Confirmed with iPhone XS Max, iPhone XS, and iPad Pro 2018. Without CAPsMAN, 5GHz AC communication is unusable. Always used latest Testing firmware hoping for a fix.

For a week now I have two access points in capsman working stably with iphone XS Max, with dual stack ip.

Is it CAPsMAN with local or remote forwarding? Does changing it change the picture?

For a week now I have two access points in capsman working stably with iphone XS Max, with dual stack ip.

Is it CAPsMAN with local or remote forwarding? Does changing it change the picture?

I received this correspondence from Mikrotik overnight US time. I would say this shows they admit there is an issue; however, their suggestions don’t work for us. I responded the using CAPsMan, or just turning off ac were better workaround while they fix the problem.

One idea in case this really happens just without CAPsMAN: It sets a few defaults (e.g. WMM) that otherwise have to be set manually. Maybe it's related to that? Just a wild guess though...

Thanks to everyone for their input. The issue has been found and fixed, sorry for such a long time needed to fix the issue. It should be released in the next public beta version.

Apple uses a new chip, so presumably, a new driver too. This new driver did not follow RFC recommendation in one fragmenting method.

I don't know why this forum seems to so inconsistently subscribe me to email notifications on replies.

In my case, my iPhone XS refuses to use my network period if I have my Hurricane Electric IPv6 tunnel active. I don't know if it is some broken pMTU thing on iPhone XS, which is rather strange as my iPhone X, iPhone 8, iPad Air and iPhone SE all work fine...it is _only_ the iPhone XS that entirely loses network functionality via WiFi if I have my IPv6 enabled. I believe the iPhone XS uses Intel's latest modem, which perhaps it has an issue with IPv6 as Intel seems to think that IPv6 is irrelevant and their IT department doesn't even support it to be enabled on laptops/desktops/etc or allow it on their Internal networks.

Otherwise, my iPhone XS seems to work ok using manual WiFi configs on all of my WAP ac's...though one of my WAP ac's seems to have some other problem, as it is supposed to be a US model but allows international band selection and is just all around unreliable.

I'm looking forward to any RouterOS changes that may have work arounds!

Have you tried to see if it works using IPv6 with "ac" disabled on your WiFi radio (i.e. just 5GHz-A/N)?

Just tested a new iPhone XS Max ... had issues with WiFi on the hAP AC and 6.42.11. Was necessary to set Band to 5Ghz-only-N.

The fixes are not released yet. They will be only in 6.44

I ran into similar issues on a 2018 ipad pro, but it seems that 6.44beta75 resolves the issue.
Need to run some more thorough tests (on hAP ac) to evaluate stability and performance

It looks like the fix may be included in the latest beta relaease: 6.44beta75 (2019-Feb-08 08:02). I have not test yet.

I installed 6.44beta75 on a spare hAP AC. I don't have time to fully test, but it looks like things are now working correctly for 5GHz-A/N/AC at 20/40/80MHz XXXX!

ROS ver6.44 stable is now available. This should settle this 5GHz 802.11AC IPv6 communication issue.

You can make a new topic about it.

Hello,

I've notice issues with my iPhone XS Max after installing Mikrotik cAP ac RBcAPGi-5acD2nD. ( firmware v6.43.8 )
When i am connected to 5 ghz network i have some of my apps working but Safari/Google Chrome doesn't open websites, no error its like endless loading.
I am attempting to open facebook through safari and no luck, but facebook app itself is working ( A bit slower then it should tho )
If i connect to 2.4 no such issues there, all is working.

Other devices in the network doesn't seems to have this issue but neither my phone connected to other ac networks.

I've tried turning off ipv6 advertisement and ensured my phone has no ipv6 address, but i still had this loading issues. my iOS is updated to latest available version: 12.2.1

I am not sure if my problem is same as yours

Code: Select all

0 name="EAP2G" mtu=1500 l2mtu=1600 arp=enabled interface-type=virtual master-interface=PSK2G mode=ap-bridge ssid="secure.mynetwork.ltd" vlan-mode=no-tag vlan-id=1 wds-mode=disabled wds-default-bridge=none
wds-ignore-ssid=no bridge-mode=enabled default-authentication=yes default-forwarding=yes default-ap-tx-limit=0 default-client-tx-limit=0 hide-ssid=no security-profile=EAP

1 R name="EAP5G" mtu=1500 l2mtu=1600 arp=enabled interface-type=virtual master-interface=PSK5G mode=ap-bridge ssid="5g.secure.mynetwork.ltd" vlan-mode=no-tag vlan-id=1 wds-mode=disabled wds-default-bridge=none
wds-ignore-ssid=no bridge-mode=enabled default-authentication=yes default-forwarding=yes default-ap-tx-limit=0 default-client-tx-limit=0 hide-ssid=no security-profile=EAP

2 name="Guest" mtu=1500 l2mtu=1600 arp=enabled interface-type=virtual master-interface=PSK2G mode=ap-bridge ssid="guest.mynetwork.ltd" vlan-mode=use-tag vlan-id=100 wds-mode=disabled wds-default-bridge=none
wds-ignore-ssid=no bridge-mode=enabled default-authentication=yes default-forwarding=yes default-ap-tx-limit=0 default-client-tx-limit=0 hide-ssid=no security-profile=Guest

3 R name="PSK2G" mtu=1500 l2mtu=1600 arp=enabled interface-type=IPQ4019 mode=ap-bridge ssid="cap.mynetwork.ltd" frequency=auto band=2ghz-g/n channel-width=20/40mhz-XX secondary-channel="" scan-list=default
wireless-protocol=802.11 vlan-mode=no-tag vlan-id=1 wds-mode=disabled wds-default-bridge=none wds-ignore-ssid=no bridge-mode=enabled default-authentication=yes default-forwarding=yes default-ap-tx-limit=0 default-client-tx-limit=0 hide-ssid=no
security-profile=PSK compression=no

4 R name="PSK5G" mtu=1500 l2mtu=1600 arp=enabled interface-type=IPQ4019 mode=ap-bridge ssid="5g.cap.mynetwork.ltd" frequency=5180 band=5ghz-n/ac channel-width=20/40/80mhz-XXXX secondary-channel="" scan-list=default
wireless-protocol=802.11 vlan-mode=no-tag vlan-id=1 wds-mode=disabled wds-default-bridge=none wds-ignore-ssid=no bridge-mode=enabled default-authentication=yes default-forwarding=yes default-ap-tx-limit=0 default-client-tx-limit=0 hide-ssid=no
security-profile=PSK compression=no

Here's configuration export of wireless

Code: Select all

# jan/08/2019 20:15:26 by RouterOS 6.43.8
# software id = .....
#
# model = RouterBOARD cAP Gi-5acD2nD
# serial number = ......
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk eap-methods="" mode=dynamic-keys supplicant-identity=MikroTik
add authentication-types=wpa2-eap management-protection=allowed mode=dynamic-keys name=EAP supplicant-identity=cap01
add authentication-types=wpa-psk,wpa2-psk eap-methods="" management-protection=allowed mode=dynamic-keys name=PSK supplicant-identity=""
add authentication-types=wpa-psk,wpa2-psk eap-methods="" mode=dynamic-keys name=Guest supplicant-identity=""
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-g/n channel-width=20/40mhz-XX disabled=no frequency=auto mode=ap-bridge name=PSK2G security-profile=PSK ssid=cap.mynetwork.ltd wireless-protocol=802.11 wps-mode=disabled
set [ find default-name=wlan2 ] band=5ghz-n/ac channel-width=20/40/80mhz-XXXX country=bulgaria disabled=no frequency-mode=regulatory-domain mode=ap-bridge name=PSK5G security-profile=PSK ssid=5g.cap.mynetwork.ltd wireless-protocol=802.11 wps-mode=\
disabled
add disabled=no keepalive-frames=disabled master-interface=PSK2G multicast-buffering=disabled name=EAP2G security-profile=EAP ssid=secure.mynetwork.ltd wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
add disabled=no keepalive-frames=disabled master-interface=PSK5G multicast-buffering=disabled name=EAP5G security-profile=EAP ssid=5g.secure.mynetwork.ltd wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
add disabled=no keepalive-frames=disabled master-interface=PSK2G multicast-buffering=disabled multicast-helper=disabled name=Guest security-profile=Guest ssid=guest.mynetwork.ltd vlan-id=100 vlan-mode=use-tag \
wds-cost-range=0 wds-default-cost=0 wps-mode=disabled