I have tested with 7.18.2 the following settings (CapsmanV2, wifi):
WPA2, ccmp, FT=yes, FT-over-DS=yes, Management protection=allowed, connect priority=0/1
steering rrm=yes, wnm=yes, 2g-probe-delay=yes
All my devices (Apple iOS > 18.x, TvOS > 18.x, Macbooks, Homepods, Samsung TV, Sonos, etc.) connects without issue.
Devices that support 802.11r are registered with ft-wpa2-psk.
br Richard
I also tested this time ago (v7.16 or v7.14), only Pixel phone was able to connect with encryption=gcmp , no iPhone, Mac, Windows PC with Intel Wi-Fi card, at the end I switched to failsafe ccmp only.
I wonder if other devices support gcmp, also for group-encryption , or it’s just another MikroTik implementation that needs years (and releases) to work.
changed 7.18-7.20 steering property (for all my cfgs) to steering.2g-probe-delay=yes and finally got 5MHz preferred over 2.4. will see if this persist through time... should also be noted there’s no way to set this via winbox 3, must use CLI. Single AP setup, no CapsMAN.
/interface/wifi/configuration set steering.2g-probe-delay=yes [find]
multicast-enhance=enabled
security.authentication-types=wpa2-psk,wpa3-psk
.group-key-update=1h
.disable-pmkid=no
.management-protection=allowed
.ft=yes
.connect-priority=0/1
.skip-dfs-channels=all
.reselect-interval=3h..4h
steering.neighbor-group=dynamic-XXXXX
.rrm=yes
.2g-probe-delay=yes
I have some devices registered with Auth Type wpa2-psk-sha2 and ft-wpa2-psk,
ft-wpa2-psk it includes wpa2-psk and wpa2-psk-sha2 or just wpa2-psk ?
Is wpa2-psk-sha2 able to roam? In case, did you asked to support?