ivicask: no change unfortunately
mkx: that is it! Clearly the Mikrotik is treating my LAN traffic as Internet traffic so it’s applying its firewall to it. The FritzBox isn’t as it’s just relying LAN traffic to the WiFi. So as a test I changed the Mikrotik config to have my laptop on the same LAN network and ignore ETH1. Now speeds are matching the FritzBox if not a bit better.
Amazing. Thank you guys!
Regarding my inability to access the router via the 192.168.0.0 network, I suppose it’s because from the router’s standpoint I am trying to access it from the Internet - and that might be disabled. Can someone point me to how to change that please?
Edit: gotcha. /ip firewall filter add action=accept chain=input disabled=no dst-port=8291 protocol=tcp
Obviously this needs to be carefully thought. But I might want to select a range of IPs from which the management is allowed.
Thanks again!