Hello Folks,
since a while we have Problems with some of our wirless links. Our Mikrotik links spontaneously Disconnecting, this happens up to 3 times per hour.
All links with that problem have in common that they use 802.11 protocol.
After some research we have figured out that we are experience that Problems only when the following condions are meet:
- Only on Mikrotik links
- problems first appeared after rollout of version 6.35.X.
- all links are configured to use the 802.11 protocoll.
Example log from one of our Accesspoints:
mar/18/1970 21:17:35 by RouterOS 6.42.1
software id = -
feb/04 08:05:21 system,info router rebooted
…
feb/04 08:05:49 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: connected, signal strength -53
…
feb/04 08:06:12 wireless,info 00:0C:42:XX:XX:X2@wlan1: connected, signal strength -65, wants bridge
feb/04 08:06:51 wireless,info 00:0C:42:XX:XX:X2@wlan1: disconnected, disabling
feb/04 08:06:51 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: disconnected, disabling
…
feb/04 08:07:04 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: connected, signal strength -57
feb/04 08:07:11 wireless,info 00:0C:42:XX:XX:X2@wlan1: connected, signal strength -66, wants bridge
feb/04 08:07:12 wireless,info 00:0C:42:XX:XX:X2@wlan1: disconnected, management-protection failure
feb/04 08:07:39 wireless,info 00:0C:42:XX:XX:X2@wlan1: connected, signal strength -66, wants bridge
feb/04 08:08:55 wireless,info 00:0C:42:XX:XX:X2@wlan1: disconnected, management-protection failure
feb/04 08:09:12 wireless,info 00:0C:42:XX:XX:X2@wlan1: connected, signal strength -64, wants bridge
…
feb/04 16:10:18 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: disconnected, management-protection failure
feb/04 16:10:34 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: connected, signal strength -59
feb/04 16:10:35 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: disconnected, management-protection failure
feb/04 16:10:57 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: connected, signal strength -57
feb/04 16:13:09 wireless,info 00:0C:42:XX:XX:X2@wlan1: disconnected, extensive data loss
feb/04 16:13:23 wireless,info 00:0C:42:XX:XX:X2@wlan1: connected, signal strength -66, wants bridge
feb/04 19:33:15 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: disconnected, management-protection failure
feb/04 19:33:31 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: connected, signal strength -55
…
feb/05 03:17:20 wireless,info 00:0C:42:XX:XX:X2@wlan1: disconnected, extensive data loss
feb/05 03:17:34 wireless,info 00:0C:42:XX:XX:X2@wlan1: connected, signal strength -66, wants bridge
feb/05 03:18:08 wireless,info 00:0C:42:XX:XX:X2@wlan1: disconnected, extensive data loss
feb/05 03:18:25 wireless,info 00:0C:42:XX:XX:X2@wlan1: connected, signal strength -65, wants bridge
feb/05 03:22:19 wireless,info 00:0C:42:XX:XX:X2@wlan1: disconnected, extensive data loss
feb/05 03:22:54 wireless,info 00:0C:42:XX:XX:X2@wlan1: connected, signal strength -67, wants bridge
…
feb/06 03:56:25 wireless,info 00:0C:42:XX:XX:X2@wlan1: disconnected, management-protection failure
…
feb/11 01:31:13 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: disconnected, management-protection failure
feb/11 01:31:27 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: connected, signal strength -59
feb/11 01:32:35 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: disconnected, management-protection failure
feb/11 01:32:49 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: connected, signal strength -60
feb/11 01:34:53 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: disconnected, management-protection failure
feb/11 01:35:06 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: connected, signal strength -63
…
feb/11 22:53:13 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: disconnected, management-protection failure
feb/11 22:53:27 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: connected, signal strength -53
feb/12 00:26:13 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: disconnected, management-protection failure
feb/12 00:26:26 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: connected, signal strength -53
…
feb/13 02:06:49 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: disconnected, management-protection failure
feb/13 02:07:03 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: connected, signal strength -54
…
feb/17 20:26:13 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: disconnected, extensive data loss
feb/17 20:26:14 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: connected, signal strength -57
feb/18 22:56:33 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: disconnected, management-protection failure
feb/18 22:56:48 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: connected, signal strength -54
feb/26 23:10:49 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: disconnected, extensive data loss
feb/26 23:10:56 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: connected, signal strength -57
mar/04 06:41:35 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: disconnected, management-protection failure
mar/04 06:41:49 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: connected, signal strength -54
mar/04 06:42:06 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: disconnected, extensive data loss
mar/04 06:42:13 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: connected, signal strength -55
…
mar/10 06:02:55 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: disconnected, management-protection failure
mar/10 06:03:09 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: connected, signal strength -55
mar/10 06:03:10 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: disconnected, management-protection failure
mar/10 06:03:31 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: connected, signal strength -54
…
mar/13 02:57:25 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: disconnected, management-protection failure
mar/13 02:57:48 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: connected, signal strength -57
mar/13 07:11:47 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: disconnected, management-protection failure
mar/13 07:12:02 wireless,info 4C:5E:0C:XX:XX:X1@wlan1: connected, signal strength -58
*mac address obscured
Example log from one of the clients
…
jun/21 05:48:59 wireless,info 4C:5E:0C:XX:XX:XX@wlan1: lost connection, extensive data loss
jun/21 05:49:14 wireless,info 4C:5E:0C:XX:XX:XX@wlan1: failed to connect, on 5100/20-eeCe/ac, association timeout
jun/21 05:49:27 wireless,info 4C:5E:0C:XX:XX:XX@wlan1 established connection on 5100000, SSID feuer
…
*mac address obscured [was mac of AP]
Export of the AP Configuration:
/interface wireless> export hide-sensitive
mar/18/1970 21:12:31 by RouterOS 6.42.1
software id = -
model = 921UAGS-5SHPacT
serial number = **************
/interface wireless
set [ find default-name=wlan1 ] adaptive-noise-immunity=ap-and-client-mode
ampdu-priorities=0,1,2,3,4,5,6,7 band=5ghz-a/n/ac channel-width=
20/40/80mhz-eeCe country=germany disabled=no frequency=5100 frequency-mode=
superchannel hide-ssid=yes mode=ap-bridge nv2-cell-radius=10 nv2-qos=
frame-priority nv2-security=enabled radio-name=HY-AP-*********
rx-chains=0,1 ssid=feuer tdma-period-size=auto tx-chains=0,1
wireless-protocol=802.11 wps-mode=disabled
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods=“”
management-protection=required mode=dynamic-keys supplicant-identity=
MikroTik
/interface wireless access-list
add ap-tx-limit=100000000 client-tx-limit=3000000 mac-address=4C:5E:0C:85:86:C2
vlan-mode=no-tag
Export of the CL Configuration:
/interface wireless> export hide-sensitive
jun/26/2018 19:44:37 by RouterOS 6.42.1
software id = -
model = 921UAGS-5SHPacT
serial number = ************
/interface wireless
set [ find default-name=wlan1 ] adaptive-noise-immunity=client-mode
ampdu-priorities=0,1,2,3,4,5,6,7 band=5ghz-onlyac channel-width=
20/40/80mhz-eeeC country=germany disabled=no frequency=auto frequency-mode=
superchannel nv2-security=enabled radio-name=HY-CL-*********
rx-chains=0,1,2 scan-list=5100-5320 ssid=feuer tx-chains=0,1,2
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods=“”
management-protection=required mode=dynamic-keys supplicant-identity=
MikroTik
All stations are equal configured and have matching Management protections Keys.
In which situations the message “management-protection failure” gets Triggered ?
does somebody having the same Problems since version 6.35.X ?