
/

/interface wifiwave2 datapath
add bridge="$mainbridge" disabled=no name=Datapath01
/

/interface wifiwave2 security
add authentication-types=wpa2-psk,wpa3-psk disable-pmkid=yes disabled=no \
    encryption=ccmp,gcmp,ccmp-256,gcmp-256 ft=yes group-encryption=ccmp \
    group-key-update=30m name=WiFiSec_WPA23 wps=disable \
    passphrase="$WiFiKey"
add authentication-types=wpa-psk,wpa2-psk disable-pmkid=yes disabled=no \
    encryption=ccmp,gcmp,ccmp-256,gcmp-256 group-encryption=ccmp \
    group-key-update=30m name=WiFiSec_WPA12 wps=disable \
    passphrase="$WiFiKey"
/

/interface wifiwave2 configuration
add channel=2.4G_C06_20M channel.band=2ghz-ax country=China datapath=\
    Datapath01 disabled=no mode=ap name=2.4GHZ_AX-CH6_WAP23 security=\
    WiFiSec_WPA23 ssid=$2GSSID
add channel=5G_C149-165_2-4-80M channel.band=5ghz-ax country=China datapath=\
    Datapath01 disabled=no mode=ap name=5GHZ_AX-C149-80M_WPA23 security=\
    WiFiSec_WPA23 ssid=$5GSSID
add channel=2.4G_C01-06-11_20M channel.band=2ghz-n country=China datapath=\
    Datapath01 disabled=no mode=ap name=2.4GHZ_N-ALL20M_WPA12 security=\
    WiFiSec_WPA12 ssid=$2GSSID
add channel=2.4G_C01-06-11_20M channel.band=2ghz-ax country=China datapath=\
    Datapath01 disabled=no mode=ap name=2.4GHZ_AX-ALL20M_WPA12 security=\
    WiFiSec_WPA12 ssid=$2GSSID
add channel=5G_C36-48_2-4-80M channel.band=5ghz-ax country=China datapath=\
    Datapath01 disabled=no mode=ap name=5GHZ_AX-C36-80M_WPA23 security=\
    WiFiSec_WPA23 ssid=$5GSSID
add channel=2.4G_C11_20M channel.band=2ghz-ax country=China datapath=\
    Datapath01 disabled=no mode=ap name=2.4GHZ_AX-C11_WAP23 security=\
    WiFiSec_WPA23 ssid=$2GSSID
add channel=5G_C36-48_2-40M channel.band=5ghz-ac country=China datapath=\
    Datapath01 disabled=no mode=ap name=5GHZ_AC-C36-40M_WPA12 security=\
    WiFiSec_WPA12 ssid=$5GSSID
add channel=5G_C149-165_2-40M channel.band=5ghz-ac country=China datapath=\
    Datapath01 disabled=no mode=ap name=5GHZ_AC-C149-40M_WPA12 security=\
    WiFiSec_WPA12 ssid=$5GSSID
/

/interface wifiwave2 access-list
add action=accept allow-signal-out-of-range=5s comment=5ghz_acl disabled=no \
    signal-range=-80..0 ssid-regexp=$5GSSID
add action=accept allow-signal-out-of-range=5s comment=2.4ghz_acl disabled=no \
    signal-range=-75..0 ssid-regexp=$2GSSID
add action=reject comment=rej_acl disabled=no interface=any signal-range=\
    -120..-93
/

/interface wifiwave2 capsman
set ca-certificate=none enabled=yes interfaces="$mainbridge" package-path="" \
    require-peer-certificate=no upgrade-policy=none
/

/interface wifiwave2 provisioning
add action=create-enabled comment=5GAX-C149_AC159 disabled=no \
    identity-regexp="^.*(c|C)(ap|AP).*[159]\$" master-configuration=\
    5GHZ_AX-C149-80M_WPA23 supported-bands=5ghz-ax
add action=create-enabled comment=2GAX-C06_AC159 disabled=no identity-regexp=\
    "^.*(c|C)(ap|AP).*[159]\$" master-configuration=2.4GHZ_AX-CH6_WAP23 \
    supported-bands=2ghz-ax
add action=create-enabled comment=5GAX-C36_AC2468 disabled=no \
    identity-regexp="^.*(c|C)(ap|AP).*[2468]\$" master-configuration=\
    5GHZ_AX-C36-80M_WPA23 supported-bands=5ghz-ax
add action=create-enabled comment=2GAX-C11_AC2468 disabled=no \
    identity-regexp="^.*(c|C)(ap|AP).*[2468]\$" master-configuration=\
    2.4GHZ_AX-C11_WAP23 supported-bands=2ghz-ax
add action=create-enabled comment=5GAC-C036_AC159 disabled=yes \
    identity-regexp="^.*(c|C)(ap|AP).*[159]\$" master-configuration=\
    5GHZ_AC-C36-40M_WPA12 supported-bands=5ghz-ac
add action=create-enabled comment=2GN-ALL20M_AC159 disabled=yes \
    identity-regexp="^.*(c|C)(ap|AP).*[159]\$" master-configuration=\
    2.4GHZ_N-ALL20M_WPA12 supported-bands=2ghz-n
/

/interface wifiwave2
disable [ find default-name="wifi1" ]
disable [ find default-name="wifi2" ]
/

:delay 3s;
/interface wifiwave2
reset [ /interface wifiwave2 find default-name="wifi1" ]
reset [ /interface wifiwave2 find default-name="wifi2" ]
/

:delay 3s;
/interface wifiwave2
set [ find default-name="wifi1" ] configuration.manager=capsman \
    .mode=ap disabled=no
set [ find default-name="wifi2" ] configuration.manager=capsman \
    .mode=ap disabled=no
/

:delay 2s;
/interface wifiwave2 radio
provision [ find radio-mac=[ /interface wifiwave2 \
    get [ find default-name="wifi1" ] mac-address ] ]
provision [ find radio-mac=[ /interface wifiwave2 \
    get [ find default-name="wifi2" ] mac-address ] ]
/

/interface wifiwave2 cap
set caps-man-addresses=127.0.0.1 certificate=none discovery-interfaces=\
    "$mainbridge" enabled=yes
/

:delay 3s;
/interface wifiwave2
set [ find default-name="wifi1" ] configuration.manager=capsman \
    .mode=ap disabled=no
set [ find default-name="wifi2" ] configuration.manager=capsman \
    .mode=ap disabled=no
/

# end

hyes

1. # start
   
2. # apr/12/2023 15:07:36 by RouterOS 7.8
   
3. # model = C52iG-5HaxD2HaxD
   
4. 
   
5. # 几点说明：
   
6. #   `适用于wiFiwave2。
   
7. #   `需要至少有一个bridge。
   
8. #   `适配5G和2.4G双频ax协议的设备，三频、以及双频但2.4G不支持ax协议的未做测试。
   
9. #   `hapax2和ax3测试可用。
   
10. #   `完成配置后，建议重启下caps和cap。
    
11. #   `/interface wifiwave2 radio provision 官方未找到是什么操作，但是确实会影响到wifiwave2-capsman配置自身的wireless网卡。
    
12. #   `/interface/wifiwave2/set wifi1,wifi2 configuration.manager=capsman，默认为capsman，也根据自己需求改为capsman-or-local。
    
13. #   `/interface wifiwave2 provisioning add action=create-dynamic-enabled或者add action=create-enabled，测试发现create-dynamic-enabled多少有些bug。这里都使用了create-enabled。
    
14. 
    
15. # 如何使用：
    
16. #   复制全部内容到文本文档或者其他文本编辑器，非word等，然后另存为name.rsc,进入ros后台命令行，输入import file=name.rsc。等待即可。
    
17. 
    
18. # edit by GD。
    
19. # update 04/14/2023：一些变量引用加入双引号，否则可能有未知错误。
    
20. # update 04/12/2023。
    
21. 
    
22. :local chms;
    
23. :local rosver;
    
24. :local mainbridge;
    
25. :local 2GSSID;
    
26. :local 5GSSID;
    
27. :local WiFiKey;
    
28. 
    
29. :set mainbridge ( [ /interface bridge get num=0 name ] );
    
30. :set chms ([ :pick [/system clock get time ] 0 2 ] . [ :pick [/system \
    
31.     clock get time ] 3 5 ] . [ :pick [ /system clock get time ] 6 8 ] )
    
32. :set rosver ( [:pick [ /system resource get version ] 0 3] )
    
33. :set 2GSSID "Your_2.4G_SSID";
    
34. :set 5GSSID "Your_5G_SSID";
    
35. :set WiFiKey "Your_WiFi_Password";
    
36. 
    
37. 
    
38. /interface wifiwave2
    
39. exp file="ros$rosver_wifiwave2_$chms.rsc"
    
40. /
    
41. 
    
42. /interface wifiwave2 channel
    
43. add disabled=no frequency=5745-5825:20 name=5G_C149-165_2-4-80M width=\
    
44.     20/40/80mhz
    
45. add disabled=no frequency=2412 name=2.4G_C01_20M width=20mhz
    
46. add disabled=no frequency=2437 name=2.4G_C06_20M width=20mhz
    
47. add disabled=no frequency=2462 name=2.4G_C11_20M width=20mhz
    
48. add disabled=no frequency=2472 name=2.4G_C13_20M width=20mhz
    
49. add disabled=no frequency=2412-2462:25 name=2.4G_C01-06-11_20M width=20mhz
    
50. add disabled=no frequency=5180-5240:20 name=5G_C36-48_2-4-80M width=\
    
51.     20/40/80mhz
    
52. add disabled=no frequency=5180-5240:20 name=5G_C36-48_2-40M width=20/40mhz
    
53. add disabled=no frequency=5745-5825:20 name=5G_C149-165_2-40M width=20/40mhz
    
54. /
    
55. 
    
56. /interface wifiwave2 datapath
    
57. add bridge="$mainbridge" disabled=no name=Datapath01
    
58. /
    
59. 
    
60. /interface wifiwave2 security
    
61. add authentication-types=wpa2-psk,wpa3-psk disable-pmkid=yes disabled=no \
    
62.     encryption=ccmp,gcmp,ccmp-256,gcmp-256 ft=yes group-encryption=ccmp \
    
63.     group-key-update=30m name=WiFiSec_WPA23 wps=disable \
    
64.     passphrase="$WiFiKey"
    
65. add authentication-types=wpa-psk,wpa2-psk disable-pmkid=yes disabled=no \
    
66.     encryption=ccmp,gcmp,ccmp-256,gcmp-256 group-encryption=ccmp \
    
67.     group-key-update=30m name=WiFiSec_WPA12 wps=disable \
    
68.     passphrase="$WiFiKey"
    
69. /
    
70. 
    
71. /interface wifiwave2 configuration
    
72. add channel=2.4G_C06_20M channel.band=2ghz-ax country=China datapath=\
    
73.     Datapath01 disabled=no mode=ap name=2.4GHZ_AX-CH6_WAP23 security=\
    
74.     WiFiSec_WPA23 ssid="$2GSSID"
    
75. add channel=5G_C149-165_2-4-80M channel.band=5ghz-ax country=China datapath=\
    
76.     Datapath01 disabled=no mode=ap name=5GHZ_AX-C149-80M_WPA23 security=\
    
77.     WiFiSec_WPA23 ssid="$5GSSID"
    
78. add channel=2.4G_C01-06-11_20M channel.band=2ghz-n country=China datapath=\
    
79.     Datapath01 disabled=no mode=ap name=2.4GHZ_N-ALL20M_WPA12 security=\
    
80.     WiFiSec_WPA12 ssid="$2GSSID"
    
81. add channel=2.4G_C01-06-11_20M channel.band=2ghz-ax country=China datapath=\
    
82.     Datapath01 disabled=no mode=ap name=2.4GHZ_AX-ALL20M_WPA12 security=\
    
83.     WiFiSec_WPA12 ssid="$2GSSID"
    
84. add channel=5G_C36-48_2-4-80M channel.band=5ghz-ax country=China datapath=\
    
85.     Datapath01 disabled=no mode=ap name=5GHZ_AX-C36-80M_WPA23 security=\
    
86.     WiFiSec_WPA23 ssid="$5GSSID"
    
87. add channel=2.4G_C11_20M channel.band=2ghz-ax country=China datapath=\
    
88.     Datapath01 disabled=no mode=ap name=2.4GHZ_AX-C11_WAP23 security=\
    
89.     WiFiSec_WPA23 ssid="$2GSSID"
    
90. add channel=5G_C36-48_2-40M channel.band=5ghz-ac country=China datapath=\
    
91.     Datapath01 disabled=no mode=ap name=5GHZ_AC-C36-40M_WPA12 security=\
    
92.     WiFiSec_WPA12 ssid="$5GSSID"
    
93. add channel=5G_C149-165_2-40M channel.band=5ghz-ac country=China datapath=\
    
94.     Datapath01 disabled=no mode=ap name=5GHZ_AC-C149-40M_WPA12 security=\
    
95.     WiFiSec_WPA12 ssid="$5GSSID"
    
96. /
    
97. 
    
98. /interface wifiwave2 access-list
    
99. add action=accept allow-signal-out-of-range=5s comment=5ghz_acl disabled=no \
    
100.     signal-range=-80..0 ssid-regexp="$5GSSID"
     
101. add action=accept allow-signal-out-of-range=5s comment=2.4ghz_acl disabled=no \
     
102.     signal-range=-75..0 ssid-regexp="$2GSSID"
     
103. add action=reject comment=rej_acl disabled=no interface=any signal-range=\
     
104.     -120..-93
     
105. /
     
106. 
     
107. /interface wifiwave2 capsman
     
108. set ca-certificate=none enabled=yes interfaces="$mainbridge" package-path="" \
     
109.     require-peer-certificate=no upgrade-policy=none
     
110. /
     
111. 
     
112. /interface wifiwave2 provisioning
     
113. add action=create-enabled comment=5GAX-C149_AC159 disabled=no \
     
114.     identity-regexp="^.*(c|C)(ap|AP).*[159]\$" master-configuration=\
     
115.     5GHZ_AX-C149-80M_WPA23 supported-bands=5ghz-ax
     
116. add action=create-enabled comment=2GAX-C06_AC159 disabled=no identity-regexp=\
     
117.     "^.*(c|C)(ap|AP).*[159]\$" master-configuration=2.4GHZ_AX-CH6_WAP23 \
     
118.     supported-bands=2ghz-ax
     
119. add action=create-enabled comment=5GAX-C36_AC2468 disabled=no \
     
120.     identity-regexp="^.*(c|C)(ap|AP).*[2468]\$" master-configuration=\
     
121.     5GHZ_AX-C36-80M_WPA23 supported-bands=5ghz-ax
     
122. add action=create-enabled comment=2GAX-C11_AC2468 disabled=no \
     
123.     identity-regexp="^.*(c|C)(ap|AP).*[2468]\$" master-configuration=\
     
124.     2.4GHZ_AX-C11_WAP23 supported-bands=2ghz-ax
     
125. add action=create-enabled comment=5GAC-C036_AC159 disabled=yes \
     
126.     identity-regexp="^.*(c|C)(ap|AP).*[159]\$" master-configuration=\
     
127.     5GHZ_AC-C36-40M_WPA12 supported-bands=5ghz-ac
     
128. add action=create-enabled comment=2GN-ALL20M_AC159 disabled=yes \
     
129.     identity-regexp="^.*(c|C)(ap|AP).*[159]\$" master-configuration=\
     
130.     2.4GHZ_N-ALL20M_WPA12 supported-bands=2ghz-n
     
131. /
     
132. 
     
133. /interface wifiwave2
     
134. disable [ find default-name="wifi1" ]
     
135. disable [ find default-name="wifi2" ]
     
136. /
     
137. 
     
138. :delay 3s;
     
139. /interface wifiwave2
     
140. reset [ /interface wifiwave2 find default-name="wifi1" ]
     
141. reset [ /interface wifiwave2 find default-name="wifi2" ]
     
142. /
     
143. 
     
144. :delay 3s;
     
145. /interface wifiwave2
     
146. set [ find default-name="wifi1" ] configuration.manager=capsman \
     
147.     .mode=ap disabled=no
     
148. set [ find default-name="wifi2" ] configuration.manager=capsman \
     
149.     .mode=ap disabled=no
     
150. /
     
151. 
     
152. :delay 2s;
     
153. /interface wifiwave2 radio
     
154. provision [ find radio-mac=[ /interface wifiwave2 \
     
155.     get [ find default-name="wifi1" ] mac-address ] ]
     
156. provision [ find radio-mac=[ /interface wifiwave2 \
     
157.     get [ find default-name="wifi2" ] mac-address ] ]
     
158. /
     
159. 
     
160. /interface wifiwave2 cap
     
161. set caps-man-addresses=127.0.0.1 certificate=none discovery-interfaces=\
     
162.     "$mainbridge" enabled=yes
     
163. /
     
164. 
     
165. :delay 3s;
     
166. /interface wifiwave2
     
167. set [ find default-name="wifi1" ] configuration.manager=capsman \
     
168.     .mode=ap disabled=no
     
169. set [ find default-name="wifi2" ] configuration.manager=capsman \
     
170.     .mode=ap disabled=no
     
171. /
     
172. # end

复制代码