4-Way handshake failure on Station-WDS mode

RouterOS Wireless Networking
1

Hello,
I have an issue if I try to connect the MikroTik Metal 52AC to a Ubiquiti NanostationM5 access point. When the NanoM5 is running as a access point with WDS bridging capabilities and the MikroTik Metal 52AC is setup as a Station-wds it always fails with the 4-way handshake failure if WPA2-AES PSK is set. If I remove the WPA2 on both devices the two devices work as expected (working WDS).

I have also tried running the MikroTIk metal in standard Station mode with the WPA2 enabled and it will connect to the NanoM5 Without any issues using WPA2-AES PSK (Only that of no layer 2 transparency).
I have also tried running the Metal52AC as a accesspoint bridge and the NanostationM5 as a station-wds using WPA2-AES PSK and this worked. The issue is that in our application the NanoM5 cannot be used as a station-wds.

Is there a solution such that i could run the Ubiquiti Nanostation M5 as an accesspoint while the MikroTik metal 52AC is running as a Station-WDS both using the WPA2-AES PSK encryption?

Some additional notes:
-Both devices are updated to their latest firmware/software packages.
-Both devices are close to eachother and have LineOfSight
-The WPA2 PSK is correct

This setup doesnt work but it is the wanted setup (Ubiquiti AP+WDS and MikroTik station-WDS)
ThisSetupWorks[Metal52AC].jpg
![ThisSetupDoesntWorkButIsWantedNanoM5_AP4}.jpg|1226x899

This setup does work but the implementation is flipped: (Ubiquiti station WDS and MikroTik AP+WDS)
![ThisSetupDoesntWorkButIsWantedMetal52AC}.jpg|1728x856
ThisSetupWorks[NanoM5_AP4].jpg

2

Per documentation, to use station-wds both ends of the connection should be Mikrotik:
https://help.mikrotik.com/docs/spaces/ROS/pages/122388518/Wireless+Station+Modes

So, it is not surprising that you are having issues with it, I thought that it wouldn’t work at all, not that it works until you add the WPA2-AES PSK.

What happens with station-pseudobridge?

3

Thank you for the quick response,

Yes, it only fails when the WPA2-AES PSK is enabled on both devices.

In station-pseudobridge mode the devices create a succesful connection. Unfortunately, as far as i understood, this mode doesn’t allow for multiple devices connector to the microtik router while having L2 transparancy. For our implementation sometimes more devices are required to be connected to the Mikrotik (Not dynamicly but known in advance).