I switched over to TKIP on the tranzeo's and the MT AP, but i'm still seeing the same problem. I go back to no encryption and things work fine.

Chris Gotstein
Sr Network Engineer
UP Logon/Computer Connection UP
500 N Stephenson Ave
Iron Mountain, MI 49801
Phone: 906-774-4847
Fax: 906-774-0335
ch...@uplogon.com

Robert Andrews wrote:
Ahhh that would be a reason for using AES and also a reason that Chris is seeing the reboots...
issues with AES on card firmware...

Robert

Randy Cosby wrote:
Just a side note. On the Mikrotiks, WPA2 with AES CCM, encryption is offloaded to the wlan card. tkip is done on the 'tik processor and will result in much higher cpu usage.


Robert Andrews wrote:
How about taking one AP with MT/Tranzeo and switching it over to TKIP and seeing if that solves the problem?
It would be good info for anyone who runs this equip...   Including me.

Chris Gotstein wrote:
No need that i see of, just that all the radios we have out in the field are running aes.

Chris Gotstein
Sr Network Engineer
UP Logon/Computer Connection UP
500 N Stephenson Ave
Iron Mountain, MI 49801
Phone: 906-774-4847
Fax: 906-774-0335
ch...@uplogon.com

Robert Andrews wrote:
By george I think you've got it. Is there a need to stay with AES? tkip with good keys should be just as secure...

Robert

Chris Gotstein wrote:
Maybe that is there the problem lies. We are running AES. At this point i'm waiting to here back from Tranzeo if they found a fix.

Chris Gotstein
Sr Network Engineer
UP Logon/Computer Connection UP
500 N Stephenson Ave
Iron Mountain, MI 49801
Phone: 906-774-4847
Fax: 906-774-0335
ch...@uplogon.com

Robert Andrews wrote:
TKIP, and we are upgrading from 3.22 to 3.23, although testing showed no difference we changed the update interval to 3000 from 3600 to match the MT. We run sr2 and xr2 and KXS30SG cards.. MT has tkip unicast and group keys

Robert

Chris Gotstein wrote:
Are you doing WPA AES or TKIP? What software version are you running on the MT?

Chris Gotstein
Sr Network Engineer
UP Logon/Computer Connection UP
500 N Stephenson Ave
Iron Mountain, MI 49801
Phone: 906-774-4847
Fax: 906-774-0335
ch...@uplogon.com

Robert Andrews wrote:
Again, I'll mention that we are running a slew of MT AP's and CPQ's and 10mhz channels with WPA and no problems... I am NOT denying your problem, just that there may be a configuration solution that's different between our setups. There are some CPQ's that will not to 10mhz channels even with 4.0.2. We only run WPA on 10mhz channels, so maybe that is it? MT with CPQ gives our best reliablility and speed to the customer.

Robert

Chris Gotstein wrote:
Funny you should ask. I was going to ask the same question about whether or not i should be encrypting the traffic from the AP to the customer. WPA and WPA2 have caused me nothing but problems from the get-go and i would just rather get rid of it. The encryption was in place when i started here, and coming from the business side of things and setting up in-building wifi, we always used encryption. At first it was setup to provide security between the clients, but now we are able to turn off client-to-client communication, maybe i don't need to run it anymore. What are most people doing? Maybe i should turn it off....

Chris Gotstein
Sr Network Engineer
UP Logon/Computer Connection UP
500 N Stephenson Ave
Iron Mountain, MI 49801
Phone: 906-774-4847
Fax: 906-774-0335
ch...@uplogon.com

D. Ryan Spott wrote:
I have to ask,

Why are you encrypting traffic from your AP to your customer's CPE?

ryan

Chris Gotstein wrote:
Can't upgrade to 4.0.2 at this time. There is an issue when using WPA and MT AP. Causes the clients to drop and reboot constantly. I'm sticking with 3.6.7 till they come up with a fix.

Chris Gotstein
Sr Network Engineer
UP Logon/Computer Connection UP
500 N Stephenson Ave
Iron Mountain, MI 49801
Phone: 906-774-4847
Fax: 906-774-0335
ch...@uplogon.com

Carl A jeptha wrote:
upgrade all tranzeo cpq and sl to version 4.02 firmware.

You have a Good Day now,


Carl A Jeptha
http://www.airnet.ca
Office Phone: 905 349-2084
Office Hours: 9:00am - 5:00pm
skype cajeptha



Robert Andrews wrote:
Yes... It works very well if you have Tranzeo CPE's that support it. Many CPQ's don't unless you put in a new radio...

Chris Gotstein wrote:
We run mostly MT AP's and Tranzeo CPE (CPQ/SL2). Is it possible to run 10mhz or 5Mhz channels with MT AP and Tranzeo CPE?

_______________________________________________
Mikrotik mailing list
Mikrotik@mail.butchevans.com
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS
-------------- next part --------------

No virus found in this outgoing message.
Checked by AVG - www.avg.com Version: 8.0.238 / Virus Database: 270.12.2/2074 - Release Date: 04/22/09 08:49:00
_______________________________________________
Mikrotik mailing list
Mikrotik@mail.butchevans.com
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS
_______________________________________________
Mikrotik mailing list
Mikrotik@mail.butchevans.com
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS
_______________________________________________
Mikrotik mailing list
Mikrotik@mail.butchevans.com
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS
_______________________________________________
Mikrotik mailing list
Mikrotik@mail.butchevans.com
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS


_______________________________________________
Mikrotik mailing list
Mikrotik@mail.butchevans.com
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS
_______________________________________________
Mikrotik mailing list
Mikrotik@mail.butchevans.com
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS


_______________________________________________
Mikrotik mailing list
Mikrotik@mail.butchevans.com
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS
_______________________________________________
Mikrotik mailing list
Mikrotik@mail.butchevans.com
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS


_______________________________________________
Mikrotik mailing list
Mikrotik@mail.butchevans.com
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS
_______________________________________________
Mikrotik mailing list
Mikrotik@mail.butchevans.com
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS


_______________________________________________
Mikrotik mailing list
Mikrotik@mail.butchevans.com
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS

_______________________________________________
Mikrotik mailing list
Mikrotik@mail.butchevans.com
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS
_______________________________________________
Mikrotik mailing list
Mikrotik@mail.butchevans.com
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS

Reply via email to