MT7621 - Clients disconnecting

[Camis]

Wed Aug  5 13:20:29 2020 daemon.notice hostapd: wlan0: AP-STA-CONNECTED 90:78:****
Wed Aug  5 13:20:29 2020 daemon.info hostapd: wlan0: STA 90:78:**** RADIUS: starting accounting session ACBA497F6AD16C46
Wed Aug  5 13:20:29 2020 daemon.info hostapd: wlan0: STA 90:78:**** WPA: pairwise key handshake completed (RSN)
Wed Aug  5 13:20:29 2020 daemon.info hostapd: wlan1: STA 90:78:**** IEEE 802.11: deauthenticated due to inactivity (timer DEAUTH/REMOVE)
Wed Aug  5 13:20:35 2020 daemon.notice hostapd: wlan0: AP-STA-DISCONNECTED 90:78:****
Wed Aug  5 13:20:35 2020 daemon.info hostapd: wlan0: STA 90:78:**** IEEE 802.11: disassociated
Wed Aug  5 13:20:35 2020 daemon.notice hostapd: wlan1: STA-OPMODE-N_SS-CHANGED 90:78:**** 1
Wed Aug  5 13:20:35 2020 daemon.info hostapd: wlan1: STA 90:78:**** IEEE 802.11: associated (aid 1)
Wed Aug  5 13:20:35 2020 daemon.notice hostapd: wlan1: AP-STA-CONNECTED 90:78:****
Wed Aug  5 13:20:35 2020 daemon.info hostapd: wlan1: STA 90:78:**** RADIUS: starting accounting session B30F2D4C310A41EA
Wed Aug  5 13:20:35 2020 daemon.info hostapd: wlan1: STA 90:78:**** WPA: pairwise key handshake completed (RSN)
Wed Aug  5 13:20:36 2020 daemon.info hostapd: wlan0: STA 90:78:**** IEEE 802.11: deauthenticated due to inactivity (timer DEAUTH/REMOVE)

Model	Netgear R6220
Architecture	MediaTek MT7621
OpenWrt 19.07.3 r11063-85e04e9f46 

config wifi-device 'radio0'
	option type 'mac80211'
	option hwmode '11g'
	option path 'pci0000:00/0000:00:01.0/0000:02:00.0'
	option htmode 'HT20'
	option country 'PL'
	option channel '11'
	option legacy_rates '0'

config wifi-iface 'default_radio0'
	option device 'radio0'
	option network 'lan'
	option mode 'ap'
	option ssid '*****'
	option key '**********'
	option ft_over_ds '1'
	option ieee80211w '1'
	option ft_psk_generate_local '1'
	option ieee80211r '1'
	option mobility_domain '27DB'
	option encryption 'sae'
	option disassoc_low_ack '0'

config wifi-device 'radio1'
	option type 'mac80211'
	option hwmode '11a'
	option path 'pci0000:00/0000:00:00.0/0000:01:00.0'
	option htmode 'VHT80'
	option country 'PL'
	option channel '128'
	option legacy_rates '0'

config wifi-iface 'wifinet3'
	option ssid '*****-IoT'
	option encryption 'psk2+ccmp'
	option device 'radio0'
	option mode 'ap'
	option ieee80211w '1'
	option key '**********'
	option ft_over_ds '1'
	option ft_psk_generate_local '1'
	option ieee80211r '1'
	option mobility_domain '285D'
	option disassoc_low_ack '0'

config wifi-iface 'wifinet4'
	option ssid '*****_5GHz'
	option device 'radio1'
	option ieee80211r '1'
	option ft_over_ds '1'
	option key '**********'
	option network 'lan'
	option mode 'ap'
	option ieee80211w '1'
	option ft_psk_generate_local '1'
	option mobility_domain '27DB'
	option encryption 'sae'
	option disassoc_low_ack '0'

config wifi-iface 'wifinet6'
	option ssid '*****_5GHz-IoT'
	option encryption 'psk2+ccmp'
	option device 'radio1'
	option ieee80211r '1'
	option ft_over_ds '1'
	option key '**********'
	option mode 'ap'
	option ieee80211w '1'
	option ft_psk_generate_local '1'
	option mobility_domain '285D'
	option disassoc_low_ack '0'

config wifi-iface 'wifinet5'
	option ssid '*****-Guest'
	option encryption 'psk2+ccmp'
	option device 'radio0'
	option mode 'ap'
	option ieee80211w '1'
	option ft_over_ds '1'
	option mobility_domain '28B1'
	option ft_psk_generate_local '1'
	option ieee80211r '1'
	option network 'lan'
	option key '**********'
	option disassoc_low_ack '0'

config wifi-iface 'wifinet7'
	option ssid '*****_5GHz-Guest'
	option encryption 'psk2+ccmp'
	option device 'radio1'
	option mode 'ap'
	option ieee80211w '1'
	option ft_over_ds '1'
	option ft_psk_generate_local '1'
	option ieee80211r '1'
	option mobility_domain '28B1'
	option network 'lan'
	option key '**********'
	option disassoc_low_ack '0'

[db260179]

In your https://bugs.openwrt.org/index.php?do=details&task_id=3275

I've identified an unknown issue at the moment with setting the 'option country' in the wireless settings.

If you remove this settings and let the driver set itself, then your clients will not keep disconnecting.

[Neustradamus]

@db260179: Any news?

[danpawlik]

Got similar issue on Xiaomi 4a Gigabit version (as dumb ap) and Samsung tv qe55q67bau. No meter if I use cryptographic lib wpad-mbedtls, wpad-openssl or wpad-wolfss issue is still the same - TV can connect, but after 1 sec of streaming, it just freeze. Very high utilization on the dumb ap, which is not providing any interesting info:

Tue Aug 15 21:59:35 2023 daemon.notice hostapd: phy1-ap0: AP-STA-DISCONNECTED xx:xx:xx:xx:xx:xx
Tue Aug 15 21:59:35 2023 daemon.debug hostapd: phy1-ap0: STA xx:xx:xx:xx:xx:xx WPA: event 3 notification
Tue Aug 15 21:59:35 2023 daemon.debug hostapd: phy1-ap0: STA xx:xx:xx:xx:xx:xx IEEE 802.1X: unauthorizing port
Tue Aug 15 21:59:35 2023 daemon.debug hostapd: phy1-ap0: STA xx:xx:xx:xx:xx:xx IEEE 802.11: deauthenticated
Tue Aug 15 21:59:35 2023 daemon.debug hostapd: phy1-ap0: STA xx:xx:xx:xx:xx:xx MLME: MLME-DEAUTHENTICATE.indication(xx:xx:xx:xx:xx:xx, 3)
Tue Aug 15 21:59:35 2023 daemon.debug hostapd: phy1-ap0: STA xx:xx:xx:xx:xx:xx MLME: MLME-DELETEKEYS.request(xx:xx:xx:xx:xx:xx)

I found a workaround for that issue: force swith encryption algorithm for WPA2 to TKIP (just TKIP not CCMP + TKIP).

Alternative workaround is as it was mentioned: remove option country entries in /etc/config/wireless and set channel 36-48.

What is odd, it does not happen on Xiaomi ax3200 - it works just out of the box.

[lukasz1992]

Forcing TKIP disables 802.11n (on 2.4GHz or 5GHz). Try setting fragmentation threshold to 2346 instead, reboot the router and tell us if it helps.

EDIT: forgot to ask - are you on the current snapshot?

[danpawlik]

Hi, yes I'm running on the latest snapshot - r23763-46ed38adeb.
I set by mistake 2376 and it seems to work well (after 2 min) which is odd, because max is 2346. Even WPA2 CCMP works. Soon will set the value as you suggested and test.

[danpawlik]

With fragmentation set to 2346 TV is working normally, but the film from time to time play bad quality, like the bandwidth is not constant to it. Also I check with rts threshold set to 2347 and situation was same. Going back to solution without changing fragmentation/rts and check how it will be working without "country" set in the config file.

[danpawlik]

After a while, it seems that the problem is...in option country "PL". I changed the country to US + added option noscan '1' and it works well. Finally I don't have any issue with MT7621 and Samsung TV.

EDIT: after one week and few ap restarts, issue comes once again, but rary than earlier.