Hap ax3 random wireless disconnects

I’ve been having these issues as well using my HAP ax2 running ROS > 7.14.3. Been through the hoops with MT support using minimum configuration and trying to identify what devices cause WIFI disconnects. What we have found is that my Google Nest Speakers (Audio and Mini) cause regular and temporary WIFI drop-out for most, if not all all connected WIFI devices. Removing the Google Nest Speakers (Audio and Mini) increases WIFI stability significantly.

Trying to re-configure ROS based on Mikrotik Support and forum recommended settings has been a rabbit hole for me with zero improvement to stability.

Instead of trying to change the ROS configuration. Try to identify what devices are causing the issue by temporality removing them. Like Android TV, Google Nests and other similar devices. It’s tedious, but could be bring valuable information to MK support.

Since my issue cannot be reproduced on ROS <= 7.14.3, my conclusion is that this is a Mikrotik issue.

@mndtrp
Out of curiosity, how long is the lease time of the DHCP server? 10 minutes?

I’ve tried 10 minutes, 1 hour and 24 hours. Lease time has no effect.

As I have already mentioned in another thread here: http://forum.mikrotik.com/t/not-responding-f-k-a-sa-query-timeout/168864/293
I am pretty certain my issues started after I introduced WiiM Streamer into my network. Before that, my phone was the only device permanently connected on 5Ghz with occasional temporary connections of laptops. No issues observed. After connecting WiiM on 5GHz, the phone, perfectly working up till then for almost a year, started giving me SA query timeouts at least once a day randomly.

And yes, most likely it is Mikrotik issue, since in 7.15 the Qualcomm Wifi driver was updated, so it is pretty clear what is behind all this mess. Just rollback of the driver should fix it, but Mikrotik does not wanna hear about it apparently. So we are stuck with broken Wifi.

Thanks, I suppose you are using same SSID for 2 and 5GHz and use roaming between the 2, correct? Since I see you have FT enabled.
I have 2 and 5Ghz separated on different SSIDs, and connect devices directly where I want them to, and I have FT disabled, but otherwise basically the same setup (I even tried the connect priority setting with no impact), and with only 2 devices (my phone and WiiM Ultra), my phone gets SA query timeouts. Crazy to think you have no issues whatsoever with dozens of devices at the same time.

Yes, it’s correct.

Yes indeed it’s curious… consider that I also have 3 Sonos One, 2 Chromecast and a Google Nest Audio and they never disconnect.

Today I tried to update to 7.17 and set up local WiFi interfaces via local CapsMan.
I understand that this is a hack and an excessive solution, but it works for Massinia.
The solution worked for 3 hours and my TV box started reconnecting to WiFi again

For the record, never had the problem here (around 10-11 devices, 2.4 anf 5ghz)…

Since, i’ve fixed channel width AND create a “fake master hidden ssid”
I’ve no disconnect except roaming on a building with 4 floors and 12 hap ax3 running 7.17.

This my capsman cfg :

/interface wifi channel
add disabled=no name=master_channel width=20/40mhz-Ce
add disabled=no name=slave_channel width=20/40/80mhz
/interface wifi configuration
add channel=master_channel country=France disabled=no hide-ssid=yes mode=ap multicast-enhance=enabled name=master_config \
    security.authentication-types=wpa3-psk ssid=master
/interface wifi datapath
add bridge=bridge1 bridge-cost=10 client-isolation=no disabled=no interface-list=guest name=vlan1049_datapath vlan-id=1049
add bridge=bridge1 bridge-cost=10 client-isolation=no disabled=no interface-list=lan name=vlan1050_datapath vlan-id=1050
add bridge=bridge1 bridge-cost=10 client-isolation=no disabled=no interface-list=guest name=vlan1069_datapath vlan-id=1069
add bridge=bridge1 bridge-cost=10 client-isolation=no disabled=no interface-list=lan name=vlan1070_datapath vlan-id=1070
/interface wifi security
add authentication-types=wpa2-psk,wpa3-psk disabled=no ft=yes ft-mobility-domain=0x1049 ft-over-ds=yes name=vlan1049_auth wps=disable
add authentication-types=wpa2-psk,wpa3-psk disabled=no ft=yes ft-mobility-domain=0x1050 ft-over-ds=yes name=vlan1050_auth wps=disable
add authentication-types=wpa2-psk,wpa3-psk disabled=no ft=yes ft-mobility-domain=0x1069 ft-over-ds=yes name=vlan1069_auth wps=disable
add authentication-types=wpa2-psk,wpa3-psk disabled=no ft=yes ft-mobility-domain=0x1070 ft-over-ds=yes name=vlan1070_auth wps=disable
/interface wifi configuration
add channel=slave_channel country=France datapath=vlan1049_datapath disabled=no hide-ssid=no mode=ap multicast-enhance=enabled name=\
    vlan1049_config security=vlan1049_auth ssid=1049
add channel=slave_channel country=France datapath=vlan1050_datapath disabled=no hide-ssid=no mode=ap multicast-enhance=enabled name=\
    vlan1050_config security=vlan1050_auth ssid=1050
add channel=slave_channel country=France datapath=vlan1069_datapath disabled=no hide-ssid=no mode=ap multicast-enhance=enabled name=\
    vlan1069_config security=vlan1069_auth ssid=1069
add channel=slave_channel country=France datapath=vlan1070_datapath disabled=no hide-ssid=no mode=ap multicast-enhance=enabled name=\
    vlan1070_config security=vlan1070_auth ssid=1070
/interface wifi capsman
set ca-certificate=auto certificate=auto enabled=yes interfaces=vlan1067 package-path="" require-peer-certificate=no upgrade-policy=none
/interface wifi provisioning
add action=create-dynamic-enabled comment=wifi-5g disabled=no master-configuration=master_config name-format=wifi-5g-%I slave-configurations=\
    vlan1049_config,vlan1050_config,vlan1069_config,vlan1070_config slave-name-format=%m%v supported-bands=5ghz-a,5ghz-n,5ghz-ac,5ghz-ax
add action=create-dynamic-enabled comment=wifi-2g disabled=no master-configuration=master_config name-format=wifi-2g-%I slave-configurations=\
    vlan1049_config,vlan1050_config,vlan1069_config,vlan1070_config slave-name-format=%m%v supported-bands=2ghz-ax,2ghz-g,2ghz-n

Tested 7.18beta2 today and the issue is still not completely fixed. Though it has been reduced a lot since the 7.16-7.17 builds I find. It’s actually almost entirely usable now where as before I HAD to be on 7.14.3 to actually have a usable connection on the 5GHz interface. The two devices I have that trigger the problem do still cause the 5GHz interface to drop, but it’s only when they first connect and its for a much shorter period of time.

Which hack? It is the correct way.

On device with CAPsMAN active the cAPs interfaces are local managed, otherwise fast roaming can never work.
CAPsMAN.png
In the CAPs instead they are managed by CAPsMAN
cAP.png

This is the right way if you have additional access points and need centralized network management.
But in my case there is only one hAP AX3 router and running CapsMan is a redundant solution. But this, unfortunately, does not work either.

I agree with this. I also have fewer interruptions on this version, and on Windows computers, instead of interruptions, there are sometimes delays in data transfer. But unfortunately, watching YouTube or Netflix is ​​interrupted on TVBox and tablets.

Still no improvements for me on 7.18, soundbar, tv, tablets, getting disconnected for no reason even next to router on desk under full signal…
Snimka zaslona 2025-01-26 154412.png

People, please, let’s help the developers solve our common problem with WiFi.
Please open tickets on the support portal
https://help.mikrotik.com/servicedesk/servicedesk/customer/portal/1
describe the problem and attach the Supout.rif file.
This will help the developers collect more information and solve the problem faster.
Because more than half a year has passed, and the problem is not solved.

Done that, SUP-177122 opened on 22/01, still in “waiting for support”.

Here is what I see when trying to connect my old Wyze Cam v1. Camera continuously sends ‘Probe Request’ but router is silent.
I simplified configuration 2.4GHz to next:

1 M B  default-name="wifi2" name="wifi2" l2mtu=1560 mac-address=xxxx arp-timeout=auto radio-mac=xxxx
        configuration.mode=ap .ssid="ssid1" .dtim-period=3 
        security.authentication-types=wpa2-psk .encryption=ccmp .passphrase="xxx"  
        channel.frequency=2437 .secondary-frequency=disabled .band=2ghz-g .width=20mhz 

 3   BI name="wifi4" l2mtu=1560 mac-address=xxxx arp-timeout=auto master-interface=wifi2 
        configuration.mode=ap .ssid="ssid2" .dtim-period=3 
        security.authentication-types=wpa2-psk .encryption=ccmp .passphrase="xxx"  
        channel.frequency=2437 .band=2ghz-g

But still silence form router. In logs it looks like that (2nd image), but I cannot see those connections and associations in Wireshark. May be some packets are filtered and I need to buy USB WiFi module that can be put into monitor mode to properly log WiFi communication.. I don’t know.
image_2025-02-02_004709893.png
image_2025-02-02_004334213.png

ROS 7.18.beta4 no changes
Android devices start disconnects after 15 minutes (((


maybe someone tested 7.18rc1 version?