Community discussions

MikroTik App
  4. RouterOS
  5. Wireless Networking

Requests wrong RSN group cipher

Post Reply
 
User avatar
dynek
Member Candidate
Member Candidate
Topic Author
Posts: 223
Joined: Tue Jan 21, 2014 10:03 pm

Requests wrong RSN group cipher

Wed Apr 18, 2018 9:33 pm

Hello,

I have setup capsman with hap ac^2 devices and a couple of devices connect fine to the wireless network(s).
However my macbook seems to be triggering one odd thing... "2.4Ghz-AP_Basement-1-1 rejected, requests wrong RSN group cipher".

Google doesn't say much about that - what can I do ?

Thank you
Top
 
hapi
Member Candidate
Member Candidate
Posts: 232
Joined: Fri Mar 11, 2011 11:21 am
Location: Czech Republic

Re: Requests wrong RSN group cipher

Sun Apr 29, 2018 3:39 pm

same problem

13:51:55 caps,info 8C:0D:76:F9:AE:3E@cap2-SXT Lite2-1 disconnected, extensive data loss
13:53:25 caps,info 8C:0D:76:F9:AE:3E@cap2-SXT Lite2-1 rejected, requests wrong RSN group cipher
13:53:34 caps,info 8C:0D:76:F9:AE:3E@cap2-SXT Lite2-1 rejected, requests wrong RSN group cipher
13:53:44 caps,info 8C:0D:76:F9:AE:3E@cap2-SXT Lite2-1 rejected, requests wrong RSN group cipher
13:53:54 caps,info 8C:0D:76:F9:AE:3E@cap2-SXT Lite2-1 rejected, requests wrong RSN group cipher
13:54:14 caps,info 8C:0D:76:F9:AE:3E@cap2-hAP lite-1 rejected, requests wrong RSN group cipher
13:54:24 caps,info 8C:0D:76:F9:AE:3E@cap2-hAP lite-1 rejected, requests wrong RSN group cipher
13:54:24 caps,info 8C:0D:76:F9:AE:3E@cap2-SXT Lite2-1 rejected, requests wrong RSN group cipher
13:54:34 caps,info 8C:0D:76:F9:AE:3E@cap2-hAP lite-1 rejected, requests wrong RSN group cipher
13:54:44 caps,info 8C:0D:76:F9:AE:3E@cap2-hAP lite-1 rejected, requests wrong RSN group cipher
13:54:44 caps,info 8C:0D:76:F9:AE:3E@cap2-SXT Lite2-1 rejected, requests wrong RSN group cipher
13:54:56 caps,info 8C:0D:76:F9:AE:3E@cap2-hAP lite-1 rejected, requests wrong RSN group cipher
13:54:56 caps,info 8C:0D:76:F9:AE:3E@cap2-SXT Lite2-1 rejected, requests wrong RSN group cipher
13:55:10 caps,info 8C:0D:76:F9:AE:3E@cap2-hAP lite-1 rejected, requests wrong RSN group cipher
13:55:10 caps,info 8C:0D:76:F9:AE:3E@cap2-SXT Lite2-1 rejected, requests wrong RSN group cipher
13:55:20 caps,info 8C:0D:76:F9:AE:3E@cap2-hAP lite-1 rejected, requests wrong RSN group cipher
13:55:20 caps,info 8C:0D:76:F9:AE:3E@cap2-SXT Lite2-1 rejected, requests wrong RSN group cipher
13:55:30 caps,info 8C:0D:76:F9:AE:3E@cap2-hAP lite-1 rejected, requests wrong RSN group cipher
13:55:30 caps,info 8C:0D:76:F9:AE:3E@cap2-SXT Lite2-1 rejected, requests wrong RSN group cipher
13:55:40 caps,info 8C:0D:76:F9:AE:3E@cap2-hAP lite-1 rejected, requests wrong RSN group cipher
13:55:40 caps,info 8C:0D:76:F9:AE:3E@cap2-SXT Lite2-1 rejected, requests wrong RSN group cipher
13:55:50 caps,info 8C:0D:76:F9:AE:3E@cap2-hAP lite-1 rejected, requests wrong RSN group cipher
13:55:50 caps,info 8C:0D:76:F9:AE:3E@cap2-SXT Lite2-1 rejected, requests wrong RSN group cipher
Top
 
planetcaravan
Member Candidate
Member Candidate
Posts: 267
Joined: Tue Aug 25, 2009 5:33 pm

Re: Requests wrong RSN group cipher

Mon May 06, 2019 10:05 pm

same problem also to me:
Code: Select all
20:08:42 caps,info 30:35:AD:AC:28:08@Local-5GHz rejected, requests wrong RSN group cipher 
20:08:42 caps,info 30:35:AD:AC:28:08@Local-2GHz rejected, requests wrong RSN group cipher

My config:
RouterBOARD 962UiGS-5HacT2HnT
RouterOS version: 6.43.14

Code: Select all
/caps-man channel
add band=5ghz-a/n/ac control-channel-width=20mhz extension-channel=XXXX frequency=5320 name=5GHz
add band=2ghz-onlyn control-channel-width=20mhz frequency=2467 name=2GHz
add band=5ghz-a/n/ac control-channel-width=20mhz extension-channel=XXXX frequency=5180 name=5180
add band=5ghz-a/n/ac control-channel-width=20mhz extension-channel=Ce frequency=5200 name=5200
/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm,tkip group-encryption=tkip name=key passphrase=b1122334455m
Top
 
Exiver
Member Candidate
Member Candidate
Posts: 122
Joined: Sat Jan 10, 2015 6:45 pm

Re: Requests wrong RSN group cipher

Mon May 06, 2019 11:15 pm

@planetcaravan:

Please dont use tkip as cipher if you are using only wpa/wpa2.

Set encryption=aes-ccm and group-encryption=aes-ccm and check if that solves your problem.

@others:
We need to see your configuration. Otherwise we are just guessing into the blue which doesnt help you and just wastes everyones time ;-)

Edit: Just saw this is an older thread. So just ignore the second part..
Top
 
planetcaravan
Member Candidate
Member Candidate
Posts: 267
Joined: Tue Aug 25, 2009 5:33 pm

Re: Requests wrong RSN group cipher

Mon May 06, 2019 11:26 pm

@planetcaravan:

Please dont use tkip as cipher if you are using only wpa/wpa2.

Set encryption=aes-ccm and group-encryption=aes-ccm and check if that solves your problem.

Is it ok?
Code: Select all
/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
    name=chiave passphrase=b1122334455m
Top
 
Exiver
Member Candidate
Member Candidate
Posts: 122
Joined: Sat Jan 10, 2015 6:45 pm

Re: Requests wrong RSN group cipher

Mon May 06, 2019 11:38 pm

As far as i can say: yes. You most likely need to re-provision the clients.

Ps.: Your wpa-passphrase is visible in both of your posts. You maybe want to remove it.
Top
 
planetcaravan
Member Candidate
Member Candidate
Posts: 267
Joined: Tue Aug 25, 2009 5:33 pm

Re: Requests wrong RSN group cipher

Mon May 06, 2019 11:44 pm

Thanks for answer.
The password was fake.
Do I have to remove wifi settings on the clients and add again to the network?
Top
 
Exiver
Member Candidate
Member Candidate
Posts: 122
Joined: Sat Jan 10, 2015 6:45 pm

Re: Requests wrong RSN group cipher

Mon May 06, 2019 11:46 pm

I dont think this will be necessary on your client-devices (smartphones, tablets, computers and so on) but on your mikrotik cap-clients. Restarting the caps should be enough. You can always check if the changes have applied on your capsman with the command
Code: Select all
/caps-man actual print detail
Top
 
planetcaravan
Member Candidate
Member Candidate
Posts: 267
Joined: Tue Aug 25, 2009 5:33 pm

Re: Requests wrong RSN group cipher

Tue May 07, 2019 2:12 pm

I've changed as you suggested:
Code: Select all
/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
    name=chiave passphrase=b1122334455m

but still got this RSN error:
Code: Select all
12:46:08 caps,info D4:F4:6F:BA:01:D6@A-2GHz connected, signal strength -68 
12:59:24 caps,info 30:35:AD:AC:28:08@Local-5GHz rejected, requests wrong RSN group cipher 
12:59:51 caps,info 30:35:AD:AC:28:08@Local-5GHz rejected, requests wrong RSN group cipher 
12:59:51 caps,info 30:35:AD:AC:28:08@Local-2GHz rejected, requests wrong RSN group cipher 
12:59:51 caps,info 30:35:AD:AC:28:08@B-2GHz rejected, requests wrong RSN group cipher
Top
 
Exiver
Member Candidate
Member Candidate
Posts: 122
Joined: Sat Jan 10, 2015 6:45 pm

Re: Requests wrong RSN group cipher

Tue May 07, 2019 8:52 pm

Does the actual-interface-configuration show the applied changes? Can you please try to remove the network from one of these wifi-client-devices (for example the apple device 30:35:AD:AC:28:08) and readd it? Just to make sure we are not running after a ghost :)
Top
 
planetcaravan
Member Candidate
Member Candidate
Posts: 267
Joined: Tue Aug 25, 2009 5:33 pm

Re: Requests wrong RSN group cipher

Wed May 08, 2019 9:04 am

Just did what you said. Let's wait!
Top
 
MrSiB
just joined
Posts: 1
Joined: Thu Jan 16, 2020 4:35 pm

Re: Requests wrong RSN group cipher

Thu Jan 16, 2020 4:47 pm

I have the same problem:
Have 2 devices: RB4011 and wAP AC.
on 4011 log:
caps, info . wAP AC 5g: rejected, requests wrong RSN group cipher

I'm use only WPA2 PSK and aes ccn encryption

Code: Select all
/caps-man channel
add band=5ghz-a/n/ac control-channel-width=20mhz extension-channel=Ce name=\
    channel_5G reselect-interval=1d
add band=2ghz-b/g/n control-channel-width=20mhz name=channel_2G \
    reselect-interval=1d tx-power=15

/caps-man datapath
add bridge=bridge client-to-client-forwarding=yes local-forwarding=no name=\
    datapath1

/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
    group-key-update=1h name=security1 passphrase=%PASSWORD%

/caps-man configuration
add channel=channel_2G country=russia datapath=datapath1 mode=ap name=cfg_2G \
    rx-chains=0,1,2,3 security=security1 ssid=MikroTik tx-chains=0,1,2,3
add channel=channel_5G channel.reselect-interval=1d country=russia datapath=\
    datapath1 mode=ap name=cfg_5G rx-chains=0,1,2,3 security=security1 ssid=\
    MikroTik tx-chains=0,1,2,3

/caps-man provisioning
add action=create-dynamic-enabled hw-supported-modes=b,gn \
    master-configuration=cfg_2G
add action=create-dynamic-enabled hw-supported-modes=an,ac \
    master-configuration=cfg_5G
Code: Select all
1044	Jan/16/2020 17:26:48	memory	caps, info	00:16:CB:00:2A:68@wAP ac-5G rejected, requests wrong RSN group cipher	
1045	Jan/16/2020 17:27:15	memory	caps, info	00:16:CB:00:2A:68@wAP ac-5G rejected, requests wrong RSN group cipher	
1046	Jan/16/2020 17:28:17	memory	caps, info	00:16:CB:00:2A:68@wAP ac-5G rejected, requests wrong RSN group cipher	
1047	Jan/16/2020 17:28:24	memory	caps, info	00:16:CB:00:2A:68@wAP ac-5G rejected, requests wrong RSN group cipher	
1048	Jan/16/2020 17:29:25	memory	caps, info	00:16:CB:00:2A:68@wAP ac-5G rejected, requests wrong RSN group cipher	
1049	Jan/16/2020 17:31:01	memory	caps, info	00:16:CB:00:2A:68@wAP ac-5G rejected, requests wrong RSN group cipher	
1050	Jan/16/2020 17:31:35	memory	caps, info	00:16:CB:00:2A:68@wAP ac-5G rejected, requests wrong RSN group cipher	
1051	Jan/16/2020 17:32:23	memory	caps, info	00:16:CB:00:2A:68@wAP ac-5G rejected, requests wrong RSN group cipher	
1052	Jan/16/2020 17:33:45	memory	caps, info	00:16:CB:00:2A:68@wAP ac-5G rejected, requests wrong RSN group cipher	
1053	Jan/16/2020 17:34:13	memory	caps, info	00:16:CB:00:2A:68@wAP ac-5G rejected, requests wrong RSN group cipher	
1054	Jan/16/2020 17:34:19	memory	caps, info	00:16:CB:00:2A:68@wAP ac-5G rejected, requests wrong RSN group cipher
Last edited by MrSiB on Thu Jan 16, 2020 4:50 pm, edited 1 time in total.
Top
Post Reply

Who is online

Users browsing this forum: fenix24865 and 29 guests
  4. RouterOS
  5. Wireless Networking