The requirements are: WPA2-PSK, AES, and broadcasting enabled.
In LuCI I can only select "CCMP (AES)", but I can't work out if that is compatible with plain AES, and so if that's the problem?