802.11n device connection drops with Wifiwave2

Juke · December 14, 2025, 6:41pm

Hi all!

I have an hap ac3 running a capsman instance with a connected cAP ac. After switching to the new wifi-qcam-ac package, my Garmin Forerunner 955 drops the connection to the Wifi after receiving ~5.1MiB of data. How can I be so sure about the data size? Because I am trying to debug this thing for weeks now - data amount is always the same. The watch is transfering with good bandwith and then suddenly it drop to zero until it will just disconnect. The logs will give no more information than just:

XX:XX:XX:XX:2F:8B@wifi1(mpb-net) disconnected, connection lost, signal strength -70

The watch is working fine in other Wifi networks. The ONLY THING that helps to solve the issue in my network, is to downgrade the 2.4Ghz band to the G standard - everything is working fine then, but of course I am limitting all the other devices to slow bandwith as well. Since I tried nearly everything from setting manual frequency to disabling all the roaming settings, etc. I assume that this has to be a bug either in the Mikrotik software or the Garmin device. Since it worked fine for years with the old Wifi package, I guess it is related to the wifiwave2/qcom package.

I really would like to further debug this issue, but I have no more ideas to gather more information?! Or maybe I am missing something in my config that can cause this?

Here is the config that is NOT working with the Garmin watch:



# 2025-12-14 19:05:17 by RouterOS 7.20.6

# software id = YC5S-YUYC

#

# model = RBD53iG-5HacD2HnD

# serial number = 

/interface bridge

add name=bridge port-cost-mode=short

/interface list

add name=WAN

add name=LAN

/interface lte apn

set [ find default=yes ] ip-type=ipv4 use-network-apn=no

/interface wifi channel

add band=2ghz-n disabled=no name="mpb-net 2GHz" reselect-interval=23h30m..23h59m

add band=5ghz-ac disabled=no name="mpb-net 5GHz" reselect-interval=23h30m..23h59m skip-dfs-channels=all

/interface wifi datapath

add bridge=bridge disabled=no name=mpb-net

/interface wifi security

add authentication-types=wpa2-psk connect-priority=0/1 disabled=no encryption=ccmp ft=yes ft-over-ds=yes name="mpb-net WPA2"

/interface wifi steering

add 2g-probe-delay=yes disabled=no name=mpb-steering neighbor-group=dynamic-mpb-net-a860b91a rrm=yes wnm=yes

/interface wifi configuration

add channel="mpb-net 2GHz" country=Germany datapath=mpb-net disabled=no manager=local mode=ap name="mpb-net 2G" security="mpb-net WPA2" ssid=mpb-net steering=mpb-steering

add channel="mpb-net 5GHz" country=Germany datapath=mpb-net disabled=no manager=local mode=ap name="mpb-net 5G" security="mpb-net WPA2" ssid=mpb-net steering=mpb-steering

/interface bridge port

add bridge=bridge ingress-filtering=no interface=ether2 internal-path-cost=10 path-cost=10

add bridge=bridge ingress-filtering=no interface=ether1 internal-path-cost=10 path-cost=10

add bridge=bridge ingress-filtering=no interface=ether3 internal-path-cost=10 path-cost=10

add bridge=bridge ingress-filtering=no interface=ether4 internal-path-cost=10 path-cost=10

add bridge=bridge ingress-filtering=no interface=ether5 internal-path-cost=10 path-cost=10

/ip firewall connection tracking

set enabled=no udp-timeout=10s

/ipv6 settings

set disable-ipv6=yes max-neighbor-entries=8192

/interface detect-internet

set detect-interface-list=all

/interface list member

add interface=ether1 list=WAN

add interface=ether2 list=LAN

add interface=ether3 list=LAN

add interface=ether4 list=LAN

add interface=ether5 list=LAN

add interface=wifi1 list=LAN

add interface=wifi2 list=LAN

/interface ovpn-server server

add auth=sha1,md5 mac-address=FE:4C:EF:30:33:EE name=ovpn-server1

/interface wifi cap

set certificate=none discovery-interfaces=bridge slaves-datapath=mpb-net slaves-static=no

/interface wifi capsman

set ca-certificate=auto certificate=auto enabled=yes interfaces=bridge package-path="" require-peer-certificate=no upgrade-policy=none

/interface wifi provisioning

add action=create-dynamic-enabled disabled=no master-configuration="mpb-net 2G" supported-bands=2ghz-n

add action=create-dynamic-enabled disabled=no master-configuration="mpb-net 5G" supported-bands=5ghz-n

/ip address

add address=192.168.1.2/24 interface=ether2 network=192.168.1.0

/ip dns

set servers=192.168.1.1

/ip firewall filter

add action=accept chain=input disabled=yes in-interface=bridge protocol=udp src-port=5246,5247

add action=accept chain=input disabled=yes dst-port=5246,5247 in-interface=bridge protocol=udp

/ip ipsec profile

set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5

/ip route

add disabled=no dst-address=0.0.0.0/0 gateway=192.168.1.1

/routing bfd configuration

add disabled=no

/system clock

set time-zone-name=Europe/Berlin

/system identity

set name=ac3

/system routerboard settings

set auto-upgrade=yes

And here is the config, that is working flawlessly:



# 2025-12-14 19:08:27 by RouterOS 7.20.6

# software id = YC5S-YUYC

#

# model = RBD53iG-5HacD2HnD

# serial number = 

/interface bridge

add name=bridge port-cost-mode=short

/interface list

add name=WAN

add name=LAN

/interface lte apn

set [ find default=yes ] ip-type=ipv4 use-network-apn=no

/interface wifi channel

add band=2ghz-g disabled=no name="mpb-net 2GHz" reselect-interval=23h30m..23h59m

add band=5ghz-ac disabled=no name="mpb-net 5GHz" reselect-interval=23h30m..23h59m skip-dfs-channels=all

/interface wifi datapath

add bridge=bridge disabled=no name=mpb-net

/interface wifi security

add authentication-types=wpa2-psk connect-priority=0/1 disabled=no encryption=ccmp ft=yes ft-over-ds=yes name="mpb-net WPA2"

/interface wifi steering

add 2g-probe-delay=yes disabled=no name=mpb-steering neighbor-group=dynamic-mpb-net-a860b91a rrm=yes wnm=yes

/interface wifi configuration

add channel="mpb-net 2GHz" country=Germany datapath=mpb-net disabled=no manager=local mode=ap name="mpb-net 2G" security="mpb-net WPA2" ssid=mpb-net steering=mpb-steering

add channel="mpb-net 5GHz" country=Germany datapath=mpb-net disabled=no manager=local mode=ap name="mpb-net 5G" security="mpb-net WPA2" ssid=mpb-net steering=mpb-steering

/interface bridge port

add bridge=bridge ingress-filtering=no interface=ether2 internal-path-cost=10 path-cost=10

add bridge=bridge ingress-filtering=no interface=ether1 internal-path-cost=10 path-cost=10

add bridge=bridge ingress-filtering=no interface=ether3 internal-path-cost=10 path-cost=10

add bridge=bridge ingress-filtering=no interface=ether4 internal-path-cost=10 path-cost=10

add bridge=bridge ingress-filtering=no interface=ether5 internal-path-cost=10 path-cost=10

/ip firewall connection tracking

set enabled=no udp-timeout=10s

/ipv6 settings

set disable-ipv6=yes max-neighbor-entries=8192

/interface detect-internet

set detect-interface-list=all

/interface list member

add interface=ether1 list=WAN

add interface=ether2 list=LAN

add interface=ether3 list=LAN

add interface=ether4 list=LAN

add interface=ether5 list=LAN

add interface=wifi1 list=LAN

add interface=wifi2 list=LAN

/interface ovpn-server server

add auth=sha1,md5 mac-address=FE:4C:EF:30:33:EE name=ovpn-server1

/interface wifi cap

set certificate=none discovery-interfaces=bridge slaves-datapath=mpb-net slaves-static=no

/interface wifi capsman

set ca-certificate=auto certificate=auto enabled=yes interfaces=bridge package-path="" require-peer-certificate=no upgrade-policy=none

/interface wifi provisioning

add action=create-dynamic-enabled disabled=no master-configuration="mpb-net 2G" supported-bands=2ghz-n

add action=create-dynamic-enabled disabled=no master-configuration="mpb-net 5G" supported-bands=5ghz-n

/ip address

add address=192.168.1.2/24 interface=ether2 network=192.168.1.0

/ip dns

set servers=192.168.1.1

/ip firewall filter

add action=accept chain=input disabled=yes in-interface=bridge protocol=udp src-port=5246,5247

add action=accept chain=input disabled=yes dst-port=5246,5247 in-interface=bridge protocol=udp

/ip ipsec profile

set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5

/ip route

add disabled=no dst-address=0.0.0.0/0 gateway=192.168.1.1

/routing bfd configuration

add disabled=no

/system clock

set time-zone-name=Europe/Berlin

/system identity

set name=ac3

/system routerboard settings

set auto-upgrade=yes

Any ideas, hints or known issues regarding this?

Thanks!

itimo01 · December 14, 2025, 8:18pm

-70 might be too weak of a signal to establish at N speeds for a watch?
Setting it to G might just force it to use a lower modulation, which is less likely to get interrupted.

Does the same happen if the watch is closer?

The “old” wireless driver are pretty amazing for configuration but also awful for maintaining so the wifi-qcom driver is the driver directly from Qualcomm with all the good and bad.

Juke · December 14, 2025, 8:39pm

Yes, also happens if I sit directly in front of the hap or the cap. As you can see in the screenshot, the watch download ~5.1MIB and then the transfer rates drop to zero more or less immediately until the connection is lost.

Edit: TX bps is the one that drops to zero, so it seems that the device is not sending anymore data, right?

Juke · December 14, 2025, 8:55pm

I also tried to disable all roaming related configs in combination with using the N standard, but the problem stays the same with this config:



# 2025-12-14 21:43:33 by RouterOS 7.20.6

# software id = YC5S-YUYC

#

# model = RBD53iG-5HacD2HnD

# serial number = 

/interface bridge

add name=bridge port-cost-mode=short

/interface list

add name=WAN

add name=LAN

/interface lte apn

set [ find default=yes ] ip-type=ipv4 use-network-apn=no

/interface wifi channel

add band=2ghz-n disabled=no name="mpb-net 2GHz" reselect-interval=23h30m..23h59m

add band=5ghz-ac disabled=no name="mpb-net 5GHz" reselect-interval=23h30m..23h59m skip-dfs-channels=all

/interface wifi datapath

add bridge=bridge disabled=no name=mpb-net

/interface wifi security

add authentication-types=wpa2-psk connect-priority=0/1 disabled=no encryption=ccmp ft=yes ft-over-ds=yes name="mpb-net WPA2"

add authentication-types=wpa2-psk disabled=no encryption=ccmp name="mpb-net WPA2 wRoaming"

/interface wifi configuration

add channel="mpb-net 2GHz" country=Germany datapath=mpb-net disabled=no manager=local mode=ap name="mpb-net 2G" security="mpb-net WPA2 wRoaming" ssid=mpb-net

/interface wifi steering

add 2g-probe-delay=yes disabled=no name=mpb-steering neighbor-group=dynamic-mpb-net-a860b91a rrm=yes wnm=yes

/interface wifi configuration

add channel="mpb-net 5GHz" country=Germany datapath=mpb-net disabled=no manager=local mode=ap name="mpb-net 5G" security="mpb-net WPA2" ssid=mpb-net steering=mpb-steering

/interface bridge port

add bridge=bridge ingress-filtering=no interface=ether2 internal-path-cost=10 path-cost=10

add bridge=bridge ingress-filtering=no interface=ether1 internal-path-cost=10 path-cost=10

add bridge=bridge ingress-filtering=no interface=ether3 internal-path-cost=10 path-cost=10

add bridge=bridge ingress-filtering=no interface=ether4 internal-path-cost=10 path-cost=10

add bridge=bridge ingress-filtering=no interface=ether5 internal-path-cost=10 path-cost=10

/ip firewall connection tracking

set enabled=no udp-timeout=10s

/ipv6 settings

set disable-ipv6=yes max-neighbor-entries=8192

/interface detect-internet

set detect-interface-list=all

/interface list member

add interface=ether1 list=WAN

add interface=ether2 list=LAN

add interface=ether3 list=LAN

add interface=ether4 list=LAN

add interface=ether5 list=LAN

add interface=wifi1 list=LAN

add interface=wifi2 list=LAN

/interface wifi cap

set certificate=none discovery-interfaces=bridge slaves-datapath=mpb-net slaves-static=no

/interface wifi capsman

set ca-certificate=auto certificate=auto enabled=yes interfaces=bridge package-path="" require-peer-certificate=no upgrade-policy=none

/interface wifi provisioning

add action=create-dynamic-enabled disabled=no master-configuration="mpb-net 2G" supported-bands=2ghz-n

add action=create-dynamic-enabled disabled=no master-configuration="mpb-net 5G" supported-bands=5ghz-n

/ip address

add address=192.168.1.2/24 interface=ether2 network=192.168.1.0

/ip dns

set servers=192.168.1.1

/ip firewall filter

add action=accept chain=input disabled=yes in-interface=bridge protocol=udp src-port=5246,5247

add action=accept chain=input disabled=yes dst-port=5246,5247 in-interface=bridge protocol=udp

/ip ipsec profile

set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5

/ip route

add disabled=no dst-address=0.0.0.0/0 gateway=192.168.1.1

/routing bfd configuration

add disabled=no

/system clock

set time-zone-name=Europe/Berlin

/system identity

set name=ac3

/system routerboard settings

set auto-upgrade=yes

itimo01 · December 14, 2025, 9:24pm

What's your cap?

Is the cap connected via cable or as a “repeater”?

TX is as seen from this device. So your hap ac3s transmitting.

Juke · December 14, 2025, 11:16pm

It’s an cAP ac, directily connected to the ac3 via cable and providing PoE to the cAP ac.

itimo01 · December 15, 2025, 7:14am

Without checking the config too much can you kick your steering policy from the 2.4ghz?

Also please disable detect Internet.

Also does the device receive an IP and have Internet access?

I only have one troublesome Tuya plug that just doesn't like it when it can't resolve DNS.

And the Google Nest speakers that have to connect to a specific Google URL that was in my DNS blocklist.

Maybe run a packet sniffer so you can see what that 5MB of data is (to a file and then you can check with Wireshark)

Juke · December 15, 2025, 8:47am

The steering and all roaming related stuff was already kicked from the 2.4GHz config in the latest config post - without success

The device gets and IP and transfers some data, I can see it when syncing a Spotify list - the first song usually gets transfered.

Can you give me some additional hints how to record the transfered packages to examine with Wireshark afterwards?

Thank you for your support effort, really appreciated!

itimo01 · December 17, 2025, 8:45pm

You can use the Packet sniffer like this, for example.

Just set the filename, interface and mac address.
We’d be interested in the last few packets that are transferred if theres anything unusual.

Maybe it’s some DNS error or a lot of retransmits (which indicates a bad connection)

magicc12 · January 15, 2026, 6:46pm

I also have the same issue.

Also I did some packet sniff, in some cases there are retransmissions before the client drops the connection, in some cases there aren’t. The signal strength is around -35-40 when it disconnects.

erlinden · January 15, 2026, 7:34pm

Can you share your wifi config?

/interface/wifi export

magicc12 · January 16, 2026, 2:15pm

wificonfig.rsc (3.8 KB)

Hello

Yes, here it is attached.

erlinden · January 16, 2026, 2:33pm

Using 20/40MHz bandwidth on the 2.4GHz radio is a very bad setting. You will get interference in your network. Without looking any further, make sure to set the 2.4GHz radio (channel) to 20MHz.

Same goes for setting the bandwidth on the 5GHz radio to 160MHz, unless you live in a rural area. Are there any wireless networks in the neighborhood?

whatever · January 16, 2026, 3:42pm

Please test if setting management-protection in security settings to ”disabled” helps to prevent disconnects.

magicc12 · January 16, 2026, 5:22pm

Thank you for your answer!

Regarding the 20/40, thanks for it, I changed.

Regarding the 5GHz band, there is no interference with other radios, our neighbours has no outdoor AP, nor 160MHz band is not used

magicc12 · January 16, 2026, 5:25pm

Thank you for your answer, too!

I changed the setting.

I pay attention to the clients how they will behave

Juke · January 25, 2026, 4:06pm

Sorry it took me so long to answer again. I did a package sniff with applied MAC Filter of the Garmin and could dump the log here, because interpretation is beyond my knowledge. Or is there anything that should be removed from the logs before posting it?

Juke · January 25, 2026, 4:33pm

Well, the sniffing logs are very thin. Those are the only entries when selecting the Mac Filter and only recording the WiFi interfaces.

itimo01 · January 25, 2026, 5:29pm

Quick question:

Did you set “MAC-Address” or “Src Mac Address”?
It seems we can only see traffic FROM the Garmin

We should usually see traffic in both directions

Kentzo · January 25, 2026, 5:50pm

@Juke I think the way forward is to capture raw Wireless traffic on your laptop and contact Mikrotik support / send bug report. Make sure to include supout of your AP as well as MAC address of you Garmin (so it can be identified in the logs).

Happy to look at the wireless sniff if you to share it here as well, but FYI it discloses the list of wireless devices in your LAN.

Also makes sense to contact Garmin support as well. If other devices work reliably it can very well be something amiss with device’s firmware.