CAPsMAN v2 provisioniert die APs nicht

Hallo,

ich möchte gern zu CAPsMAN v2 switchen. Einen CAPsMAN v1 habe ich auf einem RB5009 erfolgreich in Betrieb nehmen können. Um auch von features wie FT (fast-transistion) profitieren zu können, möchte ich zum Test einen CAPsMAN auf einem CAP ax ausführen (v1 und v2 auf dem RB5009 is per Doku ausgeschlossen).
Um mein Test aufzubauen habe ich ich einen CAP ax (auf diesem soll der v2 laufen) und einen CAP ac.
Ich konnte die Configurationen so aufbauen, dass ich mich zu dem ax verbinden kann. Der CAP ac wird vom CAPsMAN auch erkannt und wird unter RemoteCAP angezeigt.
Leider kann ich den ac trotzdem nicht provisionieren.

1. Könnt mir mir einen Tipp geben wo ich noch schauen kann?
2. Kann der ax die config auch selbst via capsman bekommen? (bekommt zwar eine config, aber in den Interfaces steht nicht, dass sie via CAPsMAN erstellt wurde.

CAPsMAN ax-config:

installierte Pakete: wifi-qcom

/interface bridge add name=bridge priority=0x7999
/interface wifi aaa add called-format=mac:ssid disabled=no name=aaa1 password-format=XX:XX:XX:XX:XX:XX username-format=XX:XX:XX:XX:XX:XX
/interface wifi channel add band=2ghz-n comment=2.4ghz disabled=no frequency=2412,2432,2462 name=2.4ghz skip-dfs-channels=disabled width=20mhz
/interface wifi channel add band=5ghz-ac comment=5ghz disabled=no frequency=5180,5260,5500 name=5ghz width=20/40/80mhz
/interface wifi datapath add bridge=bridge disabled=no name=datapath1 vlan-id=21
/interface wifi configuration add channel=2.4ghz country=Germany datapath=datapath1 disabled=no mode=ap name=2.4GHz_gast security=sec_gast ssid=gast
/interface wifi configuration add channel=2.4ghz country=Germany datapath=datapath1 disabled=no mode=ap name=2.4GHz_homebase security=sec_homebase ssid=homebase
/interface wifi configuration add channel=5ghz channel.frequency=5180,5260,5500 country=Germany datapath=datapath1 disabled=no mode=ap name=5GHz_gast security=sec_gast ssid=gast
/interface wifi configuration add channel=5ghz channel.frequency=5180,5260,5500 country=Germany datapath=datapath1 disabled=no mode=ap name=5GHz_homebase security=sec_homebase ssid=homebase
/ip smb users set [ find default=yes ] disabled=yes
/user group add name=ssh-group policy=ssh,reboot,read,write,policy,password,!local,!telnet,!ftp,!test,!winbox,!web,!sniff,!sensitive,!api,!romon,!rest-api
/interface bridge port add bridge=bridge ingress-filtering=no interface=ether1 internal-path-cost=10 path-cost=10
/interface bridge port add bridge=bridge interface=ether2 internal-path-cost=10 path-cost=10
/interface bridge port add bridge=bridge interface=*8
/interface bridge port add bridge=bridge interface=*9
/ip firewall connection tracking set udp-timeout=10s
/ipv6 settings set disable-ipv6=yes
/interface bridge vlan add bridge=bridge vlan-ids=10
/interface ovpn-server server add mac-address=FE:XX:XX:BF:A2:60 name=ovpn-server1
/interface wifi access-list add action=accept comment="M iphone 15 pro" disabled=no interface=any mac-address=5E:XX:XX:5F:8E:98 vlan-id=44  
/interface wifi access-list add action=accept allow-signal-out-of-range=1h comment="M macbookpro-16" disabled=no interface=any mac-address=3C:XX:XX:4B:FC:B0 radius-accounting=no signal-range=-80..120 vlan-id=20  
/interface wifi access-list add action=accept disabled=no radius-accounting=no
/interface wifi access-list add action=accept comment="SH C gwc" disabled=no interface=any mac-address=48:XX:XX:98:FF:AC radius-accounting=no signal-range=-80..120 ssid-regexp=AUS vlan-id=42  
/interface wifi cap set discovery-interfaces=all enabled=yes slaves-static=yes
/interface wifi capsman set ca-certificate=auto certificate=auto enabled=yes interfaces=all package-path="" require-peer-certificate=no upgrade-policy=none  
/interface wifi provisioning add action=create-dynamic-enabled comment="cAP ax hwr" disabled=no master-configuration=2.4GHz_homebase radio-mac=48:XX:XX:BA:20:11 slave-configurations=2.4GHz_gast  
/interface wifi provisioning add action=create-dynamic-enabled comment="cAP dach ost" disabled=no master-configuration=2.4GHz_homebase radio-mac=DC:XX:XX:8B:4D:40 slave-configurations=2.4GHz_gast  
/interface wifi provisioning add action=create-dynamic-enabled comment="cAP ax hwr" disabled=no master-configuration=5GHz_homebase radio-mac=48:XX:XX:BA:20:10 slave-configurations=5GHz_gast supported-bands=5ghz-ac  
/interface wifi provisioning add action=create-dynamic-enabled comment="cAP dach ost" disabled=no master-configuration=5GHz_homebase radio-mac=DC:XX:XX:8B:4D:41 slave-configurations=5GHz_gast supported-bands=5ghz-ac  
/ip dhcp-client
# DHCP client can not run on slave or passthrough interface!
add interface=ether1
/ip ipsec profile set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
/ip smb shares set [ find default=yes ] directory=/pub
/radius add address=192.168.1.1 require-message-auth=no service=wireless,dot1x timeout=3s
/system identity set name="cAP ax"  

ac CAP-client:

installierte Pakete: wifi-qcom-ac

/interface bridge add admin-mac=DC:XX:XX:8B:4D:3E auto-mac=no comment=defconf name=bridgeLocal
/interface ethernet set [ find default-name=ether1 ] advertise=100M-baseT-half,100M-baseT-full,1G-baseT-half,1G-baseT-full
/interface wifi
# SSID not set
set [ find default-name=wifi1 ] configuration.mode=ap disabled=no
/interface wifi
# SSID not set
set [ find default-name=wifi2 ] configuration.mode=ap disabled=no
/user group add name=ssh-group policy=local,ssh,reboot,read,write,policy,password,!telnet,!ftp,!test,!winbox,!web,!sniff,!sensitive,!api,!romon,!rest-api
/interface bridge port add bridge=bridgeLocal comment=defconf interface=ether1
/interface bridge port add bridge=bridgeLocal comment=defconf interface=ether2
/interface ovpn-server server add mac-address=FE:XX:XX:7D:31:1C name=ovpn-server1
/interface wifi cap set caps-man-addresses=192.168.10.9 discovery-interfaces=all enabled=yes
/interface wifi capsman set interfaces=all package-path="" require-peer-certificate=no upgrade-policy=none  
/ip dhcp-client add comment=defconf interface=bridgeLocal
/ip hotspot profile set [ find default=yes ] html-directory=hotspot
/ip ipsec profile set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
/system identity set name="AP dach ost"  