Mikrotik 3.13 AP + NS5 client + WDS + WPA2 = crap

[PiK]

Hello,
I have a Mikrotik ROS 3.13 installed on my access point.
ROS config:
- firmware: ROS 3.13
- AP dynamic WDS
- client filtering based on access list
- WPA2 PSK AES

http://urbanowski.pl/Image1.jpg

Nanostation5 config:
- firmware: XS5.ar2313.v3.2.3734.080909.1637
- Station WDS

http://urbanowski.pl/Image2.jpg

This configuration is not working :(
Here are sample logs from Mikrotik RouterOS:

http://urbanowski.pl/Image3.jpg
00:15:6D:B6:84:1F - NS5 client

Another config with WPA2 PSK TKIP and WDS is also not working.
Configuration without encryption is OK.

How can I run WDS link with WPA2 encryption between these different platforms?

[UBNT-keba]

v3.2 were tested with mtik v3.11 and it passess all WDS+WPA tests.

[PiK]

I don't have a 3.11 but 3.13. Maybe I try 3.11.
I have done some research and this is what I found.
If I change security profile on MT to default (at this time NS5 connects to MT and WDS interface is coming up) and after that quickly change security profile to that with WPA2 encryption, the wireless connection is coming up and everything is ok, wds interface comes up (NO unicast key exchange timeout messages).
Of course after rebooting MT or NS5 I have to do the switching security profile operation on MT. It is unacceptable.
So what is wrong?

[MaximumISP]

Mikrotik (Multiple Versions) + Other Vendor (Encryption) = Problems² aka Crap

With mikrotik every new version to fix one thing breaks some other thing lol
Ever go to their forum board for help what a mess

[WHT]

Compelling reason to use all the radio equipment from the same manufacture..harder to finger point when something don't work.

[MaximumISP]

Absolutly WHT

Most vendors will at least try to make sure everything
works within their own equipment but expecting that different manufacturers equipment
will work flawlessly especially in more advanced configurations isnt realistic

Mikrotik sells their own hardware so I wouldnt expect them to really care
if ubnt gear works well with their APs
they dont want to promote nanos they want to sell router boards
I doubt if you'll ever see Mikrotik for ubnt firmware versions

At least ubnt is trying and has verified that 3.11 does work
but with every new tik version it may need more work

[PiK]

At least ubnt is trying and has verified that 3.11 does work
but with every new tik version it may need more work
OK. I will try 3.11 tonight and let you know. I hope it will work.

[WinPR]

Confirmed, WPA2 doesn't works with Mikrotik.
Mikrotik 3.11 and 3.13, Ubnt 3.1.1 works
Afoter Upgrade to Ubnt 3.2 NO Connection.
I think that there is an incompatibility problem with Mikrotik in ver 3.2


WinPR

[PiK]

I have tried NS5 (station wds) with XS5.ar2313.v3.2.3734.080909.1637 firmware with Mikrotik 3.11 (ap wds) with WPA2 and test failed, no connection - "unicast key exchange timeout".
Next day I will change firmware in NS5 to v3.1.1 and we will see.

--------- UPDATE
I have downgraded firmware in NS5 from 3.2 to 3.1.1 and guess what... WPA2+WDS is working with Mikrotik 3.13. So there is an error in implementation WPA2 in AirOS v.3.2. Please correct it!

[marceloru]

using AIR OS 3.0,3.1 and mikrotik 3.x wpa2-aes work fine.... when upgrade to AIROS 3.2 can,t connect...... WP2... WPA.... Tkip... AES... all combinations...

confirmed.... AIROS3.2 incompatibility

[FortiNoob]

Will AirOS 3.2 to 3.2 work?

I have NS5 x 2 .... should I also downgrade firmware or should be fine using all Ubiquiti gear?

[netmaster]

Will AirOS 3.2 to 3.2 work?

nope, as I referred here
http://forum.ubnt.com/forum/viewtopic.php?p=11635#11635

[UBNT-Mike.Ford]

Hey Guys,

Asking my software team to jump in.

Thanks,

Mike

[lukpiot]

I have similar situation.. I've just upgraded NS5 from AirOS 3.1.1 to 3.2.
The upgrade was successful, after upgrade I was able to manage the device (I was just looking for new features, nothing has been changed). A few moments later, the device has been disconnected and tries to connect all the time:

Config:
NS5:
Mode: Station
Router work, + NAT
Security: WPA-PSK AES

Base Station
RB 133 + MT 3.13, WPA-PSK, WPA2-PSK AES

00:17:43 wireless,info 00:15:6D:B5:4C:B1@wlan3: connected
00:17:48 wireless,info 00:15:6D:B5:4C:B1@wlan3: disconnected, unicast key exchange timeout
00:17:52 wireless,debug wlan3: 00:15:6D:B5:4C:B1 attempts to associate
00:17:52 wireless,debug wlan3: 00:15:6D:B5:4C:B1 not in local ACL, by default accept
00:17:52 wireless,info 00:15:6D:B5:4C:B1@wlan3: connected
00:17:57 wireless,info 00:15:6D:B5:4C:B1@wlan3: disconnected, unicast key exchange timeout
00:18:00 wireless,debug wlan3: 00:15:6D:B5:4C:B1 attempts to associate
00:18:00 wireless,debug wlan3: reject 00:15:6D:B5:4C:B1, banned (last failure - unicast key exchange timeout)
00:18:04 wireless,debug wlan3: 00:15:6D:B5:4C:B1 attempts to associate
00:18:04 wireless,debug wlan3: 00:15:6D:B5:4C:B1 not in local ACL, by default accept
00:18:04 wireless,info 00:15:6D:B5:4C:B1@wlan3: connected

EDIT: However, one minute ago, the device connected, after beeing rebooted by watchdog... and I can communicate now with the device.

[interplanet]

We have the same problem with mikrotik AP with firmware 3.14 and NS5 3.2.

Any update about this problem?

[TheCowStir]

Any updates on this? Does 3.2.2 fix this WPA from NS to Mikrotik AP problem?

[schtaaf]

I'm using NS5 with 3.2.2rc with MikroTik 3.16 (and previously 3.13) with WPA2 with no trouble. NS5 with 3.1.1 also works fine with the MT.

Keep far away from 3.2 and the official 3.2.2 though - those are crap!

[PiK]

Any updates on this? Does 3.2.2 fix this WPA from NS to Mikrotik AP problem?

3.2.2RC - OK!

[guidonet]

I try this configs and Works fine.


RB433AH config:
- firmware: ROS 3.16
- AP Bridge
-WDS dynamic
- client filtering based on access list
- WPA2 PSK tkip
- Hide SSID

Radio tested: SR5 and XR5



Nanostation5 config:
- firmware: XS5.ar2313.v3.2.2.4003.081114.1725
- Station WDS
- WPA2 PSK tkip

Tested with XS5.ar2313.v3.2.2.3891.081021.2158 and still working

[rolfui]

Waiting for the AirOS V3.3 SDK release.

Will this issue be fixed in the AirOS V3.3 SDK version?
Any date for this release?

Or maybe there is a patch that can be used for the AirOS V3.2 SDK to fix the WPA problem ?

regards,
Rolf

[UBNT-Mike.Ford]

Hey Guys,

Once i get final confirmation the SDK will be released tommorow.

Thanks,

Mike