[AndreySTAH]

Здравстуйте!

 

В офисе настроены две Wi-Fi сети: корпоративная и гостевая. Поскольку помещение офиса находятся на разных этажах, для постоения сети используется два устройства Mikrotik RB751G-2HnD (v5.21) и Mikrotik RB751U-2HnD (v5.21). Устройства соеденены между собой проводом. Для корпоративной сети используется интерфейс wlan1 (wireless), для гостевой --- интерфейс wlan2 (VirtualAP).

На устройстве Mikrotik RB751G-2HnD гостевой Wi-Fi ведет себя странно -------- клиент подключается и через несколько секунд происходит переподключение и так постоянно, при этом до корторативной сети этого же устройства клиенты подключаются без проблем.

В логах при этом отмечается:

Nov/17/2014 09:44:52 wireless,debug wlan2: CC:FA:00:xx:xx:xx not in local ACL, by default accept
Nov/17/2014 09:44:52 wireless,info CC:FA:00:xx:xx:xx@wlan2: connected
Nov/17/2014 09:44:53 wireless,debug wlan2: CC:FA:00:xx:xx:xx attempts to associate
Nov/17/2014 09:44:53 wireless,info CC:FA:00:xx:xx:xx@wlan2: reassociating
Nov/17/2014 09:44:53 wireless,info CC:FA:00:xx:xx:xx@wlan2: disconnected, ok
Nov/17/2014 09:44:53 wireless,debug wlan2: CC:FA:00:xx:xx:xx not in local ACL, by default accept
Nov/17/2014 09:44:53 wireless,info CC:FA:00:xx:xx:xx@wlan2: connected
Nov/17/2014 09:44:53 wireless,debug wlan2: 18:87:96:xx:xx:xx attempts to associate
Nov/17/2014 09:44:53 wireless,info 18:87:96:xx:xx:xx@wlan2: reassociating
Nov/17/2014 09:44:53 wireless,info 18:87:96:xx:xx:xx@wlan2: disconnected, ok
Nov/17/2014 09:44:53 wireless,debug wlan2: 18:87:96:xx:xx:xx not in local ACL, by default accept
Nov/17/2014 09:44:53 wireless,info 18:87:96:xx:xx:xx@wlan2: connected
Nov/17/2014 09:44:55 wireless,debug wlan2: CC:FA:00:xx:xx:xx attempts to associate
Nov/17/2014 09:44:55 wireless,info CC:FA:00:xx:xx:xx@wlan2: reassociating
Nov/17/2014 09:44:55 wireless,info CC:FA:00:xx:xx:xx@wlan2: disconnected, ok
Nov/17/2014 09:44:55 wireless,debug wlan2: CC:FA:00:xx:xx:xx not in local ACL, by default accept
Nov/17/2014 09:44:55 wireless,info CC:FA:00:xx:xx:xx@wlan2: connected
Nov/17/2014 09:44:55 wireless,debug wlan2: CC:FA:00:xx:xx:xx attempts to associate
Nov/17/2014 09:44:55 wireless,info CC:FA:00:xx:xx:xx@wlan2: reassociating
Nov/17/2014 09:44:55 wireless,info CC:FA:00:xx:xx:xx@wlan2: disconnected, ok
Nov/17/2014 09:44:55 wireless,debug wlan2: CC:FA:00:xx:xx:xx not in local ACL, by default accept
Nov/17/2014 09:44:55 wireless,info CC:FA:00:xx:xx:xx@wlan2: connected
Nov/17/2014 09:44:56 wireless,debug wlan2: 28:CC:01:xx:xx:xx attempts to associate
Nov/17/2014 09:44:56 wireless,info 28:CC:01:xx:xx:xx@wlan2: reassociating
Nov/17/2014 09:44:56 wireless,info 28:CC:01:xx:xx:xx@wlan2: disconnected, ok
Nov/17/2014 09:44:56 wireless,debug wlan2: 28:CC:01:xx:xx:xx not in local ACL, by default accept
Nov/17/2014 09:44:56 wireless,info 28:CC:01:xx:xx:xx@wlan2: connected
Nov/17/2014 09:44:57 wireless,debug wlan2: CC:FA:00:xx:xx:xx attempts to associate
Nov/17/2014 09:44:57 wireless,info CC:FA:00:xx:xx:xx@wlan2: reassociating
Nov/17/2014 09:44:57 wireless,info CC:FA:00:xx:xx:xx@wlan2: disconnected, ok
Nov/17/2014 09:44:57 wireless,debug wlan2: CC:FA:00:xx:xx:xx not in local ACL, by default accept
Nov/17/2014 09:44:57 wireless,info CC:FA:00:xx:xx:xx@wlan2: connected
Nov/17/2014 09:44:58 wireless,debug wlan2: CC:FA:00:xx:xx:xx attempts to associate
Nov/17/2014 09:44:58 wireless,info CC:FA:00:xx:xx:xx@wlan2: reassociating
Nov/17/2014 09:44:58 wireless,info CC:FA:00:xx:xx:xx@wlan2: disconnected, ok
Nov/17/2014 09:44:58 wireless,debug wlan2: CC:FA:00:xx:xx:xx not in local ACL, by default accept
Nov/17/2014 09:44:58 wireless,info CC:FA:00:xx:xx:xx@wlan2: connected
Nov/17/2014 09:44:59 wireless,debug wlan2: CC:FA:00:xx:xx:xx attempts to associate
Nov/17/2014 09:44:59 wireless,info CC:FA:00:xx:xx:xx@wlan2: reassociating
Nov/17/2014 09:44:59 wireless,info CC:FA:00:xx:xx:xx@wlan2: disconnected, ok
Nov/17/2014 09:44:59 wireless,debug wlan2: CC:FA:00:xx:xx:xx not in local ACL, by default accept
Nov/17/2014 09:44:59 wireless,info CC:FA:00:xx:xx:xx@wlan2: connected

 

Настройка wlan1:

name="wlan1" mtu=1500 mac-address=D4:CA:6D:xx:xx:xx arp=enabled
     interface-type=Atheros 11N mode=ap-bridge ssid="Corp_Wi-Fi"
     frequency=2422 band=2ghz-b/g/n channel-width=20/40mhz-ht-above
     scan-list=default wireless-protocol=802.11 antenna-mode=ant-a
     wds-mode=disabled wds-default-bridge=none wds-ignore-ssid=no
     bridge-mode=enabled default-authentication=yes default-forwarding=yes
     default-ap-tx-limit=0 default-client-tx-limit=0 hide-ssid=no
     security-profile=Corp_Wi-Fi compression=no

Настройка wlan2:

name="wlan2" mtu=1500 mac-address=D6:CA:6D:xx:xx:xx arp=enabled
     interface-type=virtual-AP master-interface=wlan1 ssid="Guest_Wi-Fi"
     wds-mode=disabled wds-default-bridge=none wds-ignore-ssid=no
     bridge-mode=enabled default-authentication=yes default-forwarding=yes
     default-ap-tx-limit=0 default-client-tx-limit=0 hide-ssid=no
     security-profile=Guest_Wi-Fi

Настройка профилей безопасности:

name="Corp_Wi-Fi" mode=dynamic-keys authentication-types=wpa2-psk
    unicast-ciphers=aes-ccm group-ciphers=aes-ccm wpa-pre-shared-key=""
    wpa2-pre-shared-key="XXXxxxx" supplicant-identity="Corp_Wi-Fi_01"
    eap-methods="" tls-mode=no-certificates tls-certificate=none
    static-algo-0=none static-key-0="" static-algo-1=none static-key-1=""
    static-algo-2=none static-key-2="" static-algo-3=none static-key-3=""
    static-transmit-key=key-0 static-sta-private-algo=none
    static-sta-private-key="" radius-mac-authentication=no
    radius-mac-accounting=no radius-eap-accounting=no interim-update=0s

    name="guest_Wi-Fi" mode=dynamic-keys authentication-types=wpa2-psk
    unicast-ciphers=aes-ccm group-ciphers=aes-ccm
    wpa-pre-shared-key="YYYyyyy" wpa2-pre-shared-key="YYYyyyy"
    supplicant-identity="Corp_Wi-Fi_01" eap-methods=""
    tls-mode=no-certificates tls-certificate=none static-algo-0=none
    static-key-0="" static-algo-1=none static-key-1="" static-algo-2=none
    static-key-2="" static-algo-3=none static-key-3=""
    static-transmit-key=key-0 static-sta-private-algo=none
    static-sta-private-key="" radius-mac-authentication=no
    radius-mac-accounting=no radius-eap-accounting=no interim-update=0s
    radius-mac-format=XX:XX:XX:XX:XX:XX radius-mac-mode=as-username
    radius-mac-caching=disabled group-key-update=5m
    management-protection=disabled management-protection-key=""

Edited November 17, 2014 by AndreySTAH