Skip to main content
tobisfr
Explorer
May 13, 2025
Question

Clients disconnecting Wifi on 6GHz 802.11ax - no stable connection

  • May 13, 2025
  • 5 replies
  • 1872 views

We use FortiAPs 231G ( v7.4 build0734) on a Fortigate 200F ( V7.2.10)

The Wifi on 2.4Ghz and 5Ghz works without any problems. However with WIFI6 on 6Ghz the clients reconnect every few seconds, even on strong signal. Different clients with different WLAN adapters are affected.

 

Anyone having a suggestion or similar problems?

 

Error:

msg="AP sent disassociate frame to client c8:94:02:ff:f9:cd" msg="Client c8:94:02:ff:f9:cd had an IP address detected (by DHCP packets)." msg="Client c8:94:02:ff:f9:cd disconnected by WTP." msg="Client c8:94:02:ff:f9:cd no OKC match for PMKID" msg="Client c8:94:02:ff:f9:cd no OKC match for PMKID" msg="Client c8:94:02:ff:f9:cd no OKC match for PMKID" msg="DHCP ACK for IP 192.168.115.52 from server 10.1.1.20 with MAC 00:09:0f:09:01:1a for client c8:94:02:ff:f9:cd from router 192.168.115.254 on subnet 255.255.255.0 with dns 10.1.1.6, 10.1.1.20" msg="DHCP REQUEST for IP 192.168.115.52 from client c8:94:02:ff:f9:cd" msg="Client c8:94:02:ff:f9:cd authenticated." msg="AP received 4/4 message of 4-way handshake from client c8:94:02:ff:f9:cd" msg="AP sent 3/4 message of 4-way handshake to client c8:94:02:ff:f9:cd" msg="AP received 2/4 message of 4-way handshake from client c8:94:02:ff:f9:cd" msg="AP sent 1/4 message of 4-way handshake to client c8:94:02:ff:f9:cd" msg="AP sent reassociation response frame to client c8:94:02:ff:f9:cd" msg="AP received reassociation request frame from client c8:94:02:ff:f9:cd" msg="AP sent WPA3(non-SAE) authentication response frame to client c8:94:02:ff:f9:cd" msg="AP received WPA3(non-SAE) authentication request frame from client c8:94:02:ff:f9:cd" msg="AP sent disassociate frame to client c8:94:02:ff:f9:cd" msg="Client c8:94:02:ff:f9:cd had an IPv6 address detected (by IP packets)" msg="Client c8:94:02:ff:f9:cd had an IP address detected (by DHCP packets)." msg="Client c8:94:02:ff:f9:cd had an IP address detected (by DHCP packets)." msg="Client c8:94:02:ff:f9:cd disconnected by WTP." msg="DHCP ACK for IP 192.168.115.52 from server 10.1.1.20 with MAC 00:09:0f:09:01:1a for client c8:94:02:ff:f9:cd from router 192.168.115.254 on subnet 255.255.255.0 with dns 10.1.1.6, 10.1.1.20" msg="DHCP REQUEST for IP 192.168.115.52 from client c8:94:02:ff:f9:cd" msg="Client c8:94:02:ff:f9:cd authenticated."

 

Config SSID:

show full-configuration wireless-controller vap BFCLIENTS-6GHZ  config wireless-controller vap     edit "BFCLIENTS-6GHZ"         set fast-roaming enable         set external-fast-roaming disable         set atf-weight 20         set max-clients 0         set ssid "BFCLIENTS-6GHZ"         set broadcast-ssid enable         set security wpa3-enterprise         set pmf enable         set pmf-assoc-comeback-timeout 1         set pmf-sa-query-retry-timeout 2         set okc enable         set mbo disable         set voice-enterprise disable         set fast-bss-transition disable         set eapol-key-retries enable         set mac-username-delimiter hyphen         set mac-password-delimiter hyphen         set mac-calling-station-delimiter hyphen         set mac-called-station-delimiter hyphen         set mac-case uppercase         set radius-mac-auth disable         set auth radius         set encrypt AES         set radius-server "FortiAuth-BA"         set local-standalone disable         set local-bridging enable         set intra-vap-privacy disable         set schedule "always"         set ldpc rxtx         set high-efficiency enable         set target-wake-time enable         set port-macauth disable         set bss-color-partial enable         set nac disable         set vlanid 15         set vlan-auto disable         set dynamic-vlan disable         set multicast-rate 0         set multicast-enhance disable         set igmp-snooping disable         set dhcp-address-enforcement disable         set broadcast-suppression dhcp-up dhcp-ucast arp-known         set ipv6-rules drop-icmp6ra drop-icmp6rs drop-llmnr6 drop-icmp6mld2 drop-dhcp6s drop-dhcp6c ndp-proxy drop-ns-dad         set me-disable-thresh 32         set mu-mimo enable         set probe-resp-suppression disable         set radio-sensitivity disable         set vlan-pooling disable         set dhcp-option43-insertion enable         set dhcp-option82-insertion disable         set ptk-rekey disable         set gtk-rekey disable         set eap-reauth disable         set qos-profile ''         set hotspot20-profile ''         set access-control-list ''         set primary-wag-profile ''         set secondary-wag-profile ''         unset rates-11a         unset rates-11bg         unset rates-11n-ss12         unset rates-11n-ss34         set rates-11ac-mcs-map ''         set rates-11ax-mcs-map ''         set utm-status disable         set address-group-policy disable         set sticky-client-remove disable         unset beacon-advertising         set application-detection-engine disable         set l3-roaming disable     next end

 

 

 

5 replies

framoshzv
New Member
May 13, 2025

Hola, tenemos el mismo problema, tenemos el caso en el TAC y fue derivado al área de desarrollo.

tobisfr
tobisfrAuthor
Explorer
May 14, 2025

I opend a TAC Ticket as well. But nevertheless. Has anyone a working configuration of Wifi6E 6Ghz with windows Clients and Radius authentication? It would be nice if someone could post the full config of the ssid and perhaps AP Profile.

dynasoft
Visitor III
August 1, 2025

Hi, could you solve this?

framoshzv
New Member
August 1, 2025

Hasta el momento no tenemos una respuesta, al parecer si es un bugg que lo elevaron al área de Desarrollo. Se realizo todas las recomendaciones de la marca a nivel de configuración y no funciono nada.

Craps2
New Member
January 22, 2026

tobiafr,

 

Did you get this issue resolve?   I have the same issue.  Our macbook air with 802.11ax clients are disconnecting on WiFi6. If they reconnected on WiFi5, then the connection is stable.   Disable WiFi6 from the profile works but I would like to use WiFi 6 for wider bandwidth and less channel interface.  Thanks!

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!