hAP ax²: clients connection stability issue

Hi.

I am trying to substitute the actual hAP ac with a new hAP ax² for my home network, but I am facing stability with the connectivity of devices (for example my Samsung Smart TV).

When the hAP ax² is restarted, all clients connect, but after a while, one or more disconnects (and do not connect anymore).

I also tried to upgrade to the latest 7.15rc1 which has a driver upgrade for wifi-qcom.

Any suggestion? Is someone else experiencing stability with client connectivity stability?

Stefano

Hi !

What kind of settings do you have ? Are you using Fast Transition (some devices still cannot live/survive this) and WPA3 (same…) ?
For testing purposes try to config your device without FT and secure with WPA2 CCMP only. Also prlomging dhcp lease time and group key update can solve such issues, which are luckily for me with wave2 finally unknown…

hAP ax² configured as single AP: no capMAN, no other APs for roaming.

Here is the configuration:

[admin@MikroTik] > interface/wifi/print detail
Flags: M - master; D - dynamic; B - bound; X - disabled, I - inactive, R - running 
 0   BR name="WiFi_2-Devices" l2mtu=1560 mac-address=4A:A9:8A:69:D2:AF arp-timeout=auto master-interface=WiFi_2-Main 
        configuration.mode=ap .ssid="WiFi-2 - Devices" 
        security.authentication-types=wpa2-psk .passphrase="xxxyyyzzz" 
        datapath.bridge=Bridge-Device .client-isolation=yes 

 1   BR name="WiFi_2-IoT" l2mtu=1560 mac-address=4A:A9:8A:69:D2:AE arp-timeout=auto master-interface=WiFi_2-Main 
        configuration.mode=ap .ssid="WiFi-2 - IoT" 
        security.authentication-types=wpa2-psk .passphrase="xxxyyyzzz" 
        datapath.client-isolation=yes 

 2 M B  default-name="wifi2" name="WiFi_2-Main" l2mtu=1560 mac-address=48:A9:8A:69:D2:AE arp-timeout=auto radio-mac=48:A9:8A:69:D2:AE 
        configuration=PippoNet-conf 
        configuration.mode=ap .ssid="WiFi-2" .country=Italy 
        security.authentication-types=wpa2-psk,wpa3-psk .passphrase="xxxyyyzzz" 
        datapath.bridge=Bridge-LAN 
        channel=ch-2ghz 
        channel.frequency=2412,2437 .width=20mhz 

 3 M BR default-name="wifi1" name="WiFi_5-Main" l2mtu=1560 mac-address=48:A9:8A:69:D2:AD arp-timeout=auto radio-mac=48:A9:8A:69:D2:AD 
        configuration=PippoNet-conf 
        configuration.mode=ap .ssid="WiFi-5" .country=Italy 
        security.authentication-types=wpa2-psk,wpa3-psk .passphrase="xxxyyyzzz" 
        datapath.bridge=Bridge-LAN 
        channel=ch-5ghz 
        channel.frequency=5180 .width=20/40/80mhz

Randomly the clients get disconnected, without any clear reason:

16:27:37 echo: wireless,info 78:BD:BC:DD:00:31@WiFi_2-IoT disconnected, connection lost, signal strength -76
16:27:37 echo: wireless,debug 78:BD:BC:DD:00:31@WiFi_2-IoT disassociated, connection lost, signal strength -76
16:28:35 echo: wireless,debug 78:BD:BC:DD:00:31@WiFi_2-IoT associated, signal strength -75
16:28:35 echo: wireless,info 78:BD:BC:DD:00:31@WiFi_2-IoT connected, signal strength -75
16:30:19 echo: wireless,info 78:BD:BC:DD:00:31@WiFi_2-IoT disconnected, connection lost, signal strength -76
16:30:19 echo: wireless,debug 78:BD:BC:DD:00:31@WiFi_2-IoT disassociated, connection lost, signal strength -76

As mentioned, it is happening with hAP ax², but not with hAP ac lite.

Is there any configuration for the threshold for the signal strength to disconnect a client?

Please issue an export and paste here. thanks

/interface/wifi/export
# 2024-04-24 17:29:26 by RouterOS 7.15rc1
# software id = IQJT-ARXV
#
# model = C52iG-5HaxD2HaxD
# serial number = HE608P3JDNE
/interface wifi channel
add disabled=no frequency=2412 name=ch-2ghz width=20mhz
add disabled=no frequency=5180 name=ch-5ghz width=20/40/80mhz
/interface wifi security
add authentication-types=wpa2-psk,wpa3-psk disabled=no name=Main-auth
/interface wifi
add configuration.mode=ap .ssid="PippoNet - Devices" datapath.bridge=Bridge-Device .client-isolation=yes disabled=no mac-address=\
    4A:A9:8A:69:D2:AF master-interface=WiFi_2-Main name=WiFi_2-Devices security.authentication-types=wpa2-psk
add configuration.mode=ap .ssid="PippoNet - IoT" datapath.client-isolation=yes disabled=no mac-address=4A:A9:8A:69:D2:AE \
    master-interface=WiFi_2-Main name=WiFi_2-IoT security.authentication-types=wpa2-psk
set [ find default-name=wifi2 ] channel=ch-2ghz channel.frequency=2412,2437 configuration=PippoNet-conf configuration.mode=ap \
    datapath.bridge=Bridge-LAN disabled=no name=WiFi_2-Main
set [ find default-name=wifi1 ] channel=ch-5ghz configuration=PippoNet-conf configuration.country=Italy .mode=ap datapath.bridge=\
    Bridge-LAN disabled=no name=WiFi_5-Main
/interface wifi configuration
add country=Italy datapath.bridge=Bridge-LAN disabled=no name=PippoNet-conf security=Main-auth ssid=PippoNet

Your configuration looks legit.

But there are some lines that confuse me:

/interface wifi
add configuration.mode=ap .ssid="PippoNet - Devices" datapath.bridge=Bridge-Device .client-isolation=yes disabled=no mac-address=\
    4A:A9:8A:69:D2:AF master-interface=WiFi_2-Main name=WiFi_2-Devices security.authentication-types=wpa2-psk

It should be “configuration.ssid” and “datapath.client-isolation=yes” instead.

Next line again:

add configuration.mode=ap .ssid="PippoNet - IoT" datapath.client-isolation=yes disabled=no mac-address=4A:A9:8A:69:D2:AE \
    master-interface=WiFi_2-Main name=WiFi_2-IoT security.authentication-types=wpa2-psk

It should be “configuration.ssid” and not just “.ssid”.

And here another:

set [ find default-name=wifi1 ] channel=ch-5ghz configuration=PippoNet-conf configuration.country=Italy .mode=ap datapath.bridge=\
    Bridge-LAN disabled=no name=WiFi_5-Main

“configuration.mode=ap” instead of “.mode=ap”.

I don’t know where this originates from, but maybe this is the quirk here.

The abbreviation is standard, emitted by RouterOS, not something the user did. You can see an example of it here, in MT’s own docs.

tangent, you linked to a sample of “actual-configuration print”. The OP posted an export.

Lets try together:

/interface/wifi/set .ssid="foobar"

What does it say? “expected end of command”

/interface/wifi/set configuration.mode=ap .ssid="foobar"

Works. ROS is a magic

It seems it is a parent/child convention, using the dot as separator.

With
set configuration.mode=ap
you are setting at the same time parent (configuration) and child (mode)
with
.ssid=“foobar”
you are setting just the child (ssid) and the last used parent is implied.

It seems to me like useful for avoiding typing (like Ros command shortenings) but it is a bit confusing in an export.

Yeah, I understand the logic behind it. It’s some kind of “chaining”. But still it is confusing to see this in an export.

ROS7 syntax, now with 20% more sugar!

It’s called compression … basic idea behind all compression algorithms is to remove any redundant information from data set … even if that information doesn’t seem redundant to humans’ minds.

hah! now the tools are available to save some space on 16MB flash devices.

Resuming: the wi-fi configuration looks fine and there are no evident errors.

I still don’t have any ideas where to look at and fix the device connection stability issue.

For example: when watching Netflix on SmartTV, often the streaming stops; to fix it, I block and unblock the wifi interface (via Winbox) to force the device to re-connect. It works for a while.

When it doesn’t work anymore, power reset: even the SW reboot sometimes doesn’t fix the problem.

How can I proceed? Opening a ticket?

I cannot get where WiFi_2-Main’s security is configured. Am I missing something?

Try enabling wifi logging and check the log.
For me it worked best when having only WPA2 AES.

Post http://forum.mikrotik.com/t/hap-ax-clients-connection-stability-issue/175420/16 already reports an extract of the debugging log, doesn’t it?

You are (obviously) absolutely right. Was expecting other kind of log entries.

Did you also give my other remark a try?

Actually my TV does not have issues and, indeed, I am not the OP. :slight_smile:

I enabled the wireless logs and I see the wifi clients actively exchanging traffic having the same issue.

For example, my laptop is disconnecting with the reason “SA Query timeout” (?!?):

wireless,debug B0:3C:DC:E1:66:67@WiFi_2-Main reauthenticating
wireless,info B0:3C:DC:E1:66:67@WiFi_2-Main disconnected, SA Query timeout, signal strength -67
wireless,debug B0:3C:DC:E1:66:67@WiFi_2-Main disassociated, SA Query timeout, signal strength -67
wireless,debug B0:3C:DC:E1:66:67@WiFi_2-Main associated, signal strength -66
wireless,info B0:3C:DC:E1:66:67@WiFi_2-Main connected, signal strength -65
wireless,debug 00:BB:3A:E7:7E:8A@WiFi_2-Devices associated, signal strength -64

The difference is that most of the other wifi clients can reconnect (and reconnect again) without any problem.

Instead, with my Sambung Smart TV (an “old” model with WiFi 4), after a while watching Netflix, gets stuck and I need to restart the modem. In the past, with hAP ax², the iRobot didn’t connect (with new SW versions the problem is not present anymore).

Did you try to enable wireless’ logs on your side to verify the behavior? But the WiFI clients should actively be exchanging traffic.