Legacy wifi client does not connect to AX AP

kkthnxbb · September 27, 2024, 9:04pm

Hi, i got some weird issue regarding viesmann device, i got AX devices in home, but outside i got RBwAPG-5HacD2HnD what runs as AC AP. AX devices are controlled with wifiwave2 and AC with capsman. Configuration is the same, but viesmann device does not connect to AX AP, in this case it does not even try. Did try to change config, but it didnt help. I know AX should be backwards compatible, but it does not. Currently it automatically connects to outdoor AC AP, at least it works, but if i will upgrade it i will not be able to manage viesmann device due to this issue. Could it be that im missing something? Device should connect to 2.4 Ghz network, config are the same as wifi/capsman.

Coughy · September 28, 2024, 5:56am

you need to share your config file m8 so we all can look at it to help

mkx · September 28, 2024, 10:47am

While ax APs are (in principle) backwards compatible, some legacy station devices are not forward compatible.

Some modern features which seem to freak out legacy clients (even to the point they even don’t want to try to connect to modern AP):

WPA-3 security
ax standard
FT and any other mobility feature from 802.11 r/k/v heap
etc.

Sometimes it helps to create a virtual AP with only basic features enabled. I’m not sure it’s possible to create virtual AP without ax support over physical AP with ax enabled though.

Anyway, you’ll have to experiment with settings to see what bothers your “viesmann” that much.

kkthnxbb · September 29, 2024, 3:12pm

Apollogies, here is the config for 2.4 its very basic, i did test out to switch ax on 2.4ghz to ac mode, specific host did try to connect, got IP from dhcp and after that disconnected and it goes in neverending loop. At this point for 1 device i dont want to downgrade protocol if its working, but i guess need to figure out root cause first. Also about virtual AP, im not sure if that will work if there is mixed AN/AX.

Config is for capsman, where host is connected to outdoor.
Config is for indoor AX APs where host is not even trying to connect.

# 2024-09-29 18:02:51 by RouterOS 7.16
# software id = FBZD-EGYZ
#
# model = CRS328-24P-4S+
# serial number = HE808TKXKH9
/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm name=Nexus
add authentication-types=wpa-psk,wpa2-psk encryption=\
    aes-ccm name=Sizmo
/caps-man access-list
add action=reject allow-signal-out-of-range=10s disabled=no mac-address=\
    68:67:25:36:30:BE ssid-regexp=""
add action=reject allow-signal-out-of-range=10s disabled=no mac-address=\
    90:38:0C:70:50:D8 ssid-regexp=""
add action=accept allow-signal-out-of-range=10s disabled=no mac-address=\
    B8:74:24:37:4D:46 ssid-regexp=""
add action=accept allow-signal-out-of-range=10s disabled=no signal-range=\
    -70..120 ssid-regexp=""
add action=reject allow-signal-out-of-range=10s disabled=no ssid-regexp=""
/caps-man configuration
add channel.band=5ghz-a/n/ac .save-selected=no country=latvia datapath=\
    CAP5G_wifi_vlan_102 installation=indoor mode=ap multicast-helper=full \
    name=CAP5G_wifi_vlan_102 security=Nexus ssid=Nexus
add channel.band=2ghz-b/g/n country=latvia datapath=CAP2G_wifi_vlan_103 \
    hide-ssid=no installation=indoor mode=ap multicast-helper=full name=\
    CAP2G_wifi_vlan_103 security=Sizmo ssid=Sizmo
/caps-man datapath
add bridge=bridge_lan client-to-client-forwarding=yes local-forwarding=no \
    name=CAP2G_wifi_vlan_102 vlan-id=102 vlan-mode=use-tag
add bridge=bridge_lan client-to-client-forwarding=yes local-forwarding=no \
    name=CAP5G_wifi_vlan_102 vlan-id=102 vlan-mode=use-tag
add bridge=bridge_lan client-to-client-forwarding=no local-forwarding=no \
    name=CAP2G_wifi_vlan_103 vlan-id=103 vlan-mode=use-tag
add bridge=bridge_lan client-to-client-forwarding=no local-forwarding=no \
    name=CAP5G_wifi_vlan_103 vlan-id=103 vlan-mode=use-tag
/caps-man interface
add configuration=CAP2G_wifi_vlan_103 disabled=no l2mtu=1600 mac-address=\
    2C:C8:1B:6A:BD:60 master-interface=none name=2G-VG_W_OUT-1 radio-mac=\
    2C:C8:1B:6A:BD:60 radio-name=2CC81B6ABD60
add configuration=CAP5G_wifi_vlan_102 disabled=no l2mtu=1600 mac-address=\
    2C:C8:1B:6A:BD:61 master-interface=none name=5G_-VG_W_OUT-1 radio-mac=\
    2C:C8:1B:6A:BD:61 radio-name=2CC81B6ABD61
/caps-man manager
set ca-certificate=auto certificate=auto enabled=yes
/caps-man manager interface
set [ find default=yes ] forbid=yes
add disabled=no interface=bridge_lan
/caps-man provisioning
add action=create-enabled hw-supported-modes=gn master-configuration=\
    CAP2G_wifi_vlan_103 name-format=prefix-identity name-prefix=2G
add action=create-enabled hw-supported-modes=ac master-configuration=\
    CAP5G_wifi_vlan_102 name-format=prefix-identity name-prefix=5G_


# 2024-09-29 18:02:52 by RouterOS 7.16
# software id = FBZD-EGYZ
#
# model = CRS328-24P-4S+
# serial number = HE808TKXKH9
/interface wifi channel
add band=2ghz-ax disabled=no name=2ghz skip-dfs-channels=10min-cac width=\
    20/40mhz
add band=5ghz-ax disabled=no name=5ghz skip-dfs-channels=10min-cac width=\
    20/40/80mhz
/interface wifi security
add authentication-types=wpa-psk,wpa2-psk disable-pmkid=\
    no disabled=no ft=yes name=Sizmo
add authentication-types=wpa2-psk,wpa3-psk disable-pmkid=yes disabled=no ft=\
    yes group-encryption=ccmp group-key-update=40m management-protection=\
    allowed name=Nexus
/interface wifi
add configuration=2Sizmo disabled=no name=2G-VG_W_GIST radio-mac=\
    78:9A:18:27:CF:7D
add configuration=2Sizmo disabled=no name=2G-VG_W_JIST radio-mac=\
    78:9A:18:27:CC:D5
add configuration=2Sizmo disabled=no name=2G-VG_W_MAIST radio-mac=\
    F4:1E:57:12:39:26
add configuration=2Sizmo disabled=no name=2G-VG_W_VID radio-mac=\
    78:9A:18:0A:3A:40
add configuration=2Sizmo disabled=no name=2G-VG_W_VIST radio-mac=\
    78:9A:18:0A:3A:39
/interface wifi capsman
set ca-certificate=auto certificate=auto enabled=yes interfaces=bridge_lan \
    package-path="" require-peer-certificate=no upgrade-policy=none
/interface wifi configuration
add channel=2ghz country=Latvia datapath=VLAN103 disabled=no mode=ap name=\
    2Sizmo security=Sizmo security.ft=yes ssid=Sizmo
add channel=5ghz country=Latvia datapath=VLAN102 disabled=no mode=ap name=\
    5Nexus security=Nexus security.authentication-types=wpa2-psk,wpa3-psk \
    .disable-pmkid=yes ssid=Nexus
/interface wifi datapath
add bridge=bridge_lan disabled=no name=VLAN102 vlan-id=102
add bridge=bridge_lan client-isolation=yes disabled=no name=VLAN103 vlan-id=\
    103
/interface wifi provisioning
add action=create-enabled disabled=no master-configuration=2Sizmo \
    name-format=2G-%I supported-bands=2ghz-ax
add action=create-dynamic-enabled disabled=no master-configuration=5Nexus \
    name-format=5G-%I supported-bands=5ghz-ax

erlinden · September 29, 2024, 4:09pm

Wpa-psk is not safe, betternot iuse it (opr use no encryption at all.
Probably (my best guess) is the 40MHz bandwidth, the entire bandwidth of 2.4GHz band is…40MHz. Not sure if that is configured in the CAPsMAN…Reconsider using encryption and bandwidth.

kkthnxbb · September 29, 2024, 8:50pm

WPA was for compatibility for old device what is no longer in use, but thanks for reminding me. Did turn it off, leaving only WAP2 adjusted to 20hz.Did disable outdoor AP and tested out that viesmann now connects, but behaver is weird, connect-disconnect-connect-disconnect-connect-assign ip-deassign ip-disconnect-connect-… Did enable extra debugging, but log much the same.

 23:36:11 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID disconnected, connection lost, signal strength -33
 23:36:11 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID disassociated, connection lost, signal strength -33
 23:36:11 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID associated, signal strength -38
 23:36:11 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID connected, signal strength -38
 23:36:12 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID disconnected, connection lost, signal strength -38
 23:36:12 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID disassociated, connection lost, signal strength -38
 23:36:12 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID associated, signal strength -37
 23:36:12 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID connected, signal strength -37
 23:36:13 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID disconnected, connection lost, signal strength -33
 23:36:13 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID disassociated, connection lost, signal strength -33
 23:36:13 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID associated, signal strength -37
 23:36:13 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID connected, signal strength -37
 23:36:14 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID disconnected, connection lost, signal strength -37
 23:36:14 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID disassociated, connection lost, signal strength -37
 23:36:14 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID associated, signal strength -37
 23:36:14 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID connected, signal strength -37
 23:36:15 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID disconnected, connection lost, signal strength -37
 23:36:15 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID disassociated, connection lost, signal strength -37
 23:36:15 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID associated, signal strength -38
 23:36:15 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID connected, signal strength -38
 23:36:17 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID disconnected, connection lost, signal strength -33
 23:36:17 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID disassociated, connection lost, signal strength -33
 23:36:17 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID associated, signal strength -37
 23:36:17 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID connected, signal strength -37
 23:36:18 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID disconnected, connection lost, signal strength -37
 23:36:18 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID disassociated, connection lost, signal strength -37
 23:36:18 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID associated, signal strength -37
 23:36:18 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID connected, signal strength -37
 23:36:20 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID disconnected, connection lost, signal strength -33
 23:36:20 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID disassociated, connection lost, signal strength -33
 23:36:20 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID associated, signal strength -37
 23:36:20 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID connected, signal strength -37
 23:36:21 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID disconnected, connection lost, signal strength -37
 23:36:21 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID disassociated, connection lost, signal strength -37
 23:36:21 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID associated, signal strength -37
 23:36:21 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID connected, signal strength -37
 23:36:22 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID disconnected, connection lost, signal strength -33
 23:36:22 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID disassociated, connection lost, signal strength -33
 23:36:22 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID associated, signal strength -37
 23:36:22 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID connected, signal strength -37
 23:36:23 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID disconnected, connection lost, signal strength -37
 23:36:23 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID disassociated, connection lost, signal strength -37
 23:36:23 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID associated, signal strength -37
 23:36:23 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID connected, signal strength -37
 23:36:25 dhcp,info dhcp103 deassigned 10.10.3.103 for B8:74:24:37:4D:46 Viessmann-0233
 23:36:25 dhcp,info dhcp103 assigned 10.10.3.103 for B8:74:24:37:4D:46 Viessmann-0233
 23:36:25 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID disconnected, connection lost, signal strength -37
 23:36:25 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID disassociated, connection lost, signal strength -37
 23:36:25 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID associated, signal strength -37
 23:36:25 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID connected, signal strength -37
 23:36:26 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID disconnected, connection lost, signal strength -37
 23:36:26 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID disassociated, connection lost, signal strength -37
 23:36:26 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID associated, signal strength -37
 23:36:26 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID connected, signal strength -37
 23:36:28 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID disconnected, connection lost, signal strength -37
 23:36:28 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID disassociated, connection lost, signal strength -37
 23:36:28 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID associated, signal strength -37
 23:36:28 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID connected, signal strength -37
 23:36:29 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID disconnected, connection lost, signal strength -37
 23:36:29 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID disassociated, connection lost, signal strength -37
 23:36:29 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID associated, signal strength -37
 23:36:29 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID connected, signal strength -37
 23:36:31 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID disconnected, connection lost, signal strength -37
 23:36:31 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID disassociated, connection lost, signal strength -37
 23:36:31 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID associated, signal strength -37
 23:36:31 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID connected, signal strength -37
 23:36:32 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID disconnected, connection lost, signal strength -37
 23:36:32 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID disassociated, connection lost, signal strength -37
 23:36:32 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID associated, signal strength -37
 23:36:32 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID connected, signal strength -37
 23:36:34 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID disconnected, connection lost, signal strength -37
 23:36:34 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID disassociated, connection lost, signal strength -37
 23:36:34 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID associated, signal strength -37
 23:36:34 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID connected, signal strength -37
 23:36:35 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID disconnected, connection lost, signal strength -37
 23:36:35 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID disassociated, connection lost, signal strength -37
 23:36:35 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID associated, signal strength -37
 23:36:35 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID connected, signal strength -37
 23:36:36 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID disconnected, connection lost, signal strength -37
 23:36:36 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID disassociated, connection lost, signal strength -37
 23:36:36 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID associated, signal strength -37
 23:36:36 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID connected, signal strength -37
 23:36:38 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID disconnected, connection lost, signal strength -33
 23:36:38 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID disassociated, connection lost, signal strength -33
 23:36:38 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID associated, signal strength -37
 23:36:38 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID connected, signal strength -37
 23:36:39 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID disconnected, connection lost, signal strength -37
 23:36:39 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID disassociated, connection lost, signal strength -37
 23:36:39 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID associated, signal strength -37
 23:36:39 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID connected, signal strength -37
 23:36:41 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID disconnected, connection lost, signal strength -33
 23:36:41 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID disassociated, connection lost, signal strength -33
 23:36:41 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID associated, signal strength -37
 23:36:41 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID connected, signal strength -37
 23:36:42 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID disconnected, connection lost, signal strength -37
 23:36:42 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID disassociated, connection lost, signal strength -37
 23:36:42 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID associated, signal strength -37
 23:36:43 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID connected, signal strength -37
 23:36:43 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID disconnected, connection lost, signal strength -37
 23:36:43 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID disassociated, connection lost, signal strength -37
 23:36:43 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID associated, signal strength -37
 23:36:43 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID connected, signal strength -33
 23:36:44 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID disconnected, connection lost, signal strength -33
 23:36:44 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID disassociated, connection lost, signal strength -33
 23:36:44 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID associated, signal strength -37
 23:36:44 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID connected, signal strength -37
 23:36:45 wireless,info B8:74:24:37:4D:46@2G-VG_W_VID disconnected, connection lost, signal strength -37
 23:36:45 wireless,debug B8:74:24:37:4D:46@2G-VG_W_VID disassociated, connection lost, signal strength -37
 23:37:11 interface,info 2G-VG_W_OUT-1 detect LAN
 23:37:13 dhcp,info dhcp103 deassigned 10.10.3.103 for B8:74:24:37:4D:46 Viessmann-0233
 23:37:13 dhcp,info dhcp103 assigned 10.10.3.103 for B8:74:24:37:4D:46 Viessmann-0233
 23:45:44 wireless,info 50:EC:50:12:66:E0@2G-VG_W_VID disconnected, connection lost, signal strength -58
 23:45:44 wireless,debug 50:EC:50:12:66:E0@2G-VG_W_VID disassociated, connection lost, signal strength -58

kkthnxbb · October 27, 2024, 10:49pm

Issue still persist, any thoughts?

infabo · October 27, 2024, 11:32pm

Try with ft=no.

erlinden · October 28, 2024, 8:02am

Agree with @infabo.

Can you also change

/interface wifi channel add band=2ghz-ax disabled=no name=2ghz skip-dfs-channels=10min-cac width=20/40mhz

to

/interface wifi channel add disabled=no name=2ghz frequency=2412,2437,2462 width=20mhz