Flint 4 (4.11.0 beta 4): Mac randomly loses connection until wifi reconnect, router drops it silently after SA Query timeout

Hi!

I have another issue with my Flint 4 (main router) + Flint 3 (mesh node) setup, this time on firmware 4.11.0. My MacBook on wifi randomly loses network connection. macOS still shows it as connected to wifi, but nothing loads until I turn wifi off and on again. Other devices are fine during this.

All 3 bands use the same SSID, but the security is different on each one:

  • 2.4 GHz: WPA2-PSK, PMF optional
  • 5 GHz: WPA2/WPA3 mixed, PMF optional
  • 6 GHz: WPA3 only, PMF required

I went through the logs. The Mac moves between bands quite often. When it is connected on 5 GHz and tries to join 6 GHz, the router rejects it with status 30 and sends an SA Query to the old band. Most of the time it works out, but when the SA Query times out the router deletes the Mac from 5 GHz without sending a deauth. The Mac doesn't know it was dropped, so it keeps sending on 5 GHz and the router answers with "can't find pEntry". This goes on until I reconnect manually.

Here is one case from today:

19:59:51 Mac connects on 5 GHz (rai0), gets DHCP, all fine
21:18:34 Mac tries 6 GHz (rax0) -> auth resp status=30, SA Query sent
21:21:37 same
21:24:48 same
21:33:16 same, but this time:
21:33:18 PMF_SAQueryTimeOut -> mac_entry_delete, rai0: STA disassociated
21:35:47 BN1 Peer_Vendor_Spec_Action: can't find pEntry
21:36:30 I reconnect manually, Mac joins 6 GHz again

The same thing happened to my iPhone at 19:17 (status=30, then SA Query timeout, then dropped). The only devices that show this in the logs are Apple ones. Maybe that's because they switch bands more often than other devices.

I think there are two problems here. First, the router deletes the client without telling it, so it ends up in a dead state instead of reconnecting by itself. Second, the security is different between bands on the same SSID, which probably makes the Mac do a full SAE handshake every time it changes band.

I haven't changed anything yet. I attached the full log export.

Can somebody please look into this?

logread-redacted.tar (769 KB)

I have the same issue. I think I will commission the IoT network and boot everything that doesn't support WPA3 over to that.

Hi,

Thank you for the detailed report and logs. We will share this case with our R&D team for further investigation.

To help us check the current wireless configuration, could you please send us a configuration backup of the router by private message? Please do not upload the backup publicly, as it may contain sensitive configuration information. Click the Technical Support avatar and then the Message button:

Please also let us know the exact MacBook and iPhone models and their macOS and iOS versions. If your account cannot start a private message, let us know and we can initiate one.