MikroTips: managing many access points with CAPsMAN

[@matelotjim9035]

Nice guide. It would be good to see a guide about how to setup the firewall, something that would be very useful for the home user.

[@mikrotik]

Thanks for the idea!

[@DinoelK]

this will be great

[@evilcraig359]

If you set it up per Mikrotiks directions it is good. It will not let anything thru even a internet connection.

[@Gojiranotron]

There is a mistake in the video. If you follow it as it is, you'll be able to ping outside but not browse. You need to add a datapath to the capsman for the bridge that will have the ports your CAPs are connected to.

[@Wrenchmonkey1]

Thank you! I just spent several hours messing with this repeatedly following the guide step by step and could not figure out why I couldn't pass data. You set me in the right direction!

[@kolifx]

Mikrotik: Hey, everybody look, CAPSMAN is so easy, just click here and there and it works! Me: Trying to get it working for four hours after watching the video 10 times and finding the solution from a random guy in the comments section...

[@mikrotik]

Not really. It's optional. Some devices have disabled the "local forwarding" setting in the capsman configuration template "datapath" tab. This tutorial assumes you have it checked. Some defices have different defaults, so just mark this checkbox to follow the steps in this tutorial. Local forwarding must be on!

[@Gojiranotron]

@@mikrotik it should be mentioned then. You can see for yourself there are plenty of people this video doesn't work for. At least my solution gets it working, especially considering how frustrating it is to follow the official video and still have it not work.

[@austinmabry8462]

@@mikrotik A tutorial that relies the assumption of other of prior setup steps having been taken isn't really much of a tutorial.

[@jembodo]

Great to see you guys are doing these videos! Been a fan since replacing a Cisco device at work with an RB2011 years ago. I have Capsman setup at home with hEX S, hAP AC, and hAP AC Lite combo with 3 wifi VLANs. Most solid wifi experience I've had! It's not for the faint of hearts, though.

[@Anavllama]

Bonjour, Hola, G'day Normunds! Great start to a capsman learning series! Please consider adding bridge/vlans + capsman for a next video to address the very common home scenario of having multiple WLANS (home, guest, media, iot).

[@wabilemotswasele8705]

I followed you guide and managed to have my RB Cap AP to connect to the capsman running on another RB device. Thank you for such a simplified guide.

[@floriangrill9561]

Thanks for the video, it was very helpful. However, it was necessary for me to activate under Datapath> Bridge>" Bridge". It would also be great if the video explains how I put Vlan on my cap. A Vlan video in general would be great. Keep it up!

[@mikrotik]

Not really. It's optional. Some devices have disabled the "local forwarding" setting in the capsman configuration template "datapath" tab. This tutorial assumes you have it checked. Some defices have different defaults, so just mark this checkbox to follow the steps in this tutorial. Local forwarding must be on!

[@toulcit]

Just set up 2 acces points with an Ethernet router. Couldn't have done it without this video. Thank you!

[@chiderachike7995]

Hi I'm not seeing the APs in CAPSMAN on the CAPSMAN router. I used a POE switch for the 2 Mikrotik APs (CAP AC) Any help with it?

[@renderance3551]

Can you do a guide on Mikrotik Mesh?

[@ChrisNicholson]

Audience

[@KnaufL]

When will you add 802.11 k/v/r and WPA3 support to routerOS?

[@DonLuca27]

Does this need the new access point to be wired to the main router in order to work? Or can the second access point work as a repeater without the need of an ethernet cable connected to the main router?

[@nick9323]

Free wifi controller is cool, but how about roaming with 802.11k, 802.11r, and 802.11v ?

[@stephanszarafinski9001]

Roaming on capsman works very well, no need for fancy protocols 😁

[@karlisirmejs3546]

@@stephanszarafinski9001 Actually not so well, roaming in RouterOS relies on loss of signal from current AP to switch to AP with best signal. In result client stays on poorer signal even there are APs with better signal available.

[@Vinothmanick]

@@karlisirmejs3546 u can configure that too till which signal the client can stay and u can kick it out ,mikrotik is a swiss army knife basically if u know really deep how to use it u can achieve what ever u want but it has learning curve

[@karlisirmejs3546]

@@Vinothmanick That's exactly as I said. There can be another APs with better signals around, but client will stick to current radio till signal is too low and only then will roam.

[@mikrotik]

You can mitigate it by setting up access list rules. Tell the system to kick clients that have signal below X and they will be reconnected to the stronger AP automatically.

[@tariq4846]

What if we don’t have cable connection between two locations?

[@technics6215]

This is awesome. You are doing awesome network hardware with affordable price. Thank you MikroTik!

[@torinstorkey]

Nice to see that CAPsMAN is now available for wifiwave2 enabled access points. I would love to see some wifi6e access points by microtik.

[@martinbraunstein5242]

These Mikrotips are great. I hope you will keep making them.

[@jungl3ist]

if i install multiple ap-s , roaming is activated by default ? ex: if i have a live skype conference, and i wander around and i connect to a different antenna, will my like skype connection be dropped ?

[@piticarobert]

i try alone for 4h and with this video i configure it in 5 min , thanks man

[@gpligor]

Excellent explanation, awesome video editting and beautiful scene setup with the mic and the shadows. Keep up the good work, I'll try this at home

[@marine1718]

Hi there can I add devices to cspsman without cable? Like mesh or I need a cable?

[@kf7nn]

i have a garage i need wifi in, but there is no ethernet cable out there, can i just take a MK router and put it in caps mode so it can connect to the caps manager in the house or do i need a wired connection? i mean if i have to have a wire then it defeats the purpose doesnt it?

[@starjw68]

Could you add video about Capsman wifi wave2 combined with the old one, I just bought hap ax lite Capsman is not working (I planned to use also hap ax3), could you tell us shortly process to use capsman wifi wave2, what’s happened when I use new capsman wave 2 combined with the old hardware, many thanks in advance.

[@tuanha7651]

it's nice fast roaming, but on app calling, video call still interrupted about 2-3 seconds and reconnecting.

[@AliceVixie]

I love the sound setup with "shotgun" microphone on a boom like real filmmakers do. Finally great sound without some big cardioid in view or a lavaliere with "chest" sound.

[@andytwgss]

I understand Mikrotik doesn't like to bind user to certain workflow, but it'd be great if the guide can be titled to show the general structure of an application

[@wilsonkwok1109]

when can provide Capsman for wifi2 setup video ?

[@ShedrickFlowers]

Very much needed!

[@Appytail]

Every time I listen to a Mikrotik video, I take it as an history class.. Seing how things were done 4 decades ago. Everything is easy, as long as you read instructions and "how to" for years before you attempt anything. In this era of shortage of everything, CLI and interfaces such as these has no place anymore. I come from an era before the IP stack existed. So I know. I.e. mac address only & 1BaseT. You read correct. 1BASET. And token rings. In the early 80's, I expected interfaces to be far more evolved than that.

[@robertst2565]

Wireless dveices were not acquiring IP for me untill in Datapaths tab I added bridge

[@mikrotik]

Or you can do better - This tutorial assumes you have it checked. Some defices have different defaults, so just mark this checkbox to follow the steps in this tutorial. Local forwarding must be on!

[@hey_leao]

When we'll see WPA3? The market urges for security improvements!

[@mikrotik]

It's already available, but not for CAPsMAN yet. For the hAP ac3 you can install the Wave2 package and have it: help.mikrotik.com/docs/display/ROS/WifiWave2

[@hey_leao]

@@mikrotik I didnt know, sorry =/

[@athims]

What I can see here is that ac3 is powered on with no antennas attached... Is it ok nowadays?

[@takacsi]

Very useful! Would be nice a part2 with advanced features. Thx!

[@Albert-yv2ue]

Important that all cap interface, if you are using bridge, might be asociated to the bridge.

[@tazavi111]

i am trying to follow this tutorial, all looks to be fine, I have configured CSR109 as capsman, When I follow this tutorial just like that, I can have SSID broadcast on CSR109 visible on my smartphone, but the caps I configure do not get SSID. I do not understand what I am doing wrong.

[@logananderon9693]

Can we get the same functionality for firewall rules? I have a bunch of remote sites that are hard to keep in sync. Palo Alto does that via Panorama for many many thousands of dollars.

[@MrDenisJoshua]

Is this a WiFi Mesh network please ? Thanks

[@tmac9938]

yeah but how do i set up a mesh network. or when to use capsman vs mesh vs do they work together?????

[@Mrkviczka]

If i will create second SSID for all my devices i need to create second configuration, second provisioning and i will have double the amount of CAP interfaces? I want to make some guest wifi access.

[@Operaatoors]

Can I setup capsman on LTE dish, and then distribute this config further via switch which has currently two wireless devices connected - wAP and hAP ac3?

[@mikrotik]

Yes, exactly, you can do that. Those wireless devices will find the capsman server. Config is basically the same as in the video, except you don't have to configure the built-in wireless interface as CAP

[@Operaatoors]

@@mikrotik great, thanks! Will try to change config. At the moment my wAP is in bridge mode, is it okay to just hard reset everything there and start from fresh page?

[@mikrotik]

Yes, like in the video, boot the wap when holding button. It will change into cap mode

[@Operaatoors]

​@@mikrotik Thanks, I managed already then set up the capsman managed network. Now I had a question - is it possible to access capsman routers using IP address, like the parent Caps config holder. I wanted to play around containers, but connecting with Mac address to router is quite frustrating. And second issue - CAPs are not able to connect to outside world at the moment, therefore - time is not set correctly, updates have to be brought in via downloading to computer and then uploading it manually, and worst - docker images are not possible to be downloaded.

[@user-lv2fq2uh1s]

Hi Guys.... I followed the video. Clients can connect to the APs configured via the CAPsMan but cannot connect to the wireless signal of the Master AP. That is the wireless signal of the device acting as master. Feedback will be appreciated.

[@dontknowler]

Have a Mikrotik access point which used to obtain IP adresses for its WiFi client devices via dhcp from my main non-wifi-capable Mikrotik router. I did set up a mesh configuration following your guide as I was adding another Mikrotik AP to my system. The mesh in itself is up and running, but the Wifi client devices which connect via the dynamic mesh interfaces now cannot obtain IP adresses from my 'main' router any more :-( How do I get dhcp relay working for my mesh? Thank you!

[@przemysawkacprzak6311]

If I add 2 or 3 accespoints to my network and setup them using CamsMAN like you explained (one SSID, one password) will that mean that all house will have one wifi network SSID and devices will switch between them flawlessly?

[@cixin10x]

Can I add AP from other manufacturers? I have 2 wifi routers in AP mode from Xiaomi and I need to add wifi roaming. Please help.

[@TomasKotasek]

Please add this information as a comment and pin it to TOP. After 2 hours of trying everything I finally found this under video and it works. UPDATE: BEFORE YOU START, IMPORTANT NOTE! SOME DEVICES HAVE DISABLED THE "LOCAL FORWARDING" SETTING IN THE CAPSMAN CONFIGURATION TEMPLATE "DATAPATH" TAB. THIS TUTORIAL ASSUMES YOU HAVE IT CHECKED.

[@christopherstaples6758]

so how the heck to you get this "home mesh "to work , quickset does not seem to do anything either

[@JokeryEU]

how to use CAPsMAN to add a different router thats not mikrotik like a tp-link?

[@stephenwong9723]

How do you run Winbox on your Mac? Or, where can I download a Winbox that can run natively on Mac?

[@mikrotik]

Just use softare called Wine.

[@asorin2000]

Remember a important settings: In CAPsMAN | CAP Interface | each cap settings, at Datapath Tab, Choose Bridge1 or other. I lost few days with this. I setup few times, but wifi clients cannot take IP. Now it's Ok.

[@georgesdibeh7826]

What about interference incase of multiple AP does capsman take it into account

[@nelsonlim5189]

great video ! i would like to wait for the next video about what we could do to maximize the capsman config, seamles roaming for example, that would be great

[@mikrotik]

Even the config that is shown in this video will work fine with moving client devices, they will seemlessly reconnect to other CAP devices and even voice calls are not dropped.

[@ChrisNicholson]

@@mikrotik The ACL features might be enough to influence roaming by "kicking clients" at certain thresholds.

[@vegatyme1]

I have only just gotten my cAP integrated, and in my testing device (wifi analyzer on lenovo tablet), I am seeing that while you don't lose connection, it takes a minute to switch its radio over from the RB4011 to the cAP. I think sometimes, "seamless roaming" is dependent on the client device that's doing the roaming.

[@mzsolnay]

Hi ! Thanks for this detailed explanation. It was easy understandable even for me as a non expert. Hovewer, I could not provision my internal wifi adapter, becouse nothing was shown on my "radio" tab. I followed every step exactly as described. What could be wrong ?

[@Coldphoenix44]

Will there be a guide to how to set this on the new wifiwave2 routers ?

[@lkfng]

You missed a critical step; you did not set the DataPath in the configuration to Bridge, otherwise, you get no DHCP assigned IP address to the client devices. This video needs an update.

[@mikrotik]

No! Before you start, important note! Some devices have disabled the "local forwarding" setting in the capsman configuration template "datapath" tab. This tutorial assumes you have it checked. Some defices have different defaults, so just mark this checkbox to follow the steps in this tutorial. Local forwarding must be on!

[@MrF3d3r3r]

I was trying to set this up via wlan interface(had no MAC adapter) and I lost connection. There is an additional step required for me. Once I added the interfaces to capsman I needed ot assign the config to it.

[@JANHERMAN19]

Hi. This is my first time setup up the capsman and i did everything on the video step by step. I can pickup up my ssid but it does not want to obtain a IP

[@rds0009]

I hope that there are configuration tutorial videos of different Mikrotik unit being uploaded to youtube for reference of all Mikrotik users like me.

[@urvhalt]

But, no authentication between the capmode client and its server(s)? How do it know it found a trusted server?

[@hurle0409]

Does this balance load (Bandwidth) when clients visible to 2 or more APs?

[@SimonJMudd]

I have an issue with revoked certificates breaking this setup and find no docs on how to issue a replacement without having to reset any existing configurations, This is with layer 3 capsman. I get a message about sulking and I’m using the standard mutual TLS with request certificate option on the cap. Pointers would be useful. I have multiple APs.

[@altatensioneip]

You say that it is all automatic about frequency. Every ap choose better frequency or they are all on same channel?

[@zeyadsulaiman1597]

the internet didnt work till i create a datapaths bridge , the caps ac didnt appear in my remote ac even i tried to boot it many times , and cant see it in winbox even , not sure whats the reason

[@mikrotik]

Not really. It's optional. Some devices have disabled the "local forwarding" setting in the capsman configuration template "datapath" tab. This tutorial assumes you have it checked. Some defices have different defaults, so just mark this checkbox to follow the steps in this tutorial. Local forwarding must be on!

[@tareqanohasando]

How many devices can this CAPsMAN can handle? What is the maximum number of ap can be connected and managed? I need to know the real life experience. We use ap controller for large working projects where 100-200 devices get connected via 6-10 ap.

[@JbVlad]

This was a great guide but with the new OS its not as easy anymore.All my APs are dead after a upgrade leaving me with downgrading it somehow or replacing it with Unifi before end of this week. Not even reseting can bring back the default caps config making quick install impossible. Your guides are still great. Thank you.

[@chiderachike7995]

I have been stuck trying to see them on my Router's CAPS mode. Please were you able to solve yours?

[@JbVlad]

@@chiderachike7995 I have installed the wifi-qcom-ac-7.14.3-arm.npk on my cap ac and could set it up again. On older devices I needed wireless-7.14.3-mipsbe.npk and this created a second capsman menu but this older menu doesn not work with the newer capsman.

[@zhvn89]

I wasn't able to configure Mikrotik hap AC2 as a CAP with HAP ax2. Both on RouterOS 7.8. Hap ax2 even doesn't have CAPsMAN. FRUSTRATING.

[@psy0rz]

Does mikrotik has some kind of system to automaticly choose or optimize channels?

[@EthanDavids]

Mikrotik please can you show us part of enabling local forwarding as the AP I have is not leasing an IP Address to my devices.

[@EthanDavids]

Here is my how I configured my CAPsMAN: kzbin.info/www/bejne/n4ase2ubo959kM0 Thanks

[@zenmaster24]

can you connect your new device and caps manager to a non-mikrotik switch in the middle? ie the switch does not have the capability of being managed, but an ap attached to it is.

[@mirekzalisz8382]

Hi, I see you are using an Apple MacBook with winbox... How can we run a WinBox on Appl Mac device..?

[@mikrotik]

Install wine and run winbox. It’s in the documentation help.mikrotik.com/docs/display/ROS/Winbox#Winbox-RunWinboxonmacOS

[@orion3311]

I've followed this process, but don't see the second access point on the remote CAP menu. I can manually connect them with an ethernet cable and provision it that way, but they still don't seem to see each other once I disconnect the ethernet cable. Has anyone had this problem?

[@jeanpasset9088]

Great tutorial, it cleared up a lot of grey areas for me

[@fadelmawas6274]

01. Datapath must be set to bridge for devices to receive IPs via dhcp. 02. In the Datapath settings tab, I had to enable Local Forwarding for better bandwidth over wifi. Failure to turn on Local Forwarding caused a heavy load on the main router's CPU, which resulted in half or even less bandwidth, especially on the 5 GHz band. 03. There is no possibility in CAPsMAN for setting the Frequency Mode to Superchannel, and that made me gave up CAPsMAN. Without CAPsMAN with normal wifi configuration I have over 20dBi on cAP ac (RBcAPGi-5acD2nD) and with CAPsMAN enabled only 17dBi (on 5 GHz wifi interface), that resulted in poor or no wifi connection in some spots of the house.

[@mikrotik]

1. I'm using local-forwarding in the video, so datapath is not required at all. 2. Yes, It is on for me in this tutorial 3. Superchannel is illegal to use for regular wifi users, and CAPsMAN is for that. Superchannel can be used if you have some exemption by the regulator.

[@fadelmawas6274]

​@@mikrotik Thank you for your answer. 1. min 6:11 local-forwarding not enabled but it's ok, good to know that it's ok using local-forwarding without datapath. 2. ok, I saw only at 6:11 that datapath tab is blank, I may not have noticed when local-forwarding setting was made 3. I was kind of expecting this answer, but I said I'd still write about the superchannel so others can see why they might have a weaker signal when activating CAPsMAN. Yes, it is illegal but it is very useful in different situations. Thank you again. :)

[@nathwald]

Is it possible to enforce a mac address access list throught capsman?

[@iambookey]

Is it possible to access my Mikrotik router over the internet when I am not within the local network coverage?

[@mrsmoriam2575]

i got the same setup , but when i click on radio tab in caps man i cant see any devices , anyone knows what am i missing !!

[@dragosmotiu2698]

if you cannot see the CAPsMAN own wireless interfaces i think you have a ipv4 firewall issue; to solve this enable the ipv6 package, and, in the wireless interface cap manager choose address :: or ::1

[@mikrotik]

Some devices have disabled the "local forwarding" setting in the capsman configuration template "datapath" tab. This tutorial assumes you have it checked. Some defices have different defaults, so just mark this checkbox to follow the steps in this tutorial. Local forwarding must be on!

[@josiasmartinsjr]

​@@dragosmotiu2698 Your information worked fine for me. My Radio Tab was also empty even after i enabled the "local forwarding" setting in the capsman configuration template "datapath" tab. - First of all i entered the menu "System -> Packages" and enabled the ipv6. - I also used the opportunity to update the system to the latest version (6.49.8). - After rebooting i entered in the menu "Wireless -> CAP" and deleted the "CAPsMAN Address" 127.0.0.1 replacing it for "::" or for "::1". Both solved the problem. Now the Tab "Radio" show the two radio stations. Thank you so much!

[@takacsi]

pls can you update this with the new wifi packages?

[@andreanaerik7540]

Blakk Bee Mac version seems to have so better support for certain midi devices. And not using the ASIO drivers has a lot to do with

[@youtubegarbage4u]

how about if we want to setup audience? and mesh network?

[@Jorvs]

can I use asus router as my AP? will this be compatible?

[@zeyadsulaiman1597]

I did reset and follow the same steps. But in capsman, radio tab i cant see any devices. Also after i boot the cap ac i also cant see it in the remote radio tab. Does anyone knows what am i missing here?

[@mikrotik]

Some devices have disabled the "local forwarding" setting in the capsman configuration template "datapath" tab. This tutorial assumes you have it checked. Some defices have different defaults, so just mark this checkbox to follow the steps in this tutorial. Local forwarding must be on!

[@josiasmartinsjr]

My Radio Tab was also empty even after i enabled the "local forwarding" setting in the capsman configuration template "datapath" tab. Then i followed the tips given by @dragosmotiu2698: - First of all: i entered the menu "System -> Packages" and enabled the ipv6. - Second: i entered in the menu "Wireless -> CAP" and deleted the "CAPsMAN Address" 127.0.0.1 replacing it for "::" or for "::1". Both solved the problem. Now the Tab "Radio" shows the two local wifi radios.

[@carlosyoong5784]

What about security?, Is the client device accessible via winbox with default admin password?

[@mikrotik]

Securing of all involved devices still must be done separately, just wireless settings are managed by CAPsMAN

[@iskar460]

Hello! Could you help me with a Cloud Hosted Router OS Mikrotik ? I'm making a lab in EVE-NG, and in my version of mikrotik i can't tune the wireless interface. It does not exist in the interface list and in PCI Resourses too. VMDK image 6.49.6 Stable is installed in the lab.

[@i-town]

Hello! @MikroTik How to choose the maximum power of the Wi-Fi router adapter in capsman mode, regardless of the country you choose? Something like this: frequency-mode > manual-txpower.

[@volkervogel7713]

In your Campus or hotel network you want set up your APS so that the neighbouring channels are not overlapping. Can you explain how to to this with caps man ?

[@AlexApol]

great presenter. Fantastic job explaining the CAPs feature!

[@mindshelfpro]

How do you setup VLANs for different SSIDs on MikroTik APs?

[@christopherstaples6758]

@5:20 , it just renders it usless as no "supported channels"

[@jerrygibson1422]

Does it have a provision for band steering?

[@C0deWarri0r]

Is it possible to turn on a hap ac^3 w/o antennas attach?

[@iamyulianto2]

@MikrotikLatvia is it ok for the router if we're not attaching the antenna like in the video? I heard that if we turn it on without antenna attached it will damage the radio module inside it, is that information is true?

[@mikrotik]

Depends on the model, one hAP ac3 comes with antennas, another one comes without antennas. You should check which model you have and follow instructions.

[@josepharueyingho9417]

Sir Can I use this method, using another device like TP-Link connecting to Mikrotik and setting it to Repeater Mode?

[@kaihendry]

What is the process for wifiwave2?

[@mikrotik]

Video coming soon.

[@stefanlodders9521]

I understand you left out config for 2.4 or 5 GHz, but how necessary would this be in a real world scenario? What'd be the downsides if you'd skip that?

[@duzbinboy]

This is exactly what I was looking for, thank you, awesome help!

[@mikrotik]

Great to hear!

[@jawadarbabzade6585]

Tanx for your friendly explaining 🙏🏼

[@arleyfreitas2376]

Sensacional e prático!!!👏🏻👏🏻👏🏻 Vou montar isso em casa!!! Muito obrigado pela explicação!!! Os canais ele escolhe aleatórios de forma automática? Para não se sobreporem? Porque o dispositivo leva as vezes 10 minutos para selecionar o canal? Isso ainda não ficou claro para mim... No mais Mikrotik é top demais!!! Não troco de jeito nenhum...

[@SamCelestin]

what if im on routerboard and it doesnt have built in wifi, how do i manage it then?

[@mikrotik]

You can install wireless package on to that routerboard and manage other MikroTik wireless devices, no problem

[@samarthshah4347]

HI, Can I use multiple WsAP and make a mesh form the same, using the CapsMan as stated by you in the video? All of them are connected wired but they are on a Netgear POE Switch.

[@kasarhausa2912]

At least give us his name or personal channel to thank him, Well done bro you made every step easy to understand, I benefited a lot thank. But still I need your personal channel if you have one.

[@mikrotik]

😁 kzbin.info%C4%8Ds

[@dtabsadventure]

Great video just want to ask if will this work for other brands of AP's? or it's just for mikrotik AP.

[@mikrotik]

Only MikroTik devices can be managed like this

[@karolkrzyzyk2859]

Nice video. Can you prepare next one "how to manage MT audience MESH and CAPsMAN"

[@prabhat400]

Can we manage othe vendor APs like nokia, huawei... with CAPsMAN?

[@mikrotik]

No, CAPsMAN can only manage MikroTik devices

[@drumaddict89]

one thing here i am curious ... @16:30 upgrade remote CAPs ... what actually does this feature? does the CAP has to have INTERNET connectivity itself or will it pull the firmware from CAPsMAN or how is that implemented? did not find it on the wiki nor the new help pages. why do i ask? in UniFi controlled environments there is a "Cache" button in the controller so all APs which should be updated, get the firmware from the controller and do not need to connect to the internet directly!

[@mikrotik]

Yes, it works the same way, the CAPsMAN server can upgrade the CAP units without them needing internet. If they are the same architecture as the CAPsMAN server (let's say ARM), you don't need to do anything, but if you have a mix of different devices, you will need to manually upload upgrade files to CAPsMAN server). This is described here: help.mikrotik.com/docs/pages/viewpage.action?pageId=1409149#APController(CAPsMAN)-CAPsMANGlobalConfiguration

[@drumaddict89]

@@mikrotik ooh to "package-path" thank you very much for the reply! finally i'll try to get a grasp with capsman! you guys rock.