mikrotik chateau 5g ax auto disconnect wifi.

Zak00 · September 22, 2023, 4:31am

How to fix Mikrotik Chateau 5g ax Router auto disconnect wifi, I have 3 Apple devices, and after just around 2 minutes from locking them they disconnect, and I have just to tap the screen or unlock the device to keep connected to wifi again.
I have tried to connect with 5GH, 2.4GH WIFI wave same problem.
Updating the router and the lte frameware does not fix it.

I tried many routers before and they all work well.
CPE PRO 5
CPE PRO 2
Greenpacket DH5
My PC Hotspot

I hope you guys can help me.
Thanks,

holvoetn · September 22, 2023, 5:12am

Could be several factors:

wifi frequency used on 5GHz might be too high for your devices → how is it set, which version of ROS do you use ?
security settings used might be incompatible with your devices (e.g. WPA3, some devices still struggle with it)
What Apple devices ? How old ? Which iOS version ?

But we can all guess if we don’t get more info.

Might be easier if you show us your config.
terminal: /export file=anynameyouwish
Move file to pc
Remove serial, obfuscate any public info (wan ip, private keys, passwds, …)
Post contents between code quotes for easier readability.

Zak00 · October 10, 2023, 9:35am

Greetings,

I hope you are doing well.
Sorry for replying late.

ROS 7.11.2 stable

iPhone 13 pro ios 16.5
iPhone X ios 14.3
iPad 7th gen ios 16.7

I have tried WPA, WPA2, WPA3, and I am still having the same issue with my wifi.

This is my config.

# 2023-09-30 09:03:21 by RouterOS 7.11.2
# software id = 85H2-PTEH
#
# model = S53UG+M-5HaxD2HaxD
# 
/interface bridge
add  auto-mac=no comment=defconf name=bridge
/interface lte
set [ find default-name=lte1 ] allow-roaming=no band=3 mtu=1378 network-mode=\
    lte nr-band=""
/interface wifiwave2
set [ find default-name=wifi1 ] channel.band=5ghz-ax .skip-dfs-channels=\
    10min-cac .width=20/40/80mhz configuration.mode=ap .ssid=MikroTik-CD130A \
    disabled=no security.authentication-types=wpa3-psk
set [ find default-name=wifi2 ] channel.band=2ghz-ax .skip-dfs-channels=\
    10min-cac .width=20/40mhz configuration.mode=ap .ssid=MikroTik-CD130B \
    security.authentication-types=wpa2-psk,wpa3-psk
/interface ethernet
set [ find default-name=ether1 ] disabled=yes
set [ find default-name=ether2 ] disabled=yes
set [ find default-name=ether3 ] disabled=yes
set [ find default-name=ether4 ] disabled=yes
set [ find default-name=ether5 ] mtu=1378
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/ip pool
add name=default-dhcp ranges=*********
/ip dhcp-server
add address-pool=default-dhcp interface=bridge lease-time=10m name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether1
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=wifi1
add bridge=bridge comment=defconf interface=wifi2
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=lte1 list=WAN
/ip address
add address=***** comment=defconf interface=bridge network=\
  
/ip dhcp-server network
add address=*****4 comment=defconf dns-server=****** gateway=\
    
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=******1 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
    invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=\
    "defconf: accept to local loopback (for CAPsMAN)" dst-address=*****
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
    in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
    ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
    ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
    connection-state=established,related hw-offload=yes
add action=accept chain=forward comment=\
    "defconf: accept established,related, untracked" connection-state=\
    established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
    connection-state=invalid
add action=drop chain=forward comment=\
    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
    connection-state=new in-interface-list=WAN

Zak00 · October 10, 2023, 9:37am

I reset the router and try different passwords and still getting the same issue.

I hope someone could help me with this.

Colm · October 10, 2023, 1:53pm

I have not had this specific problem ever so I am sorry I do not have a clean solution. But maybe just some ideas.

“/log print” → might give you some useful information

If you know how to use wireshark and have a wifi card you can put in monitor/promiscuous mode, you might get some clues. RouterOS can sniff packets, but I’m not proficient at that way.

If you disable all wifi encryption (i.e. open network), does it still kick clients off?

How crowded are the airwaves around you? Do you live in an area with a lot of other wifi networks interfering?

Try just getting one wifi antenna to work at a time. Disable the 5Ghz and just try to get 2.4Ghz working. Once you have one working, then try to enable to other wifi.

Is it the same time-out interval for all devices? Have you measured the time with a stop watch and is it pretty consistent? I ask because I think the default keepalive time is 2 minutes (at least on some versions of RouterOS) so maybe you could experiment with increasing that.

Here is my config on my Chateau (LTE), ROS 7.11:

set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX country="united states" disabled=no distance=indoors frequency=auto installation=indoor mode=ap-bridge ssid=2GHz wireless-protocol=802.11 \
    wps-mode=disabled

I noticed that your setting is ‘configuration.mode=ap’ and mine is ‘mode=ap-bridge’, not sure if that is a clue or not but either ‘ap’ is shorthand for ‘ap-bridge’ or you could look for a different ‘ap-bridge’ mode.

Good luck, post about how it goes.

gigabyte091 · October 10, 2023, 2:36pm

You are probably using legacy wifi drivers while OP uses wifiwave2 drivers.

For OP, skip all dfs channels, set your frequency manually, don’t leave it on auto. Choose channel with least amount of interference.

What your log say when device disconnects ?

Colm · October 10, 2023, 2:48pm

And to OP, don’t forget you can add a logging rule for “wireless” under system->logging->rules->add (in winbox)

or in terminal,

/system/logging/add action=memory topics=wireless

(but maybe you already know this)

Zak00 · October 10, 2023, 3:06pm

I really appreciate you guys your help, but I’m a beginner and I don’t know much. What is the OP?
I could show you my configuration through images PNG on Telegram.

user name: elnino_zak_1

gigabyte091 · October 10, 2023, 4:43pm

You are OP post pictures here so if there is somebody with same problem can see possible solution.

holvoetn · October 10, 2023, 4:48pm

OP = original poster

gigabyte091 · October 10, 2023, 4:52pm

He is not OP ? I didn’t see that… sorry…

Zak00 · October 10, 2023, 8:11pm

This is my Wi-Fi configuration. I tried to disable the 5Ghz and just tried to get 2.4Ghz working and the opposite. still maybe between 2-6 minutes all my devices got disconnected.
Screenshot (141).png
Screenshot (140).png
Screenshot (139).png
Screenshot (138).png
Screenshot (137).png
Screenshot (136).png
Screenshot (135).png
Screenshot (134).png
Screenshot (133).png
Screenshot (131).png
Screenshot (132).png
Screenshot (130).png