Recently I upgraded my router to hAP ax² and although I’m overall happy with it, there is one issue. I have two windows computers, both connecting to the router using Wifi, both using the same Intel(R) Wi-Fi 6E AX211 160MHz wifi module, and both tend to connect with Wifi 4 protocol even tho they are both Wifi 6 compatible. Weirdly this only happens when the computer connects to the network automatically, so if I disconnect and manually click the Connect button, the protocol becomes Wifi 6. Additionally, when I’m sharing a Wifi 6 hotspot from my android phone, everything works as expected, so even the automatic connections are made with Wifi 6, therefore I suspect that something is off with my mikrotik router.
Is there something I can change on my router settings that’d fix this behavior?
Tried the latest drivers ?https://www.intel.com/content/www/us/en/download/19351/windows-10-and-windows-11-wi-fi-drivers-for-intel-wireless-adapters.html
What you getting from here?
Post output from this
And this as well.
marcell
December 8, 2023, 11:51am
4
I have routerOS 7.12.1 and since Windows automatically downloads the latest drivers for devices, I assume I do have the latest wireless driver too, but just on case now I’m installing the one you linked. Let’s see.
Here are the outputs you asked for:
I would advise trying 7.13 RC3
Also can you do the output from this again using
And the output from Windows CMD would be good
If both radios are using the same shared SSID…why did you choose different authentication types?
It should choose 5g anyway with that card, but yes I see where you are going.
marcell
December 8, 2023, 12:21pm
8
It's because my crap A/C doesn't support WPA3, can't even connect to a network that supports WPA3... Took me ages to find a combination of settings that works. Anyway, all that matters are on the 5GHz one.
marcell
December 8, 2023, 12:23pm
9
I would advise trying 7.13 RC3
Also can you do the output from this again using
And the output from Windows CMD would be good
Here is the new terminal output:
Windows terminal output:
I installed 7.13 RC3 and the issue persist. Here is the full flow so you have a better understanding:
It’s because my crap A/C doesn’t support WPA3, can’t even connect to a network that supports WPA3… Took me ages to find a combination of settings that works. Anyway, all that matters are on the 5GHz one.
Then you might want to consider using a dedicated SSID for the a/c. You can’t combine different security settings and expect clients to act smart.
marcell
December 8, 2023, 12:30pm
11
Additionally it requires 20/40MHz on the 2.4 radio, that one I can't set up for only a different SSID. I don't think it matters that much since the 2.4GHz network only being used by iot devices and has a different SSID that the 5GHz wifi.
The output from CMD shows you are connected AX your signal is the same as mine and I get 1201
If you was connected AC it would say so example
Network type : Infrastructure
Radio type : 802.11ac
Authentication : WPA2-Personal
Cipher : CCMP
Connection mode : Profile
Band : 5 GHz
Channel : 36
Receive rate (Mbps) : 866.7
Transmit rate (Mbps) : 866.7
Signal : 91%
marcell
December 8, 2023, 1:03pm
14
The output from CMD shows you are connected AX your signal is the same as mine and I get 1201
If you was connected AC it would say so example
Network type : Infrastructure
Radio type : 802.11ac
Authentication : WPA2-Personal
Cipher : CCMP
Connection mode : Profile
Band : 5 GHz
Channel : 36
Receive rate (Mbps) : 866.7
Transmit rate (Mbps) : 866.7
Signal : 91%
There is 1 interface on the system:
Name : Wi-Fi
Description : Intel(R) Wi-Fi 6E AX211 160MHz
GUID : 63b9def3-324f-4854-886f-86c88870e723
Interface type : Primary
State : connected
Network type : Infrastructure
Radio type : 802.11n
Authentication : WPA3-Personal (H2E)
Cipher : CCMP
Connection mode : Auto Connect
Band : 5 GHz
Channel : 136
Receive rate (Mbps) : 300
Transmit rate (Mbps) : 413
Signal : 82%
Hosted network status : Not available
marcell
December 8, 2023, 1:05pm
15
Could you please elaborate more?
Using 40MHz bandwidth on the 2.4GHz radio is a bad idea…unless you live in a rural environement.
I’m getting a bit confused how you confirguration looks like…can you please share it:
/export file=anynameyoulike
Remove serial and any other private information, and post here between code tags using the </> button.
marcell
December 8, 2023, 1:14pm
17
unless you live in a rural environement.
Well… I do live in the opposite of that, but unfortunately having my A/C on the network is a must for all sorts of reasons. Since it’s winter I won’t need climate for a while, I can try changing the 2.4GHz wifi to see if it improves anything.
# 2023-12-08 14:08:28 by RouterOS 7.13rc3
# software id = JEY7-U5EX
#
# model = C52iG-5HaxD2HaxD
# serial number = <SERIAL_NUMBER>
/interface bridge
add admin-mac=<ADMIN_MAC> auto-mac=no comment=defconf name=bridge \
port-cost-mode=short
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wifi channel
add band=5ghz-ax name=channel-5G width=20/40/80mhz
add band=2ghz-g comment="Kl\C3\ADma miatt G/20MHz " name=channel-2G width=\
20mhz
/interface wifi
set [ find default-name=wifi2 ] channel=channel-2G channel.skip-dfs-channels=\
10min-cac configuration.mode=ap .ssid="<SSID>" disabled=no mtu=\
1500 name=wifi-2G security.authentication-types=wpa2-psk
set [ find default-name=wifi1 ] channel=channel-5G channel.skip-dfs-channels=\
10min-cac configuration.country=Hungary .mode=ap .ssid=\
"<SSID> 5G" disabled=no mtu=1500 name=wifi-5G \
security.authentication-types=wpa2-psk,wpa3-psk
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp interface=bridge lease-time=10m name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2 internal-path-cost=10 \
path-cost=10
add bridge=bridge comment=defconf interface=ether3 internal-path-cost=10 \
path-cost=10
add bridge=bridge comment=defconf interface=ether4 internal-path-cost=10 \
path-cost=10
add bridge=bridge comment=defconf interface=ether5 internal-path-cost=10 \
path-cost=10
add bridge=bridge comment=defconf interface=wifi-5G internal-path-cost=10 \
path-cost=10
add bridge=bridge comment=defconf interface=wifi-2G internal-path-cost=10 \
path-cost=10
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface detect-internet
set detect-interface-list=all
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=\
192.168.88.0
/ip dhcp-client
add comment=defconf interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf dns-server=192.168.88.1 gateway=\
192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=\
"defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related hw-offload=yes
add action=accept chain=forward comment=\
"defconf: accept established,related, untracked" connection-state=\
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
connection-state=invalid
add action=drop chain=forward comment=\
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" \
ipsec-policy=out,none out-interface-list=WAN
/ipv6 firewall address-list
add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
add address=::1/128 comment="defconf: lo" list=bad_ipv6
add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
add address=100::/64 comment="defconf: discard only " list=bad_ipv6
add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
/ipv6 firewall filter
add action=accept chain=input comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
invalid
add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
icmpv6
add action=accept chain=input comment="defconf: accept UDP traceroute" port=\
33434-33534 protocol=udp
add action=accept chain=input comment=\
"defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
udp src-address=fe80::/10
add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
protocol=udp
add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
ipsec-ah
add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
ipsec-esp
add action=accept chain=input comment=\
"defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=input comment=\
"defconf: drop everything else not coming from LAN" in-interface-list=\
!LAN
add action=accept chain=forward comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
connection-state=invalid
add action=drop chain=forward comment=\
"defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
add action=drop chain=forward comment=\
"defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
hop-limit=equal:1 protocol=icmpv6
add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
icmpv6
add action=accept chain=forward comment="defconf: accept HIP" protocol=139
add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
500,4500 protocol=udp
add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
ipsec-ah
add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
ipsec-esp
add action=accept chain=forward comment=\
"defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=forward comment=\
"defconf: drop everything else not coming from LAN" in-interface-list=\
!LAN
/system clock
set time-zone-name=Europe/Budapest
/system note
set show-at-login=no
/system package update
set channel=development
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
Winbox double click on wifi1
And your post above shows ax look again
marcell
December 8, 2023, 1:34pm
20
#14 shows the Wifi 4 connection.
So far it seems like setting the Frequency to 5180 solved the problem. I’ll do some additional tests, like putting the computer to sleep/hibernation to say for sure.
