hAP ac2 5GHz WiFi crashes

The 5GHz interface crashes when I’m watching YouTube videos on my S10e, I don’t know why it happens but the last link down is just when I was using my S10e and the router drops all 5GHz connections forcing other clients to reconnect which is unnaceptable considering this is a “enterprise” router. I also tried the new 6.46 beta 49 which is supposed to improve WiFi on IPQ4018 devices.
WiFi settings are default I only changed: channel-width, frequency, SSID, disable WPS and security profile.
PD: I also have a VAP on 2.4ghz interface but I don’t think that matters, reset doesn’t helps.

Edit: The S10e is the Exynos version which uses Broadcomm wifi chipset.

While I understand the frustration and I agree that such drops are not acceptable … but hAP ac2 is by no means “enterprise” router, it’s SOHO router… even much more expensive RB4011 is not “enterprise” router …

Can you please share your exact WiFi settings? Even “enterprise” hardware can be miss configured (though I’m not saying you did).

I used Netinstall to downgrade to ROS 6.44.5 (long term release). I setup everything from scratch and it was all good for 16 hours and then it happened again. I logged into the router and it’s reporting extensive data loss from my S10e but I have -57 dbm signal which I suppose is good enough.
Screenshot_20191026-201141_MikroTik.jpg

Edit: After searching on Reddit I found that it may be caused by the group key update value in security profile being 00:05:00 by default instead of being 01:00:00. I’ll update in 24/48 hours nor another drop happens.

Edit 2: Group key update wasn’t the culprit cause 5ghz keep dropping when watching YT on the S10e. Then I compared the default security profile to my other profiles and there’s one option that’s disabled: Management Protection, which according to the Wiki is a propietary algorithm that prevents deauth attacks. I disabled that and tried YT for 10 min, no drops. I’ll keep you guys updated.
PD: I upgraded ROS and firmware back to 6.46 beta59 cause it gives me a little bit better coverage.

Edit 3: Changed to 5GHz-only-ac and 2GHz-only-n and rebooted, it seems to solve the issue for now, 1 hour of YouTube without any single drop.

Edit 4: This thing is broken, Mikrotik should release a fix this is completely unreliable. I’ve run out of ideas for now, it just keeps dropping my phone .

Enable debugging for the wireless. Go to system logging and select debug and wireless also..

When there is a drop check the log and post here what it says…

This is what the debug log says when it drops my phone:
Screenshot_20191027-074004_MikroTik.jpg
Edit: I was watching a 4K movie on my phone and then it dropped two times in less than 4 minutes, now this is appearing on the log:
S10e MAC@wlan2: disconnected, group key exchange timeout

What is the encryption used in security profile? Use only WPA2 aes-psk and unselect all others…

Yes, I always set my routers to WPA-2 Only.
Here’s the wireless config:

/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk eap-methods="" mode=dynamic-keys name=\
    red-principal supplicant-identity=""
add authentication-types=wpa2-psk eap-methods="" mode=dynamic-keys name=\
    red-invitada supplicant-identity=""
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n disabled=no distance=indoors \
    frequency=auto hide-ssid=yes installation=indoor mode=ap-bridge \
    security-profile=red-principal ssid=bayas wireless-protocol=802.11 \
    wmm-support=enabled wps-mode=disabled
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=20/40/80mhz-XXXX \
    disabled=no distance=indoors frequency=auto hide-ssid=yes installation=\
    indoor mode=ap-bridge security-profile=red-principal ssid=bayas-5g \
    wireless-protocol=802.11 wmm-support=enabled wps-mode=disabled
add default-forwarding=no disabled=no hide-ssid=yes keepalive-frames=disabled \
    mac-address=XX:XX:XX:XX:XX:XX master-interface=wlan1 multicast-buffering=\
    disabled name=wifi-invitados security-profile=red-invitada ssid=\
    bayas-invitados vlan-id=2 wds-cost-range=0 wds-default-cost=0 wps-mode=\
    disabled

Increase the time of group key update to lets say 30m and see if it makes any difference…

When you say crashes, what exactly does the interface? Have you checked the interface status? Running, radar detection etc.?
Which channel are you on, what other AP are there (the 5G frequency can be extremely crowded in cities now and could explain
a disconnection from the network.

I used Netinstall to freshly install ROS 6.45.7 with Apply default config checked with the intention of removing the US lock but it doesn’t goes away, then the router rebooted with default config and I modified the following: dhcp lease to 24h, group key update to 1h, disabled management protection. On the wireless tab I did a frequency usage scan on the wlan2 interface (5GHz) and it found that the UNII-1 band was too congested but the UNII-3 band only had 0.1 usage, so I changed my frequency to 20/40/80MHz eeCe 5785MHz (aka channel 157).

I haven’t had any drop or slow down on the last 3 days so the problem it’s fixed for now. BTW here’s my wireless config (I’m using the same SSID on both bands and works perfectly with my clients, they prefer 5GHz and only switch to 2.4GHz if the signal decreases a lot).

[adm1n@Router-Home] > /interface wireless export hide-sensitive                   
# oct/31/2019 12:45:19 by RouterOS 6.45.7
# software id = XXXX-XXXX
#
# model = RBD52G-5HacD2HnD
# serial number = XXXXXXXXXXXX
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk eap-methods="" group-key-update=1h mode=dynamic-keys name=main supplicant-identity=""
add authentication-types=wpa2-psk eap-methods="" group-key-update=1h mode=dynamic-keys name=guests supplicant-identity=""
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n disabled=no distance=indoors frequency=auto hide-ssid=yes installation=indoor mode=ap-bridge security-profile=main ssid=myssid wireless-protocol=\
    802.11 wps-mode=disabled
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=20/40/80mhz-eeCe disabled=no distance=indoors frequency=5785 hide-ssid=yes mode=ap-bridge security-profile=main ssid=myssid \
    wireless-protocol=802.11 wps-mode=disabled
add default-forwarding=no disabled=no hide-ssid=yes keepalive-frames=disabled mac-address=76:4D:28:7E:9D:CC master-interface=wlan1 multicast-buffering=disabled name=wlan-guests security-profile=\
    guests ssid=myssid-guests vlan-id=2 wds-cost-range=0 wds-default-cost=0 wps-mode=disabled