Wi-Fi connection randomly drops, then reconnects in seconds

RouterOS Beginner Basics
1

Hi everyone!
I’m experiencing random but frequent connection drops (every 5 to 30 minutes) on my new Mikrotik ax3 router. I’ve enabled “wireless, debug” logs, but I can’t see much new information.
Here is an excerpt from the logs:

991	2024-07-29 19:25:58	memory	wireless, info		34:B3:A8:E9:D7:B8@wifi1-5GHz disconnected, connection lost, signal strength -58	
992	2024-07-29 19:25:58	memory	wireless, debug	34:B3:A8:E9:D7:B8@wifi1-5GHz disassociated, connection lost, signal strength -58	
993	2024-07-29 19:29:03	memory	wireless, debug	34:B3:A8:E9:D7:B8@wifi1-5GHz associated, signal strength -51	
994	2024-07-29 19:29:03	memory	wireless, info		34:B3:A8:E9:D7:B8@wifi1-5GHz connected, signal strength -51

The setup is basic and out-of-the-box. I only renamed the Wi-Fi ID (wifi1-5GHz) and SSID, so it’s unlikely that I misconfigured something.
What could be the problem? What are some ways to troubleshoot this issue?

2

Sometimes a chain of disconnects occurs:

978	2024-07-29 21:10:14	memory	wireless, info	34:B3:A8:E9:D7:B8@wifi1-5GHz disconnected, connection lost, signal strength -68	
979	2024-07-29 21:10:14	memory	wireless, debug	34:B3:A8:E9:D7:B8@wifi1-5GHz disassociated, connection lost, signal strength -68	
980	2024-07-29 21:10:16	memory	wireless, debug	34:B3:A8:E9:D7:B8@wifi1-5GHz associated, signal strength -68	
981	2024-07-29 21:10:16	memory	wireless, info	34:B3:A8:E9:D7:B8@wifi1-5GHz connected, signal strength -68	
982	2024-07-29 21:10:18	memory	wireless, info	34:B3:A8:E9:D7:B8@wifi1-5GHz disconnected, connection lost, signal strength -67	
983	2024-07-29 21:10:18	memory	wireless, debug	34:B3:A8:E9:D7:B8@wifi1-5GHz disassociated, connection lost, signal strength -67	
984	2024-07-29 21:10:21	memory	wireless, debug	34:B3:A8:E9:D7:B8@wifi1-5GHz associated, signal strength -67	
985	2024-07-29 21:10:21	memory	wireless, info	34:B3:A8:E9:D7:B8@wifi1-5GHz connected, signal strength -66	
986	2024-07-29 21:10:23	memory	wireless, info	34:B3:A8:E9:D7:B8@wifi1-5GHz disconnected, connection lost, signal strength -66	
987	2024-07-29 21:10:23	memory	wireless, debug	34:B3:A8:E9:D7:B8@wifi1-5GHz disassociated, connection lost, signal strength -66	
988	2024-07-29 21:10:25	memory	wireless, debug	34:B3:A8:E9:D7:B8@wifi1-5GHz associated, signal strength -67	
989	2024-07-29 21:10:26	memory	wireless, info	34:B3:A8:E9:D7:B8@wifi1-5GHz connected, signal strength -67	
990	2024-07-29 21:10:36	memory	wireless, info	34:B3:A8:E9:D7:B8@wifi1-5GHz disconnected, connection lost, signal strength -67	
991	2024-07-29 21:10:36	memory	wireless, debug	34:B3:A8:E9:D7:B8@wifi1-5GHz disassociated, connection lost, signal strength -67	
992	2024-07-29 21:10:38	memory	wireless, debug	34:B3:A8:E9:D7:B8@wifi1-5GHz associated, signal strength -67	
993	2024-07-29 21:10:38	memory	wireless, info	34:B3:A8:E9:D7:B8@wifi1-5GHz connected, signal strength -67
3

By default WPA2 and WPA3 are enabled. That gave me a lot of problems.
To troubleshoot (together with you):
What RouterOS version are you running?
Can you share the config?

/export file=anynameyoulike

Remove serial and any other private info

4

Sure, here is the configuration:

# 2024-07-30 14:08:11 by RouterOS 7.15.2
# software id = XXXX-YYYY
#
# model = C53UiG+5HPaxD2HPaxD
# serial number = XXYYYXYXXYX
/interface bridge
add admin-mac=6E:83:F7:B8:DD:6C auto-mac=no comment=defconf name=bridge \
    port-cost-mode=short
/interface wifi
set [ find default-name=wifi1 ] channel.frequency=5650-5850 \
    .reselect-interval=1h configuration.country=Russia .mode=ap .ssid=DIR5 \
    disabled=no name=wifi1-5GHz security.authentication-types=\
    wpa2-psk,wpa3-psk .connect-priority=0
set [ find default-name=wifi2 ] channel.reselect-interval=1h \
    .skip-dfs-channels=10min-cac configuration.country=Russia .mode=ap .ssid=\
    DIR disabled=no name=wifi2-2.4GHz security.authentication-types=\
    wpa2-psk,wpa3-psk .connect-priority=0
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp interface=bridge lease-time=10m name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2 internal-path-cost=10 \
    path-cost=10
add bridge=bridge comment=defconf interface=ether3 internal-path-cost=10 \
    path-cost=10
add bridge=bridge comment=defconf interface=ether4 internal-path-cost=10 \
    path-cost=10
add bridge=bridge comment=defconf interface=ether5 internal-path-cost=10 \
    path-cost=10
add bridge=bridge comment=defconf interface=wifi1-5GHz internal-path-cost=10 \
    path-cost=10
add bridge=bridge comment=defconf interface=wifi2-2.4GHz internal-path-cost=\
    10 path-cost=10
/ip firewall connection tracking
set udp-timeout=10s
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=\
    192.168.88.0
/ip dhcp-client
add comment=defconf interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf dns-server=192.168.88.1 gateway=\
    192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
    invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=\
    "defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
    in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
    ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
    ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
    connection-state=established,related hw-offload=yes
add action=accept chain=forward comment=\
    "defconf: accept established,related, untracked" connection-state=\
    established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
    connection-state=invalid
add action=drop chain=forward comment=\
    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
    connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" \
    ipsec-policy=out,none out-interface-list=WAN
/ipv6 firewall address-list
add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
add address=::1/128 comment="defconf: lo" list=bad_ipv6
add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
add address=100::/64 comment="defconf: discard only " list=bad_ipv6
add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
/ipv6 firewall filter
add action=accept chain=input comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
    invalid
add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
    icmpv6
add action=accept chain=input comment="defconf: accept UDP traceroute" port=\
    33434-33534 protocol=udp
add action=accept chain=input comment=\
    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
    udp src-address=fe80::/10
add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
    protocol=udp
add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
    ipsec-ah
add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
    ipsec-esp
add action=accept chain=input comment=\
    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=input comment=\
    "defconf: drop everything else not coming from LAN" in-interface-list=\
    !LAN
add action=accept chain=forward comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
    connection-state=invalid
add action=drop chain=forward comment=\
    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
add action=drop chain=forward comment=\
    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
    hop-limit=equal:1 protocol=icmpv6
add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
    icmpv6
add action=accept chain=forward comment="defconf: accept HIP" protocol=139
add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
    500,4500 protocol=udp
add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
    ipsec-ah
add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
    ipsec-esp
add action=accept chain=forward comment=\
    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=forward comment=\
    "defconf: drop everything else not coming from LAN" in-interface-list=\
    !LAN
/system clock
set time-zone-name=Europe/Moscow
/system logging
add topics=debug,wireless
/system note
set show-at-login=no
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
5

Was this a problem in 7.14.x?
Have you tried disabling the randomized MAC? What kind of device is this? Have you tried increasing the lease-time? 10 minutes may not be enough.

6 
.connect-priority=0

is IIRC not part of the default configuration.

channel.frequency=5650-5850

isn’t either. So you re not honest as you said

I only renamed the Wi-Fi ID (wifi1-5GHz) and SSID, so it’s unlikely that I misconfigured something.

But basically yes, the config is very vanilla.

What kind of device is this “34:B3:A8:E9:D7:B8”? Is it far away? Does the device report a signal strength?

7

I suggest to remove reselect-interval.

8

I just bought the router several days ago, so it is my first version, it was the latest stable at the moment of installation.

It’s a Windows 11 laptop, I didn’t configure its MAC configuration. Didn’t try increasing the lease-time, I’ll check how I can change it and will try.

Actually yes, I set up the frequency, the default one 5500 doesn’t work for me, some devices couldn’t find the router. I found out that in my country (Russia) there are two ranges that actually work - 5150-5350 and 5650-5850. I set up the frequency (just one range now) and the devices found the network immediately.
What about the connect-priority - I did change some settings, but I hoped I had set them back. Apparently, some settings differ from vanilla. Sorry if my original messages could be confusing.

It’s a Windows 11 laptop. It’s about 7 meters away from the router. There are no obstacles between the router and the laptop. On the laptop I can see that the signal is “strong”. I can find some more accurate numbers if it could help

9

What chipset does the laptop have?

http://forum.mikrotik.com/t/hap-ax3-wireless-problem/172468/1

10

There is a bug in web GUI that prevents the value from removing (quite a recent bug I suppose, maybe appeared in one of the latest versions). I just removed the value using WinBox. We’ll see if it helps

11

It has an AMD CPU, so not an Intel chipset.
The problem with disconnects happen on other devices too. I don’t have WinBox installed on other devices (a laptop and a phone), and most of the time I don’t notice that 5-second lag, but I see them disconnect in logs as well

12

Here are many complaints about disconnects in version 7.15.x. There are several issues, some of which have been fixed in 7.16beta (but not all). That’s why I asked about version 7.14.x.

13

Update - it didn’t help, I met two “connection lost” messages in a row on my laptop just now

14

During these disconnects, system logs appear on my Windows 11 laptop. Here are the details of one logged event (maybe this could be useful):

Log Name:      System
Source:        Netwtw10
Date:          7/30/2024 9:11:12 PM
Event ID:      7021
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      vldmik
Description:
7021 - Connection telemetry fields and analysis usage
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Netwtw10" />
    <EventID Qualifiers="16384">7021</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2024-07-30T18:11:12.8471103Z" />
    <EventRecordID>100406</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="416" />
    <Channel>System</Channel>
    <Computer>vldmik</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Binary>000080000100AC00000000006D1B004000000000000000000000000000000000000000000000000000000000080000000D000000D401C35328FB00004449523500000000000000000000000000000000000000000000000000000000E8E7010042582A2001000000010000000B000000020000004D696B726F5469004335335569472B00300000000000000000000000880906C40400240055520901020200000200000000000000</Binary>
  </EventData>
</Event>

Here is the binary representation of the event (it slightly differs from event to event):

In Words

0000: 00800000 00AC0001 00000000 40001B6D 
0010: 00000000 00000000 00000000 00000000 
0020: 00000000 00000000 00000000 00000008 
0030: 0000000D 53C301D4 0000FB28 35524944 
0040: 00000000 00000000 00000000 00000000 
0050: 00000000 00000000 00000000 0001E7E8 
0060: 202A5842 00000001 00000001 0000000B 
0070: 00000002 726B694D 0069546F 55333543 
0080: 002B4769 00000030 00000000 00000000 
0090: C4060988 00240004 01095255 00000202 
00a0: 00000002 00000000   


In Bytes

0000: 00 00 80 00 01 00 AC 00   ..€...¬.
0008: 00 00 00 00 6D 1B 00 40   ....m..@
0010: 00 00 00 00 00 00 00 00   ........
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........
0028: 00 00 00 00 08 00 00 00   ........
0030: 0D 00 00 00 D4 01 C3 53   ....Ô.ÃS
0038: 28 FB 00 00 44 49 52 35   (û..DIR5
0040: 00 00 00 00 00 00 00 00   ........
0048: 00 00 00 00 00 00 00 00   ........
0050: 00 00 00 00 00 00 00 00   ........
0058: 00 00 00 00 E8 E7 01 00   ....èç..
0060: 42 58 2A 20 01 00 00 00   BX* ....
0068: 01 00 00 00 0B 00 00 00   ........
0070: 02 00 00 00 4D 69 6B 72   ....Mikr
0078: 6F 54 69 00 43 35 33 55   oTi.C53U
0080: 69 47 2B 00 30 00 00 00   iG+.0...
0088: 00 00 00 00 00 00 00 00   ........
0090: 88 09 06 C4 04 00 24 00   ˆ..Ä..$.
0098: 55 52 09 01 02 02 00 00   UR......
00a0: 02 00 00 00 00 00 00 00   ........

As I can see from the logs, these events (with Event ID 7021) happen when a connection is established.

Once today, I had 11 connection-lost-to-connected events in a row within a minute :frowning:

I also used a Wi-Fi analyzer to scan the network from my laptop, and I see that there are no other Wi-Fi networks on 5GHz (so no interference at all)

15

I updated to 7.15.3, reset the router to factory settings, and after the reset I did dome configuration:
Using “Quick set” feature I configured 2 Wi-Fi networks with same SSID “DIR”, set up the password, didn’t set up the country.
After that I configured the frequency of the 5GHz network to 5650-5850, disabled WPA3 PSK, leaving the WPA2 PSK enabled. Enabled debug logs. Set up the “Reselect Interval” to fix that GUI bug.
Still see disconnects and still have no clue what’s going on and how to troubleshoot it :frowning:

Here is the config I have right now:

# 2024-08-06 19:24:34 by RouterOS 7.15.3
# software id = 2277-AZ6C
#
# model = C53UiG+5HPaxD2HPaxD
# serial number = XXYYYXYXXYX
/interface bridge
add admin-mac=6E:83:F7:B8:DD:6C auto-mac=no comment=defconf name=bridge
/interface wifi
set [ find default-name=wifi1 ] channel.band=5ghz-ax .frequency=5650-5850 \
    .reselect-interval=1h .skip-dfs-channels=10min-cac .width=20/40/80mhz \
    configuration.mode=ap .ssid=DIR disabled=no \
    security.authentication-types=wpa2-psk .ft=yes .ft-over-ds=yes
set [ find default-name=wifi2 ] channel.band=2ghz-ax .reselect-interval=1h \
    .skip-dfs-channels=10min-cac .width=20/40mhz configuration.mode=ap .ssid=\
    DIR disabled=no security.authentication-types=wpa2-psk .ft=yes \
    .ft-over-ds=yes
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp interface=bridge name=defconf
/disk settings
set auto-media-interface=bridge auto-media-sharing=yes auto-smb-sharing=yes
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=wifi1
add bridge=bridge comment=defconf interface=wifi2
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=\
    192.168.88.0
/ip dhcp-client
add comment=defconf interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf dns-server=192.168.88.1 gateway=\
    192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
    invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=\
    "defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
    in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
    ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
    ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
    connection-state=established,related hw-offload=yes
add action=accept chain=forward comment=\
    "defconf: accept established,related, untracked" connection-state=\
    established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
    connection-state=invalid
add action=drop chain=forward comment=\
    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
    connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" \
    ipsec-policy=out,none out-interface-list=WAN
/ipv6 firewall address-list
add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
add address=::1/128 comment="defconf: lo" list=bad_ipv6
add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
add address=100::/64 comment="defconf: discard only " list=bad_ipv6
add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
/ipv6 firewall filter
add action=accept chain=input comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
    invalid
add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
    icmpv6
add action=accept chain=input comment="defconf: accept UDP traceroute" \
    dst-port=33434-33534 protocol=udp
add action=accept chain=input comment=\
    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
    udp src-address=fe80::/10
add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
    protocol=udp
add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
    ipsec-ah
add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
    ipsec-esp
add action=accept chain=input comment=\
    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=input comment=\
    "defconf: drop everything else not coming from LAN" in-interface-list=\
    !LAN
add action=accept chain=forward comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
    connection-state=invalid
add action=drop chain=forward comment=\
    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
add action=drop chain=forward comment=\
    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
    hop-limit=equal:1 protocol=icmpv6
add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
    icmpv6
add action=accept chain=forward comment="defconf: accept HIP" protocol=139
add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
    500,4500 protocol=udp
add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
    ipsec-ah
add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
    ipsec-esp
add action=accept chain=forward comment=\
    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=forward comment=\
    "defconf: drop everything else not coming from LAN" in-interface-list=\
    !LAN
/system clock
set time-zone-name=Europe/Moscow
/system logging
add topics=wireless,debug
/system note
set show-at-login=no
/system routerboard wps-button
set enabled=yes on-event=wps-accept
/system script
add comment=defconf dont-require-permissions=no name=wps-accept owner=*sys \
    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
    source="\r\
    \n   :foreach iface in=[/interface/wifi find where (configuration.mode=\"a\
    p\" && disabled=no)] do={\r\
    \n     /interface/wifi wps-push-button \$iface;}\r\
    \n "
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
16

I’m experiencing the same issue. I also have the MikroTik hAP ax3, but setup as a switch and access point, as i have the RB5009 as the main router. The ax3 is running RouterOS 7.15.3 and wifi-qcom 7.15.3.

This is my config for the ax3:

/interface bridge
add admin-mac=00:00:00:00:00:00 auto-mac=no comment=defconf name=bridge
/interface ethernet
set [ find default-name=ether1 ] poe-out=off
/interface wifi
set [ find default-name=wifi1 ] channel.skip-dfs-channels=10min-cac configuration.country=Denmark .mode=ap .ssid=mbach disabled=no security.authentication-types=wpa2-psk,wpa3-psk \
    .connect-priority=0 .ft=yes .ft-over-ds=yes
set [ find default-name=wifi2 ] channel.skip-dfs-channels=10min-cac configuration.country=Denmark .mode=ap .ssid=mbach disabled=no security.authentication-types=wpa2-psk,wpa3-psk \
    .connect-priority=0 .ft=yes .ft-over-ds=yes
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=wifi1
add bridge=bridge comment=defconf interface=wifi2
add bridge=bridge interface=ether1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/ipv6 settings
set disable-ipv6=yes
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf disabled=yes interface=ether1 list=WAN
/ip dhcp-client
add comment=defconf interface=bridge
/ip dhcp-server network
add address=192.168.88.0/24 gateway=192.168.88.1

And here is the last 10 minutes of the logs:

17:21:09 wireless,info AA:AA:AA:AA:AA:AA@wifi2 disconnected, connection lost, signal strength -63
17:21:12 wireless,info AA:AA:AA:AA:AA:AA@wifi2 connected, signal strength -61
17:21:46 wireless,info AA:AA:AA:AA:AA:AA@wifi2 disconnected, connection lost, signal strength -63
17:21:48 wireless,info AA:AA:AA:AA:AA:AA@wifi2 connected, signal strength -60
17:22:22 wireless,info AA:AA:AA:AA:AA:AA@wifi2 disconnected, connection lost, signal strength -63
17:22:25 wireless,info AA:AA:AA:AA:AA:AA@wifi2 connected, signal strength -61
17:22:59 wireless,info AA:AA:AA:AA:AA:AA@wifi2 disconnected, connection lost, signal strength -63
17:23:01 wireless,info AA:AA:AA:AA:AA:AA@wifi2 connected, signal strength -60
17:23:35 wireless,info AA:AA:AA:AA:AA:AA@wifi2 disconnected, connection lost, signal strength -63
17:23:38 wireless,info AA:AA:AA:AA:AA:AA@wifi2 connected, signal strength -61
17:24:12 wireless,info AA:AA:AA:AA:AA:AA@wifi2 disconnected, connection lost, signal strength -62
17:24:15 wireless,info AA:AA:AA:AA:AA:AA@wifi2 connected, signal strength -60
17:24:48 wireless,info AA:AA:AA:AA:AA:AA@wifi2 disconnected, connection lost, signal strength -62
17:24:51 wireless,info AA:AA:AA:AA:AA:AA@wifi2 connected, signal strength -60
17:25:25 wireless,info AA:AA:AA:AA:AA:AA@wifi2 disconnected, connection lost, signal strength -63
17:25:28 wireless,info AA:AA:AA:AA:AA:AA@wifi2 connected, signal strength -61
17:25:34 wireless,info BB:BB:BB:BB:BB:BB@wifi1 disconnected, connection lost, signal strength -57
17:26:02 wireless,info AA:AA:AA:AA:AA:AA@wifi2 disconnected, connection lost, signal strength -63
17:26:05 wireless,info AA:AA:AA:AA:AA:AA@wifi2 connected, signal strength -61
17:26:38 wireless,info AA:AA:AA:AA:AA:AA@wifi2 disconnected, connection lost, signal strength -63
17:26:41 wireless,info AA:AA:AA:AA:AA:AA@wifi2 connected, signal strength -61
17:27:15 wireless,info AA:AA:AA:AA:AA:AA@wifi2 disconnected, connection lost, signal strength -63
17:27:18 wireless,info AA:AA:AA:AA:AA:AA@wifi2 connected, signal strength -61
17:27:45 wireless,info CC:CC:CC:CC:CC:CC@wifi1 disconnected, connection lost, signal strength -57
17:27:52 wireless,info AA:AA:AA:AA:AA:AA@wifi2 disconnected, connection lost, signal strength -63
17:27:54 wireless,info AA:AA:AA:AA:AA:AA@wifi2 connected, signal strength -62
17:28:28 wireless,info AA:AA:AA:AA:AA:AA@wifi2 disconnected, connection lost, signal strength -64
17:28:31 wireless,info AA:AA:AA:AA:AA:AA@wifi2 connected, signal strength -61
17:29:05 wireless,info AA:AA:AA:AA:AA:AA@wifi2 disconnected, connection lost, signal strength -63
17:29:08 wireless,info AA:AA:AA:AA:AA:AA@wifi2 connected, signal strength -61
17:29:31 wireless,info BB:BB:BB:BB:BB:BB@wifi1 connected, signal strength -57
17:29:39 wireless,info CC:CC:CC:CC:CC:CC@wifi1 connected, signal strength -53
17:29:41 wireless,info AA:AA:AA:AA:AA:AA@wifi2 disconnected, connection lost, signal strength -63
17:29:44 wireless,info AA:AA:AA:AA:AA:AA@wifi2 connected, signal strength -61
17:30:18 wireless,info AA:AA:AA:AA:AA:AA@wifi2 disconnected, connection lost, signal strength -63
17

Can you try setting encryption to, mbach:

encryption=ccmp,gcmp,ccmp-256,gcmp-256

And use wpa2-psk only.

And enable debug, wifi logging to get some additional information.

18

Was having the same issues - tried all the “fixes” suggested all over the forum and just about any other setting I could think of but nothing solved this.

In the end I did a downgrade to 7.14.3 and all is working again as expected without issues.

19

I’ve updated both WIFI to the following:

/interface wifi
set [ find default-name=wifi1 ] channel.skip-dfs-channels=10min-cac configuration.country=Denmark .mode=ap .ssid=mbach disabled=no security.authentication-types=wpa2-psk \
    .connect-priority=0 .encryption=ccmp,gcmp,ccmp-256,gcmp-256 .ft=yes .ft-over-ds=yes
set [ find default-name=wifi2 ] channel.skip-dfs-channels=10min-cac configuration.country=Denmark .mode=ap .ssid=mbach disabled=no security.authentication-types=wpa2-psk \
    .connect-priority=0 .encryption=ccmp,gcmp,ccmp-256,gcmp-256 .ft=yes .ft-over-ds=yes
/system logging
add topics=wireless,debug

Also updated logging to include wireless and debug, but it does not seem to have changed anything:

18:43:57 wireless,info AA:AA:AA:AA:AA:AA@wifi2 disconnected, connection lost, signal strength -62
18:43:57 wireless,debug AA:AA:AA:AA:AA:AA@wifi2 disassociated, connection lost, signal strength -62
18:44:00 wireless,debug AA:AA:AA:AA:AA:AA@wifi2 associated, signal strength -60
18:44:00 wireless,info AA:AA:AA:AA:AA:AA@wifi2 connected, signal strength -60
18:44:34 wireless,info AA:AA:AA:AA:AA:AA@wifi2 disconnected, connection lost, signal strength -62
18:44:34 wireless,debug AA:AA:AA:AA:AA:AA@wifi2 disassociated, connection lost, signal strength -62
18:44:37 wireless,debug AA:AA:AA:AA:AA:AA@wifi2 associated, signal strength -60
18:44:37 wireless,info AA:AA:AA:AA:AA:AA@wifi2 connected, signal strength -60
18:45:11 wireless,info AA:AA:AA:AA:AA:AA@wifi2 disconnected, connection lost, signal strength -62
18:45:11 wireless,debug AA:AA:AA:AA:AA:AA@wifi2 disassociated, connection lost, signal strength -62
18:45:13 wireless,debug AA:AA:AA:AA:AA:AA@wifi2 associated, signal strength -59
18:45:13 wireless,info AA:AA:AA:AA:AA:AA@wifi2 connected, signal strength -59
18:45:15 wireless,info BB:BB:BB:BB:BB:BB@wifi1 disconnected, connection lost, signal strength -61
18:45:15 wireless,debug BB:BB:BB:BB:BB:BB@wifi1 disassociated, connection lost, signal strength -61
18:45:47 wireless,info AA:AA:AA:AA:AA:AA@wifi2 disconnected, connection lost, signal strength -62
18:45:47 wireless,debug AA:AA:AA:AA:AA:AA@wifi2 disassociated, connection lost, signal strength -62
18:45:50 wireless,debug AA:AA:AA:AA:AA:AA@wifi2 associated, signal strength -58
18:45:50 wireless,info AA:AA:AA:AA:AA:AA@wifi2 connected, signal strength -58
18:46:24 wireless,info AA:AA:AA:AA:AA:AA@wifi2 disconnected, connection lost, signal strength -62
18:46:24 wireless,debug AA:AA:AA:AA:AA:AA@wifi2 disassociated, connection lost, signal strength -62
18:46:26 wireless,debug AA:AA:AA:AA:AA:AA@wifi2 associated, signal strength -60
18:46:26 wireless,info AA:AA:AA:AA:AA:AA@wifi2 connected, signal strength -60
18:46:59 wireless,debug BB:BB:BB:BB:BB:BB@wifi1 associated, signal strength -55
18:47:00 wireless,info BB:BB:BB:BB:BB:BB@wifi1 connected, signal strength -55
18:47:00 wireless,info AA:AA:AA:AA:AA:AA@wifi2 disconnected, connection lost, signal strength -62
18:47:00 wireless,debug AA:AA:AA:AA:AA:AA@wifi2 disassociated, connection lost, signal strength -62
18:47:03 wireless,debug AA:AA:AA:AA:AA:AA@wifi2 associated, signal strength -60
18:47:03 wireless,info AA:AA:AA:AA:AA:AA@wifi2 connected, signal strength -60
18:47:37 wireless,info AA:AA:AA:AA:AA:AA@wifi2 disconnected, connection lost, signal strength -63
18:47:37 wireless,debug AA:AA:AA:AA:AA:AA@wifi2 disassociated, connection lost, signal strength -63
18:47:40 wireless,debug AA:AA:AA:AA:AA:AA@wifi2 associated, signal strength -61
18:47:40 wireless,info AA:AA:AA:AA:AA:AA@wifi2 connected, signal strength -60
20

Downgrading to 7.14.3 actually worked. I did it a few days ago and haven’t had any issues since