Mk HAP ac² and wifi card compatibility issue with Lubuntu?

RouterOS Wireless Networking
1

Hi,

I have been trying to connect an Acer Aspire 5920-3A2G16Mi - with Lubuntu 22.04 installed on it as a OS - to my Mk HAP ac² via wifi (2.4Ghz).
It seems to be working at the very beginning since the laptop sees the MK wifi signal, and asks me to type the WPA2 wifi password in, but after that I keep getting
“lost connection” messages.
I then tried to connect it to another AP (a tp-link device) which in turn is connected to my Mk HAP ac², and the laptop gets wifi connection this time without any issue.

So, does anyone know if there can be any wifi compatibility issue with MK devices and pc/laptop wifi cards running linux OS distros?
I tried with another distro as well, (mx-linux) and got the same problem.

Thanks

2

Best to post config of your device, probably a configuration issue.

terminal
/export hide-sensitive file=anynameyouwish
Review file for sensitive remaining info (Serial numbers, public IP, secret keys, …) and hide those.
Then post contents between [__code] quotes.

3

Would the wifi config only be ok?
I don’t have wifi issue with other windows devices.

Thanks

4

We’ll see how far we can get.

5 



# model = RBD52G-5HacD2HnD
# serial number = BEEB0BXXXXX
/interface bridge
add admin-mac=C4:XX:XX:XX:E7:XX auto-mac=no comment=defconf name=bridge
add name=bridge-guest
/interface ethernet
set [ find default-name=ether1 ] comment=PC
set [ find default-name=ether2 ] comment=Ubuntu
set [ find default-name=ether3 ] comment=Guest-TV
set [ find default-name=ether4 ] comment=Proxmox
set [ find default-name=ether5 ] comment=WAN2 name=ether5_WAN2
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk eap-methods="" management-protection=allowed mode=dynamic-keys name="wan wifi" supplicant-identity=\
    "" wpa2-pre-shared-key=xxxxx18x
add authentication-types=wpa-psk,wpa2-psk eap-methods="" management-protection=allowed mode=dynamic-keys name="wifi int" \
    supplicant-identity="" wpa-pre-shared-key=xxxxxxx1 wpa2-pre-shared-key=xxxxxxx1
add authentication-types=wpa2-psk eap-methods="" management-protection=allowed mode=dynamic-keys name="WAN WiFi VD" \
    supplicant-identity="" wpa2-pre-shared-key=xxxxxxxxa1
add authentication-types=wpa2-psk eap-methods="" management-protection=allowed mode=dynamic-keys name="wifi 5Ghz" supplicant-identity=\
    "" wpa2-pre-shared-key=xxxxxxxxx
add authentication-types=wpa-psk,wpa2-psk eap-methods="" management-protection=allowed mode=dynamic-keys name=motox \
    supplicant-identity="" wpa-pre-shared-key=xxxxx6 wpa2-pre-shared-key=xxxxxx6
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-onlyn channel-width=20/40mhz-Ce comment=WAN1 country=france disabled=no installation=indoor \
    keepalive-frames=disabled multicast-buffering=disabled name=wlan1_WAN1 security-profile="WAN WiFi VOD" ssid=Voda-8 \
    wds-default-bridge=bridge wds-mode=dynamic wireless-protocol=802.11 wmm-support=enabled
set [ find default-name=wlan2 ] band=5ghz-a/n country=france frequency=5220 installation=indoor mode=ap-bridge security-profile=\
    "wifi 5Ghz" ssid=MK5 station-roaming=enabled wmm-support=enabled wps-mode=disabled
add disabled=no keepalive-frames=disabled mac-address=XX:XX:34:34:XX:XX master-interface=wlan1_WAN1 multicast-buffering=disabled name=\
    wlan3 security-profile="wifi int" ssid=MK2 station-roaming=enabled wds-cost-range=0 wds-default-bridge=bridge \
    wds-default-cost=0 wds-mode=dynamic wmm-support=enabled wps-mode=disabled
/interface wireless manual-tx-power-table
set wlan1_WAN1 comment=WAN1
/interface wireless nstreme
set wlan1_WAN1 comment=WAN1
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=wlan2
add bridge=bridge interface=ether1
add bridge=bridge-guest interface=ether3
add bridge=bridge interface=wlan3
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=wlan1_WAN1 list=WAN
/interface ovpn-server server
set auth=sha1 certificate=mikrotik cipher=aes256 default-profile=ovpn enabled=yes port=1195

I tried to connect to MK2 (on wlan3 a virtual one)

Thanks

6

Bit of a mess…can you please explain how this hAP ac2 is supposed to work? Then we can start from there, And would love to see the logging on the RB.

Besides:

In your case I would reset the RB, without configuration and then choose “HomeAP dual” from the Quickset. Get rid of WPA (choose WPA2-AES only) and continue from there.
Tip: never touch Quickset after primary config.

7

Well, it works as expected nonetheless


Then we can start from there, And would love to see the logging on the RB.

Besides:

  • Why is there a second bridge (I prefer to use VLAN: > Using RouterOS to VLAN your network )?
  • Why are there address lists (there is no firewall)?
  • Why are there (so) many security profiles?
  • Why set 40MHz bandwidth on 2.4GHz radio (you know it will interfere)?
  • Why didn't you set wireless-protocol on the 5GHz radio?


\

  1. I'm going to use VLANs maybe when I buy another MK device, or a VLAN capable switch. Besides, many don't like use VLANs for security reasons (not my case though), and it wouldn't make any sense in my case. It would be overkilled.
  2. ?? off topic
  3. ?? off topic
  4. Interfere? How? I didn't notice any problem before.
  5. What? Off topic anyway.



In your case I would reset the RB, without configuration and then choose "HomeAP dual" from the Quickset. Get rid of WPA (choose WPA2-AES only) and continue from there.
Tip: never touch Quickset after primary config.


Resetting my RB just to make ONE old device's wifi card (or whatever) work (which even is not mine)? Are you serious? No way! Tons of setup there:

  • Port forwarding for a few services running on my server,
  • OpenVPN
  • WAN recursive failover (which works like charm and I DO need it!)
  • script to switch to different DNS servers in case the primary one goes occasionaly down
  • subnet isolation

and a few others I even don't remember at the moment (yes, this might be a problem really :smiley: )

Come on, dude! I know that my mk device doean't have a state-of-the-art, perfect setup, and it can look a bit messy, but everything does its dirty job.
I'll maybe reset it when I switch to a stable , reliable V7 OS.

Thanks

8

Okay, so it turns out you didn’t share your complete config. That explains a lot.
Getting offended by someone making time to give feedback on your config. Well…in the end…it is your problem, isn’t it!?

Ontopic: Yes, there are devices that can’t handle 40MHz on 2.4GHz radios. But well… for “ONE old device’s wifi card (or whatever)”, why even bother starting a topic.

9

Oh yes, my old Dell laptop refuses 40mhz (Debian, Dell D830 2008)

Try 20mhz, see what it gives.

10

@broderick, ignorando il resto e considerando soltanto la wlan1, e ignorando che rimuovendo “VODAFONE” da una parte hai lasciato “VD” e dall’altra “VOD”:
/interface wireless security-profiles
eap-methods=“” → deve essere passthrough
management-protection=allowed → deve essere disabled, management-protection è supportato solo da prodotti MikroTik
supplicant-identity=“” → deve essere MikroTik
/interface wireless
band=2ghz-onlyn → se solo n, e non anche g (o b) i vecchi dispositivi solo g non si collegano
channel-width=20/40mhz-Ce → i dispositivi solo g si collegano comunque, perché a 20+20 (che non è 40) ci vanno solo gli n
country=france ??? maddai… un po’ d’orgoglio nazionale…
keepalive-frames=disabled → perché???
multicast-buffering=disabled → hai i tuoi motivi…???
wds-default-bridge=bridge & wds-mode=dynamic → hai qualche dispositivo non-microtik che fa da range extender? se “no”, non va bene

11

Quite funny, especially the remark on country :laughing:
(I do understand a tiny little bit of Italian)

12

That can be the only on-topic point.
I’ll give it a try.

Thanks

13

I am sick and tired to get unsolicited advice.
You could have as well stayed on point and give feedback only on the problem I was asking for.
BUT, it seems that some people here are too often dying to say other ones that they are the MK badasses, so the first thing they come up with is "you should reset!".

14

Thanks

15

I guess it is hot for everyone …
I’ll throw in my 0.02€


More often then not there are problems being reported here based on limited info the user “thinks” is relevant.
Quite a lot the cause of the problem is not to be found there. It’s elsewhere, in the part not shown.
Hence the almost standard request here to provide full config.
If for whatever reason you do not think this is relevant for solving your problem, it is not correct to blame others for not being able to solve your problem.
A problem not created by the ones trying to help. OK ?


I am by no means an IT professional (just happen to be someone who knows quite a lot from decades of fiddling and experimenting) and certainly not an MK badass (still learning quite a lot myself) but you’d be surprised that in 8 or 9 cases out of 10 pulling the plug on a device solves a lot of problems.
So does clean config reset on a router device which has been wrongly configured (which I am not saying is the case for your problem, we’ll see about that further on).

You came here for assistance with a problem.
Be glad someone is willing to help. We are all doing this in our free time.

16

I know that something else in our setup can be relevant, but that wouldn’t explain why all other my devices work perfectly as expected both via wifi and ethernet.


I am by no means an IT professional (just happen to be someone who knows quite a lot from decades of fiddling and experimenting) and certainly not an MK badass
…

So, you should understand why your answer can be annerving.


Be glad someone is willing to help. We are all doing this in our free time.

I know it, and I have always been glad for that.

17

Based on your replies, paste this on terminal:

why: used or not, eap default is passthrough (long term bug, fixed on latest v7.4), and supplicant as MikroTik device, is the default

/interface wireless security-profiles
set [find] eap-methods=passthrough supplicant-identity="MikroTik"

You can/must disable wds if you do not have any mikrotik “station-wds” as client.
the default are wds-default-bridge=none and wds-mode=disabled

keepalive-frames=disabled → if disabled, the ap do not keep track of the client if is really connected or not, and can cause problems, better enabled (default)

multicast-buffering=disabled → if disabled do not buffer multicast traffic, and is dropped. If you use some device that use this function, better keep it enabled (default).

18

If that do not fix, and all other devices work,
supposing you do not have put an access-list rule that deny the registration,
or a fixed dhcp lease that assign wrong ip,
or firewall rule that block the MAC,
or any other setting than can cause the problem on another config parts (I provide exact examples, not generic)

try to make a bootable usb stick with windows 10 / kaspersky recovery / other iso than can boot and use wlan
and check if on another OS the wireless work correclty.
If work, the problem can be only on Lubuntu driver/kernel/settings/etc.

19

Ok, done!
Useful information. Learned something more now.
Thank you very much.

20

I didn't see this answer earlier.


I don't think so, I mean, it is very unlikely. I didn't set any particular rules to block new devices trying to connect to the Wlan1, and as far as I remember, my MK dhcp has never had issues before.


try to make a bootable usb stick with windows 10 / kaspersky recovery / other iso than can boot and use wlan
and check if on another OS the wireless work correclty.

Unfortunately, I can't do any attempts now. The laptop wasn't mine; just a friend of mine passing by who asked me to install lubuntu on his old device.
Windows 7 ran on it before I installed lubuntu, and I didn't notice this problem, BUT I don't remember if it was connected via wifi or ethernet, sorry :frowning: ..maybe wifi, but I often plug a cable when I need to install a new OS on a device. Anyway, he told me that the laptop works flawlessly via wifi on his home network, it is the most important thing.
Anyway, as I said above already, it was an opportunity to learn new things, and tune up my mk setup.


If work, the problem can be only on Lubuntu driver/kernel/settings/etc.

Yes, maybe. I thought the same too.

Thanks