Old iPad Air (iOS 15.8.3) won't connect

Hi!
I am running 3 wAP ax managed by CAPsMAN. While all modern Apple devices (iPad Pro, iPhone 11,13,15) with iOS 18 can just connect fine, I am not able to get a working connection with my old iPad Air, which is running older iOS 15.8.3. It claims invalid password due connecting, which is not true.

Debug logs says only:

AA:BB:CC:DD:EE:FF@wapax-wifi2 associated, signal strength -67
AA:BB:CC:DD:EE:FF@wapax-wifi2 disassociated, connection lost, signal strength -67

Current configuration:

/interface wifi channel
add band=2ghz-ax comment="mySSID (2.4 GHz)" disabled=no name=BSC24G width=20/40mhz
add band=5ghz-ax comment="mySSID (5 GHz)" disabled=no name=BSC50G width=20/40/80mhz
/interface wifi datapath
add bridge=bridge comment="mySSID" disabled=no name=BSCDP
/interface wifi security
add authentication-types=wpa2-psk comment="mySSID" disable-pmkid=no disabled=no ft=yes ft-over-ds=yes name=BSC-PSK
/interface wifi configuration
add channel=BSC24G channel.width=20/40mhz comment="mySSID (2.4 GHz)" country=Germany datapath=BSCDP disabled=no mode=ap name=BSG24G security=BSC-PSK ssid="mySSID"
add channel=BSC50G channel.width=20/40/80/160mhz comment="mySSID (5 GHz)" country=Germany datapath=BSCDP disabled=no mode=ap name=BSC50G security=BSC-PSK ssid="mySSID"
/interface wifi capsman
set ca-certificate=WiFi-CAPsMAN-CA-AABBCCDDEEFF certificate=WiFi-CAPsMAN-AABBCCDDEEFF enabled=yes interfaces=bridge package-path="" require-peer-certificate=no upgrade-policy=none
/interface wifi provisioning
add action=create-dynamic-enabled comment="mySSID1 (2.4 GHz)" disabled=no master-configuration=BSG24G name-format=%I-wifi radio-mac=F2:2C:34:2E:91:CE supported-bands=2ghz-ax
add action=create-dynamic-enabled comment="mySSID1 (5 GHz)" common-name-regexp="" disabled=no master-configuration=BSC50G name-format=%I-wifi radio-mac=F2:2C:34:2E:91:CF supported-bands=5ghz-ax
add action=create-dynamic-enabled comment="mySSID2 (2.4)" disabled=no master-configuration=BSG24G name-format=%I-wifi radio-mac=F2:2C:34:2E:91:52 supported-bands=2ghz-ax
add action=create-dynamic-enabled comment="mySSID2 (5)" disabled=no master-configuration=BSC50G name-format=%I-wifi radio-mac=F2:2C:34:2E:91:53 supported-bands=5ghz-ax
add action=create-dynamic-enabled comment="mySSID3 (2.4)" disabled=no master-configuration=BSG24G name-format=%I-wifi radio-mac=F2:2C:34:2D:ED:99 supported-bands=2ghz-ax
add action=create-dynamic-enabled comment="mySSID3 (5)" disabled=no master-configuration=BSC50G name-format=%I-wifi radio-mac=F2:2C:34:2D:ED:9A supported-bands=5ghz-ax

Can you give it a try when channel width is 20MHz (2.4GHz) and 20/40MHz (5GHz).
Another option to test with is disable FT.
Just for testing purposes.

Can you explain why you have multi provision rules (while two are, in your case, enough)?

Changing channel with did not help, but disabling ft seems to do the trick. Thanks. Guess, I need a new SSID for it?

Because I want to set in future for each wAP own channel for 2.4 Ghz and 5 GHz for non overlapping. (This isn't yet configured)

Or a new iPad :sunglasses:

Because I want to set in future for each wAP own channel for 2.4 Ghz and 5 GHz for non overlapping. (This isn't yet configured)

That make perfect sense...while these bandwidths will make it difficult not having interference.