The repeater's Security Level is WPA2-Personal. It's connected to the primary 2.4 Ghz SSID (not the guest) on the main router.
I've done nuclear resets and reloaded 386.1_2 on both routers but still encounter frequent disconnects. These seem to be coincident with the following in the repeater system log:
Mar 5 11:00:15 syslog: wlceventd_proc_event(490): eth1: Deauth_ind 14
D:A9:87:44:40, status: 0, reason: Group key update timeout (10), rssi:-49
Mar 5 11:00:16 rc_service: psta_monitor 32524:notify_rc restart_wlcmode 0
Mar 5 11:00:16 FTP_Server: daemon is stopped
Mar 5 11:00:16 syslog: wlceventd_proc_event(526): wl0.1: Auth 24
A:9B:19:FD:EA, status: Successful (0), rssi:0
Mar 5 11:00:16 syslog: wlceventd_proc_event(555): wl0.1: Assoc 24
A:9B:19:FD:EA, status: Successful (0), rssi:0
Mar 5 11:00:16 Samba_Server: smb daemon is stopped
Mar 5 11:00:16 kernel: gro disabled
Mar 5 11:00:18 kernel: dpsta_register: null dpsta_ifnames!
Mar 5 11:00:18 avahi-daemon[557]: Interface br0.IPv4 no longer relevant for mDNS.
Mar 5 11:00:18 avahi-daemon[557]: Leaving mDNS multicast group on interface br0.IPv4 with address 192.168.1.221.
Mar 5 11:00:18 avahi-daemon[557]: Withdrawing address record for 192.168.1.221 on br0.
Mar 5 11:00:18 kernel: br0: port 4(wl0.1) entering forwarding state
Mar 5 11:00:18 kernel: br0: port 3(eth2) entering forwarding state
Mar 5 11:00:18 kernel: br0: port 2(eth1) entering forwarding state
Mar 5 11:00:18 kernel: br0: port 1(vlan1) entering forwarding state
Mar 5 11:00:19 avahi-daemon[557]: Joining mDNS multicast group on interface br0.IPv4 with address 192.168.1.221.
Mar 5 11:00:19 avahi-daemon[557]: New relevant interface br0.IPv4 for mDNS.
Mar 5 11:00:19 avahi-daemon[557]: Registering new address record for 192.168.1.221 on br0.IPv4.
Mar 5 11:00:19 avahi-daemon[557]: Withdrawing address record for 192.168.1.221 on br0.
Mar 5 11:00:19 avahi-daemon[557]: Leaving mDNS multicast group on interface br0.IPv4 with address 192.168.1.221.
Mar 5 11:00:19 avahi-daemon[557]: Interface br0.IPv4 no longer relevant for mDNS.
Mar 5 11:00:19 kernel: br0: port 4(wl0.1) entering forwarding state
Mar 5 11:00:19 kernel: br0: port 4(wl0.1) entering forwarding state
[etc.]
The deauth_ind is with the main router, and I haven't figured out what the group key update timeout is all about. Any ideas?