Wireless station scanning issue

Hello everyone,

Pretty new to Mikrotik, I have a quite specific use-case I want to address, but I can’t find a way to solve my configuration issues. Let me explain the use-case :

I have a Mikrotik AP (hAP ax²) I want to use as a Wireless station to connect to a remote wireless WAN router. It would work fine if the wireless router stayed in range and never changed its frequency. However, it is sometimes out of range from the Mikrotik AP, and when it comes back in range, it often changed its frequency in the meantime (there is quite a lot of neighbors with SSID on overlapping channels).

And in this case, my Miktrotik AP seems to be unable to efficiently scan the frequencies, and reconnect to the remote router.

I tried tweaking in the “channels” section to find something acceptable, but it does not work as expected :

  • 2412-2472:5 (ranging from frequencies 2412 to 2472 with a stepping of 5MHz each time)
  • I forced the band to use the 802.11n standard (the max supported by the remote router)
  • I pray each time the remote router comes back in range ?

Do you know a way of achieving this kind of use-case efficiently ?

Thanks a lot if you have any insight.

Regards,

Tournesol

I made some additional tests.

If I use the scan feature, I can see all the available SSID in range. If I copy the frequency values in the “master” wifi interface (in my case, “wifi2”), it works almost instantly.

However, if I wait for my hAP ax² to do this job by itself, it fails almost every time.

In a terminal session, I noticed that the “station” interface has a field named “available-channels”, and it only displays one value.

[admin@MikroTik] > interface/wifiwave2/monitor client-sori2  
state: scanning
channel: 2462/n/eC
ap-address: D4:38:9C:A6:DB:E1
tx-power: 15
available-channels: 2462/n/eC

Not the one used by the remote router, unfortunately (check for “sori2”) :

[admin@MikroTik] > interface/wifiwave2/scan wifi2 
Flags: A - ACTIVE
Columns: ADDRESS, SSID, CHANNEL, SECURITY, SIGNAL, STA-COUNT
  ADDRESS            SSID                  CHANNEL     SECURITY           SIGNAL  STA-COUNT
A 84:1E:A3:FD:F9:30  Livebox-F930          2462/n      WPA2-PSK           -93             2
A 00:24:D4:70:7D:34  FreeWifi_secure       2462/n      WPA2-EAP           -76             0
A 70:F8:2B:1C:D9:12  Livebox-9423          2462/n      WPA2-PSK           -95             0
A 30:7E:CB:6B:EB:6C  SFR_EB68              2462/n      WPA-PSK            -95                    
A 2A:F5:A2:A4:0F:25                        2412/n      WPA2-PSK           -90              
A 6C:61:F4:4C:A6:2E  SFR_A628              2412/n      WPA2-PSK/WPA-PSK   -95             6
A 24:F5:A2:A4:0F:25  Velop Freebox-44924B  2412/n      WPA2-PSK           -88              
A 58:FC:20:C9:F2:D0  SFR_F2CF              2412/ax     WPA2-PSK/WPA-PSK   -93             1
A D4:38:9C:A6:DB:E1  sori2                 2417/n      WPA2-PSK           -48              
A 2A:F5:A2:A4:0B:41                        2427/n/Ce   WPA2-PSK           -82              
A 30:7E:CB:4D:FC:AC  SFR_FCA8              2437/n      WPA-PSK            -94              
A 4E:36:06:0A:7A:94  FREEBOX_NATHALIE_U7   2442/n/Ce   WPA-PSK            -84             0
A 4E:36:06:0A:7A:95                        2442/n/Ce   WPA2-PSK           -84             0
A 4E:36:06:0A:7A:96  FreeWifi_secure       2442/n/Ce   WPA-EAP            -85             0     
A 68:A3:78:08:81:EA  FREEBOX_MOHAMED_9C    2432/n      WPA2-PSK/WPA-PSK   -94             1
A 7C:C1:77:39:49:70  Livebox-4970          2437/n      WPA2-PSK           -96             0
A 22:66:CF:EE:84:D1                        2437/n      WPA3-PSK           -95              
A 68:A3:78:74:D3:A1  freebox_YH            2462/n      WPA2-PSK/WPA-PSK   -95             0
A 00:24:D4:70:7D:33  Freebox-707D32        2462/n      WPA2-PSK           -76             0
A AC:B6:87:00:35:80  Livebox-3580          2462/n      WPA2-PSK           -96             0

Hi,

In your second post you mentioned the master interface as being an AP.

Make the master interface the Station.
It should then automatically chase the remote AP it wants to connect too.

The downside of this option is that the now Slave AP on this router, will not be accessible until the Station part is reconnected to the remote AP.

An alternative might be do some sort of netwatch event and scripting to find the remote AP and change frequency to match it.
when it disconnects. (Perhaps there is something out there already that does this.)

Hi !

Thank you for your reply :smiley:

It seems to be better indeed.

It means however that I need to set my SSID on the master interface and not on a sub-interface. And I am therefore facing another issue as it seems that I cannot bind a DHCP Client configuration to my master interface (which has the tags Master, Slave and Bound) as it is a slave interface ? I’m not sure how I can address that.

Now, imagine I want to extend my use case to using multiple remote WAN routers like the one I’m currently testing on. They would not be used at the same time, but I would like my hAP ax² to be able to choose anyone of these remote WAN router (which have each a different SSID). Would this be something feasible ? Need scripting ?

Thanks in advance for the help :slight_smile:

When using wireless interface as router upstream interface, it should not be part of any bridge. Only when wireless interface is stand-alone, it can be used directly for L3 stuff (e.g. DHCP client).

To allow wireless interface to connect to different APs, you configure them in interface/wifiwave2/access-list/.
To reiterate warning by @rplant: when master interface is not connected to AP, the slave interface won’t be able to support working AP. It should be possible to work this around using some scripts, but I’d suggest to use dual-band device instead. You’d dedicate 2.4GHz radio to be used as station (to whichever AP) and the 5GHz woukd be dedicated to AP duties … which would work regardless connection state of 2.4GHz interface. In addition: using single radio in repeater mode (which essentislly is what you’re trying to achieve, you just use separate security parameters on virtual AP) means much higher airtime consumption (each frame occupies same frequency channel twice in stead of once), which degrades service to all stations connected to master AP as well.

Hi !

Thanks again for the reply. I discover the “access-list” feature, and it seems really interesting. I tried this :

[admin@MikroTik] > interface/wifiwave2/access-list/print detail  

Flags: X - disabled 

 0   ;;; Station SSID ACL - sori
     interface=wifi2 signal-range=-100..100 ssid-regexp="sori" time=0s-23h59m59s action=accept passphrase="xxxxxxxx" 

 1   ;;; Station SSID ACL - sori2
     interface=wifi2 signal-range=-100..100 ssid-regexp="sori2" time=0s-23h59m59s action=accept passphrase="xxxxxxxx" 

 2   ;;; Station SSID ACL - sori3
     interface=wifi2 signal-range=-100..100 ssid-regexp="sori3" time=0s-23h59m59s action=accept passphrase="xxxxxxxx"

But unfortunately, it does not work. Am I doing something wrong ?

For your warning, it noticed that quite quickly. Fortunately for me, I do not use the hAP ax² for it’s AP role : I have another AP dedicated for this. I got the hAP for its highly customizable configuration (most vendors do not allow this level of configuration).

I finally found a solution to my problem : with 3 different possible WAN routers, I know that one of them is 5GHz compliant (wifi6), while the other ones are only 802.11n on the 2GHz frequencies.

Fortunately for me, these last 2 are managed by the same person and they never are running at the same time : we managed to find a common ground, and both WAN routers are now configured with the same SSID and the same Passphrase.

The 2GHz wireless interface is therefore dedicated to these 2 routers, while the 5GHz one handles the Wifi6-compliant WAN router. Both wireless interface are now in “station” mode, and it works very well.

I would sill want to understand how the Access-List work, if anyone has the time (and knowledge) ?

Thanks a lot ! You did help me a lot ! :smiley: