Mesh Link Establishment (MLE) is how Thread routers agree on secure neighbor relationships before your door sensor ever sends a packet. When MLE security handshakes fail, logs show cryptographic or link-establishment errors while apps only say Unavailable. The mesh never forms a stable backbone, so sleepy devices exhaust batteries hunting parents.
Homeowners do not configure MLE directly — you fix the conditions that make handshakes fail: mismatched datasets, outdated border routers, and too many competing routers rebooting at once.
What failure looks like in the home
New Thread accessories fail at the last step of joining while Wi-Fi Matter devices pair fine. Existing routers show children count zero despite powered devices nearby.
Failures cluster after importing a Thread dataset into Home Assistant OTBR that does not match Apple or Google’s operational data.
A newly added border router from a second vendor triggers errors without any new end devices.
Stabilize credentials and firmware
Update all border routers to current stable releases in one planned window — not one per day for a week.
If you run OTBR in Home Assistant, confirm the operational dataset matches your primary ecosystem or intentionally run a separate fabric — mixing without planning breaks MLE.
Power down extra border routers during initial mesh formation; add them back sequentially after children attach.
Avoid beta OS on one hub and release on another during handshake troubleshooting.
Physical and RF prerequisites
Thread routers need line-of-sight-ish paths at 2.4 GHz. Metal enclosures and stacked equipment racks cause handshake retries that time out.
Keep Zigbee heal operations from running simultaneously with Thread commissioning — both flood 2.4 GHz.
Use Ethernet backhaul for at least one border router in multi-floor homes.
Recovery without unsafe shortcuts
Do not disable Thread security or inject third-party trust material from forums.
Factory reset end devices only after border routers are stable; reset border routers only when vendor docs say so for dataset corruption.
Contact hub vendor support with MLE or security keywords from OTBR logs if available.
Verify MLE health
Commission one new Thread device near a wired border router — it should join in minutes. Check that existing devices retain parents through an overnight hub reboot. MLE is healthy when neighbor relationships reform without daily manual intervention.