wireless, problem, android

RouterOS Wireless Networking
1

Hi folks, I have problem with one of my clients.
My customer have Samsung A12 phone with factory android in it.
Problem is he can not be connect to home wireless network.
Base device was RB2011, tested also with RBD53iG-5HacD2HnD (hap ac3) and rb951.

Problem is always the same : suddenly is client disconnect from AP,
log says : disconnected, received deauth: class 3 frame received

This is happening with all of my mikrotik devices.

Tested with “clear” configuration. Or even completly without security . Still the same behaviour.

With crappy devices like tenda, tplink, asus it is working like charm.

I also tested various wireless setting : channel, norm (b,g,n), wmm, freq.mode, ht, preamble mode…

Have someone any advice ?

This phone can connect to network but it is wery unstable, phone is disconnected wery soon with log message ABOVE.

Thx, any help very appreciated.

2

Configure it completely:

  • fixed channel (choose wise from 1, 6 or 11 for 2.4GHz band)
  • WAP2-AES (only)
  • 20MHz bandwidth on 2.4GHz
  • Disable any legacy like 802.11a/b

After configuring these settings, forget the network on your mobile device and add it.

What RouterOS and firmware version are you running?

3

edit, adding export from device
android-problem-ap.rsc (2.79 KB)

4

tested with ROS long term 6.47.9, “stable” 6.48.1 and last shots was on 6.48.2
problem persist

5

a) channel is fixed on value with lowest usage in that environment
b) yeah, tested, wpa2 psk aes and bunch of no-security testing
c) 20Mhz is already set, this value is used by me everywhere
d) 802.11N was mostly tested


THX for helping me...

6

Then the only thing I can think of is interference…is Wifi crowded/saturated?

7

yeah, there is about 12 another APs and no such free channel.


But it is no make any sense why this work flawlessly with Asus router under same condition.

8

Try it with Tkip instead of AES. Some Xiaomi models have the same problem, solved by switching to Tkip.

9

Though connection wise a good advice…I would never ever use TKIP.

10

Agreed. I made that suggestion for testing only, the eliminate a possible cause.

11

Guys you are very helpful but as I wrote, I already tested this scenario even without any security, so I “known” this problem is not related to security profile settings…

12

You have g only enabled on 2ghz and also allow-sharedkey=yes.

I would look at modifying those first.

13

hi, UP, anyone
nobody have same issues ?

14

Hello,

Please send supout.rif file to MikroTik support.
https://mikrotik.com/support

15

paste this on terminal and retry.

DO NOT OMIT { and } at start/end

{
/interface bridge
set [ find ] protocol=none

/interface ethernet
reset-mac-address [ find default-name=ether5 ]     
set [ find ] loop-protect=default

/interface wireless
set [ find default-name=wlan1 ] adaptive-noise-immunity=none allow-sharedkey=false preamble-mode=both
set [ find ] security-profile=default wmm-support=disabled

/interface wireless security-profiles
set [ find ] authentication-types="" disable-pmkid=no eap-methods=\
    passthrough group-ciphers=aes-ccm group-key-update=5m interim-update=0s \
    management-protection=disabled management-protection-key="" mode=none \
    mschapv2-password="" mschapv2-username="" \
    radius-called-format=mac:ssid radius-eap-accounting=no \
    radius-mac-accounting=no radius-mac-authentication=no radius-mac-caching=\
    disabled radius-mac-format=XX:XX:XX:XX:XX:XX radius-mac-mode=as-username \
    static-algo-0=none static-algo-1=none static-algo-2=none static-algo-3=none \
    static-key-0="" static-key-1="" static-key-2="" static-key-3="" \
    static-sta-private-algo=none static-sta-private-key="" static-transmit-key=\
    key-0 supplicant-identity=MikroTik tls-certificate=none tls-mode=\
    no-certificates unicast-ciphers=aes-ccm wpa-pre-shared-key="" \
  }
16

hi, thx for helping me
all set

I will test it...and let you known.

17

P.S.:

I hope the config is like the config on 18th, and you do not have modified some other things fom the 18th.

18

Maybe for someone it will save a tons of time for troubleshooting!
I had exact problem as described, no Mikrotik wifi tweaking helped. Some phones was working great, some with minor problems, mine Xiaomi(Note 9 Pro) with more problems( no working Play Store, some apps not connecting to internet) at the same time standard web browsing(Chrome) works!
My network consists of 3 routers, 2 Mikrotik and 1 Huawei(B535-232) all interconnected by Lan cables. Find out that Huawei router in LAN mode (4x LAN ports) was making some noise that disturbed all netowork and WiFis (2xMikrotik SSID + 2x HuaweiSSID). Reconfigured Huawei router to Dynamic mode(one port works as WAN, other 3x LAN). After reconfiguration to Dynamic mode no problems!!!
Now I have two separated LANs/WiFis but it works and fits to me.

19

/interface wireless
set [ find default-name=wlan1 ] adaptive-noise-immunity=none allow-sharedkey=false preamble-mode=both
set [ find ] security-profile=default wmm-support=disabled

i really what to know what this does [allow-sharedkey]
Can you please add more.


/interface wireless security-profiles
set [ find ] authentication-types=“” disable-pmkid=no eap-methods=
passthrough group-ciphers=aes-ccm group-key-update=5m interim-update=0s
management-protection=disabled management-protection-key=“” mode=none
mschapv2-password=“” mschapv2-username=“”
radius-called-format=mac:ssid radius-eap-accounting=no
radius-mac-accounting=no radius-mac-authentication=no radius-mac-caching=
disabled radius-mac-format=XX:XX:XX:XX:XX:XX radius-mac-mode=as-username
static-algo-0=none static-algo-1=none static-algo-2=none static-algo-3=none
static-key-0=“” static-key-1=“” static-key-2=“” static-key-3=“”
static-sta-private-algo=none static-sta-private-key=“” static-transmit-key=
key-0 supplicant-identity=MikroTik tls-certificate=none tls-mode=
no-certificates unicast-ciphers=aes-ccm wpa-pre-shared-key=“”
}
[/code]

is that same as default settings?

20

I have a Xiaomi 11T phone and the same problem when trying to login to hAPac3 on 5GHz. I tried to activate CAPsman and the login was successful. I spent two days searching for the difference between configuration via CAPsman and without it. The problem is that by default, when configuring the WLAN Interface, menu “Advanced” - “Distance” is set to “dynamic.” After I changed it to “indoors”, the phone connects quickly and without problems. In the “dynamics” settings, the phone does not have time to “negotiate” with the MKT.
Solved for me …

Description of the item from the MKT manual:
distance (integer | dynamic | indoors; Default: dynamic)

How long to wait for confirmation of unicast frames (ACKs) before considering transmission unsuccessful, or in short ACK-Timeout. Distance value has these behaviors:

Dynamic - causes AP to detect and use the smallest timeout that works with all connected clients.
Indoor - uses the default ACK timeout value that the hardware chip manufacturer has set.
Number - uses the input value in formula: ACK-timeout = ((distance * 1000) + 299) / 300 us;

Acknowledgments are not used in Nstreme / NV2 protocols.