I am running 6.41 on all of the hAP units in an apartment complex. Devices that usually can connect to the 2.4 suddenly aren’t able to.
The problem is only fixed in one of 2 ways, 1. restart the router. 2. disable and re-enable the 2.4 interface. There is nothing else that brings back the ability for any device to connect to the 2.4
Running 20mhz channels on a fixed channel. channels 1,6,and 11 all have this same issue.
Please help. Everyone is complaining about the internet never working.
get on bug fix, no issues at all on my side
Export your configuration (pasting it between forum code tags) from this command:
/export compact hide-sensitive file=MyFile.rsc
The output will be under your “Files” option in the GUI.
Here is an example config you should be using. Set the channels to be what is best for your area, naturally.
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-g/n country="united states3" disabled=no distance=indoors frequency=auto frequency-mode=regulatory-domain mode=ap-bridge ssid=MYSSID wireless-protocol=802.11 wps-mode=disabled
set [ find default-name=wlan2 ] band=5ghz-a/n/ac country="united states3" channel-width=20/40mhz-Ce disabled=no distance=indoors frequency=5220 frequency-mode=regulatory-domain mode=ap-bridge ssid=MYSSID wireless-protocol=802.11 wps-mode=disabled
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" group-key-update=1h management-protection=allowed mode=dynamic-keys supplicant-identity=MikroTik
Yeah, “upgraded” all the routers to 6.39.3 and still see this issue.
Here, as requested. This particular router had an issue again today. simply disabling the 2.4 and reenabling it allowed clients to connect(otherwise it just sits there broadcasting without any chance to reconnect). We have deployed about 12 of these routers and i’d say >80% have had this issue.
# feb/10/2018 22:31:51 by RouterOS 6.39.3
# software id = W2GW-TGPY
#
/interface bridge
add admin-mac=64:D1:54:B4:06:79 auto-mac=no comment=defconf name=bridge
/interface ethernet
set [ find default-name=ether2 ] name=ether2-master
/ip neighbor discovery
set ether1 discover=no
/interface list
add name=discover
add name=mactel
add name=mac-winbox
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa-psk,wpa2-psk eap-methods="" \
management-protection=allowed mode=dynamic-keys name=21 \
supplicant-identity=""
add authentication-types=wpa-psk,wpa2-psk eap-methods="" \
management-protection=allowed mode=dynamic-keys name=19 \
supplicant-identity=""
add authentication-types=wpa-psk,wpa2-psk eap-methods="" \
management-protection=allowed mode=dynamic-keys name=23 \
supplicant-identity=""
add authentication-types=wpa-psk,wpa2-psk eap-methods="" \
management-protection=allowed mode=dynamic-keys name=profile21 \
supplicant-identity=""
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-g/n basic-rates-a/g=\
9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps basic-rates-b="" \
disabled=no distance=indoors ht-basic-mcs=\
mcs-2,mcs-3,mcs-4,mcs-5,mcs-6,mcs-7 ht-supported-mcs="mcs-2,mcs-3,mcs-4,mc\
s-5,mcs-6,mcs-7,mcs-8,mcs-9,mcs-10,mcs-11,mcs-12,mcs-13,mcs-14,mcs-15,mcs-\
16,mcs-17,mcs-18,mcs-19,mcs-20,mcs-21,mcs-22,mcs-23" mode=ap-bridge \
rate-set=configured security-profile=19 ssid="Wi-Fiber #19" \
supported-rates-a/g=9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps \
supported-rates-b="" tx-power=13 tx-power-mode=all-rates-fixed \
wireless-protocol=802.11 wps-mode=disabled
set [ find default-name=wlan2 ] band=5ghz-a/n/ac basic-rates-a/g=\
9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps disabled=no distance=\
indoors ht-basic-mcs=mcs-2,mcs-3,mcs-4,mcs-5,mcs-6,mcs-7 \
ht-supported-mcs="mcs-2,mcs-3,mcs-4,mcs-5,mcs-6,mcs-7,mcs-8,mcs-9,mcs-10,m\
cs-11,mcs-12,mcs-13,mcs-14,mcs-15,mcs-16,mcs-17,mcs-18,mcs-19,mcs-20,mcs-2\
1,mcs-22,mcs-23" mode=ap-bridge rate-set=configured security-profile=21 \
ssid="Wi-Fiber Fast #21" supported-rates-a/g=\
9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps tx-power=14 \
tx-power-mode=all-rates-fixed wireless-protocol=802.11 wps-mode=disabled
add disabled=no keepalive-frames=disabled mac-address=66:D1:54:B4:06:7E \
master-interface=wlan1 multicast-buffering=disabled name=wlan3 \
security-profile=23 ssid="Wi-Fiber # 23" wds-cost-range=0 \
wds-default-cost=0 wps-mode=disabled
add disabled=no keepalive-frames=disabled mac-address=66:D1:54:B4:06:7F \
master-interface=wlan1 multicast-buffering=disabled name=wlan4 \
security-profile=profile21 ssid="Wi-Fiber #21" wds-cost-range=0 \
wds-default-cost=0 wps-mode=disabled
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/interface bridge port
add bridge=bridge comment=defconf interface=ether2-master
add bridge=bridge comment=defconf interface=sfp1
add bridge=bridge comment=defconf interface=wlan1
add bridge=bridge comment=defconf interface=wlan2
add bridge=bridge interface=ether3
add bridge=bridge interface=ether4
add bridge=bridge interface=ether5
add bridge=bridge interface=wlan3
add bridge=bridge interface=wlan4
add bridge=bridge interface=ether1
/interface list member
add interface=ether2-master list=discover
add interface=ether3 list=discover
add interface=ether4 list=discover
add interface=ether5 list=discover
add interface=sfp1 list=discover
add interface=wlan1 list=discover
add interface=wlan2 list=discover
add interface=bridge list=discover
add interface=bridge list=mactel
add interface=bridge list=mac-winbox
/ip arp
add address=192.168.21.248 interface=bridge mac-address=90:48:9A:AB:16:2D
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=bridge
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router
/ip firewall filter
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept established,related" \
connection-state=established,related
add action=drop chain=input comment="defconf: drop all from WAN" disabled=yes \
in-interface=ether1
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related" \
connection-state=established,related
add action=drop chain=forward comment="defconf: drop invalid" \
connection-state=invalid disabled=yes
add action=drop chain=forward comment=\
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new disabled=yes in-interface=ether1
/ip firewall nat
# in/out-interface matcher not possible when interface (ether1) is slave - use master instead (bridge)
add action=masquerade chain=srcnat comment="defconf: masquerade" \
out-interface=ether1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ip upnp interfaces
add interface=ether1 type=external
add interface=bridge type=internal
/system clock
set time-zone-name=Europe/Paris
/system identity
set name=D_APT#21
/system package update
set channel=bugfix
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=bridge
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=bridge
This is another unit that has the exact same issue… I will disable the 2.4, and reenabling allows the computers to actually connect.
# feb/10/2018 22:44:04 by RouterOS 6.39.3
# software id = YDL5-L9HR
#
/interface bridge
add admin-mac=64:D1:54:B4:04:B1 auto-mac=no comment=defconf name=bridge
/interface ethernet
set [ find default-name=ether2 ] name=ether2-master
/ip neighbor discovery
set ether1 discover=no
/interface list
add name=discover
add name=mactel
add name=mac-winbox
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa-psk,wpa2-psk eap-methods="" \
management-protection=allowed mode=dynamic-keys name=20 \
supplicant-identity=""
add authentication-types=wpa-psk,wpa2-psk eap-methods="" mode=dynamic-keys \
name=20.2 supplicant-identity=D_APT#20
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-g/n basic-rates-b="" disabled=no \
distance=indoors mode=ap-bridge security-profile=20.2 ssid="Wi-Fiber #20" \
supported-rates-b="" wireless-protocol=802.11
set [ find default-name=wlan2 ] band=5ghz-a/n/ac disabled=no distance=indoors \
mode=ap-bridge security-profile=20 ssid="Wi-Fiber Fast #20" tx-power=13 \
tx-power-mode=all-rates-fixed wireless-protocol=802.11 wps-mode=disabled
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp interface=bridge name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2-master
add bridge=bridge comment=defconf interface=sfp1
add bridge=bridge comment=defconf interface=wlan1
add bridge=bridge comment=defconf interface=wlan2
add bridge=bridge interface=ether3
add bridge=bridge interface=ether4
add bridge=bridge interface=ether5
add bridge=bridge interface=ether1
add
/interface list member
add interface=ether2-master list=discover
add interface=ether3 list=discover
add interface=ether4 list=discover
add interface=ether5 list=discover
add interface=sfp1 list=discover
add interface=wlan1 list=discover
add interface=wlan2 list=discover
add interface=bridge list=discover
add interface=bridge list=mactel
add interface=bridge list=mac-winbox
/ip address
add address=192.168.88.1/24 comment=defconf disabled=yes interface=bridge \
network=192.168.88.0
add address=192.168.20.254/24 disabled=yes interface=ether1 network=\
192.168.20.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no interface=\
bridge
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router
/ip firewall filter
add action=accept chain=input comment="defconf: accept ICMP" disabled=yes \
protocol=icmp
add action=accept chain=input comment="defconf: accept established,related" \
connection-state=established,related disabled=yes
add action=drop chain=input comment="defconf: drop all from WAN" disabled=yes \
in-interface=ether1
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related disabled=yes
add action=accept chain=forward comment="defconf: accept established,related" \
connection-state=established,related disabled=yes
add action=drop chain=forward comment="defconf: drop invalid" \
connection-state=invalid disabled=yes
add action=drop chain=forward comment=\
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new disabled=yes in-interface=ether1
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" disabled=yes \
out-interface=ether1
/ip route
add disabled=yes distance=1 gateway=ether1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ip upnp
set enabled=yes
/ip upnp interfaces
add disabled=yes interface=ether1 type=external
add disabled=yes interface=bridge type=internal
/ipv6 dhcp-client
add add-default-route=yes interface=bridge request=address
/system clock
set time-zone-name=Europe/Paris
/system identity
set name=D_APT#20
/system package update
set channel=bugfix
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=bridge
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=bridge
curious as to what your logs are saying when the users cannot connect. I am running a HapAC and two WapAC with 0 issues. I use capsman local breakout running off the HapAC getting about 200-300mbit over 5ghz and about 40mbit on the 2.4
caps-man channel print
0 name="CH1" frequency=2412 control-channel-width=20mhz band=2ghz-g/n
extension-channel=disabled tx-power=25
1 name="CH2" frequency=2417 control-channel-width=20mhz band=2ghz-b/g/n
extension-channel=disabled tx-power=25
2 name="CH3" frequency=2422 control-channel-width=20mhz band=2ghz-b/g/n
extension-channel=disabled tx-power=25
3 name="CH4" frequency=2427 control-channel-width=20mhz band=2ghz-b/g/n
extension-channel=disabled tx-power=25
4 name="CH5" frequency=2432 control-channel-width=20mhz band=2ghz-b/g/n
extension-channel=disabled tx-power=25
5 name="CH6" frequency=2437 control-channel-width=20mhz band=2ghz-g/n
extension-channel=disabled tx-power=25
6 name="CH7" frequency=2442 control-channel-width=20mhz band=2ghz-b/g/n
extension-channel=disabled tx-power=25
7 name="CH8" frequency=2447 control-channel-width=20mhz band=2ghz-b/g/n
extension-channel=disabled tx-power=25
8 name="CH9" frequency=2452 control-channel-width=20mhz band=2ghz-b/g/n
extension-channel=disabled tx-power=25
9 name="CH10" frequency=2457 control-channel-width=20mhz band=2ghz-b/g/n
extension-channel=disabled tx-power=25
10 name="CH11" frequency=2462 control-channel-width=20mhz band=2ghz-g/n
extension-channel=disabled tx-power=25
11 name="CH36" frequency=5180 control-channel-width=20mhz band=5ghz-a/n/ac
extension-channel=Ceee tx-power=25
12 name="CH40" frequency=5200 band=5ghz-a/n/ac
13 name="CH44" frequency=5220 band=5ghz-a/n/ac
14 name="CH48" frequency=5240 band=5ghz-a/n/ac
15 name="CH149" frequency=5745 control-channel-width=20mhz band=5ghz-a/n/ac
extension-channel=Ceee tx-power=25
16 name="CH153" frequency=5765 band=5ghz-a/n/ac
17 name="CH157" frequency=5785 band=5ghz-a/n/ac
18 name="CH161" frequency=5805 band=5ghz-a/n/ac
My caps config is pretty much defaults except for multicast helper set to full and keepalive frames disabled.
caps-man security print
0 name="test" authentication-types=wpa2-psk encryption=aes-ccm passphrase="test"