Two Devices on the same WiFi don't talk together

Basic configuration is: one WiFi access point, one P.C. connected to it via Ethernet cable, one ESP386 and one Android phone connected to the A.P. via WiFi. Ping is enough to see the problem. Ping from Android to P.C. is fine. Ping form the A.P. console to the WiFi devices is fine and immediate. Ping from P.C. to the WiFi devices takes some seconds to start (??), than it is fine. Ping from Android to ESP doesn’t work. ARP is not completed. Setting ARP table manually doesn’t solve the problem. Any idea? In the specific, the A.P. is a MikroTik 951Ui-2HnD running RouterOS 6.38.5 and I am convinced I miss something in its configuration.“default-forwarding” is set to “yes” and ARP is enabled both on “Wireless” and in “Bridge” even if I guess Bridge is not involved here. I also tried with a Linux box connected in the same WiFi and the behaviour is almost the same: it cannot ping ESP nor Android.
The wireless configuration is:
[admin@MikroTik] > interface wireless print
Flags: X - disabled, R - running
0 R name=“wlan1” mtu=1500 l2mtu=1600 mac-address=6C:3B:6B:C2:82:3C arp=enabled interface-type=Atheros AR9300 mode=ap-bridge
ssid=“MikroTik” frequency=2422 band=2ghz-b/g/n channel-width=20/40mhz-Ce scan-list=default wireless-protocol=802.11
vlan-mode=no-tag vlan-id=1 wds-mode=dynamic-mesh wds-default-bridge=bridge wds-ignore-ssid=no bridge-mode=enabled
default-authentication=yes default-forwarding=yes default-ap-tx-limit=0 default-client-tx-limit=0 hide-ssid=no
security-profile=default compression=no

Hi There
did you try to modify the configuration changing

bridge-mode=disabled.

did you try to modify the configuration changing

bridge-mode=disabled

>

Yes, unfortunately I already tried that and it is in the current, not working, configuration. After my first post, I made several additional tests and I can say that ESP is meaningless: I have almost the same behaviour with any two devices connected both via WiFi. I say "almost the same" because a Linux Box pinging an Adroid phone (or the ESP, or an other Linux box) can fail for a random time of some seconds-some minutes, and then start to ping happily. Once the ping starts, it works forever. But I never see, for instance, an Android phone start to successfully ping even after half an hour. Of course, in my teste, all the devices are in the range of 2-3m from the access point.

Going more in depth, I took some Wireshark traces (at radio level) and I see the ARP-RQ form unit A to the A.P. and the same ARP-RQ from the A.P. to unit B, it fails to answer!
When I ping from the A.P. itself, I see and ARP-RQ that looks identical but it is answered immediately!
But is is not only a metter of ARP failing: should I force a static ARP, it fails anyway the next ICMP.
Really out of ideas. I can only think a sort of "timing" problem... packets rebounced from the A.P. too early and the receiver is still "closed" to receive due to the previous transmission not forit?
I am very surprised because I cannot believe a  so basic functionality is not working in a sophisticated device as MikroTik+RouterOS - I attach the full and detailed configuration.

```text
name="wlan1" mtu=1500 l2mtu=1600 mac-address=6C:3B:6B:C2:82:3C arp=enabled disable-running-check=no
interface-type=Atheros AR9300 radio-name="6C3B6BC2823C" mode=ap-bridge ssid="MikroTik" area=""
frequency-mode=manual-txpower country=no_country_set antenna-gain=0 frequency=2422 band=2ghz-b/g/n
channel-width=20/40mhz-Ce scan-list=default wireless-protocol=802.11 rate-set=default
supported-rates-b=1Mbps,2Mbps,5.5Mbps,11Mbps supported-rates-a/g=6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps
basic-rates-b=1Mbps basic-rates-a/g=6Mbps max-station-count=2007 distance=indoors tx-power-mode=default
noise-floor-threshold=default nv2-noise-floor-offset=default vlan-mode=no-tag vlan-id=1 wds-mode=disabled
wds-default-bridge=bridge wds-default-cost=100 wds-cost-range=50-150 wds-ignore-ssid=no update-stats-interval=disabled
bridge-mode=disabled default-authentication=yes default-forwarding=yes default-ap-tx-limit=0 default-client-tx-limit=0
wmm-support=disabled hide-ssid=no security-profile=default wps-mode=push-button station-roaming=enabled
disconnect-timeout=3s on-fail-retry-time=100ms preamble-mode=both compression=no allow-sharedkey=no
station-bridge-clone-mac=00:00:00:00:00:00 ampdu-priorities=0 guard-interval=any
ht-supported-mcs=mcs-0,mcs-1,mcs-2,mcs-3,mcs-4,mcs-5,mcs-6,mcs-7,mcs-8,mcs-9,mcs-10,mcs-11,mcs-12,mcs-13,mcs-14,mcs-15,mcs-
           16,mcs-17,mcs-18,mcs-19,mcs-20,mcs-21,mcs-22,mcs-23
ht-basic-mcs=mcs-0,mcs-1,mcs-2,mcs-3,mcs-4,mcs-5,mcs-6,mcs-7 tx-chains=0,1 rx-chains=0,1 amsdu-limit=8192
amsdu-threshold=8192 tdma-period-size=2 nv2-queue-count=2 nv2-qos=default nv2-cell-radius=30 nv2-security=disabled
nv2-preshared-key="" hw-retries=7 frame-lifetime=0 adaptive-noise-immunity=none hw-fragmentation-threshold=disabled
hw-protection-mode=rts-cts hw-protection-threshold=0 frequency-offset=0 rate-selection=advanced multicast-helper=default
multicast-buffering=enabled keepalive-frames=enabled

Hi

if possible may you share an export of the device I want to replciate it on my device .
The client2client communication generally is working without anya dditional effort on the routeros

f possible may you share an export of the device I want to replciate it on my device .

Here it is (I hope!)

The client2client communication generally is working without any additional effort on the routeros

I totally agree.

Let me add an other couple of considerations:
-in the past, I had a MikroTik Routerboard 750 and an old Dlink GWL700AP and all the WiFi devices could talk together.
-a day the Dlink exploeded, so I bought this new MikroTik thinking it was a WiFi only device and I configured it as a simple A.P. I just performed a basic A.P. functionality test and I cannot say if the problem was there or not.
-once I discovered it is a full router, I exported the configuration of the former router and I imported it in the new one.
May be this is not correct? May be I ruined something in the overall configuration affecting the WiFi behavior?
rescas.rsc (60.4 KB)

I am very surprised MikroTik nor any external expert gave some help for a so solid and blocking problem. I must say I am very disappointed a potentially so nice product, rich of features, is so poor in documentation, not to say about the not existing Customer Support. That said, considering a lot of persons could face my same problem, I believe it is useful for them to have an update:

I factory resetted the configuration and I manually setted my minimal internet parameters and few local parameters (SSID, Password, IP, etc). WiFi works with default DHCP and the problem is still there, so it was not my configuration merge that caused it but it is something wrong in ROS or, at least, in the default A.P. settings.

By the way I found a workardound:
/interface bridge add arp=local-proxy-arp

Whith this totally undocumented(*note) parameter, now the ARP rquests are immediately satisfied with the Router/AP MAC address for all the devices on WiFi. I guess this is wrong but it works.

It reads more like a host-based firewall issue.

If your hosts are windows based, ensure the network type is not set to Public. I have seen them automatically change when Windows thinks it’s connected to a new network and assumes it’s a public one.

If your hosts are windows based

Unfortunately, two Android phones, or one Android and one ESP or a Linux or any combinations of them are not Windows hosts. The problem is between any two units on the same WiFi network and, in my case, I have no Windows boxes on the WiFi.