Wifi Issue - Android devices!

RouterOS Wireless Networking
1

Hi,
All devices can connect to WIFI except Android devices.

The only way Android device can connect is if I set the mode to none under the Security profile instead of Dynamic keys.

I was able to connect the Android device once, but if I disconnect and reconnect to WIFI, it would say Incorrect Password. And I can confirm the password is correct and it’s the same one with which I could connect other devices.

Any help here would be appreciated.

2

without your config and settings its impossible to help.
Try to explain your setup, which firmware the devices running? Are you using Capsman?

export file=anynameyoulike

and remove all sensitive information (serial, etc.)

3

I have attached the config file.

I have one router(RB3011UiAS) and 1 Cap AC.

Nothing fancy on either Router or AP, no VLANs or VPNs or anything like such.

AP has 3 SSIDs each 2.4G and 5 G band. Out of 3 SSIDs, the Guest Network is open.

All the devices such as Windows devices and Iphones can connect to all the SSIDs except Android phones.

Android phones can only connect to the SSID that is open, no password. For the other two SSIDs, the Android phone keeps saying Incorrect Password, tried connecting different 6-7 Android phones.
ApConfig.rsc (5.96 KB)

4

delete/forget the wifi from manage on devices reconnect
enter passphrase again
also no wpa3 android not really like it

5 
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce \
    disabled=no distance=indoors frequency=auto hide-ssid=yes installation=\
    indoor mode=ap-bridge ssid=Mikrotik wireless-protocol=802.11
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=\
    20/40/80mhz-Ceee disabled=no distance=indoors frequency=auto hide-ssid=\
    yes installation=indoor mode=ap-bridge ssid=Mikrotik wireless-protocol=\
    802.11

You probably want to have 20MHz channelwidth on your 2GHz radio.
You may reconsider using legacy protocols (802.11a and 802.11b).

/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
    dynamic-keys supplicant-identity=MikroTik
add authentication-types=wpa-psk,wpa2-psk name="Guest Profile" \
    supplicant-identity=""
add authentication-types=wpa-psk,wpa2-psk,wpa-eap,wpa2-eap group-ciphers=\
    tkip,aes-ccm mode=dynamic-keys name="Corp Profile" supplicant-identity="" \
    unicast-ciphers=tkip,aes-ccm

If guest is open, why did you set authentication-type?
Remove wpa-psk, that should not be used anymore.
After removing wpa-psk, you van also remove tkip from group-ciphers (and leave aes-ccm).
As far as I know, psk and eap should not be used together. And that is probably causing the problems.

6

I have made all the changed you mentioned but still have the same issue.

And yes, the Guest profile is not using any authentication type, the mode is set to none.

7

Please post the updated config.

8

Hello - was there ever a resolution to this problem? I have the same issue….