Kemarin kemarin ada nemu tutorial mau coba share
Jika sudah pernah ada yang share silahkan di hapus saja ya om Admin
Debugging wireless problems Menggunakan Logs.
Pada settingan standart RouterBoard Mikrotik OS hanya mencatat logs yang sederhana
22:32:18 wireless,info 00:80:48:41:AF:2A@wlan1: connected
dengan contoh di atas kita sudah cukup tahu klo wireless sudah terkoneksi.
tetapi sebenar nya masih ada data log lebih detail yang dapat kita peroleh dari hanya sekedar log di atas.
Berikut untuk contoh yang lebih detail
22:33:20 wireless,debug wlan1: 00:80:48:41:AF:2A attempts to connect
22:33:20 wireless,debug wlan1: 00:80:48:41:AF:2A not in local ACL, by default accept
22:33:20 wireless,info 00:80:48:41:AF:2A@wlan1: connected
untuk keterangan log di atas adalah sebagai berikut
baris pertama : menujukan wireless client mencoba terhubung ke AP
baris ke dua : AP memeriksa untuk melihat apakah klien yang diperbolehkan untuk terhubung ke AP
baris ke tiga : client terkoneksi ke AP
untuk mengaktifkan log di atas silahkan di tambahkan entry untuk logs nya dengan cara ketik di terminal
[admin@MikroTik] > /system logging
[admin@MikroTik] system logging> add topics=wireless,debug action=memory
Dengan ada nya log tersebut memudahkan untuk proses trouble shoot pada wireless
Berikut adalah contoh dan penjelasan untuk logs yang biasa tercatat
"MAC"@"DEV": lost connection, "REASON"
Station has lost connection to AP because of "REASON"
"MAC"@"DEV": failed to connect, "REASON"
Station attempted to connect to AP, but failed due to "REASON"
@ : established connection on "FREQ", SSID "SSID"
Station attempted and succesfully connected to AP with SSID "SSID" on frequency "FREQ".
"MAC"@"DEV": MIC failure!!!
TKIP message integrity check failure, somebody must be trying to break into or DOS network, If more than 1 MIC failure is encountered during 60s period, "TKIP countermeasures" state is entered.
"MAC"@"DEV": enter TKIP countermeasures
Entered TKIP countermeasures state, this means that Station will disconnect from AP and keep silence for 60s.
"DEV": radar detected on "FREQ"
Radar detected on frequency "FREQ", AP will look for other channel
"DEV": data from unknown device "MAC", sent deauth [(XXX events suppressed, YYY deauths suppressed)]
Data frame from unknown device (read - not registered to this AP) with mac address
received, AP sent deauthentication frame to it (as per 802.11). XXX is number of events that are not logged so that the log does not become too large (logs are limited to 1 entry per 5s after first 5 entries), YYY is the number of deauthentication frames that should have been sent, but were not sent, so that resources are not wasted sending too many deauthentication frames (only 10 deauth frames per second are allowed). The likely cause of such a message is that the Station previously connected to the AP, which does not yet know it has been dropped from AP registration table, sending data to AP.
Deauthentication message tells the Station that it is no longer connected.
"DEV": denying assoc to "MAC", failed to setup compression
Failed to initialize compression on AP, most likely because there are too many clients attempting to connect and use compression.
"DEV":"MAC" is new WDS master
WDS slave has established connection to WDS master, this means that WDS slave starts accepting clients and acting as AP.
'DEV": "MAC" was WDS master
This message appears after connection with 'MAC" is lost, means that WDS slave will disconnect all clients and start scanning to find new WDS master.
'MAC"@"DEV': connected [, is AP][, wants WDS]
Station with address
connected. if "is AP" present - remote device is AP, if "is WDS" presents, remote device wants to establish WDS link.
Connection with Station with address
terminated due to
"DEV": TKIP countermeasures over, resuming
TKIP countermeasures (60s silence period) over, AP resumes acting as AP.
"DEV": starting TKIP countermeasures
Entering TKIP countermeasures state (60s silence period), all clients will be lost.
can only happen on Prism cards in station mode, failed to connect to AP due to some reason
happens on Station, failed to synchronize to AP (receive first beacon frame). Most likely weak signal, remote turned off, strong interference, some other RF related issue that makes communication impossible.
no beacons received from remote end of WDS link. Most likely weak signal, remote turned off, strong interference, some other RF related issue that makes communication impossible.
"extensive data loss"
local interface decided to drop connection to remote device because of inability to send data to remote after multiple failures at lowest possible rate. Possible causes - too weak signal, remote device turned off, strong interference, some other RF related issue that makes communication impossible. "decided to deauth, <802.11 reason>"
local interface decided do deauthenticate remote device using 802.11 reason <802.11 reason>.
remote device was inactive for too long
local interface got disabled
"got deauth, <802.11 reason>"
received deauthentication frame from remote device, 802.11 reason code is reported in <802.11 reason>
"got disassoc, <802.11 reason>"
received disassociation frame from remote device, 802.11 reason code is reported in <802.11 reason>
"auth frame from AP"
authentication frame from remote device that is known to be AP, most likely mode changes on remote device from AP to Station.
bad ssid for WDS link
"beacon from non AP"
received beacon frame from remote device that is known to be non-AP node, most likely mode changes on remote device from Station to AP
"no WDS support"
does not report WDS support
"failed to confirm SSID"
failed to confirm SSID of other end of WDS link.
some hardware failure or unexpected behaviour. Not likely to be seen.
can only happen on Prism cards in station mode, connection to AP lost due to some reason.
"auth failed <802.11 status>"
happens on Station, AP denies authentication, 802.11 status code is reported in <802.11 status>.
"assoc failed <802.11 status>"
happens on Station, AP denies association, 802.11 status code is reported in <802.11 status>.
happens on Station, Station does not receive response to authentication frames, either bad link or AP is ignoring this Station for some reason.
happens on Station, Station does not receive response to association frames, either bad link or AP is ignoring this Station for some reason.
happens on AP: connection assumed to be lost, because Station that is considered already associated attempts to associate again. All connection related information must be deleted, because during association process connection parameters are negotiated (therefore "disconnected"). The reason why Station reassociates must be looked for on Station (most likely cause is that Station for some reason dropped connection without telling AP - e.g. data loss, configuration changes).
"compression setup failure"
connection impossible, because not enough resources to do compression (too many stations that want to use compression already connected)
There are currently 1 users browsing this thread. (0 members and 1 guests)