Community discussions

MikroTik App
 
karakuraizer
just joined
Topic Author
Posts: 18
Joined: Mon Apr 26, 2021 12:35 pm

QCA9556 randomly overheats on RBwAPG-5HacT2HnD

Mon Apr 26, 2021 1:31 pm

Hello mikrotik forum!
i've been facing a problem with my RBwAPG-5HacT2HnD (wAP ac the one with QCA9556) for about a 2.5 years and could not find any solution.(since ROS 5.xx to 6.47.9)

So we got RB1100Dx4 (6.47.9) as CAPsMAN controller , D-Link DGS-1210-28MP (6.12.B007) as PoE L2-switch with configured VLANs and 7 of RBwAPG-5HacT2HnD (6.47.9) as CAPs connected directly to D-Link. About 100 wireless devices, 5-25 on one CAP (75% using 5Ghz band)

All CAPs are configured with multiple SSIDs and each one uses it's own VLAN, the problem is that at random time one of CAPs starts to heat up ( up to 85-87 degrees) and it stops forwarding traffic to CAPsMAN (normally they operate at about 65 degrees celsius), all params in monitoring seems to be normal except temperature and there could be no wlan traffic load at all at that moment (we got one CAP in the elevator hall, usually it has 0 clients still this bug happens). The only way to prevent this issue is a little script on CAPs which is monitoring device temp and reboots it if temp reaches 85-86 degrees.
Can anyone tell me where i should start searching from(because even net dump looks ok)?

here's some of configs i'm using (only one CAP in example because others are the same except MACs,names and comments)
RB1100x4
/interface vlan
add comment=MGMT interface=bridge2 name=vlan10 vlan-id=10
add comment=OFFICE interface=bridge2 name=vlan20 vlan-id=20
add comment=WIFI interface=bridge2 name=vlan30 vlan-id=30
add comment=VITA interface=bridge2 name=vlan60 vlan-id=60
add comment=CT interface=bridge2 name=vlan70 vlan-id=70
/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
add bridge=bridge2 interface=ether6 internal-path-cost=4 path-cost=4
add bridge=bridge2 interface=ether7 internal-path-cost=4 path-cost=4
add bridge=bridge2 interface=ether8 internal-path-cost=4 path-cost=4
add bridge=bridge2 interface=ether9 internal-path-cost=4 path-cost=4
add bridge=bridge2 interface=ether10 internal-path-cost=4 path-cost=4
add bridge=bridge1 interface=vlan10
add bridge=bridge-lan interface=vlan20
add bridge=bridge-wifi interface=vlan30
add bridge=bridge-vita interface=vlan60
add bridge=bridge-ct interface=vlan70
/interface bridge settings
set use-ip-firewall-for-vlan=yes
/interface bridge vlan
add bridge=bridge2 tagged=ether6,ether7,ether8,ether9,ether10,bridge2 vlan-ids=10,20,30,60,70
add bridge=bridge2 untagged=bridge2,ether6,ether7,ether8,ether9,ether10 vlan-ids=1
add bridge=bridge-wifi untagged=bridge-wifi,vlan30 vlan-ids=1

/caps-man datapath
add client-to-client-forwarding=yes comment=vita local-forwarding=yes name=vlan60 vlan-id=60 vlan-mode=\
    use-tag
add client-to-client-forwarding=yes comment=ct local-forwarding=yes name=vlan70 vlan-id=70 vlan-mode=use-tag
add client-to-client-forwarding=yes comment=WiFi local-forwarding=yes name=vlan30 vlan-id=30 vlan-mode=use-tag
add client-to-client-forwarding=yes comment=internal local-forwarding=yes name=vlan20 vlan-id=20 vlan-mode=\
    use-tag
add client-to-client-forwarding=no comment=Guest local-forwarding=yes name=vlan99 vlan-id=99 vlan-mode=use-tag
/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm group-key-update=1h name=group \
    passphrase=123123
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm group-key-update=1h name=vita \
    passphrase=123123
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm group-key-update=1h name=ct \
    passphrase=123123
/caps-man configuration
add channel=channel-2GHz channel.band=2ghz-g/n channel.control-channel-width=20mhz channel.extension-channel=\
    disabled channel.skip-dfs-channels=yes country=russia3 datapath=vlan30 distance=indoors hide-ssid=no mode=ap \
    name=group-2GHz rx-chains=0,1,2 security=group ssid=group tx-chains=0,1,2
add channel=channel-5GHz channel.band=5ghz-onlyac country=russia3 datapath=vlan30 distance=indoors hide-ssid=no \
    mode=ap name=group-5GHz rx-chains=0,1,2 security=group ssid=group tx-chains=0,1,2
add channel.skip-dfs-channels=no datapath=vlan60 hide-ssid=no mode=ap name=vita security=vita ssid=vita
add channel.skip-dfs-channels=no datapath=vlan70 hide-ssid=no mode=ap name=ct security=ct ssid=ct
add channel.skip-dfs-channels=no datapath=vlan99 hide-ssid=no mode=ap name=group-Guest rates.basic="" \
    rates.supported="" security=group-guest ssid=groupGuest
/caps-man interface
add channel=channel-2GHz channel.band=2ghz-g/n channel.extension-channel=disabled channel.reselect-interval=1d \
    channel.tx-power=8 comment=AdPush configuration=group-2GHz configuration.country=russia3 \
    configuration.distance=indoors configuration.hide-ssid=no configuration.mode=ap configuration.rx-chains=0,1 \
    configuration.ssid=group configuration.tx-chains=0,1 datapath=vlan30 disabled=no l2mtu=1600 mac-address=\
    6C:xx:xx:xx:xx:DC master-interface=none name=WAP3-2G radio-mac=6C:xx:xx:xx:xx:DC radio-name=WAP3-AdPush \
    security=group
add configuration=ct configuration.hide-ssid=no configuration.mode=ap configuration.ssid=ct datapath=vlan70 \
    disabled=no l2mtu=1600 mac-address=6E:xx:xx:xx:xx:DD master-interface=WAP3-2G name=WAP3-2G-ct radio-mac=\
    00:00:00:00:00:00 radio-name="" security=ct
add configuration=vita configuration.hide-ssid=no configuration.mode=ap configuration.ssid=vita datapath=\
    vlan60 disabled=no l2mtu=1600 mac-address=6E:xx:xx:xx:xx:DC master-interface=WAP3-2G name=WAP3-2G-Vita \
    radio-mac=00:00:00:00:00:00 radio-name="" security=vita
add channel.band=5ghz-onlyac channel.control-channel-width=20mhz channel.extension-channel=Ce channel.frequency=\
    5260 channel.tx-power=15 configuration=group-5GHz configuration.country=russia3 configuration.distance=\
    indoors configuration.hide-ssid=no configuration.mode=ap configuration.rx-chains=0,1,2 configuration.ssid=\
    group configuration.tx-chains=0,1,2 datapath=vlan30 disabled=no l2mtu=1600 mac-address=6C:xx:xx:xx:xx:DB \
    master-interface=none name=WAP3-5G radio-mac=6C:xx:xx:xx:xx:DB radio-name="" security=group
add configuration=ct configuration.hide-ssid=no configuration.mode=ap configuration.ssid=CT datapath=vlan70 \
    disabled=no l2mtu=1600 mac-address=6E:xx:xx:xx:xx:DE master-interface=WAP3-5G name=WAP3-5G-CT radio-mac=\
    00:00:00:00:00:00 radio-name="" security=ct
add configuration=vita configuration.hide-ssid=no configuration.mode=ap configuration.ssid=vita datapath=\
    vlan60 disabled=no l2mtu=1600 mac-address=6E:xx:xx:xx:xx:DB master-interface=WAP3-5G name=WAP3-5G-Vita \
    radio-mac=00:00:00:00:00:00 radio-name="" security=vita
RBwAPG-5HacT2HnD
/interface bridge
add fast-forward=no name=bridgeLocal protocol-mode=none
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/snmp community
set [ find default=yes ] read-access=no
add addresses=x.x.x.3/32 name=monitor
/system logging action
set 3 remote=x.x.x.x src-address=x.x.x.xx
/interface bridge port
add bridge=bridgeLocal interface=ether1
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/interface wireless cap
# 
set bridge=bridgeLocal discovery-interfaces=bridgeLocal enabled=yes interfaces=wlan1,wlan2
/ip dhcp-client
add disabled=no interface=bridgeLocal
/ip ssh
set allow-none-crypto=yes forwarding-enabled=remote
/snmp
set contact=Group enabled=yes location=xx trap-community=monitoring trap-version=2
/system clock
set time-zone-autodetect=no time-zone-name=Europe/Moscow
/system identity
set name=WAP3
Last edited by karakuraizer on Thu Jul 29, 2021 7:15 pm, edited 3 times in total.
 
karakuraizer
just joined
Topic Author
Posts: 18
Joined: Mon Apr 26, 2021 12:35 pm

Re: QCA9556 randomly overheats on RBwAPG-5HacT2HnD

Thu Jul 29, 2021 7:11 pm

updated all Mikrotik hardware from 6.47.9 to 6.47.10 LTS build, still having same problem.
 
karakuraizer
just joined
Topic Author
Posts: 18
Joined: Mon Apr 26, 2021 12:35 pm

Re: QCA9556 randomly overheats on RBwAPG-5HacT2HnD

Thu Sep 23, 2021 11:23 pm

Just some observation:
limited mDNS,SSDP traffic in bridge filer on CAPsMAN router and disabled *cast support on wireless vlan:
/interface bridge filter
add action=drop chain=input comment="block SSDP" dst-port=1900 ip-protocol=udp mac-protocol=ip
add action=drop chain=input comment="block mDNS" dst-port=5353 ip-protocol=udp mac-protocol=ip

/interface bridge port
add bridge=bridge-wifi broadcast-flood=no interface=vlan30 \
    unknown-multicast-flood=no unknown-unicast-flood=no
This lowered frequency of randomly APs overheats but did not prevent it.

Got a lucky tonight so AP started to heat up while having 1 or 2 clients connected to this AP it didn't stop forwarding traffic and didn't reboot got some info(see screenshots)
sadly zabbix intervals were default by Template Net Mikrotik SNMPv2: Device (3m)
after 22:00 it started to chill by itself

i don't know where to seek further.(
You do not have the required permissions to view the files attached to this post.

Who is online

Users browsing this forum: connorcrb and 34 guests