The problem is that if the 60GHz connects first, the 5GHz will only stay connected for about 10 seconds before disconnecting.
The APs say that the client is disconnecting for "management-protection failure", but the clients say "lost connection, registered to other device in network".
The only way it seems I am able to get the 5GHz from constantly disconnecting, is to disable the 60GHz for a few seconds, wait until the data rate increases from 6Mbps, and then re-enable the 60GHz. The clients will then stay connected to the 5GHz AP for days or longer without issue.
Is there something else I should change on 5GHz config (AP or client) to prevent the disconnects? I mostly followed the Fail-over PtMP CLI example directions. Could something in my firewall rules on the clients be causing the problem somehow?
AP export:
Code: Select all# model = CubeG-5ac60ay-SA /interface bridge add admin-mac=FF:FD:74:D6:2B:99 auto-mac=no name=bridge1 /interface w60g set [ find ] disabled=no frequency=60480 isolate-stations=no name=wlan60-1 password=MY-PASSWORD \ put-stations-in-bridge=bridge1 region=usa ssid=MY-SSID /interface w60g station add mac-address=04:CE:14:FA:2A:1D name=wlan60-station-1 parent=wlan60-1 remote-address=04:CE:14:F7:D0:E7 /interface wireless security-profiles add authentication-types=wpa2-psk group-key-update=15m management-protection=allowed \ management-protection-key=MY-KEY mode=dynamic-keys name=wlan1 wpa2-pre-shared-key=MY-PASSWORD /interface wireless set [ find default-name=wlan1 ] band=5ghz-a/n/ac basic-rates-a/g="" disabled=no frequency=5765 \ installation=outdoor mode=ap-bridge security-profile=wlan1 ssid=MY-SSID supported-rates-a/g="" /interface bridge port add bridge=bridge1 interface=ether1 add bridge=bridge1 interface=wlan1
Client export:
Code: Select all# model = CubeG-5ac60ay /interface w60g set [ find ] disabled=no mode=station-bridge name=wlan60-1 password=MY-PASSWORD region=usa ssid=MY-SSID /interface wireless security-profiles add authentication-types=wpa2-psk management-protection=required management-protection-key=MY-KEY mode=dynamic-keys name=wlan1 supplicant-identity=stage0 wpa2-pre-shared-key=MY-PASSWORD /interface wireless set [ find default-name=wlan1 ] band=5ghz-a/n/ac country="united states" disabled=no disconnect-timeout=15s frequency=auto installation=outdoor keepalive-frames=disabled mode=station-bridge radio-name="Stan Vaughn" scan-list=5745-5825 security-profile=wlan1 ssid=MY-SSID /interface list add name=LAN add exclude=LAN include=all name=WAN /interface bonding add mode=active-backup name=bond1 primary=wlan60-1 slaves=wlan60-1,wlan1 /interface list member add interface=ether1 list=LAN /ip firewall filter add action=accept chain=input comment="accept established,related,untracked" connection-state=established,related,untracked add action=drop chain=input comment="drop invalid" connection-state=invalid add action=accept chain=input comment="accept ICMP" protocol=icmp add action=drop chain=input comment="drop all not coming from LAN" in-interface-list=!LAN add action=fasttrack-connection chain=forward comment="fasttrack established, related" connection-state=established,related hw-offload=yes add action=accept chain=forward comment="accept established,related, untracked" connection-state=established,related,untracked add action=drop chain=forward comment="drop invalid" connection-state=invalid add action=accept chain=forward comment="accept in ipsec policy" ipsec-policy=in,ipsec add action=accept chain=forward comment="accept out ipsec policy" ipsec-policy=out,ipsec add action=drop chain=forward comment="drop all from WAN not DSTNATed" connection-nat-state=!dstnat in-interface-list=WAN /ip firewall nat add action=masquerade chain=srcnat out-interface-list=WAN src-address=192.168.5.0/24