MikroTik

nonolk

@raimondsp, there is also I think the case where you need bridge filter rules, for instance my provider Orange in France require to set the COS to 6 for DHCP request, therefore I need to use a bridge port to set it on my rb5009 as the new-vlan-priority is not supported on this device as a switch rule.

nonolk

Hello @goodbye,

Yes it's a known behaviour, see here https://help.mikrotik.com/docs/display/ ... Properties, look at encryption part, there is a special remark for intel cards.

Best regards,

nonolk

@Infabo thank you for the link really interesting.

So FT IE = Fast BSS Transistion Information Element so it seems this device do not like wpa3 and FT in this case.

@mikrotik is this worth making a support ticket ?

nonolk

@erlinden, I already applied this since a while (but thank you for answering) @infabo, I managed to go bit further, as I found that disabling wpa3-psk (just letting wap2-psk) seems to improve the situation. @mikrotik could you tell me/us what’s FT IEs is ? For knowledge only ;-) @all thank you for r...

nonolk

Hello, I’m running the latest beta version 7.14 beta8 since nearly a week, and it looks like it is working mostly fine, roaming is working fine for all my devices, except one where I see several messages like this one: wifi5_5 assocation rejected, invalid FT IEs This is when wireless debug topic is ...

nonolk

@infabo, so why not applying the proposed workaround of one slave configuration on a virtual wifi interface with FT disabled ( I must use another SSID of course), this is what I'm using as a workaround.

nonolk

@infabo, you don't need and apple devlopper account to do get the debug profiles

, you just have to use a standard appleID (I do not have one devlopperID)

nonolk

@mkx there I fully agree with you. @kentzo https://developer.apple.com/bug-reporting/profiles-and-logs/ here is the way to collect logs on Idevices, and believe me or not it produce lot, if you are using a Mac it’s really easy to get it, with a PC you need third party software to collect it. @holvoe...

nonolk

@mkx, and as I already explained before despite I’m sharing your experience, you are out of topic… FT is stated as supported https://support.apple.com/en-us/103274 so it should not a problem, and more I’ve tested the same device on an Aruba network with 802.11kr activated, and it just work. And of c...

nonolk

@normis of course this was already tested, without success.

nonolk

@iwikus honnestly I don't know, the only thing I can say is that I have still a ticket open at Mikrotik support for this issue.

nonolk

@Normis, with all due respect, I completly confirm what @ToTheFull says, just deactivating FT solve the issue instantly

As requested by @Guntis, I will upgrade to 7.13rc2 and provide the requested supout

I'm just not at home today, but I will be tomorow.

Best regards,

nonolk

@ToTheFull yes this is what I did, but as far as I can see the Ipad Air 2 should be able to "understand FT" look here:https://support.apple.com/en-us/103274

Since Ipad AIr 802.11 K and r are supported

nonolk

@Normis, could you pleas ahve a look to this SUP-113114, it's totally related to this issue (ipad Air 2 unable to connect once FT is activated, with just bad password), and I have no news from support since July 11th

Thank you

nonolk

Champagne, I was going to replace my CapXl, to have only wifiwave2, but I'm now able to use wifiwave2 driver, thank you.

nonolk

@Normis it is available now… thank you

nonolk

@Normis, ok just tell me when to try ;-) But I know that it could take a while to make Apple change their mind.

Anyway thank you for your answer and great work.

nonolk

@Normis, so here it’s just a miss understanding from their side…

I will try to use my US account to get it

nonolk

@Normis, I think you miss interpreted this rule, because It apply to cryptography solution(new systems, new cyphers….), and even more it seems only to apply when you are selling something, I.posting or exporting goods…. Otherwise even selling routers, switches with vpn technology should also require...

nonolk

Hello everyone,

@Normis, the application is still not available in France on IOS, searching for it gives no results, and using the direct link says « this application is not available in your country ». I don’t think it’s wished.

Regards,

nonolk

Glad to hear that. I will wait for next beta then before deploying it

, thank you ajmxco

nonolk

@ajmxco, because of this viewtopic.php?t=196384

Even if the impacted configuration is not so common

nonolk

@ajmxco, Yes it works fine for me on 3 (ax2 and one ax lite), I have 20 days of connection time for some of my devices without major issues.

So at least for now and if you are not using the ax2 as router (or without ipv6) this is a viable workaround.

Best regards,

nonolk

@Rox169, downgrade to 7.8, it’s rock solid for more than 20 days on my side (3 ax2 and 1 ax lite, with capsman).

nonolk

You’re right, therefore I edited the post with just the useful information.

nonolk

Hello asblitz, It may have nothing to do with your problem, but this seems strange to me: set [ find default-name=wifi1 ] channel=channel1 channel.band=5ghz-ax First because channel1 is not present in your config. Secondly because if it's the real channel 1, then it's on the 2,4Ghz band and not the ...

nonolk

See post 117 and 121 above.
It will be fixed in a later version.

But the post you are referring to, are about dynamic interface/bridge, not about authentication issues, like stated in posts 114, 97 and 95.

So for me it's not the same issue, or I'm wrong ?

nonolk

CAPsMAN AX3/Audience issues with 7.9RC1 and 7.9RC2 Incorrect password [Using WPA2] occurs after a period of time across multiple devices (Samsung Phones/Win11 etc), only resolved by rebooting APs[/ I also have the problem of 'incorrect password' after a period of time. Phones (Samsung) and Laptop (...

nonolk

Hello, please open a support ticket regarding this. Have you tried removing the network from the list of saved wifi networks on the iPad and adding it again after enabling ft? 'Adaptive' 802.11r appears to be a proprietary behaviour implemented to accomodate clients which get confused by 802.11r. T...

nonolk

hAP ax3. Funny thing that exactly on 7.9rc1 (2023-Mar-30 16:42) I first acquainted with "key handshake timeout" messages in my log: *) wifiwave2 - fixed key handshake timeout for re-associating client devices on 802.11ac interfaces; After few hours of uptime all wireless devices were losi...

nonolk

Hello, I’ve just found one possible bug, when activating ft=yes old iPads Air 2 running iPadOS 15.7.4 could not connect anymore (activating ft-over-ds do not help neither), always requesting for password and telling bad password. In my case valid authentication are wpa2-psk and wpa3-psk only (checke...

nonolk

@Cyayon, yes it’s working fine in v7.7 without the modification, indeed v7.8 introduced this bug, it also introduced some nice features for DOH.

nonolk

@cyayon I'm using the same gpon module as you, for the same isp but on another hardware rb5009. And following the instructions from here: https://hack-gpon.github.io/ont-fs-com-gpon-onu-stick-with-mac/#tx-fault--serial solved the issue, of the module not being detected. Yes it was working in both co...

nonolk

Hello, I think I found one bug, with ipv6 prefix. I added a second dns server in /ipv6/nd/interfaces on the default one (I have three interfaces in total), it resulted in the prefix being flagged as invalid, and I was unable to get it back to the valid state. The only solution I found was to reboot ...

nonolk

How do you receive WAN IP by PPPoE or IPoE(DHCP)?

I receive my wan ip by dhcp (my isp is Orange France), of course a release/renew of the dhcp client do not help.
Just a reboot of GPON module solve the issue.

nonolk

Hello, I installed this beta version on my rb5009 and I can confirm, the issue with sfp gpon module (FS GPON-ONU-34-20BI) not detected is gone. One issue remains with this module, indeed when rebooting the router the module is not restarted (I have then to manually reboot the module), and in my case...

nonolk

SFP seems to be a systematic problem with v7.8. At least on some boards https://forum.mikrotik.com/viewtopic.php?t=193986#p987210 I did a bit more testing, and I can say this issue depends on the sfp module. For me on rb 5009 running v7.8: - FS GPON-ONU-34-20BI is not detected and therefore not wor...

nonolk

Hello, RB5009 on 7.8 Stable does not recognize Huawei MA5671A GPON SFP at all (with auto-neg on or off) was working fine on 7.7 stable (with auto-neg on and off fixed 2.5Gbps) I encounter the same with another gpon sfp module (FS GPON-ONU-34-20BI), the module is not detected anymore (Module present ...

nonolk

@sindy, thank you very much it works now ;-), following your advice to reverse the question. If one day you come to northern-east par of France, I will pay you a bier ;-) The strange part is, in IPV6 the mangle rules works for dhcp. One last question do you have any idea why fastrack seems still not...

nonolk

@sindy so it works better in a way as I'm able to get a valid ip address. But as this command doesn't work add out-interface=sfp-wan chain=output mac-protocol=vlan vlan-encap=ip ip-protocol=udp dst-port=67 action=set-priority new-priority=6 failure: ip matchers are valid only when mac-protocol is se...

nonolk

@sindy, thank you for the explanation, it’s Cristal clear… my bad.

I’ll test it soon and I’ll give you feedback

Thank you for your time and help.

nonolk

@sindy, sorry for the missing "r", yes otherwise it could hurt a bit ;-) Here is the non-working configuration: # dec/03/2022 14:17:23 by RouterOS 7.6 # software id = NYZZ-0FRB # # model = RB5009UPr+S+ # serial number = /caps-man channel add band=2ghz-b/g/n frequency=2412 name=CH1 add band...

nonolk

Hello All, Thank you for your first feedbacks. @sindy, sadly when using only one bridge like you said it, the filter rule is never applied… @anav do you confirm there is no solution for this ? It’s really frustrating that the rb5009 do not support the new-vlan-priority switch rules… why ? Thank you.

nonolk

Hello everybody, I'm actually struggling with one problem with my new router (rb5009). Indeed, to be able to get an ip address from my ISP, I need to change the vlan priority of the dhcp packets. I used to use switch rules to do it on my former rb3011, but the rb5009 does not support new-vlan-priori...

Search found 44 matches