I purchased a MT router with an atheros chipset wireless card inside. I have it connected in japan and am trying to provide a wireless signal to a friend located 2km away. The signal strength is great and I see it out there with 89% signal strength. However, when I make a WEP key and try to encrypt the signal the client ethernet adapter we are using will not associate with it even though it can see it. When it is running as an open system it works fine. The ethernet adapter is atheros and I have used it previously with Buffalo, Linksys, D-LINK access points under both 64, and 128 wep. I think that I have a config problem with the wep on the mikrotik but I can't put a fingure on it. I have attached the config for the wlan. Let me also add that we have changed keys and also tried tkip. The client atheros ethernet adapter Corega WLCVRG can connect to the MT with NO encryption. Also we have gone out with a Windows Laptop and were able to connect with the key. I know that everyone is much more experienced than me with configuring the MT's. Any input would be appreciated. Config is attached below.



# jan/01/2000 02:08:08 by RouterOS 2.9.5
# software id = UH0C-3TT
#
/ interface wireless
set wlan1 name="wlan1" mtu=1492 mac-address=00:0C:42:05:0B:31 arp=enabled \
disable-running-check=no radio-name="000C42050B31" mode=ap-bridge \
ssid="cwnet-P4" area="" frequency-mode=manual-txpower country=japan \
antenna-gain=25 frequency=2472 band=2.4ghz-b/g scan-list=default \
rate-set=default supported-rates-b=1Mbps,2Mbps,5.5Mbps,11Mbps \
supported-rates-a/g=6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps \
basic-rates-b=1Mbps basic-rates-a/g=6Mbps max-station-count=2007 \
ack-timeout=dynamic tx-power-mode=default noise-floor-threshold=default \
periodic-calibration=enabled burst-time=disabled dfs-mode=none \
antenna-mode=ant-b wds-mode=disabled wds-default-bridge=none \
wds-ignore-ssid=no update-stats-interval=10s default-authentication=yes \
default-forwarding=yes default-ap-tx-limit=0 default-client-tx-limit=0 \
hide-ssid=no security-profile=WEP-64 disconnect-timeout=3s \
on-fail-retry-time=100ms preamble-mode=both compression=no comment="" \
disabled=no
/ interface wireless nstreme
set wlan1 enable-nstreme=no enable-polling=no framer-policy=none \
framer-limit=3200
/ interface wireless manual-tx-power-table
set wlan1 manual-tx-powers=1Mbps:17,2Mbps:17,5.5Mbps:17,11Mbps:17,6Mbps:17,9Mbp\
s:17,12Mbps:17,18Mbps:17,24Mbps:17,36Mbps:17,48Mbps:17,54Mbps:17
/ interface wireless security-profiles
set default name="default" mode=none wpa-unicast-ciphers="" \
wpa-group-ciphers="" pre-shared-key="" static-algo-0=none static-key-0="" \
static-algo-1=none static-key-1="" static-algo-2=none static-key-2="" \
static-algo-3=none static-key-3="" static-transmit-key=key-0 \
static-sta-private-algo=none static-sta-private-key="" \
radius-mac-authentication=no group-key-update=5m
add name="WEP-64" mode=static-keys-required wpa-unicast-ciphers=tkip \
wpa-group-ciphers=tkip pre-shared-key="" static-algo-0=40bit-wep \
static-key-0="4004461232" static-algo-1=none static-key-1="" \
static-algo-2=none static-key-2="" static-algo-3=none static-key-3="" \
static-transmit-key=key-0 static-sta-private-algo=none \
static-sta-private-key="4004461232" radius-mac-authentication=no \
group-key-update=5m
add name="NO WEP" mode=none wpa-unicast-ciphers=tkip wpa-group-ciphers=tkip \
pre-shared-key="" static-algo-0=none static-key-0="" static-algo-1=none \
static-key-1="" static-algo-2=none static-key-2="" static-algo-3=none \
static-key-3="" static-transmit-key=key-0 static-sta-private-algo=none \
static-sta-private-key="" radius-mac-authentication=no group-key-update=5m
add name="WEP-128" mode=static-keys-required wpa-unicast-ciphers=tkip \
wpa-group-ciphers=tkip pre-shared-key="" static-algo-0=104bit-wep \
static-key-0="4004461232324322a323c3243" static-algo-1=none \
static-key-1="" static-algo-2=none static-key-2="" static-algo-3=none \
static-key-3="" static-transmit-key=key-0 static-sta-private-algo=none \
static-sta-private-key="" radius-mac-authentication=no group-key-update=5m
add name="WPA-PSK" mode=wpa-psk wpa-unicast-ciphers=tkip \
wpa-group-ciphers=tkip pre-shared-key="4004461232" static-algo-0=none \
static-key-0="" static-algo-1=none static-key-1="" static-algo-2=none \
static-key-2="" static-algo-3=none static-key-3="" \
static-transmit-key=key-0 static-sta-private-algo=none \
static-sta-private-key="" radius-mac-authentication=no group-key-update=5m
/ interface wireless align
set frame-size=300 active-mode=yes receive-all=no filter-mac=00:00:00:00:00:00 \
ssid-all=no frames-per-second=25
/ interface wireless snooper
set multiple-channels=yes channel-time=200ms receive-errors=no
/ interface wireless sniffer
set multiple-channels=yes channel-time=200ms only-headers=no receive-errors=no \
memory-limit=10 file-name="" file-limit=10 streaming-enabled=no \
streaming-server=0.0.0.0 streaming-max-rate=0

I could imagine that would be a problem of how you enter your WEP key in the devices. MikroTik for example want the WEP key as hexadecimal value - see manual:

The keys used for encryption are in hexadecimal form. If you use 40bit-wep, the key has to be 10 characters long, if you use 104bit-wep, the key has to be 26 characters long.

Other systems want you to enter the key as ASCII values. That often creates such problems...

Best regards,
Christian Meis

The device that I use requires the key to be inputed in hexadecimal form just like the MT router sytem requires. The 64 Wep key that I am using right now is 10 characters (digits long). In the original post I was hiding the 128 bit key s full length because I didn' want to post the correct key. However, this was very misleading and I appologize to people who noticed the flaw. Currently I am still trying to figure out what is going on and would appreciate any input. Thankyou so much.

I am experiencing the same issue. Without any wireless security enabled, everything works just fine. Laptops and tablets connect just fine and access the internet through the MT box no problem. This is running on a WRAP board. Have duplicated issue both with a Senao 200mW (Prism based) card and one of the newer Ubiquiti SR2 (Atheros 5004 based) cards.

As soon as security is enabled...although the clients still see the network, they can not pass any traffic through the box. They can ping the MT but not the gateway. This is running 2.9.10.

I'm very new to this so thought is was a routing or NAT or some sort of issue but it seems not??? Thanks for any help.

Do you guys have "allow-shared-key" set to yes?

Hi,

I am using mikrotik 2.9.7 license level 6 with atheros 5213 card as access point. I am trying to set the wep key but no success. Can you tell me a short step-by-step to do it ?

Thanks,
Anderson