Anyone any idea what is causing this? The configuration on the radio's of the router is the same as on the AP's.
hap AX2: client connects and disconnects continously
Hi, I managed to set up a MT installation with a hap ax2 as router and two hap ax2 devices as access points. The wireless is up and running on all 6 radios. I discovered that devices trying to connect to the wireless of the router itselve are disconnected soon after their connection. Clients connecting to one of the AP's are not suffering from this behauviour. Logs are not giving any additional info (see attached image)
Anyone any idea what is causing this? The configuration on the radio's of the router is the same as on the AP's.
Anyone any idea what is causing this? The configuration on the radio's of the router is the same as on the AP's.
You do not have the required permissions to view the files attached to this post.
Re: hap AX2: client connects and disconnects continously
try set "disabled" to "management protection"
Re: hap AX2: client connects and disconnects continously
I tried but no effect. If I look to the registration table, the clients that try to connect stay for exactly 20 seconds with Tx rate at 1 Mbps and then disconnect. Looks like a timer was implemented somehow. Any other ideas?try set "disabled" to "management protection"
Re: hap AX2: client connects and disconnects continously
Your config is a small problem. Clients disconnect because they don't get an IP address.
viewtopic.php?t=202779
viewtopic.php?t=202779
Re: hap AX2: client connects and disconnects continously
Something similar happens to me, I don't understand why it disconnects, it only happens with the iPhone 14 pro max.
---
Here the configuration
---
Here the configuration
Code: Select all
# 2023-12-27 13:33:25 by RouterOS 7.13
# software id = G48Y-1U35
#
# model = RBD52G-5HacD2HnD
# serial number = XXXXXXXXX
/interface bridge
add admin-mac=2C:C8:1B:C9:12:CB arp=reply-only auto-mac=no name=bridge
/interface wireguard
add comment=back-to-home-vpn listen-port=58216 mtu=1420 name=back-to-home-vpn
/interface vlan
add interface=ether1 name=vlan20 vlan-id=20
/interface pppoe-client
add add-default-route=yes disabled=no interface=vlan20 name=pppoe-out1 user=968587466@xxxx
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wifi channel
add band=2ghz-n disabled=no frequency=2412 name=channel01 width=20mhz
add band=5ghz-ac disabled=no frequency=5680,5170 name=channel136 width=20/40mhz
/interface wifi security
add authentication-types=wpa2-psk,wpa3-psk disabled=no management-protection=allowed name=sec1 wps=disable
/interface wifi configuration
add channel=channel01 country=Spain disabled=no mode=ap name=cfg01 security=sec1 security.ft=yes .ft-over-ds=yes ssid=Nely
add channel=channel136 country=Spain disabled=no mode=ap name=cfg136 security=sec1 security.ft=yes .ft-over-ds=yes ssid=Nely
/interface wifi
set [ find default-name=wifi1 ] configuration=cfg01 configuration.mode=ap .tx-power=9 disabled=no
set [ find default-name=wifi2 ] configuration=cfg136 configuration.mode=ap .tx-power=16 disabled=no security.connect-priority=0
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/ip pool
add name=default-dhcp ranges=192.168.52.100-192.168.52.254
/ip dhcp-server
add add-arp=yes address-pool=default-dhcp interface=bridge lease-time=8h name=LAN
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=wifi1
add bridge=bridge comment=defconf interface=wifi2
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add interface=bridge list=LAN
add interface=pppoe-out1 list=WAN
/ip address
add address=192.168.52.1/24 comment=LAN interface=bridge network=192.168.52.0
/ip cloud
set back-to-home-vpn=enabled ddns-enabled=yes
/ip dhcp-server lease
add address=192.168.52.106 client-id=1:3c:6a:a7:44:80:36 mac-address=3C:6A:A7:44:80:36 server=LAN
add address=192.168.52.105 client-id=1:8e:da:61:c1:e7:d0 mac-address=8E:DA:61:C1:E7:D0 server=LAN
add address=192.168.52.98 client-id=1:80:fa:5b:5f:54:91 mac-address=80:FA:5B:5F:54:91 server=LAN
add address=192.168.52.104 mac-address=90:0C:C8:EA:56:49 server=LAN
add address=192.168.52.100 mac-address=1C:3B:F3:8D:FE:B6 server=LAN
add address=192.168.52.101 client-id=1:a:cf:fd:85:cc:51 comment=IphoneNely mac-address=0A:CF:FD:85:CC:51 server=LAN
/ip dhcp-server network
add address=192.168.52.0/24 comment=defconf dns-server=192.168.52.1 gateway=192.168.52.1 ntp-server=192.168.52.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,9.9.9.9,2620:fe::fe,2001:4860:4860::8844
/ip dns static
add address=192.168.52.1 name=nrouter.lan
add cname="nrouter.lan " comment="nrouter.lan " name=hapac2.lan type=CNAME
/ip firewall filter
add action=accept chain=input comment=" accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related hw-offload=yes
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www address=192.168.52.98/32,
set ssh disabled=yes
set api disabled=yes
set winbox address=\
192.168.52.98/32,
set api-ssl disabled=yes
/ipv6 address
add address=::1 from-pool=pool6 interface=bridge
/ipv6 dhcp-client
add add-default-route=yes interface=pppoe-out1 pool-name=pool6 rapid-commit=no request=address,prefix
/ipv6 firewall address-list
add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
add address=::1/128 comment="defconf: lo" list=bad_ipv6
add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
add address=100::/64 comment="defconf: discard only " list=bad_ipv6
add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
/ipv6 firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMPv6" protocol=icmpv6
add action=accept chain=input comment="defconf: accept UDP traceroute" port=33434-33534 protocol=udp
add action=accept chain=input comment="defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=udp src-address=fe80::/10
add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 protocol=udp
add action=accept chain=input comment="defconf: accept ipsec AH" protocol=ipsec-ah
add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=ipsec-esp
add action=accept chain=input comment="defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=input comment="defconf: drop everything else not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" hop-limit=equal:1 protocol=icmpv6
add action=accept chain=forward comment="defconf: accept ICMPv6" log-prefix=ipv6 protocol=icmpv6
add action=accept chain=forward comment="defconf: accept HIP" protocol=139
add action=accept chain=forward comment="defconf: accept IKE" dst-port=500,4500 protocol=udp
add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=ipsec-ah
add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=ipsec-esp
add action=accept chain=forward comment="defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=forward comment="defconf: drop everything else not coming from LAN" in-interface-list=!LAN
/ipv6 nd
set [ find default=yes ] interface=bridge other-configuration=yes
/system clock
set time-zone-name=Europe/Madrid
/system identity
set name=hap_ac2
You do not have the required permissions to view the files attached to this post.
Re: hap AX2: client connects and disconnects continously
I just notice that i have same problem with one client after updating everything to new qualcomm drivers and new capsman, note that all other devices connect fine on all CAPs
Not sure even which device it is, client didint complain back yet, might be some smart crap device.
Not sure even which device it is, client didint complain back yet, might be some smart crap device.
You do not have the required permissions to view the files attached to this post.
Re: hap AX2: client connects and disconnects continously
Something similar happens to me, I don't understand why it disconnects, it only happens with the iPhone 14 pro max.
One user in another thread managed to solve a similar problem with apple device by setting management-protection=disabled. Note that WPA2 allows management frame protection but WPA3 requires it, so by setting this to disabled you may loose WPA3 (but since it's required for WPA3, ROS may ignore this setting for WPA3 as well).
But according to description in wifi manual it's best to leave it unset ... which then allows ROS to select best value based on used authentication type. If that pleases station devices ...
Re: hap AX2: client connects and disconnects continously
Exactly, that was the solution, now everything works fine. Thank you
Edited:
After a calm night, the same thing happened again, now I updated version 14beta4 and for now everything is calm, I hope it has been fixed although I have not seen anything in changes made by version 14 that speaks to this.
Thank you
Edited:
After a calm night, the same thing happened again, now I updated version 14beta4 and for now everything is calm, I hope it has been fixed although I have not seen anything in changes made by version 14 that speaks to this.
Thank you
Re: hap AX2: client connects and disconnects continously
and the errors come back, I don't know what to try anymore
You do not have the required permissions to view the files attached to this post.
Re: hap AX2: client connects and disconnects continously
What about interference? Seems you are using the 2.4GHz band which might be subject to a lot of interference.
Can you share your config:
Remove serial and any other private information and post the about in between code tags by use of the </> button.
Can you share your config:
Code: Select all
/export file=anynameyoulikeRe: hap AX2: client connects and disconnects continously
Thanks, wifi2 is the 5G channel, it is an ac2, there is no one broadcasting in that band (channel 136)
Code: Select all
# 2024-01-07 18:23:33 by RouterOS 7.14beta4
# software id = XXX
#
# model = RBD52G-5HacD2HnD
# serial number = XXX
/interface wifi channel
add band=2ghz-n disabled=no frequency=2412 name=channel01 width=20mhz
add band=5ghz-ac disabled=no frequency=5680,5170 name=channel136 width=20/40mhz
/interface wifi security
add authentication-types=wpa2-psk,wpa3-psk disabled=no name=sec1 wps=disable
/interface wifi configuration
add channel=channel01 country=Spain disabled=no mode=ap name=cfg01 security=sec1 security.ft=yes .ft-over-ds=yes ssid=Nely
add channel=channel136 country=Spain disabled=no mode=ap name=cfg136 security=sec1 security.ft=yes .ft-over-ds=yes ssid=Nely
/interface wifi
set [ find default-name=wifi1 ] configuration=cfg01 configuration.mode=ap .tx-power=9 disabled=no
set [ find default-name=wifi2 ] configuration=cfg136 configuration.mode=ap .tx-power=16 disabled=noRe: hap AX2: client connects and disconnects continously
Can you pick just one frequency for the 5GHz radio and see if that helps?
What is the setting of Group Encryption? I selected CCMP.
Only difference I see in comparison to my config is that I set FT on the security tab (Winbox) instead of on the configuration part. But that doesn't make a difference.
What is the setting of Group Encryption? I selected CCMP.
Only difference I see in comparison to my config is that I set FT on the security tab (Winbox) instead of on the configuration part. But that doesn't make a difference.
Re: hap AX2: client connects and disconnects continously
The two frequencies are in case a radar signal appears, I have another frequency option, otherwise it falls and doesn't pick me up anymore, it already has.
The default encryption setting is CCMP
The default encryption setting is CCMP
You do not have the required permissions to view the files attached to this post.
Re: hap AX2: client connects and disconnects continously
5170 is not a standard wifi channel center frequency, 5180 is. Some wireless clients hate non-standard frequency channels, so both center frequency and channel layout have to conform to standard channel list.
Also some clients like to have "control channel lowest" channel layout (e.g. 20/40mhz-Ce) and in this case 5680 is not right frequency either, it should be 5660 (your setting of "20/40mhz" with frequency 5680 would turn out to be "eC" if MT sticks to standard 40MHz channel layout).
Also some clients like to have "control channel lowest" channel layout (e.g. 20/40mhz-Ce) and in this case 5680 is not right frequency either, it should be 5660 (your setting of "20/40mhz" with frequency 5680 would turn out to be "eC" if MT sticks to standard 40MHz channel layout).
Re: hap AX2: client connects and disconnects continously
Thanks, noted the changes, I'll fine-tune them to see if it doesn't cause more problems.
Code: Select all
# 2024-01-09 15:01:07 by RouterOS 7.14beta4
# software id = XXXX
#
# model = RBD52G-5HacD2HnD
# serial number = XXXXX
/interface wifi channel
add band=2ghz-n disabled=no frequency=2412 name=channel01 width=20mhz
add band=5ghz-ac disabled=no frequency=5660,5180 name=channel132_36 width=20/40mhz
/interface wifi security
add authentication-types=wpa2-psk,wpa3-psk disabled=no ft=yes ft-over-ds=yes name=sec1 wps=disable
/interface wifi configuration
add channel=channel01 country=Spain disabled=no mode=ap name=cfg01 security=sec1 ssid=Nely
add channel=channel132_36 country=Spain disabled=no mode=ap name=cfg132_36 security=sec1 ssid=Nely
/interface wifi
set [ find default-name=wifi1 ] configuration=cfg01 configuration.mode=ap .tx-power=9 disabled=no
set [ find default-name=wifi2 ] configuration=cfg132_36 configuration.mode=ap .tx-power=16 disabled=no
-
-
robmaltsystems
Long time Member
- Posts: 574
- Joined:
Re: hap AX2: client connects and disconnects continously
Aside but some Wi-Fi chipsets (e.g. some Realtek) sometimes struggle with channel 149 (5745) and above. Sometimes you can disable 801.11d and those channels will work. Something to do with not detecting the country correctly and not realising those channels are allowed. However, on Android, I think you're stuck so on my cheap Android tablet, I can't use Wi-Fi 5 if it's using 149 or above.Some wireless clients hate non-standard frequency channels
Re: hap AX2: client connects and disconnects continously
After the stability in 7.14beta4 when updating to 7.14beta7 without going through beta6, the disconnections began again, now even on Android phones that never gave problems before.
Who is online
Users browsing this forum: m4rk3J and 8 guests