Thanks for your feedback, my case at D-Link support is now nearly one year old, I doubt they will replace the unit. That being said, the issue came back two days ago, and I had a closer look at the logs.
So what I can now state for sure is that everytime I loose IPv6 connectivity:
- it happens exactly after the IPv6 valid lifetime expired
- there are those "reason 7" errors in the log
I had a closer look at those messages, and I could notice:
- I see a bunch of "Deauth: STA C8:D3:A3:xx:xx:xx(reason 7)" in the logs
- this is strange, since it means the AP is deauthenticating itself (the MAC is the one from the AP)
- I could notice that it happens always after a "4-way handshake fail" happened
- as far as I could dig in my logs, this "4-way handshake" failure is only ever triggered by my Nexus S device
So the interactions can be summed as:
- Nexus S connects to EAP-TLS
- 4-way handshake fails
- AP tries to deauth the Nexus S, but for some reason (valid, maybe?) the logs shows its own MAC instead of the Nexus S' one
- Nexus S tries to reauthenticate after 10 seconds
- 4-way handshake is now succesfull
- Nexus S does its IPv4 DHCP request and gets an IP address
Then from this point, I'm not able to see any new ICMPv6 RA packets going through the AP.