Deco M9 Plus security options

 
Deco M9 Plus security options
Deco M9 Plus security options
2020-05-08 18:26:00 - last edited 2020-11-10 23:17:50
Hardware Version: V1
Firmware Version: Current

I created a post about a week ago regarding the lack of options for disabling TKIP (a deprecated security protocol with vulnerabilities).

 

My newer android devices are having issues connecting to the M9 Plus APs, and I believe this is a reason why. Can someone provide any input as to 1) why my post was deleted, and 2) if anyone is also having similar issues?

 

The symptoms are that the phones in question will connect to wifi, sometimes for several hours. Eventually though (at least once a day), a "!" appears on the connection icon and no data flows to/from the phone.

 

Thanks!

0
0
#1
Options
8 Reply
Re:Deco M9 Plus security options - Post deleted??
2020-05-11 20:32:32

@Cabuzzi 

 

Please note no one has ever deleted your post, it is alive and well here: https://community.tp-link.com/en/home/forum/topic/205486

 

You posted on our global forum first, then you came here to the US forum which your post did not exist giving you the impression the admins deleted your post.

 

If you get the icon that shows on the wireless network that could be related to no internet going to the Deco units. If there was an issue with the security then your phones would not connect at all, to begin with.

 

I would suggest starting with your modem, critical 3 error logs will give random connection drops.

0
0
#2
Options
Re:Deco M9 Plus security options - Post deleted??
2020-05-12 01:09:56

@Tony Thanks for the reply, and the revelation that there are multiple TP-Link forums (I've edited the original post).

 

Can I ask what you mean about critcal 3 errors? Are you referring to the modem/radio on the phones themselves (with 3 equaling "critical" in syslogd)? I do have the ability to run logcat on my phone, but not my wife's phone, as it is not rooted.

 

Threads on XDA regarding wifi issues seem to point to TKIP used at the encrytion method on the WPA2 protocol. I can't test this theory, as the Decos are literally the first wireless AP I've had that do not allow you to disable TKIP. This is obviously not something the average person is going to lose too much sleep over, but in this specific case, TKIP has known vulnerabilities and should be disabled whenever possible.

 

Additionally, I am not seeing the typical "drop" I've seen in the past, for instance, when you on the edge of a network with spotty signal. On an android phone, that would normally be the wireless icon disappearing, then coming back once the connection is reestablished. This is a persistent ! mark on the wireless connection that does not go away until you cycle the wireless radio. I am also reading of people disabling the "mixed" WPA/WPA2 mode (which allows for TKIP use) on their routers have not just the connectivity problem go away, but also finally having a Voice-over-wifi (VoWifi) connection.

 

As you probably know, both Android 10 and Windows 10 (build 1903 and above) are making users aware of this vulnerability. If you don't want to make it an option in the Deco application/firmware, then it should at least be disabled so it never comes into play.

0
0
#3
Options
Re:Deco M9 Plus security options - Post deleted??
2020-05-13 19:57:12

@Cabuzzi 

 

Critical 3 errors refer to the system logs in your modem. If the internet signal is not stable then you will get random internet drops so the Deco system will no longer get an internet connection which will give your devices the Wi-Fi signal with no internet. 

 

Regarding the encryption, there has been no information if there will be an option to change or disable it.

0
0
#4
Options
Re:Deco M9 Plus security options - Post deleted??
2020-05-14 18:29:59

@Tony
Thanks for the reply. There is nothing wrong with my internet signal. No other devices are affected. There are most certainly some things the OEMs (OnePlus and Samsung) can do to resolve this issue, but I will say it does not happen with other access points. I am now using an older TP-Link Archer C8 placed in the middle of the house, just for these two devices. We're no longer having issues. If we connect to the Decos, however, the issues resume.

 

I would strongly recommend to your development team that WPA/TKIP be phased out altogether. It does not belong in a modern AP like the Decos.

1
1
#5
Options
Re:Deco M9 Plus security options - Post deleted??
2020-05-15 22:16:55

@Cabuzzi 

 

Thank you for the suggestion. We make sure to forward any feedback and feature requests to our devs for consideration.

0
0
#6
Options
Re:Deco M9 Plus security options - Post deleted??
2020-11-09 22:05:22 - last edited 2020-11-09 22:13:29

@Cabuzzi 

 

I agree!  I just got the set of 3 - M9 Plus units, set one up and determined that WPA2 w/AES is not supported.  I will be returning them.  WPA2 w/AES has been a security standard for wireless connections for years!  Why would they make a product that still uses a protocol with known hackes?!

0
0
#7
Options
Re:Deco M9 Plus security options - Post deleted??
2020-11-09 23:41:11

@mjhamlin 

There is a beta firmware with AES-only as an option. Might want to check that out, first. 

0
0
#8
Options
Re:Deco M9 Plus security options - Post deleted??
2020-11-10 14:37:59
2
2
#9
Options