• fixed channel (choose wise from 1, 6 or 11 for 2.4GHz band)
• WAP2-AES (only)
• 20MHz bandwidth on 2.4GHz
• Disable any legacy like 802.11a/b

Configure it completely:

• fixed channel (choose wise from 1, 6 or 11 for 2.4GHz band)
• WAP2-AES (only)
• 20MHz bandwidth on 2.4GHz
• Disable any legacy like 802.11a/b

After configuring these settings, forget the network on your mobile device and add it.

What RouterOS and firmware version are you running?

Try it with Tkip instead of AES. Some Xiaomi models have the same problem, solved by switching to Tkip.

paste this on terminal and retry.

paste this on terminal and retry.

hi, thx for helping me
all set

I will test it...and let you known.

/interface wireless
set [ find default-name=wlan1 ] adaptive-noise-immunity=none allow-sharedkey=false preamble-mode=both
set [ find ] security-profile=default wmm-support=disabled

/interface wireless security-profiles
set [ find ] authentication-types="" disable-pmkid=no eap-methods=\
passthrough group-ciphers=aes-ccm group-key-update=5m interim-update=0s \
management-protection=disabled management-protection-key="" mode=none \
mschapv2-password="" mschapv2-username="" \
radius-called-format=mac:ssid radius-eap-accounting=no \
radius-mac-accounting=no radius-mac-authentication=no radius-mac-caching=\
disabled radius-mac-format=XX:XX:XX:XX:XX:XX radius-mac-mode=as-username \
static-algo-0=none static-algo-1=none static-algo-2=none static-algo-3=none \
static-key-0="" static-key-1="" static-key-2="" static-key-3="" \
static-sta-private-algo=none static-sta-private-key="" static-transmit-key=\
key-0 supplicant-identity=MikroTik tls-certificate=none tls-mode=\
no-certificates unicast-ciphers=aes-ccm wpa-pre-shared-key=""
}
[/code]

I have a Xiaomi 11T phone and the same problem when trying to login to hAPac3 on 5GHz. I tried to activate CAPsman and the login was successful. I spent two days searching for the difference between configuration via CAPsman and without it. The problem is that by default, when configuring the WLAN Interface, menu "Advanced" - "Distance" is set to "dynamic." After I changed it to "indoors", the phone connects quickly and without problems. In the "dynamics" settings, the phone does not have time to "negotiate" with the MKT.
Solved for me ...

Description of the item from the MKT manual:
distance (integer | dynamic | indoors; Default: dynamic)

How long to wait for confirmation of unicast frames (ACKs) before considering transmission unsuccessful, or in short ACK-Timeout. Distance value has these behaviors:

Dynamic - causes AP to detect and use the smallest timeout that works with all connected clients.
Indoor - uses the default ACK timeout value that the hardware chip manufacturer has set.
Number - uses the input value in formula: ACK-timeout = ((distance * 1000) + 299) / 300 us;

Acknowledgments are not used in Nstreme / NV2 protocols.

There is a "Privacy" setting in xiaomis wifi network details which by default is set to "Use randomised MAC", setting it to "Use device MAC" solved the issue for me.