Mikrotik - Wireless Issue on hAP and hAP ac lite
Hi guys, Hoping any of you can help. We're seeing weird issues with our Mikrotik client routers in deployment, specifically with the 2.4GHz wireless on the hAP and hAP ac lites. This issue we're seeing seems to affect the 2.4GHz wireless card (Atheros AR9300 in both models) but does not affect the 5GHz card in the ac lite. Customers are reporting to us the inability to connect to wireless at times, such as invalid security key or failure to connect messages (depending on the customer device). The wireless interface itself will show as running, but with no clients connected. No error messages are indicated in the log about exchange key timeouts or anything similar, like you'd expect. Doing anything that performs a soft-reset like operation on the wireless interface will allow the customer to connect again for a period of time. This can include: - Doing a wireless scan. - Doing a frequency usage scan. - Changing channel. - Changing SSID. Basically any option you can change will fix it, even rebooting the router. We've tried all different types of software from 6.39 through 6.41, even the latest rc (6.42rc35). We've seen this issue for at least three months now, if not longer. It's not isolated to a particular site either, as we receive reports daily from other customer locations with the same issue. Initially we thought it was interference, but even then we have customers with very low utilisation and still seeing this issue. We have reported a case with Mikrotik, but their most recent suggestion was to post in the forums to see if anyone else was experiencing this issue (which surprised me, generally they direct you to support if you write this sort of stuff in the forums). Below I've included a brief output from the router showing the way this interface is currently set up. Have any of you seen this type of issue on either this wireless card or others? /interface wireless security-profiles add authentication-types=wpa2-psk eap-methods="" mode=dynamic-keys name=wlan1 supplicant-identity=room-403 /interface wireless set [ find default-name=wlan1 ] adaptive-noise-immunity=ap-and-client-mode band=2ghz-b/g/n country=australia disabled=no distance=indoors frequency=2462 mode=ap-bridge security-profile=wlan1 ssid="Room 403" wireless-protocol=802.11 Regards, Ben
Hi Ben, I generally set the following on 2.4GHz: - Use only channels 1, 6, 11 - Set 20Mhz bandwidth - Unless you have old gear set 2GHz-only-N. When devices like Sonos and old printers crop up you have to go back to B/G/N. - 802.11 - Distance indoors - Adaptive noise immunity client and ap - Preamble mode to both - Any guard interval - All chains enabled - Full multicast helper - WMM enabled - Only use WPA2-PSK and only AES More than 1 AP now I use CAPSMAN, sometimes with local forwarding sometimes not. It's just a lot easier in the long run. Try it out. Jason On 27 February 2018 at 08:27, Ben Farmer <ben.farmer@myport.com.au> wrote:
Hi guys,
Hoping any of you can help. We're seeing weird issues with our Mikrotik client routers in deployment, specifically with the 2.4GHz wireless on the hAP and hAP ac lites.
This issue we're seeing seems to affect the 2.4GHz wireless card (Atheros AR9300 in both models) but does not affect the 5GHz card in the ac lite.
Customers are reporting to us the inability to connect to wireless at times, such as invalid security key or failure to connect messages (depending on the customer device).
The wireless interface itself will show as running, but with no clients connected. No error messages are indicated in the log about exchange key timeouts or anything similar, like you'd expect.
Doing anything that performs a soft-reset like operation on the wireless interface will allow the customer to connect again for a period of time. This can include: - Doing a wireless scan. - Doing a frequency usage scan. - Changing channel. - Changing SSID.
Basically any option you can change will fix it, even rebooting the router.
We've tried all different types of software from 6.39 through 6.41, even the latest rc (6.42rc35). We've seen this issue for at least three months now, if not longer. It's not isolated to a particular site either, as we receive reports daily from other customer locations with the same issue.
Initially we thought it was interference, but even then we have customers with very low utilisation and still seeing this issue.
We have reported a case with Mikrotik, but their most recent suggestion was to post in the forums to see if anyone else was experiencing this issue (which surprised me, generally they direct you to support if you write this sort of stuff in the forums).
Below I've included a brief output from the router showing the way this interface is currently set up.
Have any of you seen this type of issue on either this wireless card or others?
/interface wireless security-profiles add authentication-types=wpa2-psk eap-methods="" mode=dynamic-keys name=wlan1 supplicant-identity=room-403
/interface wireless set [ find default-name=wlan1 ] adaptive-noise-immunity=ap-and-client-mode band=2ghz-b/g/n country=australia disabled=no distance=indoors frequency=2462 mode=ap-bridge security-profile=wlan1 ssid="Room 403" wireless-protocol=802.11
Regards, Ben
_______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
Hi Jason, Thanks for the suggestions, most of those we've got, but will give it a shot with only-N, WMM enabled and multicast helper as well. Greg, they are not able to roam, the SSID is restricted down to one device only. The error message so far has appeared on both iOS/OSX devices and Windows laptops. Haven't heard anything about Android devices, but then again they don't seem to be as common these days. Regards, Ben Farmer Network Engineer www.myport.com.au Address 86 Brookes St, Fortitude Valley Q 4006 Mobile 0488 034 499 Direct 07 3177 1122 Tel 1300 733 629 Fax 07 3177 1129 Email ben.farmer@myport.com.au -----Original Message----- From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of Jason Hecker (Up & Running Tech) Sent: Tuesday, 27 February 2018 7:58 To: MikroTik Australia Public List <public@talk.mikrotik.com.au> Subject: Re: [MT-AU Public] Mikrotik - Wireless Issue on hAP and hAP ac lite Hi Ben, I generally set the following on 2.4GHz: - Use only channels 1, 6, 11 - Set 20Mhz bandwidth - Unless you have old gear set 2GHz-only-N. When devices like Sonos and old printers crop up you have to go back to B/G/N. - 802.11 - Distance indoors - Adaptive noise immunity client and ap - Preamble mode to both - Any guard interval - All chains enabled - Full multicast helper - WMM enabled - Only use WPA2-PSK and only AES More than 1 AP now I use CAPSMAN, sometimes with local forwarding sometimes not. It's just a lot easier in the long run. Try it out. Jason On 27 February 2018 at 08:27, Ben Farmer <ben.farmer@myport.com.au> wrote:
Hi guys,
Hoping any of you can help. We're seeing weird issues with our Mikrotik client routers in deployment, specifically with the 2.4GHz wireless on the hAP and hAP ac lites.
This issue we're seeing seems to affect the 2.4GHz wireless card (Atheros AR9300 in both models) but does not affect the 5GHz card in the ac lite.
Customers are reporting to us the inability to connect to wireless at times, such as invalid security key or failure to connect messages (depending on the customer device).
The wireless interface itself will show as running, but with no clients connected. No error messages are indicated in the log about exchange key timeouts or anything similar, like you'd expect.
Doing anything that performs a soft-reset like operation on the wireless interface will allow the customer to connect again for a period of time. This can include: - Doing a wireless scan. - Doing a frequency usage scan. - Changing channel. - Changing SSID.
Basically any option you can change will fix it, even rebooting the router.
We've tried all different types of software from 6.39 through 6.41, even the latest rc (6.42rc35). We've seen this issue for at least three months now, if not longer. It's not isolated to a particular site either, as we receive reports daily from other customer locations with the same issue.
Initially we thought it was interference, but even then we have customers with very low utilisation and still seeing this issue.
We have reported a case with Mikrotik, but their most recent suggestion was to post in the forums to see if anyone else was experiencing this issue (which surprised me, generally they direct you to support if you write this sort of stuff in the forums).
Below I've included a brief output from the router showing the way this interface is currently set up.
Have any of you seen this type of issue on either this wireless card or others?
/interface wireless security-profiles add authentication-types=wpa2-psk eap-methods="" mode=dynamic-keys name=wlan1 supplicant-identity=room-403
/interface wireless set [ find default-name=wlan1 ] adaptive-noise-immunity=ap-and-client-mode band=2ghz-b/g/n country=australia disabled=no distance=indoors frequency=2462 mode=ap-bridge security-profile=wlan1 ssid="Room 403" wireless-protocol=802.11
Regards, Ben
_______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com. au
-- <https://www.upandrunningtech.com.au> _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
Are they disconnecting from Wifi or staying connected and but no data flows? I definitely have had this in the past! <fist shake> Turn off R/STP in all your Mikrotik bridges and other switching gear. You shouldn't need STP on Wifi devices anyway. On 27 February 2018 at 09:50, Ben Farmer <ben.farmer@myport.com.au> wrote:
Hi Jason,
Thanks for the suggestions, most of those we've got, but will give it a shot with only-N, WMM enabled and multicast helper as well.
Greg, they are not able to roam, the SSID is restricted down to one device only.
The error message so far has appeared on both iOS/OSX devices and Windows laptops. Haven't heard anything about Android devices, but then again they don't seem to be as common these days.
Regards, Ben Farmer
Network Engineer
www.myport.com.au
Address 86 Brookes St, Fortitude Valley Q 4006 Mobile 0488 034 499 Direct 07 3177 1122 Tel 1300 733 629 Fax 07 3177 1129 Email ben.farmer@myport.com.au
-----Original Message----- From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of Jason Hecker (Up & Running Tech) Sent: Tuesday, 27 February 2018 7:58 To: MikroTik Australia Public List <public@talk.mikrotik.com.au> Subject: Re: [MT-AU Public] Mikrotik - Wireless Issue on hAP and hAP ac lite
Hi Ben,
I generally set the following on 2.4GHz:
- Use only channels 1, 6, 11 - Set 20Mhz bandwidth - Unless you have old gear set 2GHz-only-N. When devices like Sonos and old printers crop up you have to go back to B/G/N. - 802.11 - Distance indoors - Adaptive noise immunity client and ap - Preamble mode to both - Any guard interval - All chains enabled - Full multicast helper - WMM enabled - Only use WPA2-PSK and only AES
More than 1 AP now I use CAPSMAN, sometimes with local forwarding sometimes not. It's just a lot easier in the long run.
Try it out.
Jason
On 27 February 2018 at 08:27, Ben Farmer <ben.farmer@myport.com.au> wrote:
Hi guys,
Hoping any of you can help. We're seeing weird issues with our Mikrotik client routers in deployment, specifically with the 2.4GHz wireless on the hAP and hAP ac lites.
This issue we're seeing seems to affect the 2.4GHz wireless card (Atheros AR9300 in both models) but does not affect the 5GHz card in the ac lite.
Customers are reporting to us the inability to connect to wireless at times, such as invalid security key or failure to connect messages (depending on the customer device).
The wireless interface itself will show as running, but with no clients connected. No error messages are indicated in the log about exchange key timeouts or anything similar, like you'd expect.
Doing anything that performs a soft-reset like operation on the wireless interface will allow the customer to connect again for a period of time. This can include: - Doing a wireless scan. - Doing a frequency usage scan. - Changing channel. - Changing SSID.
Basically any option you can change will fix it, even rebooting the router.
We've tried all different types of software from 6.39 through 6.41, even the latest rc (6.42rc35). We've seen this issue for at least three months now, if not longer. It's not isolated to a particular site either, as we receive reports daily from other customer locations with the same issue.
Initially we thought it was interference, but even then we have customers with very low utilisation and still seeing this issue.
We have reported a case with Mikrotik, but their most recent suggestion was to post in the forums to see if anyone else was experiencing this issue (which surprised me, generally they direct you to support if you write this sort of stuff in the forums).
Below I've included a brief output from the router showing the way this interface is currently set up.
Have any of you seen this type of issue on either this wireless card or others?
/interface wireless security-profiles add authentication-types=wpa2-psk eap-methods="" mode=dynamic-keys name=wlan1 supplicant-identity=room-403
/interface wireless set [ find default-name=wlan1 ] adaptive-noise-immunity=ap-and-client-mode band=2ghz-b/g/n country=australia disabled=no distance=indoors frequency=2462 mode=ap-bridge security-profile=wlan1 ssid="Room 403" wireless-protocol=802.11
Regards, Ben
_______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com. au
-- <https://www.upandrunningtech.com.au> _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
Hi Ben What happened in the end? Jason On 27 February 2018 at 09:50, Ben Farmer <ben.farmer@myport.com.au> wrote:
Hi Jason,
Thanks for the suggestions, most of those we've got, but will give it a shot with only-N, WMM enabled and multicast helper as well.
Greg, they are not able to roam, the SSID is restricted down to one device only.
The error message so far has appeared on both iOS/OSX devices and Windows laptops. Haven't heard anything about Android devices, but then again they don't seem to be as common these days.
Regards, Ben Farmer
Network Engineer
www.myport.com.au
Address 86 Brookes St, Fortitude Valley Q 4006 Mobile 0488 034 499 Direct 07 3177 1122 Tel 1300 733 629 Fax 07 3177 1129 Email ben.farmer@myport.com.au
-----Original Message----- From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of Jason Hecker (Up & Running Tech) Sent: Tuesday, 27 February 2018 7:58 To: MikroTik Australia Public List <public@talk.mikrotik.com.au> Subject: Re: [MT-AU Public] Mikrotik - Wireless Issue on hAP and hAP ac lite
Hi Ben,
I generally set the following on 2.4GHz:
- Use only channels 1, 6, 11 - Set 20Mhz bandwidth - Unless you have old gear set 2GHz-only-N. When devices like Sonos and old printers crop up you have to go back to B/G/N. - 802.11 - Distance indoors - Adaptive noise immunity client and ap - Preamble mode to both - Any guard interval - All chains enabled - Full multicast helper - WMM enabled - Only use WPA2-PSK and only AES
More than 1 AP now I use CAPSMAN, sometimes with local forwarding sometimes not. It's just a lot easier in the long run.
Try it out.
Jason
On 27 February 2018 at 08:27, Ben Farmer <ben.farmer@myport.com.au> wrote:
Hi guys,
Hoping any of you can help. We're seeing weird issues with our Mikrotik client routers in deployment, specifically with the 2.4GHz wireless on the hAP and hAP ac lites.
This issue we're seeing seems to affect the 2.4GHz wireless card (Atheros AR9300 in both models) but does not affect the 5GHz card in the ac lite.
Customers are reporting to us the inability to connect to wireless at times, such as invalid security key or failure to connect messages (depending on the customer device).
The wireless interface itself will show as running, but with no clients connected. No error messages are indicated in the log about exchange key timeouts or anything similar, like you'd expect.
Doing anything that performs a soft-reset like operation on the wireless interface will allow the customer to connect again for a period of time. This can include: - Doing a wireless scan. - Doing a frequency usage scan. - Changing channel. - Changing SSID.
Basically any option you can change will fix it, even rebooting the router.
We've tried all different types of software from 6.39 through 6.41, even the latest rc (6.42rc35). We've seen this issue for at least three months now, if not longer. It's not isolated to a particular site either, as we receive reports daily from other customer locations with the same issue.
Initially we thought it was interference, but even then we have customers with very low utilisation and still seeing this issue.
We have reported a case with Mikrotik, but their most recent suggestion was to post in the forums to see if anyone else was experiencing this issue (which surprised me, generally they direct you to support if you write this sort of stuff in the forums).
Below I've included a brief output from the router showing the way this interface is currently set up.
Have any of you seen this type of issue on either this wireless card or others?
/interface wireless security-profiles add authentication-types=wpa2-psk eap-methods="" mode=dynamic-keys name=wlan1 supplicant-identity=room-403
/interface wireless set [ find default-name=wlan1 ] adaptive-noise-immunity=ap-and-client-mode band=2ghz-b/g/n country=australia disabled=no distance=indoors frequency=2462 mode=ap-bridge security-profile=wlan1 ssid="Room 403" wireless-protocol=802.11
Regards, Ben
_______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com. au
-- <https://www.upandrunningtech.com.au> _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
Are they apple client devices or is it any wireless client devices ? +1 also on Jason H 's comments on general config. Also do you clients hook to multiple AP's (e.g same SSID) as they walk around the building ? Cheers. ----- Original Message ----- From: "MikroTik Australia Public List" To:"MikroTik Australia Public List" Cc: Sent:Mon, 26 Feb 2018 21:27:25 +0000 Subject:[MT-AU Public] Mikrotik - Wireless Issue on hAP and hAP ac lite Hi guys, Hoping any of you can help. We're seeing weird issues with our Mikrotik client routers in deployment, specifically with the 2.4GHz wireless on the hAP and hAP ac lites. This issue we're seeing seems to affect the 2.4GHz wireless card (Atheros AR9300 in both models) but does not affect the 5GHz card in the ac lite. Customers are reporting to us the inability to connect to wireless at times, such as invalid security key or failure to connect messages (depending on the customer device). The wireless interface itself will show as running, but with no clients connected. No error messages are indicated in the log about exchange key timeouts or anything similar, like you'd expect. Doing anything that performs a soft-reset like operation on the wireless interface will allow the customer to connect again for a period of time. This can include: - Doing a wireless scan. - Doing a frequency usage scan. - Changing channel. - Changing SSID. Basically any option you can change will fix it, even rebooting the router. We've tried all different types of software from 6.39 through 6.41, even the latest rc (6.42rc35). We've seen this issue for at least three months now, if not longer. It's not isolated to a particular site either, as we receive reports daily from other customer locations with the same issue. Initially we thought it was interference, but even then we have customers with very low utilisation and still seeing this issue. We have reported a case with Mikrotik, but their most recent suggestion was to post in the forums to see if anyone else was experiencing this issue (which surprised me, generally they direct you to support if you write this sort of stuff in the forums) Below I've included a brief output from the router showing the way this interface is currently set up. Have any of you seen this type of issue on either this wireless card or others? /interface wireless security-profiles add authentication-types=wpa2-psk eap-methods="" mode=dynamic-keys name=wlan1 supplicant-identity=room-403 /interface wireless set [ find default-name=wlan1 ] adaptive-noise-immunity=ap-and-client-mode band=2ghz-b/g/n country=australia disabled=no distance=indoors frequency=2462 mode=ap-bridge security-profile=wlan1 ssid="Room 403" wireless-protocol=802.11 Regards, Ben _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
participants (3)
-
Ben Farmer -
Greg McLennan -
Jason Hecker (Up & Running Tech)