About failure of IEEE802.11az command in SDK demo application

[KKobayashi]

I have Embedded Artists EAR00409 (Murata Type 2EL) Wi-Fi modules equipped with NXP IW612.

I am trying to verify the operation of IEEE802.11az (range measurement function) from the MCUXpresso SDK demo application in combination with NXP MIMXRT1160-EVK (M.2 connection), but it is not working properly and I am having trouble.
​
Environment:
OS: WIndows 11 Pro
MCUXpresso IDE: 24.12.148
SDK: 25_06_00_MIMXRT1160-EVK

According to UM11442 (NXP Wi-Fi and Bluetooth Demo Applications User Guide
for i.MX RT Platforms), a project of "wifi cli demo" was built with the following macros:
WIFI_IW612_BOARD_MURATA_2EL_M2
and
CONFIG_11AZ, CONFIG_11MC, CONFIG_CSI, CONFIG_WLS_CSI_PROC

One board was configured as an access point (AP) ans the other as a station (STA).
The AP started as follows, and the station can connect to the AP correctly.

wlan-add 1 ssid ftmap bssid FE:84:A7:51:E8:F4 ip:192.168.10.1,192.168.10.1,255.255.255.0 role uap channel 36
wlan-start-network 1
wlan-set-uap-bandwidth 1

From the STA, the following commands were input:
wlan-11az-rang-cfg 1 format_bw 0 num_measurements 5 measurement_freq 1 i2r_sts 0 r2i_sts 0 i2r_lmr 0
wlan-ftm-ctrl 1 loop_cnt 1 channel 36 mac FE:84:A7:51:E8:F4

However, the wlan-ftm-ctrl command always reports "FTM Session Failed" even if I have changed the parameters.

Is this the correct way to use these commands? Or are other settings required?

Debug log of the STA is as follows:

wlan-11az-rang-cfg 1 format_bw 0 num_measurements 5 measurement_freq 1 i2r_sts 0 r2i_sts 0 i2r_lmr 0
[wifi] Set Ranging Parameters:
[wifi] ---------------------------------
[wifi] format_bw:0
[wifi] az_measurement_freq:1
[wifi] az_number_of_measurements:5
[wifi] max_i2r_sts_upto80:0
[wifi] max_r2i_sts_upto80:0
[wifi] i2r_lmr_feedback:0

wlan-ftm-ctrl 1 loop_cnt 1 channel 36 mac FE:84:A7:51:E8:F4
[wifi] [INFO] FTM Session Control Started on 36 channel with Peer FE:84:A7:51:E8:F4
[wevt] EVENT - : 0x8d Len : 188 Reason: 45
[wifi] Measured Distance: m; Kalman Distance: m [3255759 ms]
[wifi] EVENT: MLAN_CSI Processing results: -29849 | 30157 (848004), TSF[c20ef15e]
[wevt] EVENT - : 0x8d Len : 188 Reason: 45
[wifi] Measured Distance: m; Kalman Distance: m [3256759 ms]
[wifi] EVENT: MLAN_CSI Processing results: -29747 | 30079 (848004), TSF[c21e351d]
[wevt] EVENT - : 0x8d Len : 188 Reason: 45
[wifi] Measured Distance: m; Kalman Distance: m [3257759 ms]
[wifi] EVENT: MLAN_CSI Processing results: -30105 | 30479 (848004), TSF[c22d78ff]
[wevt] EVENT - : 0x8d Len : 188 Reason: 45
[wifi] EVENT: MLAN_CSI Processing results: -29798 | 30156 (848004), TSF[c23cbcc3]
[wevt] EVENT - : 0x8d Len : 188 Reason: 45
[wifi] Measured Distance: m; Kalman Distance: m [3259760 ms]
[wifi] EVENT: MLAN_CSI Processing results: -30208 | 30556 (848004), TSF[c24c009a]
[wevt] EVENT - : 0x86 Len : 34 Reason: 5
[INFO] EventID: 0x86 SubeventID:5
[wifi] WLS_SUB_EVENT_ANQP_RESP_RECEIVED
FTM Session Failed!

Debug log at the AP when the above commands input is as follows:

[wevt] EVENT - : 0x8d Len : 188 Reason: 45
[wevt] EVENT - : 0x8d Len : 188 Reason: 45
[wevt] EVENT - : 0x8d Len : 188 Reason: 45
[wevt] EVENT - : 0x8d Len : 188 Reason: 45
[wevt] EVENT - : 0x8d Len : 188 Reason: 45

Thank you for your help.

[RomanVR]

Hello @KKobayashi, hope you are doing well.

The features enabled by the macros are meant to work along with the example "wpa_supplicant" as mentioned in the UM11442, so if you are planning to integrate them, it should be done on the wpa_supplicant demo example.

Additionally, the official support for the IW612 chipset is enabled for the MIMXRT1170 EVKB and MIMXRT1060 EVKC as stated on IW611/IW612 release notes.

Please let me know if this information is useful.

[KKobayashi]

Thank you for your reply.

I understand that the features are used along with “wpa_supplicant”.

I would like to try wpa_supplicant, but MIMXRT1170-EVKB is always out of stock... MIMXRT1060-EVK“B” is available for sale, but I cannot find anywhere that sells MIMXRT1060-EVK“C”.

[RomanVR]

Hello @KKobayashi.

To try the wpa_supplicant you can use the MIMXRT1060-EVKB, although please consider that the following rework must be done in order to use the SDIO port (which is used by the 2EL Murata module):

M.2 connector:
- remove resistors: R364, R366, R351, R348, R377, R369 to disconnect the uSD connector (decrease parasitic capacitance).
- populate R345 with 0Ohm resistor

Connect external power supply to J45, set J40: 1-2 and turn on SW6.

This information can be found at the path: "<path-to-sdk-archive>\boards\evkbmimxrt1060\wifi_examples\wifi_wpa_supplicant" in the file named "readme_modules.md".

Please let me know if this information is useful.

[KKobayashi]

Thank you for the valuable information.

I obtained the MIMXRT1060-EVKB and tried the wpa_supplicant demo application.
It recognized the 2EL Murata module connected via M.2, but the command did not succeed.

The AP started as follows, and the station can connect to the AP correctly.
wlan-add 1 ssid ftmap bssid FE:84:A7:51:E8:F4 ip:192.168.10.1,192.168.10.1,255.255.255.0 role uap channel 36
wlan-start-network 1

Debug log of the STA when the wlan-11az-rang-cfg and wlan-ftm-ctrl commands were input is as follows:
(CONFIG_WIFI_EXTRA_DEBUG could not be set to 1 in the wpa_supplicant demo application.)

wlan-11az-rang-cfg 1 format_bw 1 num_measurements 5 measurement_freq 1 i2r_sts 0 r2i_sts 0 i2r_lmr 0
[wcmdr] CMD --- : 0x24d Size: 20 Seq: 0
[wcmdr] CMD_RESP - : 0x824d, result 0, len 20, seqno 0x0

wlan-ftm-ctrl 1 loop_cnt 1 channel 36 mac FE:84:A7:51:E8:F4
[wcmdr] CMD --- : 0x24e Size: 19 Seq: 0
[wcmdr] CMD_RESP - : 0x824e, result 0, len 19, seqno 0x0
[wevt] EVENT - : 0x8d Len : 304 Reason: 74
[wcmdr] CMD --- : 0x8b Size: 64 Seq: 0
[wcmdr] CMD_RESP - : 0x808b, result 0, len 64, seqno 0x0
[wevt] EVENT - : 0x8d Len : 304 Reason: 74
[wcmdr] CMD --- : 0x8b Size: 64 Seq: 0
[wcmdr] CMD_RESP - : 0x808b, result 0, len 64, seqno 0x0
[wevt] EVENT - : 0x8d Len : 304 Reason: 74
[wcmdr] CMD --- : 0x8b Size: 64 Seq: 0
[wcmdr] CMD_RESP - : 0x808b, result 0, len 64, seqno 0x0
[wevt] EVENT - : 0x86 Len : 34 Reason: 5
[INFO] EventID: 0x86 SubeventID:5
FTM Session Failed!

Debug log at the AP when the above commands is as follows:

[wevt] EVENT - : 0x8d Len : 304 Reason: 74
[wevt] EVENT - : 0x74 Len : 11 Reason: 1253
[wevt] EVENT - : 0x8d Len : 304 Reason: 74
[wevt] EVENT - : 0x8d Len : 304 Reason: 74
[wevt] EVENT - : 0x8d Len : 304 Reason: 74
[wevt] EVENT - : 0x8d Len : 304 Reason: 74
[wevt] EVENT - : 0x74 Len : 11 Reason: 1509

The Reason number displayed on the AP side yielded a different result from RT1160, but FTM still does not work.

Thank you for your help.

[RomanVR]

Hi @KKobayashi.

Could you provide more details of the steps that you followed to get the logs that you shared and your setup? Additionally, please confirm that you did the rework and that you are using the proper SDK of the RT1060 EVKB board.

Please let me know in order to try to recreate your issue.

[KKobayashi]

Thank you for your help.

I have made the following corrections according to your comments and the readme_modules.md file of the wifi_wpa_supplicant for M.2 connection.
- remove resistors: R364, R366, R351, R348, R377, R369
   and connect resistors: R368, R376, R347, R349, R365, R363
- populate R345 with 0Ohm resistor
- connect external power supply (5V/3A) to J45, set J40 to 1-2 and turn on SW6.
Without these corrections, I have confirmed that the 2EL module is not recognized and no wlan commands appear on the wifi_wpa_supplicant.

SDK is SDK_25_06_00_MIMXRT1060-EVKB for Windows and All Toolchains.
IDE is MCUXpressoIDE_24.12.148 on Windows 11.

In Tool Settings (Properties > C/C++ Build > Settings) in the wifi_wpa_supplicant project,
WIFI_IW416_BOARD_MURATA_1XK_USD has been changed to WIFI_IW612_BOARD_MURATA_2EL_M2.

The following macros have been added to the wifi_config.h file in the wifi_wpa_supplicant project.
#define CONFIG_11MC 1
#define CONFIG_11AZ 1
#define CONFIG_CSI 1
#define CONFIG_WLS_CSI_PROC 1
#define RANGE_RUN_FLT
The debug macros have been enabled as follows:
#define CONFIG_WIFI_EXTRA_DEBUG 0
#define CONFIG_WIFI_EVENTS_DEBUG 1
#define CONFIG_WIFI_CMD_RESP_DEBUG 1
#define CONFIG_WIFI_PKT_DEBUG 0
#define CONFIG_WIFI_SCAN_DEBUG 1
#define CONFIG_WIFI_IO_INFO_DUMP 0
#define CONFIG_WIFI_IO_DEBUG 0
#define CONFIG_WIFI_IO_DUMP 0
#define CONFIG_WIFI_MEM_DEBUG 0
#define CONFIG_WIFI_AMPDU_DEBUG 1
#define CONFIG_WIFI_TIMER_DEBUG 0
#define CONFIG_WIFI_SDIO_DEBUG 1
#define CONFIG_WIFI_FW_DEBUG 1
#define CONFIG_WIFI_UAP_DEBUG 1
#define CONFIG_WPS_DEBUG 1
#define CONFIG_FW_VDLL_DEBUG 1
#define CONFIG_DHCP_SERVER_DEBUG 0
#define CONFIG_FWDNLD_IO_DEBUG 1
#define CONFIG_WIFI_SG_DEBUG 1

The wifi_wpa_supplicant with the same configuration was built and written to two boards for the AP and the STA in debug mode.
The serial terminal is the MCUXpresso IDE's Terminal, connected to a Windows 11 PC via USB Type A (J1).

The startup log the of the wifi_wpa_supplicant is in the attached file "1_log_of_initialization.txt".

The input commands on the AP board are as follows:
wlan-add 1 ssid ftmap bssid FE:84:A7:51:E8:F4 ip:192.168.10.1,192.168.10.1,255.255.255.0 role uap channel 36
wlan-unassoc-ftm-cfg 1 config 1 #log: 2_log_of_unassoc-ftm-cfg_onAP.txt
wlan-start-network 1 #log: 3_log_of_start-network_onAP.txt

The input commands on the STA board are as follows:
wlan-add 1 ssid ftmap bssid FE:84:A7:51:E8:F4 ip:192.168.10.1,192.168.10.1,255.255.255.0 channel 36
wlan-connect 1 #log: 4_log_of_connect_onSTA.txt
wlan-unassoc-ftm-cfg 1 config 1 #log: 5_log_of_unassoc-ftm-cfg_onSTA.txt
wlan-11az-rang-cfg 1 format_bw 1 num_measurements 5 measurement_freq 1 i2r_sts 0 r2i_sts 0 i2r_lmr 0
wlan-ftm-ctrl 1 loop_cnt 1 channel 36 mac FE:84:A7:51:E8:F4

wlan-ftm-ctrl fails as described in the previous comment.

[RomanVR]

Hello @KKobayashi, sorry for the late reply.

Unfortunately the WLS feature is not supported on IW612 module on RTOS platform if used as an AP. Therefore, it would be required to use a third-party access point in order to test WLS feature with IW612 module used as STA.

I'm sorry for the inconveniences this may cause.

[KKobayashi]

Thank you for your reply.

I tested with the Aruba AP-735 access point, which supports the 11az AP function,
but the STA failed.

The AP is set to 5620MHz(channel 124) and 80MHz bandwidth. 
The support of its 11az AP function is confirmed with other android 15 smartphone.
The input commands to the wpa_supplicant are as follows, and the output log is attached.

wlan-add 1 ssid ftm11az ip:192.168.10.1,192.168.10.1,255.255.255.0 channel 124 wpa2 psk 12345678
wlan-connect 1
wlan-ftm-ctrl 1 loop_cnt 1 channel 124 mac 48:00:20:19:5E:E0

[RomanVR]

Hello @KKobayashi.

Could you please confirm that the issue persists after inputting the commands shown in the UM11442 - section 3.8.1.10.2? As I see that you used only the "wlan-ftm-ctrl" command without previously adding the "wlan-11az-rang-cfg".

[KKobayashi]

Thank you for your reply.

I also tested several parameter values for wlan-11az-rang-cfg (input before wlan-ftm-ctrl), but wlan-ftm-ctrl consistently fails.

I am attaching the output log including wlan-11az-rang-cfg.

[RomanVR]

Hello @KKobayashi, hope you are doing well.

I see that you have done your testings with a 5GHz network, could you please confirm if the issue persists when connecting to a 2.4GHz network?

Please share the logs of the test attempt.

[KKobayashi]

Thank you for your reply.

The AP-735 does not support 2.4GHz FTM function. Therefore, there is noresponse from the AP as follows:

# wlan-11az-rang-cfg 1 format_bw 0 num_measurements 5 measurement_freq 4 i2r_sts 0 r2i_sts 0 i2r_lmr 0
# wlan-ftm-ctrl 1 loop_cnt 1 channel 1 mac 98:8F:00:F1:A1:B0
[wcmdr] CMD --- : 0x24e Size: 19 Seq: 0
[wcmdr] CMD_RESP - : 0x824e, result 0, len 19, seqno 0x0
[wifi] [INFO] FTM Session Control Started on 1 channel with Peer 98:8F:00:F1:A1:B0
[wevt] EVENT - : 0x86 Len : 34 Reason: 5
[INFO] EventID: 0x86 SubeventID:5
[wifi] WLS_SUB_EVENT_ANQP_RESP_RECEIVED

FTM Session Failed!

In the case with 5GHz (5180MHz and 80MHz bandwidth), there are some response messages as follwos:

# wlan-11az-rang-cfg 1 format_bw 2 num_measurements 5 measurement_freq 4 i2r_sts 0 r2i_sts 0 i2r_lmr 0
# wlan-ftm-ctrl 1 loop_cnt 1 channel 36 mac 98:8F:00:F1:A1:B0
[wcmdr] CMD --- : 0x24e Size: 19 Seq: 0
[wcmdr] CMD_RESP - : 0x824e, result 0, len 19, seqno 0x0
[wifi] [INFO] FTM Session Control Started on 36 channel with Peer 98:8F:00:F1:A1:B0

Passing message 18 to wpa_supplicant
ml1: Event RX_MGMT (18) received
[wlcm] wpa_supplicant_msg_cb: Event[wevt] EVENT - : 0x86 Len : 34 Reason: 5
[INFO] EventID: 0x86 SubeventID:5
[wifi] WLS_SUB_EVENT_ANQP_RESP_RECEIVED

FTM Session Failed!
RX_MGMT (18) received
ml1: Received Action frame: SA=98:8f:00:f1:a1:b0 Category=4 DataLen=54 freq=0 MHz
[wlcm] wpa_supplicant_msg_cb: Received Action frame: SA=98:8f:00:f1:a1:b0 Category=4 DataLen=54 freq=0 MHz

Since it hasn't been successful for a long time, if you succeed in 5GHz 11az FTM, could you please tell me the model name of the AP you're using, the detailed channel settings, and the command parameters? I'd like to use that as a reference design.

[KKobayashi]

The AP-735 does not support the 2.4GHz FTM function.
Therefore, there is no response as follows:

# wlan-ftm-ctrl 1 loop_cnt 1 channel 1 mac 98:8F:00:F1:A1:B0
[wcmdr] CMD --- : 0x24e Size: 19 Seq: 0
[wcmdr] CMD_RESP - : 0x824e, result 0, len 19, seqno 0x0
[wifi] [INFO] FTM Session Control Started on 1 channel with Peer 98:8F:00:F1:A1:B0

# [wevt] EVENT - : 0x86 Len : 34 Reason: 5
[INFO] EventID: 0x86 SubeventID:5
[wifi] WLS_SUB_EVENT_ANQP_RESP_RECEIVED

FTM Session Failed!

In contrust, in 5GHz, there is some responses as follows:

# wlan-ftm-ctrl 1 loop_cnt 1 channel 36 mac 98:8F:00:F1:A1:B0
[wcmdr] CMD --- : 0x24e Size: 19 Seq: 0
[wcmdr] CMD_RESP - : 0x824e, result 0, len 19, seqno 0x0
[wifi] [INFO] FTM Session Control Started on 36 channel with Peer 98:8F:00:F1:A1:B0

Passing message 18 to wpa_supplicant
ml1: Event RX_MGMT (18) received
[wlcm] wpa_supplicant_msg_cb: Event[wevt] EVENT - : 0x86 Len : 34 Reason: 5
[INFO] EventID: 0x86 SubeventID:5
[wifi] WLS_SUB_EVENT_ANQP_RESP_RECEIVED

FTM Session Failed!
RX_MGMT (18) received
ml1: Received Action frame: SA=98:8f:00:f1:a1:b0 Category=4 DataLen=54 freq=0 MHz
[wlcm] wpa_supplicant_msg_cb: Received Action frame: SA=98:8f:00:f1:a1:b0 Category=4 DataLen=54 freq=0 MHz

I also tried 11mc function, but it failed as well. The FTM distance report appears, but the device with the MAC address 90:01:9B:18:46:03 and  00:B5:87:B0:01:90 shown in the log cannot be found anywhere on the local network or in wlan-scan results (the log is attached at the end).

Since it has been unsuccessful for a long time, if you are able to successfully execute the 11az commands, please let me know the model name of the AP you are using, the channel settings, and the command parameters.

# wlan-11mc-nego-cfg burst_dur 11 min_delta 60 asap 1 ftm_per_burst 5 BW 13 burst_period 10
[wcmdr] CMD --- : 0x24d Size: 22 Seq: 0
[wcmdr] CMD_RESP - : 0x824d, result 0, len 22, seqno 0x0
[wifi]

Set dot11mc ftm session config:

[wifi] ---------------------------------

[wifi] burst_exponent:0

[wifi] burst_duration:11

[wifi] min_delta_FTM:60

[wifi] is_ASAP:1

[wifi] per_burst_FTM:5

[wifi] channel_spacing:13

[wifi] burst_period:10

# wlan-ftm-ctrl 1 loop_cnt 1 channel 36 mac 98:8F:00:F1:A1:B0
[wcmdr] CMD --- : 0x24e Size: 19 Seq: 0
[wcmdr] CMD_RESP - : 0x824e, result 0, len 19, seqno 0x0
[wifi] [INFO] FTM Session Control Started on 36 channel with Peer 98:8F:00:F1:A1:B0

Passing message 18 to wpa_supplicant
ml1: Event RX_MGMT (18) received
[wlcm] wpa_supplicant_msg_cb: Event R[wevt] EVENT - : 0x8d Len : 528 Reason: 130
[wlcm] got wifi message: 56 0 202597CC
[wlcm] got event: receive WLS csi data
X_MGMT (18) received
ml1: Received Action frame: SA=98:8f:00:f1:a1:b0 Category=4 DataLen=47 freq=0 MHz
[wlc[wifi] Measured Distance: 1047561.937500 m; Kalman Distance: 0 m [1699226 ms]

[wifi] EVENT: MLAN_CSI Processing results: -15411 | 13354 (1010083), TSF[65482196]

[wcmdr] CMD --- : 0x8b Size: 64 Seq: 0
m[wevt] EVENT - : 0x8d Len : 528 Reason: 130
] wpa_supplicant_msg_cb: Received Action frame: SA=98:8f:00:f1:a1:b0 Category=4 DataLen=47 freq=0 MHz
Passing [wevt] EVENT - : 0x8d Len : 528 Reason: 130
message 18 to wpa_supplicant
ml1: Event RX_MGMT (18) received
[wlcm] wpa_supplicant_msg_cb: Event RX_MGMT (18) received
ml1: Received Action frame: SA=98:8f:00:f1:a1:b0 Category=4 DataLen=19 freq=0 MHz
[wlcm] wpa_supplic[wcmdr] CMD_RESP - : 0x808b, result 0, len 64, seqno 0x0
[wlcm] got wifi message: 56 0 202597CC
[wlcm] got event: receive WLS csi data
[wevt] EVENT - : 0x86 Len : 34 Reason: 5
[INFO] EventID: 0x86 SubeventID:5
[wifi] WLS_SUB_EVENT_ANQP_RESP_RECEIVED

FTM Session Failed!
[wifi] Measured Distance: 652288.937500 m; Kalman Distance: 0 m [1699241 ms]

[wifi] EVENT: MLAN_CSI Processing results: -15411 | 13345 (1010083), TSF[65485c53]

[wcmdr] CMD --- : 0x8b Size: 64 Seq: 0
[wevt] EVENT - : 0x86 Len : 23 Reason: 45062
[INFO] EventID: 0x86 SubeventID:6
================================
FTM distance report (MAC 90:01:9B:18:46:03)
TSF: 6548218d
distance: 6.69 meters
[wcmdr] CMD_RESP - : 0x808b, result 0, len 64, seqno 0x0
[wlcm] got wifi message: 56 0 202597CC
[wlcm] got event: receive WLS csi data
ant_msg_cb: Received Action frame: SA=98:8f:00:f1:a1:b0 Category=4 DataLen=19 freq=0 MHz
Passing message 18 to[wifi] Measured Distance: 652288.937500 m; Kalman Distance: 0 m [1699241 ms]

[wifi] EVENT: MLAN_CSI Processing results: -15411 | 13345 (1010083), TSF[65485c53]

wpa_supplicant
ml1: Event RX_MGMT (18) receive[wcmdr] CMD --- : 0x8b Size: 64 Seq: 0
[wevt] EVENT - : 0x86 Len : 23 Reason: 55302
[INFO] EventID: 0x86 SubeventID:6
================================
FTM distance report (MAC 00:B5:87:B0:01:90)
TSF: 65485c4a
distance: 6.84 meters
[wcmdr] CMD_RESP - : 0x808b, result 0, len 64, seqno 0x0

[wlcm] wpa_supplicant_msg_cb: Event RX_MGMT (18) received
ml1: Received Action frame: SA=98:8f:00:f1:a1:b0 Category=4 DataLen=19 freq=0 MHz
[wlcm] wpa_supplicant_msg_cb: Received Action frame: SA=98:8f:00:f1:a1:b0 Category=4 DataLen=19 freq=0 MHz
Passing message 18 to wpa_supplicant
ml1: Event RX_MGMT (18) received
[wlcm] wpa_supplicant_msg_cb: Event RX_MGMT (18) received
ml1: Received Action frame: SA=98:8f:00:f1:a1:b0 Category=4 DataLen=19 freq=0 MHz
[wlcm] wpa_supplicant_msg_cb: Received Action frame: SA=98:8f:00:f1:a1:b0 Category=4 DataLen=19 freq=0 MHz
Passing message 18 to wpa_supplicant
ml1: Event RX_MGMT (18) received
[wlcm] wpa_supplicant_msg_cb: Event RX_MGMT (18) received
ml1: Received Action frame: SA=98:8f:00:f1:a1:b0 Category=4 DataLen=19 freq=0 MHz
[wlcm] wpa_supplicant_msg_cb: Received Action frame: SA=98:8f:00:f1:a1:b0 Category=4 DataLen=19 freq=0 MHz

[RomanVR]

Hi @KKobayashi, sorry for the late reply.

We have seen a better performance using the newest version of the SDK (v25.09.00), please pass your testings to this version and follow the below steps to set the FTM session:

Steps to test 802.11az in unassociated state where DUT(STA) is initiator:

1. Enable ftm in unassoc mode: wlan-unassoc-ftm-cfg 1 config 1
2. Setup 11az parameters: wlan-11az-rang-cfg 1 format_bw 2 num_measurements 10 measurement_freq 5 i2r_sts 0 r2i_sts 0 i2r_lmr 0
3. Start FTM session: wlan-ftm-ctrl 4 loop_cnt 1 channel <channel_num> mac <mac_addr>
4. Stop FTM session: wlan-ftm-ctrl 2

Steps to test 802.11az in Associated state:

1. Disable unassociated state if enabled: wlan-unassoc-ftm-cfg 1 config 0
2. Setup 11az parameters: wlan-11az-rang-cfg 1 format_bw 2 num_measurements 10 measurement_freq 5 i2r_sts 0 r2i_sts 0 i2r_lmr 0
3. Start FTM session: wlan-ftm-ctrl 1 loop_cnt 1 channel <channel_num> mac <mac_addr>
4. Stop FTM session: wlan-ftm-ctrl 2

It is expected for FTM session to fail on the first attempt.

Additionally, please make sure that your AP is 802.11AX capable, you should be able to check this feature by using "wlan-scan-opt-ssid <ssid_of_ap>". If not, you could try this feature with a FRDM i.MX 93 which has an IW612 module that supports 802.11az to bring up an AP supporting 11az.

Please let me know if this information is helpful.