iPhone does not connect in WPA2-PSK/WPA3-SAE Mixed Mode

Hello,

Router: latest OpenWrt 23.05.4 r24012-d8dd03c46f / LuCI openwrt-23.05 branch git-24.086.45142-09d5a38
Client: iPhone XR, iOS 17.5.1

A few other mobile phones and laptops do connect correctly to this router over WiFi, issue is only with this iPhone.

It looks that it works correctly with this configuration:
WPA2-PSK
Force CCMP (AES)
802.11w Management Frame Protection = Disabled (=default value)

but it does not connect when switched to:
WPA2-PSK/WPA3-SAE Mixed Mode
802.11w Management Frame Protection = Optional or Disabled lub Required (none of those options help in making it working)

I tried also with both enabled and disabled:
802.11r Fast Transition
but it looks it does not have any influence on this issue.

Is it the only solution to simply not use WPA2-PSK/WPA3-SAE Mixed Mode?
Is it an issue on the OpenWrt side or iOS side?

This is not uncommon, and this is reported with other AP firmware/vendors, too. That is to say that it is not unique to OpenWrt -- it's actually a client side issue.

The recommendation is to use either WPA2 or WPA3, but not mixed mode.

1 Like

It is a known issue.

Solution: do not use mixed mode.

Probably a little of both; it, also, causes problems outside iOS.

1 Like

Did you read it?

Please connect to your OpenWrt device using ssh and copy the output of the following commands and post it here using the "Preformatted text </> " button:
grafik
Remember to redact passwords, MAC addresses and any public IP addresses you may have:

ubus call system board
cat /etc/config/network
cat /etc/config/wireless
cat /etc/config/dhcp
cat /etc/config/firewall
1 Like

Thank you all for your help.

Over 40 other, different clients do work correctly in that network (both completely new and the old devices).
I checked the configs, it looks there is nothing specific, related to that particular device: firewall rules, nor dhcp configs, nor dns configs etc.

I followed the workaround "do not use mixed mode" and switched from "WPA2-PSK/WPA3-SAE Mixed Mode" to "WPA2-PSK". In this mode all of the clients do work properly, including this iPhone XR.

It is really a pity that iPhone XR, which is regularly updated, having the default configuration etc. does not work correctly in a mode 40 other devices support.
It is almost 6 years from its premiere now, so perhaps no one in Apple takes care about fixing that today... :frowning:

Apple location service sometimes plays weird tricks (not gps or wifi list)