Three NWA50AX - Wrong Pwd on one but roaming possible

tonabteilung

In my setup I have three identical (?) configured NWA50AX, all three hanging on the same switch. I configured them without nebula, as I don't have any internet-connection to this system.

I can login with mobile ios-devices on two of them, on the third one they are "blocked by key handshake fail" and saying wrong password.

But when I login on one of the other two, it is possible to roam also to the third one!

With a windows surface it is possible to login on all three APs.

I don't get what i'm doing wrong. Can someone give me a hint…

Greetings,
Wolfgang

Zyxel_Nami

Hi Wolfgang @tonabteilung

The "blocked by key handshake fail" log indicates a few possible issues with the WiFi connection to the third AP, specifically:

1. Poor signal strength: A weak signal can disrupt the connection process.
2. Incorrect password: Double-check to ensure the correct WiFi password is used.
3. Network interference: Overlapping channels or physical obstructions might be causing interference.

For further details, please refer to the related guide below:

https://community.zyxel.com/en/discussion/17829/what-does-the-blocked-by-key-handshake-fail-log-mean-and-how-to-resolve-the-issue

To optimize your AP in Standalone mode, please consider the following setting:

• Adjusting the 2.4GHz radio power to be 5dBm lower than the 5GHz radio. As below screenshot, Radio 1 Setting is as 2.4GHz, and Radio 2 Setting is for 5GHz radio.
  
• Ensure to enable Dynamic Channel Selection (DCS) for automatic optimal channel selection, enhancing connectivity even with connected clients.
  

If you need additional assistance, please don't hesitate to reach out.

tonabteilung

Hi Nami,

thanks for the advice.

I already doublechecked these issues, especially with signal strength, but that's not the point.

My ios devices say, the password would be wrong. But it is the same password for all three APs, and with windows-devices this also works!

Can it be possible to roam to an AP, if it has another pwd set than the other two?
I marked the other APs as friendly APs…

Greetings,
Wolfgang

Zyxel_Nami

Hi Wolfgang @tonabteilung

Please double-check that the SSID name and the Security Mode (as below screenshot) settings are consistent across all three APs.

If they are identical, kindly provide the diagnostic files for these APs to facilitate further investigation.

The FAQ for collecting the diagnostic file is here:

https://community.zyxel.com/en/discussion/18869/how-to-collect-the-diagnostic-info-of-standalone-ap

tonabteilung

[Removed for security concerns]

Here are the three diag-files.

Thanks for helping.

Greetings,
Wolfgang

Zyxel_Nami

Hi @tonabteilung Wolfgang,

I've downloaded the diagnostic files you sent and have removed them from this thread for security reasons.

We tested your configuration on our local NWA50AXs, and the connection to the SSID 'SQControl' worked normally, with our iPhone connecting to each AP without issues.

To further investigate, could you specify which of the APs is the third one you initially reported as problematic? Please share its location name or MAC/SN via private message. Additionally, providing the MAC/SN of the iOS device encountering the issue would aid our investigation.

https://community.zyxel.com/en/discussion/21625/three-nwa50ax-wrong-pwd-on-one-but-roaming-possible

Also, we recommend updating the firmware on all your APs to the latest version 6.29(ABYW.4)C0 to ensure normal operation. You can download the firmware at: https://www.zyxel.com/global/en/support/download?model=nwa50ax

Zyxel_Nami

Hi @tonabteilung

I hope all is well. I'm reaching out to follow up on your NWA50AX device issue, where you encountered a wrong password error while roaming was operational.

Has there been any improvement or resolution since your last message?

Looking forward to your update.

tonabteilung

There was no improvement since the last actions (Firmware-Update).

But today I found out, that the problematic radio is the 5G on this particular AP.
As long as I deactivate 5G on this AP, all is working.

But I really don't get, why this 5G-radio is not working with iOS-Devices, whereas the 5G-radios on the other two APs are working…

Greetings,

Wolfgang

Zyxel_Nami

Hello Wolfgang @tonabteilung

Thank you for your message and the diagnostic info files.

To clarify, is the issue still that your iPhone cannot connect directly to the third AP (IP: 192.168.1.246) but can connect to the other two APs and roam to the third AP?

And, have you noticed that the problem persists specifically with the 5GHz radio on the third AP, while the 5GHz radios on the other two APs work fine with iOS devices?

Zyxel_Nami

Hi @tonabteilung

How are things progressing?

Regarding the issue with iPhones not connecting to the 5GHz network of the specific AP, have you observed whether it receives an IP address or not? And which IP it is?

The issue seems similar to the discussion below, so you can refer to it for more information.

https://community.zyxel.com/en/discussion/comment/65468#Comment_65468

tonabteilung

The issue is still the same:

All iOS-Devices (i tried with different iPhones/iPads with different age and iOS-Version) can connect to 2,5GHz and 5GHz of two APs, at the third AP (.246) they can only connect to the 2,5GHz-Radio.

Therefore also roaming to the third AP works, but only until the client comes near enough to switch to the 5GHz-Radio. As soon it wants to change Radio to 5GHz (Intra-Roaming), it is thrown out.

This is not a problem of obtaining no IP-Address, as we have also tried static IPs for the clients. So it is another problem as in the mentioned discussion.

Greetings,

Wolfgang