group key handshake timeout, ma è un bug?

[alexmandrak3]

Ciao ragazzi,
ho appena messo su un piccolissimo link di meno di 1 Km con 2 Routerboard RBSXTG-5HnD.
Il security profile è in WPA2 PSK AES CCM.

Capita spesso che il link si disconnette e nei log vedo:

LOG STATION: MAC@wlan1: lost connection, received deauth: group key handshake timeout (16)
LOG AP:MAC@wlan1: disconnected, group key exchange timeout
wlan1: data from unknown device: MAC, sent deauth

E' chiaro che c'è un problema con la chiave wpa, ma per quale motivo?
I Signal Strength sono intorno ai -60, CCQ decenti, Firmware 5.11.
Suggerimenti?

[misariccio]

in genere è la disconnessione radio che causa questo problema.
che parametri radio usi ? che segnale e ccq hai ?

[alexmandrak3]

I Signal Strength sono intorno ai -60.

IL TX CCQ della station varia dai 50% agli 80%
IL RX CCQ è sui 98-100%

=============== PARAMETRI RADIO ============================
0 R name="wlan1" mtu=1500 arp=enabled interface-type=Atheros 11N mode=station-wds
frequency=5585 band=5ghz-a/n channel-width=20mhz scan-list=5500-5700
wireless-protocol=any wds-mode=disabled wds-default-bridge=none

adaptive-noise-immunity=none allow-sharedkey=no antenna-gain=13 area="" \
arp=enabled band=5ghz-a/n basic-rates-a/g=6Mbps bridge-mode=enabled \
channel-width=20mhz compression=no country=italy default-ap-tx-limit=0 \
default-authentication=yes default-client-tx-limit=0 default-forwarding=\
yes dfs-mode=no-radar-detect disable-running-check=no disabled=no \
disconnect-timeout=3s distance=dynamic frame-lifetime=0 frequency=5585 \
frequency-mode=regulatory-domain frequency-offset=0 hide-ssid=no \
ht-ampdu-priorities=0 ht-amsdu-limit=8192 ht-amsdu-threshold=8192 \
ht-basic-mcs=mcs-0,mcs-1,mcs-2,mcs-3,mcs-4,mcs-5,mcs-6,mcs-7 \
ht-guard-interval=any ht-rxchains=0,1 ht-supported-mcs="mcs-0,mcs-1,mcs-2,\
mcs-3,mcs-4,mcs-5,mcs-6,mcs-7,mcs-8,mcs-9,mcs-10,mcs-11,mcs-12,mcs-13,mcs-\
14,mcs-15,mcs-16,mcs-17,mcs-18,mcs-19,mcs-20,mcs-21,mcs-22,mcs-23" \
ht-txchains=0,1 hw-fragmentation-threshold=disabled hw-protection-mode=\
none hw-protection-threshold=0 hw-retries=7 l2mtu=2290 mac-address=\
00:0C:42:F6:03:08 max-station-count=2007 mode=station-wds mtu=1500 name=\
wlan1 noise-floor-threshold=default nv2-cell-radius=30 \
nv2-noise-floor-offset=default nv2-preshared-key="" nv2-qos=default \
nv2-queue-count=2 nv2-security=disabled on-fail-retry-time=100ms \
periodic-calibration=default periodic-calibration-interval=60 \
preamble-mode=both proprietary-extensions=post-2.9.25 radio-name=\
000C42F60308 rate-selection=advanced rate-set=default scan-list=5500-5700 \
security-profile=profile1 ssid=Driin-Switch2Noc station-bridge-clone-mac=\
00:00:00:00:00:00 supported-rates-a/g=\
6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps tdma-period-size=2 \
tx-power-mode=default update-stats-interval=disabled wds-cost-range=\
50-150 wds-default-bridge=none wds-default-cost=100 wds-ignore-ssid=no \
wds-mode=disabled wireless-protocol=any wmm-support=disabled

[misariccio]

il ccq è troppo basso e quindi ogni tanto la connessione radio può andare giù
prova a cambiare frequenze

la configurazione è solo quella del lato station, posta anche quella del lato bridge

[alexmandrak3]

=============== PARAMETRI RADIO LATO BRIDGE ================

0 R name="wlan1" mtu=1500 mac-address=00:0C:42:F6:02:FC arp=enabled
interface-type=Atheros 11N mode=bridge ssid="Driin-Switch2Noc"
frequency=5180 band=5ghz-onlyn channel-width=20mhz scan-list=5580-5700
wireless-protocol=802.11 wds-mode=dynamic wds-default-bridge=bridge1
wds-ignore-ssid=no bridge-mode=enabled default-authentication=yes
default-forwarding=yes default-ap-tx-limit=0 default-client-tx-limit=0
hide-ssid=no security-profile=profile1 compression=no


set 0 adaptive-noise-immunity=none allow-sharedkey=no antenna-gain=13 area="" \
arp=enabled band=5ghz-onlyn basic-rates-a/g=6Mbps bridge-mode=enabled \
channel-width=20mhz compression=no country=italy default-ap-tx-limit=0 \
default-authentication=yes default-client-tx-limit=0 default-forwarding=\
yes dfs-mode=no-radar-detect disable-running-check=no disabled=no \
disconnect-timeout=3s distance=dynamic frame-lifetime=0 frequency=5180 \
frequency-mode=regulatory-domain frequency-offset=0 hide-ssid=no \
ht-ampdu-priorities=0 ht-amsdu-limit=8192 ht-amsdu-threshold=8192 \
ht-basic-mcs=mcs-0,mcs-1,mcs-2,mcs-3,mcs-4,mcs-5,mcs-6,mcs-7 \
ht-guard-interval=any ht-rxchains=0,1 ht-supported-mcs="mcs-0,mcs-1,mcs-2,\
mcs-3,mcs-4,mcs-5,mcs-6,mcs-7,mcs-8,mcs-9,mcs-10,mcs-11,mcs-12,mcs-13,mcs-\
14,mcs-15,mcs-16,mcs-17,mcs-18,mcs-19,mcs-20,mcs-21,mcs-22,mcs-23" \
ht-txchains=0,1 hw-fragmentation-threshold=disabled hw-protection-mode=\
none hw-protection-threshold=0 hw-retries=7 l2mtu=2290 mac-address=\
00:0C:42:F6:02:FC max-station-count=2007 mode=bridge mtu=1500 name=wlan1 \
noise-floor-threshold=default nv2-cell-radius=30 nv2-noise-floor-offset=\
default nv2-preshared-key="" nv2-qos=default nv2-queue-count=2 \
nv2-security=disabled on-fail-retry-time=100ms periodic-calibration=\
default periodic-calibration-interval=60 preamble-mode=both \
proprietary-extensions=post-2.9.25 radio-name=000C42F602FC \
rate-selection=advanced rate-set=default scan-list=5580-5700 \
security-profile=profile1 station-bridge-clone-mac=\
00:00:00:00:00:00 supported-rates-a/g=\
6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps tdma-period-size=2 \
tx-power-mode=default update-stats-interval=disabled wds-cost-range=\
50-150 wds-default-bridge=bridge1 wds-default-cost=100 wds-ignore-ssid=no \
wds-mode=dynamic wireless-protocol=802.11 wmm-support=disabled

[misariccio]

1. aggiorna tutto alla 5.16.
2. usi la frequenza 5180 per la quale le tue antenne potrebbero avere un vswr elevato. Prova una frequenza tra 5500 e 5700 (esegui un frequency usage sia lato station che bridge e trova un canale libero da entrambi i lati)
3. come wireless-protocol sulla station metti 'any' mentre sul bridge metti 'nstreame'
4. sia sulla station che sul bridge su band metti '5ghz A and N)
5. sia sulla station che sul bridge, su data rate metti 'advanced'

ciao