I have just spotted that according to your config you are using WPA, not WPA2. To activate WPA2 (as well as WPA) you need to specify wpa=3. Also your clients need to support this. Alexander