"not responding" - f.k.a. SA Query timeout

Hi all,

I have problem with my father’s phone (Samsung A3 2016, stock OS) in my wifi network. I had Mikrotik hAP lite before and there was absolutely no problems! Now I have Mikrotik hAP ax2 and my Dad can’t connect to my wifi because of SA Query timeout error. I have few devices (phones, laptops and TV) in my wireless network and there is problem ONLY with this one device… I upgraded router os few times and now i’m on 7.11 stable. I tried Disable PMKID = YES but without success either. Look:

This is part of my configuration:


# 2023-08-17 21:35:25 by RouterOS 7.11
# software id = **ELIDED**
#
# model = C52iG-5HaxD2HaxD
# serial number = XXXXXXXXXXXX
/interface bridge
add name=bridge-LAN
/interface ethernet
set [ find default-name=ether1 ] mac-address=XX:XX:XX:XX:XX:XX
/interface wifiwave2 channel
add band=2ghz-n disabled=no frequency=2447 name=channel-2.4GHz \
    skip-dfs-channels=all width=20mhz
add band=5ghz-ax disabled=no frequency=5280 name=channel-5GHz width=20/40mhz-eC
/interface wifiwave2 security
add authentication-types=wpa2-psk disable-pmkid=yes disabled=no encryption="" \
    name=sec-profile
/interface wifiwave2 configuration
add channel=channel-2.4GHz country=Poland disabled=no mode=ap name=cfg-2.4GHz \
    security=sec-profile ssid=KMPM_nomap
add channel=channel-5GHz country=Poland disabled=no mode=ap name=cfg-5GHz \
    security=sec-profile ssid=KMPM_nomap
/interface wifiwave2
set [ find default-name=wifi2 ] channel=channel-2.4GHz channel.frequency=2447 \
    configuration=cfg-2.4GHz configuration.mode=ap disabled=no name=2.4GHZ
set [ find default-name=wifi1 ] channel=channel-5GHz configuration=cfg-5GHz \
    configuration.mode=ap disabled=no name=5GHz
/ip pool
add name=pool-dhcp ranges=192.168.44.10-192.168.44.35
add name=dhcp_pool1 ranges=192.168.44.2-192.168.44.254
/ip dhcp-server
add address-pool=pool-dhcp insert-queue-before=bottom interface=bridge-LAN \
    lease-time=3d name=dhcp1
/interface bridge port
add bridge=bridge-LAN interface=ether2
add bridge=bridge-LAN interface=ether3
add bridge=bridge-LAN interface=ether4
add bridge=bridge-LAN interface=ether5
add bridge=bridge-LAN interface=5GHz
add bridge=bridge-LAN interface=2.4GHZ
/ip dhcp-server lease
add address=192.168.44.24 client-id=1:a8:9c:ed:4e:b3:ad mac-address=\
    XX:XX:XX:XX:XX:XX server=dhcp1
add address=192.168.44.23 client-id=1:94:be:46:cf:1:76 comment="Tablet Matika" \
    mac-address=XX:XX:XX:XX:XX:XX server=dhcp1
add address=192.168.44.21 client-id=1:78:af:8:80:97:b5 mac-address=\
    XX:XX:XX:XX:XX:XX server=dhcp1
add address=192.168.44.20 client-id=1:20:34:fb:cb:e2:f8 mac-address=\
    XX:XX:XX:XX:XX:XX server=dhcp1
add address=192.168.44.19 client-id=1:8c:c8:cd:59:a2:99 comment="TV SAMSUNG" \
    mac-address=XX:XX:XX:XX:XX:XX server=dhcp1
add address=192.168.44.18 client-id=1:bc:60:a7:cd:db:c5 comment=PS4 \
    mac-address=XX:XX:XX:XX:XX:XX server=dhcp1
/ip dhcp-server network
add address=192.168.44.0/24 gateway=192.168.44.1

Help needed… :frowning:

I’m terrible at RouterOS WiFi, but a few things in your config raised questions:

  1. Why disable PMKID? According to the docs, “Disabling PMKID can cause compatibility issues with client devices which make use of it.”

  2. encryption=“”? Is that just you being over-zealous with the config sanitization, or do you really have all encryption methods disabled?

I suggest you to send supout file and log to the support. I had similar problem and i sent them file and log but my AC but problem fixed itself…

Quick response before leaving for the road trip to France…

If you use WInbox, make sure that section is folded in.
NOT opened and nothing selected. Is not the same.

Try disabling band steering. I noticed these SA Query Timeout messages just before re-associating with another radio.

https://help.mikrotik.com/docs/display/ROS/WifiWave2#WifiWave2-Steeringproperties


/interface wifiwave2 configuration set [find] rrm=no wnm=no
  1. It was only for testing. But without success so returned to default.
  2. I missed it out! I had nothing checked indeed… Now i have CCMP and GCMP.

So you suggest to leave only frequencies?

An issue that came with version 7.11. I reverted to version 7.10.2

I suggested to disable band steering, as this was introduced in 7.11:

*) wifiwave2 - added “steering” parameters and menu to set up and monitor AP neighbor groups (CLI only)


Again, band steering is introduced in 7.11, therefore may be related to these issues.

Hi i tried it doesn’t work

/interface wifiwave2 configuration set [find] steering.rrm=no steering.wnm=no

Did you try to contact Mikrotik support ? At this point they maybe can help you more.

I tried disable steering but no luck… Well I feel it doesn’t matter what I do - it always doesn’t work… On hAP ac lite no problems, on ax2 it still doesn’t work…

Best recommendation to get… create supout.rif, contact support.

I did, waiting for support

Try WPA2 only to isolate issue to security settings.

I tried WPA2 only. As well as firmware upgrading, disabling band steering, disabling PMKID, turning off encription, disabling 5GHz radio and rebooting donzens times…

did you tried to delete/forget the network in mobile and do new connect???

Every time when I made some changes in router settings.

solution for me:

/interface/wifiwave2/configuration> set [find] security.connect-priority=0/1

This appears to work, my laptop has been able to fast roam for the first time and the dreaded SA Query Timeout message is gone. I must admit I don’t understand why and I’m concerned that it’s working at the cost of security, specifically MacStealer attacks as per this post:
http://forum.mikrotik.com/t/v7-11rc-is-released/168431/1

Can anyone elaborate on what this setting actually does?



Yes please do, tired of this in my logs all the time when someone walks into the kitchen.

/log print where message~"C6"
 09-22 12:24:54 wireless,info C6:6B:0C@wifi1 connected, signal strength -61
 09-22 12:26:44 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -73
 09-22 12:26:44 wireless,info C6:6B:0C@wifi1 connected, signal strength -75
 09-22 12:27:26 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -68
 09-22 12:27:27 wireless,info C6:6B:0C@wifi1 connected, signal strength -71
 09-22 12:27:55 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -69
 09-22 12:27:55 wireless,info C6:6B:0C@wifi1 connected, signal strength -71
 09-22 12:29:58 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -68
 09-22 12:30:22 wireless,info C6:6B:0C@wifi1 connected, signal strength -68
 09-22 12:31:44 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -71
 09-22 12:31:55 dhcp,info defconf deassigned 192.168.0.106 for C6:6B:0C
 09-22 12:31:56 dhcp,info defconf assigned 192.168.0.106 for C6:6B:0C 
 09-22 12:31:58 wireless,info C6:6B:0C@wifi1 connected, signal strength -71
 09-22 12:32:24 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -73
 09-22 12:32:24 wireless,info C6:6B:0C@wifi1 connected, signal strength -75
 09-22 12:32:33 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -72
 09-22 12:32:34 wireless,info C6:6B:0C@wifi1 connected, signal strength -75
 09-22 12:32:38 dhcp,info defconf deassigned 192.168.0.106 for C6:6B:0C 
 09-22 12:32:39 dhcp,info defconf assigned 192.168.0.106 for C6:6B:0C 
 09-22 12:32:49 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -70
 09-22 12:32:50 wireless,info C6:6B:0C@wifi1 connected, signal strength -73
 09-22 12:34:18 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -77
 09-22 12:34:19 wireless,info C6:6B:0C@wifi1 connected, signal strength -76
 09-22 12:38:17 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -71
 09-22 12:38:17 wireless,info C6:6B:0C@wifi1 connected, signal strength -70
 09-22 12:42:13 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -70
 09-22 12:42:20 wireless,info C6:6B:0C@wifi1 connected, signal strength -65
 09-22 12:47:26 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -64
 09-22 14:48:23 wireless,info C6:6B:0C@wifi1 connected, signal strength -62
 09-22 14:55:07 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -68
 09-22 16:47:44 wireless,info C6:6B:0C@wifi1 connected, signal strength -62
 09-22 16:52:48 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -72
 09-22 17:00:05 wireless,info C6:6B:0C@wifi1 connected, signal strength -68
 09-22 17:01:09 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -58
 09-22 17:01:10 wireless,info C6:6B:0C@wifi1 connected, signal strength -66
 09-22 17:01:36 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -71
 09-22 17:01:37 wireless,info C6:6B:0C@wifi1 connected, signal strength -67
 09-22 17:01:53 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -70
 09-22 17:01:59 wireless,info C6:6B:0C@wifi1 connected, signal strength -66
 09-22 17:45:29 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -67
 09-22 17:45:29 wireless,info C6:6B:0C@wifi1 connected, signal strength -68
 09-22 17:51:25 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -70
 09-22 19:00:20 wireless,info C6:6B:0C@wifi1 connected, signal strength -63
 09-22 19:06:08 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -85
 09-22 22:43:48 wireless,info C6:6B:0C@wifi1 connected, signal strength -52
 09-22 22:44:39 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -66
 09-22 22:44:40 wireless,info C6:6B:0C@wifi1 connected, signal strength -65
 09-22 22:45:01 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -62
 09-22 22:45:01 wireless,info C6:6B:0C@wifi1 connected, signal strength -68
 09-22 22:45:11 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -68
 09-22 22:45:12 wireless,info C6:6B:0C@wifi1 connected, signal strength -67
 09-22 22:51:14 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -78
 09-23 11:06:06 wireless,info C6:6B:0C@wifi1 connected, signal strength -70
 09-23 11:09:13 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -66
 09-23 11:09:14 wireless,info C6:6B:0C@wifi1 connected, signal strength -70
 09-23 11:12:12 wireless,info C6:6B:0C@wifi1 disconnected, group key timeout, signal strength -74
 09-23 11:14:23 wireless,info C6:6B:0C@wifi1 connected, signal strength -73
 09-23 11:21:47 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -87
 09-23 11:42:52 wireless,info C6:6B:0C@wifi1 connected, signal strength -59
 09-23 11:48:11 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -79
 09-23 15:59:09 wireless,info C6:6B:0C@wifi1 connected, signal strength -66
 09-23 16:08:07 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -74
 09-23 19:31:54 wireless,info C6:6B:0C@wifi1 connected, signal strength -60
 09-23 19:37:45 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -72
 09-23 23:46:56 wireless,info C6:6B:0C@wifi1 connected, signal strength -68
 09-23 23:51:58 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -69
 09-24 10:49:40 wireless,info C6:6B:0C@wifi1 connected, signal strength -67
 09-24 10:55:48 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -73
 09-24 10:56:45 wireless,info C6:6B:0C@wifi1 connected, signal strength -68
 09-24 11:07:30 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -73
 09-24 11:07:30 wireless,info C6:6B:0C@wifi1 connected, signal strength -74
 09-24 11:12:18 wireless,info C6:6B:0C@wifi1 disconnected, group key timeout, signal strength -72
 09-24 11:49:45 wireless,info C6:6B:0C@wifi1 connected, signal strength -70
 09-24 11:51:22 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -72
 09-24 11:51:22 wireless,info C6:6B:0C@wifi1 connected, signal strength -70
 09-24 11:52:27 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -65
 09-24 11:52:27 wireless,info C6:6B:0C@wifi1 connected, signal strength -55
 09-24 11:58:33 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -86
 09-24 12:23:19 wireless,info C6:6B:0C@wifi1 connected, signal strength -67
 09-24 12:23:54 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -69
 09-24 12:23:54 wireless,info C6:6B:0C@wifi1 connected, signal strength -71
 09-24 12:23:58 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -71
 09-24 12:23:59 wireless,info C6:6B:0C@wifi1 connected, signal strength -69
 09-24 12:26:16 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -69
 09-24 12:26:17 wireless,info C6:6B:0C@wifi1 connected, signal strength -71
 09-24 12:29:21 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -71
 09-24 12:29:22 wireless,info C6:6B:0C@wifi1 connected, signal strength -72
 09-24 12:36:25 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -70
 09-24 14:46:34 wireless,info C6:6B:0C@wifi1 connected, signal strength -57
 09-24 14:52:05 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -71
 09-24 17:37:33 wireless,info C6:6B:0C@wifi1 connected, signal strength -67
 09-24 17:37:37 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -70
 09-24 17:37:37 wireless,info C6:6B:0C@wifi1 connected, signal strength -75
 09-24 18:05:15 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -82
 09-24 18:28:54 wireless,info C6:6B:0C@wifi1 connected, signal strength -56
 09-24 18:34:35 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -72
 09-24 18:34:35 wireless,info C6:6B:0C@wifi1 connected, signal strength -74
 09-24 18:36:03 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -74
 09-24 18:36:03 wireless,info C6:6B:0C@wifi1 connected, signal strength -71
 09-24 18:40:44 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -68
 09-24 18:40:44 wireless,info C6:6B:0C@wifi1 connected, signal strength -69
 09-24 18:41:10 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -73
 09-24 18:41:10 wireless,info C6:6B:0C@wifi1 connected, signal strength -70
 09-24 18:41:13 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -69
 09-24 18:41:14 wireless,info C6:6B:0C@wifi1 connected, signal strength -71
 09-24 18:42:59 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -69
 09-24 18:42:59 wireless,info C6:6B:0C@wifi1 connected, signal strength -69
 09-24 18:45:31 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -68
 09-24 18:45:32 wireless,info C6:6B:0C@wifi1 connected, signal strength -71
 09-24 18:47:16 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -74
 09-24 18:47:17 wireless,info C6:6B:0C@wifi1 connected, signal strength -68
 09-24 18:48:03 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -76
 09-24 18:48:03 wireless,info C6:6B:0C@wifi1 connected, signal strength -72
 09-24 18:50:56 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -69
 09-24 18:50:56 wireless,info C6:6B:0C@wifi1 connected, signal strength -68
 09-24 18:57:22 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -67
 09-24 18:57:23 wireless,info C6:6B:0C@wifi1 connected, signal strength -68
 09-24 18:58:50 wireless,info C6:6B:0Cwifi1 disconnected, SA Query timeout, signal strength -69
 09-24 18:58:51 wireless,info C6:6B:0C@wifi1 connected, signal strength -69
 09-24 19:04:56 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -70
 09:20:40 wireless,info C6:6B:0C@wifi1 connected, signal strength -66
 09:23:00 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -71
 09:23:00 wireless,info C6:6B:0C@wifi1 connected, signal strength -69
 09:25:21 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -72
 09:25:21 wireless,info C6:6B:0C@wifi1 connected, signal strength -72