Community discussions

 
User avatar
dynek
Member Candidate
Member Candidate
Topic Author
Posts: 193
Joined: Tue Jan 21, 2014 10:03 pm

Requests wrong RSN group cipher

Wed Apr 18, 2018 9:33 pm

Hello,

I have setup capsman with hap ac^2 devices and a couple of devices connect fine to the wireless network(s).
However my macbook seems to be triggering one odd thing... "2.4Ghz-AP_Basement-1-1 rejected, requests wrong RSN group cipher".

Google doesn't say much about that - what can I do ?

Thank you
 
hapi
Member Candidate
Member Candidate
Posts: 223
Joined: Fri Mar 11, 2011 11:21 am
Location: Czech Republic

Re: Requests wrong RSN group cipher

Sun Apr 29, 2018 3:39 pm

same problem

13:51:55 caps,info 8C:0D:76:F9:AE:3E@cap2-SXT Lite2-1 disconnected, extensive data loss
13:53:25 caps,info 8C:0D:76:F9:AE:3E@cap2-SXT Lite2-1 rejected, requests wrong RSN group cipher
13:53:34 caps,info 8C:0D:76:F9:AE:3E@cap2-SXT Lite2-1 rejected, requests wrong RSN group cipher
13:53:44 caps,info 8C:0D:76:F9:AE:3E@cap2-SXT Lite2-1 rejected, requests wrong RSN group cipher
13:53:54 caps,info 8C:0D:76:F9:AE:3E@cap2-SXT Lite2-1 rejected, requests wrong RSN group cipher
13:54:14 caps,info 8C:0D:76:F9:AE:3E@cap2-hAP lite-1 rejected, requests wrong RSN group cipher
13:54:24 caps,info 8C:0D:76:F9:AE:3E@cap2-hAP lite-1 rejected, requests wrong RSN group cipher
13:54:24 caps,info 8C:0D:76:F9:AE:3E@cap2-SXT Lite2-1 rejected, requests wrong RSN group cipher
13:54:34 caps,info 8C:0D:76:F9:AE:3E@cap2-hAP lite-1 rejected, requests wrong RSN group cipher
13:54:44 caps,info 8C:0D:76:F9:AE:3E@cap2-hAP lite-1 rejected, requests wrong RSN group cipher
13:54:44 caps,info 8C:0D:76:F9:AE:3E@cap2-SXT Lite2-1 rejected, requests wrong RSN group cipher
13:54:56 caps,info 8C:0D:76:F9:AE:3E@cap2-hAP lite-1 rejected, requests wrong RSN group cipher
13:54:56 caps,info 8C:0D:76:F9:AE:3E@cap2-SXT Lite2-1 rejected, requests wrong RSN group cipher
13:55:10 caps,info 8C:0D:76:F9:AE:3E@cap2-hAP lite-1 rejected, requests wrong RSN group cipher
13:55:10 caps,info 8C:0D:76:F9:AE:3E@cap2-SXT Lite2-1 rejected, requests wrong RSN group cipher
13:55:20 caps,info 8C:0D:76:F9:AE:3E@cap2-hAP lite-1 rejected, requests wrong RSN group cipher
13:55:20 caps,info 8C:0D:76:F9:AE:3E@cap2-SXT Lite2-1 rejected, requests wrong RSN group cipher
13:55:30 caps,info 8C:0D:76:F9:AE:3E@cap2-hAP lite-1 rejected, requests wrong RSN group cipher
13:55:30 caps,info 8C:0D:76:F9:AE:3E@cap2-SXT Lite2-1 rejected, requests wrong RSN group cipher
13:55:40 caps,info 8C:0D:76:F9:AE:3E@cap2-hAP lite-1 rejected, requests wrong RSN group cipher
13:55:40 caps,info 8C:0D:76:F9:AE:3E@cap2-SXT Lite2-1 rejected, requests wrong RSN group cipher
13:55:50 caps,info 8C:0D:76:F9:AE:3E@cap2-hAP lite-1 rejected, requests wrong RSN group cipher
13:55:50 caps,info 8C:0D:76:F9:AE:3E@cap2-SXT Lite2-1 rejected, requests wrong RSN group cipher
 
planetcaravan
Member Candidate
Member Candidate
Posts: 265
Joined: Tue Aug 25, 2009 5:33 pm

Re: Requests wrong RSN group cipher

Mon May 06, 2019 10:05 pm

same problem also to me:
20:08:42 caps,info 30:35:AD:AC:28:08@Local-5GHz rejected, requests wrong RSN group cipher 
20:08:42 caps,info 30:35:AD:AC:28:08@Local-2GHz rejected, requests wrong RSN group cipher

My config:
RouterBOARD 962UiGS-5HacT2HnT
RouterOS version: 6.43.14

/caps-man channel
add band=5ghz-a/n/ac control-channel-width=20mhz extension-channel=XXXX frequency=5320 name=5GHz
add band=2ghz-onlyn control-channel-width=20mhz frequency=2467 name=2GHz
add band=5ghz-a/n/ac control-channel-width=20mhz extension-channel=XXXX frequency=5180 name=5180
add band=5ghz-a/n/ac control-channel-width=20mhz extension-channel=Ce frequency=5200 name=5200
/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm,tkip group-encryption=tkip name=key passphrase=b1122334455m
 
Exiver
Member Candidate
Member Candidate
Posts: 113
Joined: Sat Jan 10, 2015 6:45 pm

Re: Requests wrong RSN group cipher

Mon May 06, 2019 11:15 pm

@planetcaravan:

Please dont use tkip as cipher if you are using only wpa/wpa2.

Set encryption=aes-ccm and group-encryption=aes-ccm and check if that solves your problem.

@others:
We need to see your configuration. Otherwise we are just guessing into the blue which doesnt help you and just wastes everyones time ;-)

Edit: Just saw this is an older thread. So just ignore the second part..
 
planetcaravan
Member Candidate
Member Candidate
Posts: 265
Joined: Tue Aug 25, 2009 5:33 pm

Re: Requests wrong RSN group cipher

Mon May 06, 2019 11:26 pm

@planetcaravan:

Please dont use tkip as cipher if you are using only wpa/wpa2.

Set encryption=aes-ccm and group-encryption=aes-ccm and check if that solves your problem.

Is it ok?
/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
    name=chiave passphrase=b1122334455m
 
Exiver
Member Candidate
Member Candidate
Posts: 113
Joined: Sat Jan 10, 2015 6:45 pm

Re: Requests wrong RSN group cipher

Mon May 06, 2019 11:38 pm

As far as i can say: yes. You most likely need to re-provision the clients.

Ps.: Your wpa-passphrase is visible in both of your posts. You maybe want to remove it.
 
planetcaravan
Member Candidate
Member Candidate
Posts: 265
Joined: Tue Aug 25, 2009 5:33 pm

Re: Requests wrong RSN group cipher

Mon May 06, 2019 11:44 pm

Thanks for answer.
The password was fake.
Do I have to remove wifi settings on the clients and add again to the network?
 
Exiver
Member Candidate
Member Candidate
Posts: 113
Joined: Sat Jan 10, 2015 6:45 pm

Re: Requests wrong RSN group cipher

Mon May 06, 2019 11:46 pm

I dont think this will be necessary on your client-devices (smartphones, tablets, computers and so on) but on your mikrotik cap-clients. Restarting the caps should be enough. You can always check if the changes have applied on your capsman with the command
/caps-man actual print detail
 
planetcaravan
Member Candidate
Member Candidate
Posts: 265
Joined: Tue Aug 25, 2009 5:33 pm

Re: Requests wrong RSN group cipher

Tue May 07, 2019 2:12 pm

I've changed as you suggested:
/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
    name=chiave passphrase=b1122334455m

but still got this RSN error:
12:46:08 caps,info D4:F4:6F:BA:01:D6@A-2GHz connected, signal strength -68 
12:59:24 caps,info 30:35:AD:AC:28:08@Local-5GHz rejected, requests wrong RSN group cipher 
12:59:51 caps,info 30:35:AD:AC:28:08@Local-5GHz rejected, requests wrong RSN group cipher 
12:59:51 caps,info 30:35:AD:AC:28:08@Local-2GHz rejected, requests wrong RSN group cipher 
12:59:51 caps,info 30:35:AD:AC:28:08@B-2GHz rejected, requests wrong RSN group cipher 
 
Exiver
Member Candidate
Member Candidate
Posts: 113
Joined: Sat Jan 10, 2015 6:45 pm

Re: Requests wrong RSN group cipher

Tue May 07, 2019 8:52 pm

Does the actual-interface-configuration show the applied changes? Can you please try to remove the network from one of these wifi-client-devices (for example the apple device 30:35:AD:AC:28:08) and readd it? Just to make sure we are not running after a ghost :)
 
planetcaravan
Member Candidate
Member Candidate
Posts: 265
Joined: Tue Aug 25, 2009 5:33 pm

Re: Requests wrong RSN group cipher

Wed May 08, 2019 9:04 am

Just did what you said. Let's wait!

Who is online

Users browsing this forum: No registered users and 23 guests