Need advice in here about my mikrotik.
My board is Hap ac lite.
Only use for wifi and eoip that is connect with hap ac2 in same subnet.
I used eoip to connect tv channel that is connected in hap ac2
wifi is manage by capsman
but when the traffic hit more than 60mbps it will cause high cpu then the traffic become slow down and the tv channel will lagging.
routing and others are manage in hap ac2
why is only for eoip and wifi can cause high usage in cpu?
Code: Select all
Columns: NAME, USAGE
NAME USAGE
ethernet 8.5%
console 0%
firewall 6%
networking 14%
radv 0.5%
management 5%
wireless 22%
ssl 0%
profiling 0%
bridging 3%
unclassified 9.5%
total 68.5%
Code: Select all
/system/resource> print
uptime: 16h25m2s
version: 7.14.3 (stable)
build-time: 2024-04-17 12:47:58
factory-software: 6.38.7
free-memory: 28.3MiB
total-memory: 64.0MiB
cpu: MIPS 24Kc V7.4
cpu-count: 1
cpu-frequency: 650MHz
cpu-load: 33%
free-hdd-space: 3812.0KiB
total-hdd-space: 16.0MiB
write-sect-since-reboot: 7078
write-sect-total: 233662
architecture-name: mipsbe
board-name: hAP ac lite
platform: MikroTik
Code: Select all
# 2024-05-06 16:36:40 by RouterOS 7.14.3
# software id = ZAUT-5GF1
#
# model = RB952Ui-5ac2nD
# serial number = 71AF0AF5C5B7
/interface bridge
add admin-mac=74:4D:28:1D:94:64 auto-mac=no comment=defconf fast-forward=no \
igmp-snooping=yes name=bridge-LAN port-cost-mode=short
add name=bridge-UseeTV port-cost-mode=short
add name=loopback
/interface ethernet
set [ find default-name=ether1 ] name=ether1-HAP-AC2
set [ find default-name=ether2 ] name=ether2-TV
set [ find default-name=ether3 ] loop-protect=on name=ether3-PC
set [ find default-name=ether4 ] loop-protect=on name=ether4-Xbox
set [ find default-name=ether5 ] loop-protect=on name=ether5-Useetv
/interface eoip
add mac-address=02:31:75:A3:82:1D name=eoip-UseeTV remote-address=192.168.2.1 \
tunnel-id=123
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface lte apn
set [ find default=yes ] ip-type=ipv4 use-network-apn=no
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa-psk,wpa2-psk eap-methods="" \
management-protection=allowed mode=dynamic-keys name=Koplo \
supplicant-identity=""
/interface wireless
# managed by CAPsMAN
# channel: 2412/20-Ce/gn(20dBm), SSID: OD, CAPsMAN forwarding
set [ find default-name=wlan1 ] antenna-gain=0 band=2ghz-b/g/n country=\
indonesia distance=indoors frequency=2437 installation=indoor mode=\
ap-bridge multicast-helper=full security-profile=Koplo ssid=OD \
station-roaming=enabled wireless-protocol=802.11 wmm-support=enabled
# managed by CAPsMAN
# channel: 5745/20-Ceee/ac(30dBm), SSID: OD, CAPsMAN forwarding
set [ find default-name=wlan2 ] antenna-gain=0 band=5ghz-a/n/ac country=\
indonesia4 distance=indoors frequency=5745 frequency-mode=superchannel \
installation=indoor mode=ap-bridge multicast-helper=full \
security-profile=Koplo ssid=OD station-roaming=enabled wireless-protocol=\
802.11 wmm-support=enabled
/ip pool
add name=pool-LAN ranges=192.168.2.0/24
/ip smb users
set [ find default=yes ] disabled=yes
/routing bgp template
set default disabled=no output.network=bgp-networks
/routing ospf instance
add disabled=no name=default-v2
add disabled=no name=default-v3 version=3
/routing ospf area
add disabled=yes instance=default-v2 name=backbone-v2
add disabled=yes instance=default-v3 name=backbone-v3
/interface bridge port
add bridge=bridge-LAN comment=defconf ingress-filtering=no interface=\
ether3-PC internal-path-cost=10 path-cost=10
add bridge=bridge-LAN comment=defconf ingress-filtering=no interface=\
ether4-Xbox internal-path-cost=10 path-cost=10
add bridge=bridge-UseeTV comment=defconf ingress-filtering=no interface=\
ether5-Useetv internal-path-cost=10 path-cost=10
add bridge=bridge-LAN comment=defconf ingress-filtering=no interface=wlan1 \
internal-path-cost=10 path-cost=10
add bridge=bridge-LAN comment=defconf ingress-filtering=no interface=wlan2 \
internal-path-cost=10 path-cost=10
add bridge=bridge-LAN ingress-filtering=no interface=ether1-HAP-AC2 \
internal-path-cost=10 path-cost=10
add bridge=bridge-LAN ingress-filtering=no interface=ether2-TV \
internal-path-cost=10 path-cost=10
add bridge=bridge-UseeTV interface=eoip-UseeTV internal-path-cost=10 \
path-cost=10
/ip firewall connection tracking
set udp-timeout=10s
/ip neighbor discovery-settings
set discover-interface-list=LAN
/ip settings
set max-neighbor-entries=8192
/ipv6 settings
set accept-router-advertisements=yes max-neighbor-entries=8192
/interface list member
add comment=defconf interface=bridge-LAN list=LAN
add comment=defconf disabled=yes interface=ether1-HAP-AC2 list=WAN
/interface ovpn-server server
set auth=sha1,md5
/interface wireless cap
#
set bridge=bridge-LAN discovery-interfaces=bridge-LAN enabled=yes interfaces=\
wlan1,wlan2
/ip address
add address=192.168.2.2/24 comment=defconf interface=bridge-LAN network=\
192.168.2.0
add address=255.1.255.2 interface=lo network=255.1.255.2
/ip dhcp-client
add comment=defconf disabled=yes interface=ether1-HAP-AC2
/ip dns
set servers=192.168.2.1
/ip dns static
add address=192.168.88.1 comment=defconf disabled=yes name=router.lan
/ip firewall filter
add action=fasttrack-connection chain=forward hw-offload=yes
/ip firewall mangle
add action=strip-ipv4-options chain=postrouting protocol=tcp src-port=8291
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" disabled=yes \
out-interface=eoip-UseeTV
/ip route
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=192.168.2.1 \
pref-src=192.168.2.2 routing-table=main scope=30 suppress-hw-offload=no \
target-scope=10
/ip smb shares
set [ find default=yes ] directory=/flash/pub
/ipv6 dhcp-relay
add dhcp-server=:: interface=bridge-LAN name=relay1
/system clock
set time-zone-name=Asia/Jakarta
/system identity
set name=MikroTik-TV
/system note
set show-at-login=no
/system ntp client
set enabled=yes
/system ntp client servers
add address=162.159.200.1
add address=103.136.182.170
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN