Wireless disconnected, group key exchange timeout

sergey · Wed Dec 19, 2012 1:47 pm

Hello

I have 2011UAS-2HnD with 5.22 RouterOS. Clients (Linux 3.2.12 and WinXP) disconnect periodically - 1-10 times per hour. Distance between clients and AP is less then 5 meters.

MT wireless configuration:

/interface wireless
set 0 band=2ghz-b/g/n disabled=no frequency=2422 hide-ssid=yes l2mtu=2290 mode=ap-bridge ssid=home
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk eap-methods=passthrough mode=dynamic-keys wpa-pre-shared-key=*** wpa2-pre-shared-key=***
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=2m

On client in logs:

Dec 19 13:16:07 lynx kernel: : ieee80211 phy0: wlan0: No probe response from AP d4:ca:6d:6e:9a:57 after 500ms, disconnecting.
Dec 19 13:16:07 lynx dhcpcd[2154]: wlan0: carrier lost
Dec 19 13:16:07 lynx kernel: : cfg80211: Calling CRDA to update world regulatory domain
Dec 19 13:16:07 lynx wpa_cli: interface wlan0 DISCONNECTED
Dec 19 13:16:07 lynx wpa_cli: executing 'false /etc/init.d/net.wlan0 --quiet stop' failed
Dec 19 13:16:07 lynx kernel: : wlan0: authenticate with d4:ca:6d:6e:9a:57 (try 1)
Dec 19 13:16:07 lynx kernel: : wlan0: authenticated
Dec 19 13:16:07 lynx kernel: : wlan0: associate with d4:ca:6d:6e:9a:57 (try 1)
Dec 19 13:16:08 lynx kernel: : wlan0: associate with d4:ca:6d:6e:9a:57 (try 2)
Dec 19 13:16:08 lynx kernel: : wlan0: associate with d4:ca:6d:6e:9a:57 (try 3)
Dec 19 13:16:08 lynx kernel: : wlan0: RX AssocResp from d4:ca:6d:6e:9a:57 (capab=0x431 status=0 aid=1)
Dec 19 13:16:08 lynx kernel: : wlan0: associated
Dec 19 13:16:08 lynx dhcpcd[2154]: wlan0: carrier acquired
Dec 19 13:16:08 lynx wpa_cli: interface wlan0 CONNECTED

Client interface status (connected):

wlan0 IEEE 802.11bg ESSID:"home"
Mode:Managed Frequency:2.422 GHz Access Point: D4:CA:6D:6E:9A:57
Bit Rate=1 Mb/s Tx-Power=20 dBm
Retry long limit:7 RTS thr:off Fragment thr:off
Encryption key:off
Power Management:off
Link Quality=70/70 Signal level=-16 dBm
Rx invalid nwid:0 Rx invalid crypt:0 Rx invalid frag:0
Tx excessive retries:0 Invalid misc:36 Missed beacon:0

On MT:

13:16:07 wireless,info 00:16:44:AC:77:1B@wlan1: disconnected, received deauth: no activity (4)
13:16:08 wireless,debug wlan1: 00:16:44:AC:77:1B attempts to associate
13:16:08 wireless,debug wlan1: 00:16:44:AC:77:1B not in local ACL, by default accept
13:16:08 wireless,info 00:16:44:AC:77:1B@wlan1: connected

Some time clients reconnects in less then a minute but some time it takes 2-5 mins to reconnect.

Any ideas?

Thanks.

sergey · Wed Dec 19, 2012 2:44 pm

I want to add that I did not have such problem with Cisco or ZyXEL routers before. Of course it was more then 2 months ago and software on clients were updated but I think that womething wrong with MikroTik or settings.

sergey · Thu Dec 20, 2012 12:49 pm

Update: if I send some data (MikroTik ping) via WiFi, everything is fine. Once I stop pinging MT router, WiFi drops.
It look like something enters into sleep mode. I'd thought that it may be client problem but same problems happen with 2 clients and I did not have it when I used Cisco pr ZyXEL APs.

Any ideas?

sergey · Fri Jan 04, 2013 2:18 am

2 weeks ago I have turned off WiFi on MT and enabled WiFi on ZyXEL Keenetic Giga in access point (bridge) mode. Since those time I do not have WiFi problems.

ZyXEL settings:
Auth: WPA-PSK/WPA2-PSK
Ciphers:TKIP/AES
Hide SSID
802.11g/n
Channel: auto (4th channel)
WiFi Multimedia enabled

My last ide was channels overlap with other WiFi access point (MT used 3rd channel but ZyXEL uses 4th channel) but iwlist wlan0 scan command on Linux does not show that anything uses 3rd channel same as 4th.

Any ideas? I really want switch back to MikroTik WiFi and do not keep 2 devices running.

Fri Jan 04, 2013 11:13 am

maybe try to disable hide-ssid option as maybe that causes the problem. Try to use different channel.

sergey · Fri Jan 04, 2013 11:30 am

Thank you for the reply.

I tried to disable "Hide SSID" option - no luck.
I will try switch to other (4th) channel.

NetworkPro · Thu Mar 14, 2013 9:09 pm

Blah ! Always hard to have fully compatible sh*t!

I am trying with this config on MT side:

ros code

/interface wireless security-profiles
add authentication-types=wpa2-psk eap-methods=passthrough group-key-update=3m management-protection=allowed management-protection-key=<PASSWORD> mode=dynamic-keys name=wpa2 \
    supplicant-identity="" wpa2-pre-shared-key=<PASSWORD>
/interface wireless
set 0 allow-sharedkey=yes band=2ghz-onlyn bridge-mode=disabled default-forwarding=no disabled=no ht-ampdu-priorities=0,1,2,3,4,5,6,7 ht-rxchains=0,1 ht-txchains=0,1 l2mtu=2290 mode=\
    ap-bridge multicast-helper=disabled radio-name="" security-profile=wpa2 ssid=<SSID> wireless-protocol=802.11

looks like it's working

before that - I had "disconnected, group exchange timeout" blaaaaahh

wait ! the export did not catch "Allow Shared Key" on Advanced page, next to Preamble Mode - I have that turned on.

EDIT: group key exchange timeout problem with one Broadcom 802.11n 1T1R still exists with this config.

sergey · Thu Mar 14, 2013 9:20 pm

Well, I have asked support for help. They advised several changes in configuration. Current configuration works fine:

/interface wireless
set 0 band=2ghz-b/g/n country=ukraine disabled=no distance=indoors frequency=2422 frequency-mode=regulatory-domain hide-ssid=yes ht-rxchains=0,1 ht-txchains=0,1 l2mtu=2290 mode=ap-bridge ssid=<SSID>
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk eap-methods=passthrough mode=dynamic-keys wpa-pre-shared-key=<KEY> wpa2-pre-shared-key=<KEY>

Btw, Probably WPA-PSK is not needed and I'm going to disable it.

Thank you for the reply.

NetworkPro · Sun Mar 17, 2013 9:11 am

Yeah my attempts did not work and I did not want to turn on b/g/n to test that.

I want to run OpenWRT trunk on a separate partition now.

sergey · Sun Mar 17, 2013 4:14 pm

What is wrong with b/g/n mode? Why you do not want to use it?

NetworkPro · Sun Mar 17, 2013 4:56 pm

It is slower.

NetworkPro · Sun Mar 17, 2013 7:07 pm

Problem happens with OpenWRT as well.

Switching to cable.

Mar 17 18:50:06 OpenWrt daemon.info hostapd: wlan0: STA 08:ed:b9:xx:xx:xx IEEE 802.11: deauthenticated due to inactivity (timer DEAUTH/REMOVE)
Mar 17 18:50:08 OpenWrt daemon.info hostapd: wlan0: STA 08:ed:b9:xx:xx:xx IEEE 802.11: authenticated
Mar 17 18:50:08 OpenWrt daemon.info hostapd: wlan0: STA 08:ed:b9:xx:xx:xx IEEE 802.11: associated (aid 2)
Mar 17 18:50:08 OpenWrt daemon.info hostapd: wlan0: STA 08:ed:b9:xx:xx:xx WPA: pairwise key handshake completed (RSN)
Mar 17 18:52:47 OpenWrt daemon.info hostapd: wlan0: STA 08:ed:b9:xx:xx:xx IEEE 802.11: authenticated
Mar 17 18:52:47 OpenWrt daemon.info hostapd: wlan0: STA 08:ed:b9:xx:xx:xx IEEE 802.11: associated (aid 2)
Mar 17 18:52:47 OpenWrt daemon.info hostapd: wlan0: STA 08:ed:b9:xx:xx:xx WPA: pairwise key handshake completed (RSN)
Mar 17 18:56:05 OpenWrt daemon.info hostapd: wlan0: STA 08:ed:b9:xx:xx:xx IEEE 802.11: disassociated
Mar 17 18:56:06 OpenWrt daemon.info hostapd: wlan0: STA 08:ed:b9:xx:xx:xx IEEE 802.11: deauthenticated due to inactivity (timer DEAUTH/REMOVE)
Mar 17 18:56:11 OpenWrt daemon.info hostapd: wlan0: STA 08:ed:b9:xx:xx:xx IEEE 802.11: authenticated
Mar 17 18:56:11 OpenWrt daemon.info hostapd: wlan0: STA 08:ed:b9:xx:xx:xx IEEE 802.11: associated (aid 2)
Mar 17 18:56:11 OpenWrt daemon.info hostapd: wlan0: STA 08:ed:b9:xx:xx:xx WPA: pairwise key handshake completed (RSN)

NetworkPro · Thu May 09, 2013 6:20 pm

Update: grabbed new driver for client adapter from station-drivers (god bless the french) (updated all drivers on that pc actually not just the wi-fi)

problem fixed

borax00 · Sat Dec 07, 2013 12:49 am

Hi Sergey,

Can you post what support wrote? I'm seeing deauth due to inactivity (not as frequent as you), I'm curious to know the reply.

rwebb616 · Tue Feb 18, 2014 6:49 pm

So are we to assume that this was a client side issue? I am having this same issue at a client of mine - same error message. v5.26 set up with dynamic keys using wpa2-psk and aes ciphers.

Client's connection on laptop will drop out and take a minute or two to re-establish.

What is the group key update all about - could this be causing the disconnect..? Looks to be set for 5 minutes or something.

Seems like someone from Mikrotik would understand what is going on here. There is a log entry so that means the router is doing something or detecting something is happening.

Thanks
Rich

Bitto · Fri Feb 21, 2014 3:28 pm

Any updates on this issue ? i completely changed rb600 with 800 without success it seems problem occurs +30 users. i optimized connections with disaabling one of three SSID's. Any other ideas ? increase or decrease key exchange time out setting?

rwebb616 · Fri Feb 21, 2014 3:58 pm

Bitto - Is there anything in common with your +30 users? Are they all on the same model of computer or anything like that? At my client there is only one user having the issue and they're on a dell laptop which I believe has some weird power management stuff associated with the wireless. I've had him disable those settings and so far (fingers crossed) haven't heard that he's disconnected.

Bitto · Fri Feb 21, 2014 4:14 pm

Man this is my problem..

Feb/06/2014 13:22:46 wireless,info 3C:E0:72:2C:AA:71@wlan1: connected
Feb/06/2014 13:22:57 wireless,info CC:3A:61:2D:53:30@wlan2: disconnected, received disassoc: sending station leaving (8)
Feb/06/2014 13:22:57 wireless,info wlan2: data from unknown device CC:3A:61:2D:53:30, sent deauth
Feb/06/2014 13:22:57 wireless,info wlan2: data from unknown device CC:3A:61:2D:53:30, sent deauth
Feb/06/2014 13:23:03 wireless,info 18:34:51:02:B3:08@wlan2: disconnected, group key exchange timeout
Feb/06/2014 13:23:03 wireless,info 04:15:52:F2:33:F3@wlan2: disconnected, group key exchange timeout
Feb/06/2014 13:23:03 wireless,info D0:22:BE:48:54:6F@wlan2: disconnected, group key exchange timeout
Feb/06/2014 13:23:03 wireless,info 3C:C2:43:A3:3D:7C@wlan2: disconnected, group key exchange timeout
Feb/06/2014 13:23:03 wireless,info C8:E0:EB:B7:81:5D@wlan2: disconnected, group key exchange timeout
Feb/06/2014 13:23:03 wireless,info E8:99:C4:9C:BA:24@wlan2: disconnected, group key exchange timeout
Feb/06/2014 13:23:03 wireless,info D0:22:BE:1F:A6:E6@wlan2: disconnected, group key exchange timeout
Feb/06/2014 13:23:03 wireless,info 8C:3A:E3:61:83:18@wlan2: disconnected, group key exchange timeout
Feb/06/2014 13:23:03 wireless,info E0:B9:A5:FA:9B:77@wlan2: disconnected, group key exchange timeout
Feb/06/2014 13:23:03 wireless,info 54:EA:A8:6B:33:27@wlan2: disconnected, group key exchange timeout
Feb/06/2014 13:23:03 wireless,info A8:FA:D8:F0:B3:6E@wlan2: disconnected, group key exchange timeout
Feb/06/2014 13:23:03 wireless,info 28:E0:2C:4E:B0:EB@wlan2: disconnected, group key exchange timeout
Feb/06/2014 13:23:15 wireless,info 00:27:10:17:90:D8@wlan3: disconnected, group key exchange timeout
Feb/06/2014 13:23:15 wireless,info 60:67:20:70:B3:1C@wlan1: disconnected, group key exchange timeout
Feb/06/2014 13:23:15 wireless,info 60:67:20:70:B4:48@wlan1: disconnected, group key exchange timeout
Feb/06/2014 13:23:15 wireless,info 08:11:96:14:71:44@wlan1: disconnected, group key exchange timeout
Feb/06/2014 13:23:15 wireless,info 88:53:2E:3D:39:C0@wlan1: disconnected, group key exchange timeout
Feb/06/2014 13:23:15 wireless,info 60:67:20:70:8A:94@wlan1: disconnected, group key exchange timeout
Feb/06/2014 13:23:15 wireless,info 84:A6:C8:DC:6F:59@wlan3: disconnected, group key exchange timeout
Feb/06/2014 13:23:15 wireless,info 60:67:20:70:B2:AC@wlan1: disconnected, group key exchange timeout
Feb/06/2014 13:23:15 wireless,info E0:9D:31:0D:D6:90@wlan3: disconnected, group key exchange timeout
Feb/06/2014 13:23:15 wireless,info 60:67:20:70:8A:9C@wlan1: disconnected, group key exchange timeout
Feb/06/2014 13:23:15 wireless,info 60:67:20:70:B1:E4@wlan1: disconnected, group key exchange timeout
Feb/06/2014 13:23:15 wireless,info 60:67:20:70:B0:64@wlan1: disconnected, group key exchange timeout
Feb/06/2014 13:23:15 wireless,info 60:67:20:70:7F:04@wlan1: disconnected, group key exchange timeout
Feb/06/2014 13:23:15 wireless,info 08:70:45:38:2D:57@wlan1: disconnected, group key exchange timeout
Feb/06/2014 13:23:15 wireless,info 60:67:20:70:B0:D0@wlan1: disconnected, group key exchange timeout
Feb/06/2014 13:23:15 wireless,info 8C:70:5A:35:B5:64@wlan3: disconnected, group key exchange timeout
Feb/06/2014 13:23:15 wireless,info 24:EC:99:D7:58:BE@wlan3: disconnected, group key exchange timeout
Feb/06/2014 13:23:15 wireless,info A8:BB:CF:DB:62:AD@wlan3: disconnected, group key exchange timeout
Feb/06/2014 13:23:15 wireless,info FC:25:3F:73:71:DF@wlan1: disconnected, group key exchange timeout
Feb/06/2014 13:23:15 wireless,info 60:67:20:70:B3:10@wlan1: disconnected, group key exchange timeout
Feb/06/2014 13:23:15 wireless,info 8C:70:5A:33:B9:28@wlan1: disconnected, group key exchange timeout
Feb/06/2014 13:23:15 wireless,info 60:67:20:70:83:28@wlan1: disconnected, group key exchange timeout
Feb/06/2014 13:23:15 wireless,info 3C:E0:72:2C:AA:71@wlan1: disconnected, group key exchange timeout
Feb/06/2014 13:23:15 wireless,info CC:3A:61:AC:9F:35@wlan1: disconnected, group key exchange timeout
Feb/06/2014 13:23:15 wireless,info C4:43:8F:42:3D:C7@wlan3: disconnected, group key exchange timeout
Feb/06/2014 13:23:15 wireless,info 60:67:20:70:B9:B4@wlan1: disconnected, group key exchange timeout
Feb/06/2014 13:24:23 wireless,info wlan1: data from unknown device 60:67:20:70:B9:B4, sent deauth (2454 deauths suppressed)
Feb/06/2014 13:24:23 wireless,info wlan1: data from unknown device 60:67:20:70:B9:B4, sent deauth (1 deauths suppressed)
Feb/06/2014 13:24:23 wireless,info wlan1: data from unknown device 60:67:20:70:B9:B4, sent deauth (10 deauths suppressed)
Feb/06/2014 13:24:39 wireless,info wlan3: data from unknown device E0:9D:31:0D:D6:90, sent deauth (1093 deauths suppressed)
Feb/06/2014 13:24:40 wireless,info wlan1: data from unknown device 60:67:20:70:8A:9C, sent deauth (497 deauths suppressed)
Feb/06/2014 13:24:40 wireless,info wlan1: data from unknown device 60:67:20:70:B3:10, sent deauth (4 deauths suppressed)
Feb/06/2014 13:24:40 wireless,info wlan3: data from unknown device 24:EC:99:D7:58:BE, sent deauth (9 deauths suppressed)
Feb/06/2014 13:24:40 wireless,info wlan1: data from unknown device 60:67:20:70:B1:E4, sent deauth (10 deauths suppressed)
Feb/06/2014 13:24:41 wireless,info wlan1: data from unknown device 88:53:2E:3D:39:C0, sent deauth
Feb/06/2014 13:24:41 wireless,info wlan1: data from unknown device 60:67:20:70:B1:E4, sent deauth
Feb/06/2014 13:24:41 wireless,info wlan3: data from unknown device 24:EC:99:D7:58:BE, sent deauth (3 deauths suppressed)
Feb/06/2014 13:25:22 wireless,debug wlan1: 60:67:20:70:B4:48 attempts to associate
Feb/06/2014 13:25:22 wireless,debug wlan1: 60:67:20:70:B4:48 not in local ACL, by default accept
Feb/06/2014 13:25:22 wireless,info 60:67:20:70:B4:48@wlan1: connected
Feb/06/2014 13:25:27 wireless,info wlan1: data from unknown device 60:67:20:70:8A:94, sent deauth (1770 deauths suppressed)
Feb/06/2014 13:25:27 wireless,info wlan3: data from unknown device 8C:70:5A:35:B5:64, sent deauth (565 deauths suppressed)
Feb/06/2014 13:25:27 wireless,info wlan1: data from unknown device 08:11:96:14:71:44, sent deauth (1 deauths suppressed)
Feb/06/2014 13:25:27 wireless,info wlan1: data from unknown device 60:67:20:70:7F:04, sent deauth
Feb/06/2014 13:25:27 wireless,info wlan3: data from unknown device 84:A6:C8:DC:6F:59, sent deauth
Feb/06/2014 13:25:27 wireless,info wlan1: data from unknown device 08:11:96:14:71:44, sent deauth
Feb/06/2014 13:25:27 wireless,info wlan1: data from unknown device 60:67:20:70:7F:04, sent deauth
Feb/06/2014 13:25:27 wireless,info wlan1: data from unknown device 60:67:20:70:B0:64, sent deauth
Feb/06/2014 13:25:27 wireless,info wlan3: data from unknown device 8C:70:5A:35:B5:64, sent deauth
Feb/06/2014 13:25:27 wireless,info 60:67:20:70:B4:48@wlan1: disconnected, unicast key exchange timeout
Feb/06/2014 13:25:27 wireless,info wlan1: data from unknown device 60:67:20:70:8A:94, sent deauth
Feb/06/2014 13:25:27 wireless,info wlan2: data from unknown device D0:22:BE:1F:A6:E6, sent deauth (1305 deauths suppressed)
Feb/06/2014 13:25:27 wireless,info wlan3: data from unknown device E0:9D:31:0D:D6:90, sent deauth
Feb/06/2014 13:25:27 wireless,info wlan3: data from unknown device 8C:70:5A:35:B5:64, sent deauth
Feb/06/2014 13:25:27 wireless,info wlan1: data from unknown device 60:67:20:70:B1:E4, sent deauth
Feb/06/2014 13:25:27 wireless,info wlan1: data from unknown device 60:67:20:70:B3:1C, sent deauth
Feb/06/2014 13:25:27 wireless,info wlan2: data from unknown device E8:99:C4:9C:BA:24, sent deauth
Feb/06/2014 13:25:27 wireless,info wlan1: data from unknown device 60:67:20:70:7F:04, sent deauth
Feb/06/2014 13:25:27 wireless,info wlan1: data from unknown device 60:67:20:70:B3:10, sent deauth
Feb/06/2014 13:25:27 wireless,info wlan1: data from unknown device 60:67:20:70:7F:04, sent deauth (2 deauths suppressed)
Feb/06/2014 13:25:27 wireless,info wlan3: data from unknown device 8C:70:5A:35:B5:64, sent deauth
Feb/06/2014 13:25:27 wireless,info wlan3: data from unknown device 84:A6:C8:DC:6F:59, sent deauth
Feb/06/2014 13:25:27 wireless,info wlan3: data from unknown device 8C:70:5A:35:B5:64, sent deauth
Feb/06/2014 13:25:27 wireless,info wlan3: data from unknown device 24:EC:99:D7:58:BE, sent deauth
Feb/06/2014 13:25:27 wireless,info wlan3: data from unknown device 24:EC:99:D7:58:BE, sent deauth
Feb/06/2014 13:25:27 wireless,info wlan1: data from unknown device 60:67:20:70:7F:04, sent deauth
Feb/06/2014 13:25:27 wireless,info wlan3: data from unknown device 00:27:10:17:90:D8, sent deauth
Feb/06/2014 13:25:27 wireless,info wlan3: data from unknown device 84:A6:C8:DC:6F:59, sent deauth
Feb/06/2014 13:25:27 wireless,info wlan1: data from unknown device 60:67:20:70:7F:04, sent deauth
Feb/06/2014 13:25:27 wireless,info wlan3: data from unknown device 8C:70:5A:35:B5:64, sent deauth
Feb/06/2014 13:25:27 wireless,info wlan1: data from unknown device 60:67:20:70:B2:AC, sent deauth
Feb/06/2014 13:25:27 wireless,info wlan1: data from unknown device 60:67:20:70:B1:E4, sent deauth
Feb/06/2014 13:25:27 wireless,info wlan1: data from unknown device 60:67:20:70:7F:04, sent deauth
Feb/06/2014 13:25:27 wireless,info wlan3: data from unknown device 8C:70:5A:35:B5:64, sent deauth
Feb/06/2014 13:25:27 wireless,info wlan1: data from unknown device 60:67:20:70:7F:04, sent deauth
Feb/06/2014 13:25:27 wireless,info wlan1: data from unknown device 60:67:20:70:7F:04, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan3: data from unknown device 8C:70:5A:35:B5:64, sent deauth (1 deauths suppressed)
Feb/06/2014 13:25:28 wireless,info wlan1: data from unknown device 60:67:20:70:7F:04, sent deauth (1 deauths suppressed)
Feb/06/2014 13:25:28 wireless,info wlan1: data from unknown device 60:67:20:70:B3:1C, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan1: data from unknown device 60:67:20:70:B3:1C, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan1: data from unknown device 60:67:20:70:7F:04, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan3: data from unknown device 8C:70:5A:35:B5:64, sent deauth (1 deauths suppressed)
Feb/06/2014 13:25:28 wireless,info wlan3: data from unknown device 8C:70:5A:35:B5:64, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan3: data from unknown device 84:A6:C8:DC:6F:59, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan1: data from unknown device 60:67:20:70:83:28, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan3: data from unknown device 84:A6:C8:DC:6F:59, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan3: data from unknown device 84:A6:C8:DC:6F:59, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan3: data from unknown device 84:A6:C8:DC:6F:59, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan1: data from unknown device 60:67:20:70:8A:94, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan1: data from unknown device 08:11:96:14:71:44, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan1: data from unknown device 08:11:96:14:71:44, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan3: data from unknown device 84:A6:C8:DC:6F:59, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan1: data from unknown device 60:67:20:70:7F:04, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan3: data from unknown device 8C:70:5A:35:B5:64, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan1: data from unknown device FC:25:3F:73:71:DF, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan1: data from unknown device FC:25:3F:73:71:DF, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan2: data from unknown device D0:22:BE:1F:A6:E6, sent deauth (3 deauths suppressed)
Feb/06/2014 13:25:28 wireless,info wlan1: data from unknown device FC:25:3F:73:71:DF, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan1: data from unknown device 60:67:20:70:B0:64, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan2: data from unknown device E8:99:C4:9C:BA:24, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan2: data from unknown device E8:99:C4:9C:BA:24, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan1: data from unknown device 60:67:20:70:7F:04, sent deauth (2 deauths suppressed)
Feb/06/2014 13:25:28 wireless,info wlan3: data from unknown device 8C:70:5A:35:B5:64, sent deauth (3 deauths suppressed)
Feb/06/2014 13:25:28 wireless,info wlan3: data from unknown device 84:A6:C8:DC:6F:59, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan1: data from unknown device 60:67:20:70:7F:04, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan3: data from unknown device 8C:70:5A:35:B5:64, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan3: data from unknown device 00:27:10:17:90:D8, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan1: data from unknown device 60:67:20:70:7F:04, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan3: data from unknown device 84:A6:C8:DC:6F:59, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan3: data from unknown device 84:A6:C8:DC:6F:59, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan1: data from unknown device 60:67:20:70:B2:AC, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan1: data from unknown device 60:67:20:70:7F:04, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan1: data from unknown device 60:67:20:70:7F:04, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan1: data from unknown device 60:67:20:70:7F:04, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan1: data from unknown device 60:67:20:70:83:28, sent deauth
Feb/06/2014 13:25:28 wireless,info wlan1: data from unknown device 60:67:20:70:7F:04, sent deauth
Feb/06/2014 13:25:29 wireless,info wlan1: data from unknown device 60:67:20:70:7F:04, sent deauth
Feb/06/2014 13:25:29 wireless,info wlan1: data from unknown device 60:67:20:70:B0:D0, sent deauth
Feb/06/2014 13:25:29 wireless,info wlan1: data from unknown device 60:67:20:70:B3:1C, sent deauth
Feb/06/2014 13:25:29 wireless,info wlan1: data from unknown device 60:67:20:70:B3:1C, sent deauth
Feb/06/2014 13:25:29 wireless,info wlan2: data from unknown device D0:22:BE:1F:A6:E6, sent deauth
Feb/06/2014 13:25:29 wireless,info wlan2: data from unknown device D0:22:BE:1F:A6:E6, sent deauth
Feb/06/2014 13:25:29 wireless,info wlan1: data from unknown device FC:25:3F:73:71:DF, sent deauth
Feb/06/2014 13:25:29 wireless,info wlan1: data from unknown device FC:25:3F:73:71:DF, sent deauth
Feb/06/2014 13:25:29 wireless,info wlan1: data from unknown device FC:25:3F:73:71:DF, sent deauth
Feb/06/2014 13:25:29 wireless,info wlan2: data from unknown device E8:99:C4:9C:BA:24, sent deauth
Feb/06/2014 13:25:29 wireless,info wlan2: data from unknown device E8:99:C4:9C:BA:24, sent deauth
Feb/06/2014 13:25:29 wireless,info wlan1: data from unknown device 60:67:20:70:B0:D0, sent deauth
Feb/06/2014 13:25:29 wireless,info wlan2: data from unknown device E8:99:C4:9C:BA:24, sent deauth
Feb/06/2014 13:25:29 wireless,info wlan2: data from unknown device 18:34:51:02:B3:08, sent deauth
Feb/06/2014 13:25:29 wireless,info wlan2: data from unknown device 18:34:51:02:B3:08, sent deauth
Feb/06/2014 13:25:29 wireless,info wlan2: data from unknown device E8:99:C4:9C:BA:24, sent deauth
Feb/06/2014 13:25:29 wireless,info wlan2: data from unknown device 18:34:51:02:B3:08, sent deauth
Feb/06/2014 13:25:29 wireless,info wlan1: data from unknown device 60:67:20:70:83:28, sent deauth
Feb/06/2014 13:25:29 wireless,info wlan2: data from unknown device E8:99:C4:9C:BA:24, sent deauth
Feb/06/2014 13:25:29 wireless,info wlan2: data from unknown device E8:99:C4:9C:BA:24, sent deauth
Feb/06/2014 13:25:29 wireless,info wlan2: data from unknown device E8:99:C4:9C:BA:24, sent deauth
Feb/06/2014 13:25:29 wireless,info wlan2: data from unknown device E8:99:C4:9C:BA:24, sent deauth
Feb/06/2014 13:25:29 wireless,info wlan2: data from unknown device E8:99:C4:9C:BA:24, sent deauth
Feb/06/2014 13:25:29 wireless,info wlan2: data from unknown device E8:99:C4:9C:BA:24, sent deauth
Feb/06/2014 13:25:29 wireless,info wlan2: data from unknown device E8:99:C4:9C:BA:24, sent deauth
Feb/06/2014 13:25:30 wireless,info wlan2: data from unknown device E8:99:C4:9C:BA:24, sent deauth
Feb/06/2014 13:25:30 wireless,debug wlan1: 60:67:20:70:B1:E4 attempts to associate
Feb/06/2014 13:25:30 wireless,debug wlan1: 60:67:20:70:B1:E4 not in local ACL, by default accept
Feb/06/2014 13:25:30 wireless,info 60:67:20:70:B1:E4@wlan1: connected
Feb/06/2014 13:25:30 wireless,debug wlan1: 88:53:2E:3D:39:C0 attempts to associate

All clients suffer from this problem.

rwebb616 · Fri Feb 21, 2014 4:20 pm

What version is your router and is there anything in common with the clients? Are they all using the same hardware?

Rich

Bitto · Fri Feb 21, 2014 4:23 pm

no man tried RB600 and 800 asyou can see there are lotsoff unrelated vendor mac's

rwebb616 · Fri Feb 21, 2014 4:35 pm

I meant the RouterOS version on your router(s)?

I would concentrate on one specific machine and use the syslog that MT provides and set up a filter to filter that individual machine so you can watch it separately.. then mess with the settings on that computer relating to the power management / idle time settings on the NIC. The error is a timeout on the key exchange but I wonder if that means that the router is not hearing back from the client in time for the re-key to take place maybe because of a power management issue or something like that..

It would be really helpful if someone from Mikrotik could chime in here.

Rich

Bitto · Mon Feb 24, 2014 12:16 pm

Man i use 6.2-6.10 with no differecne as you see in the log this happens simultaneously.

I think that this happens after 25 people connected usually there are 50 active devices (mid size office 25 people working two devices per person) signal is no worse then 60 dbm, usually between 40-50 dbm.
Sometimes people make 50 Mbps traffic with local storage without any problems but this thing happens when no one making any traffic so this is not the issue.

Someone from mikrotik say something please ??

drastys · Mon May 12, 2014 10:41 am

I have same problem.

On AP I have v6.7 and on clients we have 5.26, 6.12 and also UBNT client . For all of them is result same.

disconnected, unicast key exchange timeout

pukkita · Fri May 16, 2014 11:46 pm

Same problem.

Suddenly lots of disconnected, group key exchange timeout message, for each client that was connected, followed by no Wifi Signal. Where should I look?

saintofinternet · Wed Jul 09, 2014 5:45 am

i think this should solve the problem...

goto INTERFACE --> WIRELESS --> SECURITY PROFILE --> GROUP KEY UPDATE

change the value from 00:05:00 to 01:00:00

i think this should help in keeping the clients connected.

NetworkPro · Fri Nov 07, 2014 1:38 am

That value sounds risky in terms of security.

Does it actually fully solve the problem?

saintofinternet · Sat Nov 15, 2014 7:32 am

it has atleast stopped disconnections...

please do give me your valuable inputs too...

osquetar · Mon Feb 02, 2015 1:03 pm

Someone has fixed the issue?

NetworkPro · Mon Feb 02, 2015 1:09 pm

My solution is to turn on the max secure settings and select Wi-Fi clients that are compatible with, and work with these settings (Management Protection).

osquetar · Mon Feb 02, 2015 4:45 pm

My solution is to turn on the max secure settings and select Wi-Fi clients that are compatible with, and work with these settings (Management Protection).

That is not life!

saintofinternet · Mon Jun 29, 2015 12:29 pm

i think this should solve the problem...

goto INTERFACE --> WIRELESS --> SECURITY PROFILE --> GROUP KEY UPDATE

change the value from 00:05:00 to 01:00:00

i think this should help in keeping the clients connected.

did you guys try out my solution?

update requested if anyone tried it...

freemannnn · Thu Jul 16, 2015 11:30 am

i think this should solve the problem...

goto INTERFACE --> WIRELESS --> SECURITY PROFILE --> GROUP KEY UPDATE

change the value from 00:05:00 to 01:00:00

i think this should help in keeping the clients connected.

did you guys try out my solution?

update requested if anyone tried it...

i have try your sollution and seems to work. now i have clients that stay connected in registration tab. what is "group key update" all about?
in the same site i have 5 rbsxt installed. all rbsxt have same settings in wireless. (group key update = 00:05:00)
i have this problem in only one rbsxt and it only works with 01:00:00

saintofinternet · Fri Jul 17, 2015 6:44 am

i think this should solve the problem...

goto INTERFACE --> WIRELESS --> SECURITY PROFILE --> GROUP KEY UPDATE

change the value from 00:05:00 to 01:00:00

i think this should help in keeping the clients connected.

did you guys try out my solution?

update requested if anyone tried it...
i have try your sollution and seems to work. now i have clients that stay connected in registration tab. what is "group key update" all about?
in the same site i have 5 rbsxt installed. all rbsxt have same settings in wireless. (group key update = 00:05:00)
i have this problem in only one rbsxt and it only works with 01:00:00

even i am wondering to this date!!!

davidcb · Wed Jul 29, 2015 7:58 pm

Here is a good explanation of what the Group Key does and how it affects connectivity for wireless clients: http://forum.mikrotik.com/viewtopic.php ... 82#p476699

Currently you can boost the group key timeout from 5 minutes to 1 hour which should help a bit, but it's not clear if the new WMM code that's part of 6.30.x is working across different vendors yet.

I've got some folks reporting the issue of horrible battery life ever since they installed a MikroTik RB951 last week so I'm curious if the changes I've made today (upping the group key timeout and installing 6.31RC11 ROS) will help them out.

anuser · Tue May 09, 2017 1:57 pm

So setting "GROUP KEY UPDATE" time to 1 hour solved all problems for all of you?

Tue May 09, 2017 3:40 pm

I recommend it as general default setting that really helps a lot. Try it and see.

osquetar · Tue May 09, 2017 11:26 pm

It seems few it's changed, see:

saintofinternet · Mon Jun 05, 2017 8:03 pm

So setting "GROUP KEY UPDATE" time to 1 hour solved all problems for all of you?

i did for somedays... but it has started haunting again...

gaborka · Sun Dec 17, 2017 1:23 pm

Hi,

I have similar issue and cannot understand why.
If I configure my devices as individual APs, then more or less everything is fine, but an Android 6 phone disconnects every time at the end of the group key update interval. I can set it to any value from 5 secs to 1 hour.
If I try to manage the APs with CAPsMAN:
- If I leave the group key update interval default (don't set a value) then the Android disconnects in every 5 minutes.
- If I set the group key update interval to anything else, the Android disconnects in every 30 seconds, and other devices starts to disconnects in random interval.

Possibly it is a client issue, but where the 30 seconds come from?
The CAPs are HAP AC and RB951G.

Any other ideas for this problem?

Thank you

osquetar · Sun Dec 17, 2017 2:25 pm

It seems that Mikrotik doesn't read these forum... The issue is chronic after so many firmware updates.

Sun Dec 17, 2017 2:42 pm

This is user forum. If you want to tell something to mikrotik, you need to write an email to support.

osquetar · Sun Dec 17, 2017 2:57 pm

Oh, I see... The user uldis, (MikroTik Support) hasn't involved on the topic. It's our fault that the issue exist.

gaborka · Sun Dec 17, 2017 3:30 pm

I contacted Mikrotik support and got the answer:
"Please try to increase DHCP server lease time and update Your RouterOS version, after that please check if there are some changes in device behavior."

Unfortunately it did not change anything. The DHCP lease time is already 7 days, ROS version is current (6.40.5) on all devices.
Probably they don't know the reason. Maybe device incompatibilities.

There are examples of big CAPsMAN installations. So I thought I misconfigured something and I hoped that somebody who has better knowledge in wireless than me can help.

Now my network is running with the default "group key update" interval (not set) and iPhone is online for 2 hours and 46 minutes.

What is also strange thet DHCP server deassigns IP address from the problematic ddevice every time when is disconnected.

gaborka · Mon Dec 25, 2017 7:29 pm

Upgrading to RouterOS 6.41seem to solve the problem
I can set the group key update interval to 1 minute on the manager and all connections with all clients are stable. No group key timeouts since then...

Thank you Mikrotik!

CZFan · Wed Dec 27, 2017 5:59 pm

Upgrading to RouterOS 6.41seem to solve the problem
I can set the group key update interval to 1 minute on the manager and all connections with all clients are stable. No group key timeouts since then...

Thank you Mikrotik!

I suspect that config will affect your wireless performance negatively

gaborka · Sun Dec 31, 2017 4:41 pm

Could be, but at least it works.
If I set to different value, the discoinnects start again. Besides I don''t use wireless for serious things. It is for mobile phones and notebooks only. Unfortunately the most important is the phone with Android 6 which has the group key update problem.

If I use the 1 minute setting it is stable for hours.

Kerbia · Sat May 26, 2018 11:55 am

Do you guys still have the described problem or did you manage to fix it finally?

Having the same issue with all up-to-date releases

gm2066 · Fri Jun 08, 2018 10:49 am

Hello,
from the last two days, the same problem has occurred for me
on the MikroTik hAP ac² device.
Kerbia, have you found a solution?

anuser · Wed Jun 20, 2018 7:46 am

So I'm still seeing concurrent disconnects fromm clients with Group Key Timout, i.e. 5 clients disconnect at the same time on one access point. Also I use CAPSMAN. So, if someone of you solved the problem, could you please post a complete /export compact from your access point and from the CAPSMAN/Wireless Part of your CAPSMAN controller, If you use one?

Resnais · Mon Jun 25, 2018 9:03 pm

Regarding the group key interval 1min- it will cost you some mobile device battery power if youre into u-apsd wmm + no_keep_alive_frames thing.
No more last activities on wireless clients like (80+sec):

last_activity.png

Ill try it with 2minutes group key interval and respond back.

samsung172 · Tue Jun 26, 2018 1:20 am

this is a old issue. its 99% sure due to bad signal.

Kerbia · Tue Jun 26, 2018 3:34 am

Do you have the 6.42.4 running by now?

nkourtzis · Tue Jun 26, 2018 12:38 pm

I am also seeing this problem since a few days ago, with a MT map which connects as a WDS repeater to an RB951G, which is a repeater (non-WDS) of an ISP router. It works perfectly for maybe an hour at a time and then the map disconnects and starts logging these "key exchange timeout" messages..

gaborka · Tue Dec 25, 2018 6:39 pm

From changelog:

Channel
Installed Version 6.43.8
Latest Version 6.43.8
What's new in 6.43.8 (2018-Dec-21 07:10):

MAJOR CHANGES IN v6.43.8:
----------------------
!) telnet - do not allow to set "tracefile" parameter;
----------------------

Changes in this release:

*) bridge - fixed IPv6 link-local address generation when auto-mac=yes;
*) capsman - fixed "group-key-update" parameter not using correct units;
*) crs3xx - improved data transmission between 10G and 1G ports;
*) console - properly remove system note after configuration reset;

I set the group key update interval back to 1 hour. All connections seems to be stable (20+ minutes now).

gutekpl · Sun Mar 31, 2019 3:57 pm

this is a old issue. its 99% sure due to bad signal.

I don;t think so. It's currently affecting my MiBOX which lies around 50cm from cAP AC and has full signal strength.

Earlier had this for random devices on random times. Changed 05min to 1h now, will see. using CAPsMAN on 6.44.0

informant · Sun Dec 22, 2019 1:51 am

Hi all, i have on a basebox 5 AP with 802.11 A/N the same issue. in 6.39.3 every 3-4 days and with newest fw 6.46.1 every 1-3 hours, that all clients disconnect on same time. highter group key time do not help, same issue. band/frequence are free, test on all frequences. All the same issue. all clients do disconnect with same error "group key exchange timeout" at the same time.i need a fix/solution. any ideas?
regards

volkirik · Sat Oct 03, 2020 2:53 pm

i recommend 1 day for group key update

and 15 seconds for disconnect-timeout... then you will be ONLINE!

these two should be considered and applied as default values for HOME-AP by mikrotik team due to lots of problems and complaints.

koolandrew · Tue Nov 17, 2020 12:17 am

I tried those settings for a hap ac lite, and they had no effect.
I have left them as default on my cap ac (separate install) and devices maintain connection for hours.

Does anyone have an answer for this, as this has been an ongoing issue for a very long time. I dropped Mikrotik for Ubiquity, had great hope after using the AP, but now back to square one.

inteq · Thu Jan 14, 2021 5:29 pm

Having this issue with lots of Xiaomi devices, like Air purifiers and smart speakers.
Changed the group-key-update to 1 hour now. Will see.

stefa · Mon Mar 22, 2021 6:18 pm

Hi

We have similar issues (wifi devices dropping/reconnecting on wifi) on hap ac^3. It is interesting then when we 'rise' traffic via the router from 1 or 2 wifi devices and cpus activities are quite high than usual (>20%) some of the other wifi devices are being disconnected. Hmmmm It looks like this is an old issue (6 years old) and it is still not being addressed. It may relate with 'bad signal' like anything on wireless but there are some correlations like the one above with cpus high activity which indicates some issues in the management of the wifi interfaces.... is Mikrotik going to improve (make it work properly) their AC wifi protocol implementation? It is 2021 and who is looking to purchase wifi routers surely should know that AC wifi implementations are done properly in any Mikrotik devices? Looking forward for a mature approach on this basic capability.

gotsprings · Wed Mar 24, 2021 4:26 pm

RouterOS.

That answers the question.
Great routers.
Wireless... We use another vendor.

antefe · Mon Jul 04, 2022 7:15 am

Had the same problem with a chateau recently, what "fixed it", was disabling ALL the wireless access list entries...
Not sure if its a bug or a misconfiguration on my part...

MikeKulls · Wed Jul 20, 2022 3:50 pm

For people who have this "group key exchange timeout" error, are you running the AP as part of a mesh? For me I have an AP that uses the same radio for clients that is also used for up-link to another Mikrotik device. If I use the radio in this config then I get the error. If I use a wired up-link then I get no issues. I have tested this extensively and I'm very certain that is the cause. It appears to be that the radio is busy talking to clients so the key exchange times out. I think the solution is to use a separate radio for the up-link.

Results of my testing
- uplink using WDS (static or dynamic mesh), about 100 dropouts per day
- uplink using station bridge mode, maybe 8 dropouts per day
- wired uplink, no dropouts
- using station mode with EoIP on top, no dropouts but some errors in logs

gotsprings · Wed Jul 20, 2022 4:33 pm

No Mesh
No WDS

Access point only.

Wed Jul 20, 2022 4:50 pm

It's been years since the last time this happened to me.

since that time i avoid special characters and spaces in ssid and psk just to be safe

MikeKulls · Thu Jul 21, 2022 9:49 am

It's been years since the last time this happened to me.

since that time i avoid special characters and spaces in ssid and psk just to be safe

I just have lower case letters and 2 numbers in the psk and upper and lower case letters in the SSID.

MikeKulls · Thu Jul 21, 2022 1:25 pm

No Mesh
No WDS

Access point only.

That is interesting. For me it only happens if I use the same radio for up-link and wifi clients.

gotsprings · Thu Jul 21, 2022 1:59 pm

No Mesh
No WDS

Access point only.
That is interesting. For me it only happens if I use the same radio for up-link and wifi clients.

The WAVE2 driver works a whole lot better.

But caps-man... Normal SSID characters. Nothing interesting in passwords... I will have some clients constantly disconnecting. I will have other that show as connected but don't actually do anything.

I have had to switch manufactures to save the jobs.

babah · Wed Jan 04, 2023 11:26 am

i think this should solve the problem...

goto INTERFACE --> WIRELESS --> SECURITY PROFILE --> GROUP KEY UPDATE

change the value from 00:05:00 to 01:00:00

i think this should help in keeping the clients connected.

This works; client disconnection has been stopped since then.

I can't believe this issue has been for years!