AP7632 connection problem

[AmirA]

Hello!

Dear experts, i need your kindly advice, please.. I have an AP7632i access point, which operates in a bridge mode. It looks like AP works fine, but some kinds of clients can't receive an IP address from the gateway through this AP. As a result, this kind of clients can't establish Internet connection.

PCs, laptops, tablets, cell phones - all of them works fine (can authenticate on AP, get an IP address from the gateway and operate normally). But we have some smart wireless devices (kind of voice assistants) and some of them can't get an IP address from GW. I'm 100% sure, that the problem is related with AP, cuz if I change AP7632 to some Mikrotik AP (for example) this clients can connect to wi-fi and they work fine (with same gateway).

I'm little bit confused about it, cuz i tried to do a full factory reset, I configured minimum/basic configuration on AP and got the same result.

We use very simple configuration (Internet->Juniper SRX210H GW->D-Link PoE Switch->Extreme AP7632i->Clients). We do not use and dot1x or something special.. All options are on their defaults..

Please, help to understand, what is a problem?

Here our AP's config:

Spoiler

AP-01.361*#sho run
!
! Configuration of AP7632 version 7.7.0.0-018R
!
!
version 2.7
!
!
client-identity-group default
load default-fingerprints
!
ip access-list BROADCAST-MULTICAST-CONTROL
permit ip any any rule-precedence 10 rule-description "permit all IP traffic"
permit tcp any any rule-precedence 11 rule-description "permit all TCP traffic"
permit udp any eq 67 any eq dhcpc rule-precedence 12 rule-description "permit DHCP replies"
deny udp any range 137 138 any range 137 138 rule-precedence 21 rule-description "deny windows netbios"
deny ip any 224.0.0.0/4 rule-precedence 22 rule-description "deny IP multicast"
deny ip any host 255.255.255.255 rule-precedence 23 rule-description "deny IP local broadcast"
deny ip any any rule-precedence 102
!
mac access-list PERMIT-ARP-AND-IPv4
permit any any type ip rule-precedence 10 rule-description "permit all IPv4 traffic"
permit any any type arp rule-precedence 20 rule-description "permit all ARP traffic"
!
ip snmp-access-list default
permit any
!
firewall-policy default
no ip dos tcp-sequence-past-window
no stateful-packet-inspection-l2
ip tcp adjust-mss 1400
!
!
mint-policy global-default
!
meshpoint-qos-policy default
!
wlan-qos-policy default
qos trust dscp
qos trust wmm
!
radio-qos-policy default
!
wlan wlan1
ssid AP-01.361
vlan 1
bridging-mode local
encryption-type tkip-ccmp
authentication-type none
no multi-band-operation
no protected-mgmt-frames
wpa-wpa2 psk 0 ........................
!
wlan wlan2
ssid smartnet
vlan 1
bridging-mode local
encryption-type tkip-ccmp
authentication-type none
no multi-band-operation
no protected-mgmt-frames
wpa-wpa2 psk 0 .........................
!
smart-rf-policy default
no select-shutdown
!
wips-policy default
!
radius-server-policy default
!
!
management-policy default
telnet
no http server
https server
rest-server
ssh
user admin password 1 .................. role superuser access all
no snmp-server manager v3
!
event-system-policy default
!
nsight-policy default
!
profile ap7632 361
ip name-server 192.168.163.1
ip name-server 8.8.8.8
ip default-gateway 192.168.163.1
autoinstall configuration
autoinstall firmware
crypto ikev1 policy ikev1-default
isakmp-proposal default encryption aes-256 group 2 hash sha
crypto ikev2 policy ikev2-default
isakmp-proposal default encryption aes-256 group 2 hash sha
crypto ipsec transform-set default esp-aes-256 esp-sha-hmac
crypto ikev1 remote-vpn
crypto ikev2 remote-vpn
crypto auto-ipsec-secure
crypto load-management
crypto remote-vpn-client
interface radio1
wlan wlan1 bss 1 primary
wlan wlan2 bss 2 primary
antenna-mode 2x2
interface radio2
wlan wlan1 bss 1 primary
antenna-mode 2x2
interface bluetooth1
shutdown
mode le-sensor
interface ge1
interface vlan1
ip address dhcp
ip address zeroconf secondary
ip dhcp client request options all
interface pppoe1
no use firewall-policy
use client-identity-group default
logging on
service pm sys-restart
router ospf
adoption-mode controller
!
rf-domain default
location "361"
contact admin
timezone Asia/Tashkent
country-code uz
ad-wips-wireless-mitigation disable
ad-wips-wired-mitigation disable
use nsight-policy default
!
ap7632 B4-2D-56-8A-88-90
use profile 361
use rf-domain default
hostname AP-01.361
no mint mlcp vlan
no mint mlcp ip
interface vlan1
description "Virtual Interface for LAN by Wizard"
ip address 192.168.163.3/24
ip address zeroconf secondary
no ip dhcp client request options all
no virtual-controller
no rf-domain-manager capable
no adoption-mode
!
!
end
AP-01.361*#