1. STA info.
- Device type: IoT Device using Power Save Mode
- Beacon check interval: 1.8sec
- using 'PS-Poll' frame method (802.11 standard): When the station receives a Beacon with its AID in the TIM element, the STA initiates the frame delivery by transmitting a PS-Poll control frame to the AP.
2. Root cause
- AP should send the Data frame after checking on STA wake-up from PS Poll frame. But, D Link COVR C1203 AP sends the Data frame before Beacon frame.
- Eventually, the STA does not receive the data sent before the Beacon frame.
3. Detailed description based on capture file between D-Link COVR C1203 and STA.
- Very often COVR C1203 sends Data frame(UC:Ping Request) to STA before sending Beacon frame.
- After sending Data, COVR C1203 notifies to STA having AID that there is buffered Data.
- STA response PS Poll “I’m ready to get the data” when the COVR C1203 indicates it has buffered frame addressed to the STA.
- Although COVR C1203 receives the PS Poll, COVR C1203 did not send the Data frame to STA. Because COVR C1203 already sent Data frame(at first step) before sendind Beacon frame.
- For that reason, COVR C1203 thinks STA is disassociated after trying to send data frame several times.
- So, upon receiving the data frame from STA, COVR C1203 sends Deauth frame to STA due to Reason code: Class 2 frame received from non-authenticated STA.(0x0006)
4. Standard procedure for receiving data from AP by device using Power Save mode.
- When the AP has the data to send to the STA.
- First, a Beacon(with AID) must be sent to notify to the STA that there is buffered data.
- The STA that receives the Beacon(with AID) from AP, transmits the PS-Poll frame to AP.
- The AP that receives the PS-poll frame learns that the STA is ready to receive.
- So, AP transmits the buffered data to the STA immediately.(802.11 standard)