"not responding" - f.k.a. SA Query timeout

RouterOS Wireless Networking
1

Hi all,

I have problem with my father’s phone (Samsung A3 2016, stock OS) in my wifi network. I had Mikrotik hAP lite before and there was absolutely no problems! Now I have Mikrotik hAP ax2 and my Dad can’t connect to my wifi because of SA Query timeout error. I have few devices (phones, laptops and TV) in my wireless network and there is problem ONLY with this one device… I upgraded router os few times and now i’m on 7.11 stable. I tried Disable PMKID = YES but without success either. Look:

This is part of my configuration:


# 2023-08-17 21:35:25 by RouterOS 7.11
# software id = **ELIDED**
#
# model = C52iG-5HaxD2HaxD
# serial number = XXXXXXXXXXXX
/interface bridge
add name=bridge-LAN
/interface ethernet
set [ find default-name=ether1 ] mac-address=XX:XX:XX:XX:XX:XX
/interface wifiwave2 channel
add band=2ghz-n disabled=no frequency=2447 name=channel-2.4GHz \
    skip-dfs-channels=all width=20mhz
add band=5ghz-ax disabled=no frequency=5280 name=channel-5GHz width=20/40mhz-eC
/interface wifiwave2 security
add authentication-types=wpa2-psk disable-pmkid=yes disabled=no encryption="" \
    name=sec-profile
/interface wifiwave2 configuration
add channel=channel-2.4GHz country=Poland disabled=no mode=ap name=cfg-2.4GHz \
    security=sec-profile ssid=KMPM_nomap
add channel=channel-5GHz country=Poland disabled=no mode=ap name=cfg-5GHz \
    security=sec-profile ssid=KMPM_nomap
/interface wifiwave2
set [ find default-name=wifi2 ] channel=channel-2.4GHz channel.frequency=2447 \
    configuration=cfg-2.4GHz configuration.mode=ap disabled=no name=2.4GHZ
set [ find default-name=wifi1 ] channel=channel-5GHz configuration=cfg-5GHz \
    configuration.mode=ap disabled=no name=5GHz
/ip pool
add name=pool-dhcp ranges=192.168.44.10-192.168.44.35
add name=dhcp_pool1 ranges=192.168.44.2-192.168.44.254
/ip dhcp-server
add address-pool=pool-dhcp insert-queue-before=bottom interface=bridge-LAN \
    lease-time=3d name=dhcp1
/interface bridge port
add bridge=bridge-LAN interface=ether2
add bridge=bridge-LAN interface=ether3
add bridge=bridge-LAN interface=ether4
add bridge=bridge-LAN interface=ether5
add bridge=bridge-LAN interface=5GHz
add bridge=bridge-LAN interface=2.4GHZ
/ip dhcp-server lease
add address=192.168.44.24 client-id=1:a8:9c:ed:4e:b3:ad mac-address=\
    XX:XX:XX:XX:XX:XX server=dhcp1
add address=192.168.44.23 client-id=1:94:be:46:cf:1:76 comment="Tablet Matika" \
    mac-address=XX:XX:XX:XX:XX:XX server=dhcp1
add address=192.168.44.21 client-id=1:78:af:8:80:97:b5 mac-address=\
    XX:XX:XX:XX:XX:XX server=dhcp1
add address=192.168.44.20 client-id=1:20:34:fb:cb:e2:f8 mac-address=\
    XX:XX:XX:XX:XX:XX server=dhcp1
add address=192.168.44.19 client-id=1:8c:c8:cd:59:a2:99 comment="TV SAMSUNG" \
    mac-address=XX:XX:XX:XX:XX:XX server=dhcp1
add address=192.168.44.18 client-id=1:bc:60:a7:cd:db:c5 comment=PS4 \
    mac-address=XX:XX:XX:XX:XX:XX server=dhcp1
/ip dhcp-server network
add address=192.168.44.0/24 gateway=192.168.44.1

Help needed… :frowning:

2

I’m terrible at RouterOS WiFi, but a few things in your config raised questions:

  1. Why disable PMKID? According to the docs, “Disabling PMKID can cause compatibility issues with client devices which make use of it.”

  2. encryption=“”? Is that just you being over-zealous with the config sanitization, or do you really have all encryption methods disabled?

3

I suggest you to send supout file and log to the support. I had similar problem and i sent them file and log but my AC but problem fixed itself…

4

Quick response before leaving for the road trip to France…

If you use WInbox, make sure that section is folded in.
NOT opened and nothing selected. Is not the same.

5

Try disabling band steering. I noticed these SA Query Timeout messages just before re-associating with another radio.

https://help.mikrotik.com/docs/display/ROS/WifiWave2#WifiWave2-Steeringproperties


/interface wifiwave2 configuration set [find] rrm=no wnm=no
6
  1. It was only for testing. But without success so returned to default.
  2. I missed it out! I had nothing checked indeed… Now i have CCMP and GCMP.

So you suggest to leave only frequencies?

7

An issue that came with version 7.11. I reverted to version 7.10.2

8

I suggested to disable band steering, as this was introduced in 7.11:

*) wifiwave2 - added “steering” parameters and menu to set up and monitor AP neighbor groups (CLI only)


Again, band steering is introduced in 7.11, therefore may be related to these issues.

9

Hi i tried it doesn’t work

/interface wifiwave2 configuration set [find] steering.rrm=no steering.wnm=no
10

Did you try to contact Mikrotik support ? At this point they maybe can help you more.

11

I tried disable steering but no luck… Well I feel it doesn’t matter what I do - it always doesn’t work… On hAP ac lite no problems, on ax2 it still doesn’t work…

12

Best recommendation to get… create supout.rif, contact support.

13

I did, waiting for support

14

Try WPA2 only to isolate issue to security settings.

15

I tried WPA2 only. As well as firmware upgrading, disabling band steering, disabling PMKID, turning off encription, disabling 5GHz radio and rebooting donzens times…

16

did you tried to delete/forget the network in mobile and do new connect???

17

Every time when I made some changes in router settings.

18

solution for me:

/interface/wifiwave2/configuration> set [find] security.connect-priority=0/1
19

This appears to work, my laptop has been able to fast roam for the first time and the dreaded SA Query Timeout message is gone. I must admit I don’t understand why and I’m concerned that it’s working at the cost of security, specifically MacStealer attacks as per this post:
http://forum.mikrotik.com/t/v7-11rc-is-released/168431/1

Can anyone elaborate on what this setting actually does?

20



Yes please do, tired of this in my logs all the time when someone walks into the kitchen.

/log print where message~"C6"
 09-22 12:24:54 wireless,info C6:6B:0C@wifi1 connected, signal strength -61
 09-22 12:26:44 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -73
 09-22 12:26:44 wireless,info C6:6B:0C@wifi1 connected, signal strength -75
 09-22 12:27:26 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -68
 09-22 12:27:27 wireless,info C6:6B:0C@wifi1 connected, signal strength -71
 09-22 12:27:55 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -69
 09-22 12:27:55 wireless,info C6:6B:0C@wifi1 connected, signal strength -71
 09-22 12:29:58 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -68
 09-22 12:30:22 wireless,info C6:6B:0C@wifi1 connected, signal strength -68
 09-22 12:31:44 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -71
 09-22 12:31:55 dhcp,info defconf deassigned 192.168.0.106 for C6:6B:0C
 09-22 12:31:56 dhcp,info defconf assigned 192.168.0.106 for C6:6B:0C 
 09-22 12:31:58 wireless,info C6:6B:0C@wifi1 connected, signal strength -71
 09-22 12:32:24 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -73
 09-22 12:32:24 wireless,info C6:6B:0C@wifi1 connected, signal strength -75
 09-22 12:32:33 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -72
 09-22 12:32:34 wireless,info C6:6B:0C@wifi1 connected, signal strength -75
 09-22 12:32:38 dhcp,info defconf deassigned 192.168.0.106 for C6:6B:0C 
 09-22 12:32:39 dhcp,info defconf assigned 192.168.0.106 for C6:6B:0C 
 09-22 12:32:49 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -70
 09-22 12:32:50 wireless,info C6:6B:0C@wifi1 connected, signal strength -73
 09-22 12:34:18 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -77
 09-22 12:34:19 wireless,info C6:6B:0C@wifi1 connected, signal strength -76
 09-22 12:38:17 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -71
 09-22 12:38:17 wireless,info C6:6B:0C@wifi1 connected, signal strength -70
 09-22 12:42:13 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -70
 09-22 12:42:20 wireless,info C6:6B:0C@wifi1 connected, signal strength -65
 09-22 12:47:26 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -64
 09-22 14:48:23 wireless,info C6:6B:0C@wifi1 connected, signal strength -62
 09-22 14:55:07 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -68
 09-22 16:47:44 wireless,info C6:6B:0C@wifi1 connected, signal strength -62
 09-22 16:52:48 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -72
 09-22 17:00:05 wireless,info C6:6B:0C@wifi1 connected, signal strength -68
 09-22 17:01:09 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -58
 09-22 17:01:10 wireless,info C6:6B:0C@wifi1 connected, signal strength -66
 09-22 17:01:36 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -71
 09-22 17:01:37 wireless,info C6:6B:0C@wifi1 connected, signal strength -67
 09-22 17:01:53 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -70
 09-22 17:01:59 wireless,info C6:6B:0C@wifi1 connected, signal strength -66
 09-22 17:45:29 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -67
 09-22 17:45:29 wireless,info C6:6B:0C@wifi1 connected, signal strength -68
 09-22 17:51:25 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -70
 09-22 19:00:20 wireless,info C6:6B:0C@wifi1 connected, signal strength -63
 09-22 19:06:08 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -85
 09-22 22:43:48 wireless,info C6:6B:0C@wifi1 connected, signal strength -52
 09-22 22:44:39 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -66
 09-22 22:44:40 wireless,info C6:6B:0C@wifi1 connected, signal strength -65
 09-22 22:45:01 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -62
 09-22 22:45:01 wireless,info C6:6B:0C@wifi1 connected, signal strength -68
 09-22 22:45:11 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -68
 09-22 22:45:12 wireless,info C6:6B:0C@wifi1 connected, signal strength -67
 09-22 22:51:14 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -78
 09-23 11:06:06 wireless,info C6:6B:0C@wifi1 connected, signal strength -70
 09-23 11:09:13 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -66
 09-23 11:09:14 wireless,info C6:6B:0C@wifi1 connected, signal strength -70
 09-23 11:12:12 wireless,info C6:6B:0C@wifi1 disconnected, group key timeout, signal strength -74
 09-23 11:14:23 wireless,info C6:6B:0C@wifi1 connected, signal strength -73
 09-23 11:21:47 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -87
 09-23 11:42:52 wireless,info C6:6B:0C@wifi1 connected, signal strength -59
 09-23 11:48:11 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -79
 09-23 15:59:09 wireless,info C6:6B:0C@wifi1 connected, signal strength -66
 09-23 16:08:07 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -74
 09-23 19:31:54 wireless,info C6:6B:0C@wifi1 connected, signal strength -60
 09-23 19:37:45 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -72
 09-23 23:46:56 wireless,info C6:6B:0C@wifi1 connected, signal strength -68
 09-23 23:51:58 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -69
 09-24 10:49:40 wireless,info C6:6B:0C@wifi1 connected, signal strength -67
 09-24 10:55:48 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -73
 09-24 10:56:45 wireless,info C6:6B:0C@wifi1 connected, signal strength -68
 09-24 11:07:30 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -73
 09-24 11:07:30 wireless,info C6:6B:0C@wifi1 connected, signal strength -74
 09-24 11:12:18 wireless,info C6:6B:0C@wifi1 disconnected, group key timeout, signal strength -72
 09-24 11:49:45 wireless,info C6:6B:0C@wifi1 connected, signal strength -70
 09-24 11:51:22 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -72
 09-24 11:51:22 wireless,info C6:6B:0C@wifi1 connected, signal strength -70
 09-24 11:52:27 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -65
 09-24 11:52:27 wireless,info C6:6B:0C@wifi1 connected, signal strength -55
 09-24 11:58:33 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -86
 09-24 12:23:19 wireless,info C6:6B:0C@wifi1 connected, signal strength -67
 09-24 12:23:54 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -69
 09-24 12:23:54 wireless,info C6:6B:0C@wifi1 connected, signal strength -71
 09-24 12:23:58 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -71
 09-24 12:23:59 wireless,info C6:6B:0C@wifi1 connected, signal strength -69
 09-24 12:26:16 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -69
 09-24 12:26:17 wireless,info C6:6B:0C@wifi1 connected, signal strength -71
 09-24 12:29:21 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -71
 09-24 12:29:22 wireless,info C6:6B:0C@wifi1 connected, signal strength -72
 09-24 12:36:25 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -70
 09-24 14:46:34 wireless,info C6:6B:0C@wifi1 connected, signal strength -57
 09-24 14:52:05 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -71
 09-24 17:37:33 wireless,info C6:6B:0C@wifi1 connected, signal strength -67
 09-24 17:37:37 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -70
 09-24 17:37:37 wireless,info C6:6B:0C@wifi1 connected, signal strength -75
 09-24 18:05:15 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -82
 09-24 18:28:54 wireless,info C6:6B:0C@wifi1 connected, signal strength -56
 09-24 18:34:35 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -72
 09-24 18:34:35 wireless,info C6:6B:0C@wifi1 connected, signal strength -74
 09-24 18:36:03 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -74
 09-24 18:36:03 wireless,info C6:6B:0C@wifi1 connected, signal strength -71
 09-24 18:40:44 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -68
 09-24 18:40:44 wireless,info C6:6B:0C@wifi1 connected, signal strength -69
 09-24 18:41:10 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -73
 09-24 18:41:10 wireless,info C6:6B:0C@wifi1 connected, signal strength -70
 09-24 18:41:13 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -69
 09-24 18:41:14 wireless,info C6:6B:0C@wifi1 connected, signal strength -71
 09-24 18:42:59 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -69
 09-24 18:42:59 wireless,info C6:6B:0C@wifi1 connected, signal strength -69
 09-24 18:45:31 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -68
 09-24 18:45:32 wireless,info C6:6B:0C@wifi1 connected, signal strength -71
 09-24 18:47:16 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -74
 09-24 18:47:17 wireless,info C6:6B:0C@wifi1 connected, signal strength -68
 09-24 18:48:03 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -76
 09-24 18:48:03 wireless,info C6:6B:0C@wifi1 connected, signal strength -72
 09-24 18:50:56 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -69
 09-24 18:50:56 wireless,info C6:6B:0C@wifi1 connected, signal strength -68
 09-24 18:57:22 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -67
 09-24 18:57:23 wireless,info C6:6B:0C@wifi1 connected, signal strength -68
 09-24 18:58:50 wireless,info C6:6B:0Cwifi1 disconnected, SA Query timeout, signal strength -69
 09-24 18:58:51 wireless,info C6:6B:0C@wifi1 connected, signal strength -69
 09-24 19:04:56 wireless,info C6:6B:0C@wifi1 disconnected, connection lost, signal strength -70
 09:20:40 wireless,info C6:6B:0C@wifi1 connected, signal strength -66
 09:23:00 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -71
 09:23:00 wireless,info C6:6B:0C@wifi1 connected, signal strength -69
 09:25:21 wireless,info C6:6B:0C@wifi1 disconnected, SA Query timeout, signal strength -72
 09:25:21 wireless,info C6:6B:0C@wifi1 connected, signal strength -72