It's definitely unfortunate that ROS v7 takes so long. The newer kernel would make fq_codel support pretty much a guaranteed feature without any effort on MikroTik's side. SFQ works OK, but fq_codel is so much better most of the time it's not even funny.

What client do you use? Wifi is bidirectional, so increasing the output on only one side won't cut it.

The only viable option is to buy more APs and hardwire them via Ethernet. Your clients will roam between them based on signal strength.

This would be great for traffic shaping at ~100 Mbit/s. Can't wait to see this with ROS v7 and fq_codel.

Even one house would be hardly possible for ptp links. There's no way this is going to work with 2.4 or 5 GHz.

Maybe one RB850Gx2 as your router and two wAP AC's as access points and a dedicated "dumb" switch with enough ports? The PPC CPU should be more than fast enough and the device is smaller than an RB3011. You could connect your two NAS's directly to the RB850Gx2 and create a VLAN.

Meshes cut you bandwidth in half with each hop. PowerLAN with some MikroTiks as access point may be a better solution.

10min is probably too short. Try 2h or higher. iOS does some aggressive optimizations for wifi and I guess the downside is that it doesn't renew its DHCP lease in time. You could also set the DHCP server to "authoriative" (if it's the only DHCP server on your network) which makes DHCP faster.

What's your DHCP lease time? Maybe it's too low? If I recall correctly iOS doesn't like very low DHCP lease times.

You could raise the "Group Key Update" of your Security Profile to something like 1h. This should only be relevant to WPA2-EAP (as far as I know), but might be worth a try.

So whats the actual deal?If what your saying is true, why is this router even showing 150mbit on my phone if it cant achieve barerly 30 As I said, you compare the PHY-rate to TCP throughput. Those are two different things. The 150 Mbit/s isn't what you get with TCP. It's just the Layer 2 data rate....

Connection states 150mbit connection, and if you see my screneshot it shows around 120mbit throughout. 150 Mbit/s is the PHY-rate, not the TCP throughput. You are comparing two different things. Plus the 150 Mbit/s can only be achieved with 40 MHz channel width which is hardly usable with 2.4 GHz, ...

The cAP has only a single stream and is 2.4 GHz only. So you are limited to ~45 MBit/s TCP throughput with 20 MHz channel width at best . Certainly the throughput will be lower if there are interferences with your channel. 5 - 10 Mbit/s isn't great, but it's totally normal for 2.4 GHz these days. It...

andriys the access list rule should not cause any problems, the delay is tiny, and most clients will not notice. In fact they do cause major problems with some clients. I did an extensive testing before deploying a small CAPsMAN based network here. Most (if not all) Android clients I tested behave ...

1. Yes, you can use different SSIDs for 2.4 and 5 GHz. You could also use one for both bands. The devices will figure it out. 2. Unfortunately no, 5 GHz has less range than 2.4 GHz. 3. Yes, there's the new 802.11ac standard which operates on 5 GHz exclusively. 5. Probably not, most smartphones aren'...

One radio (especially 2.4 GHz) alone could be a bit problematic depending on how many people want to use it simultaneously. You could buy three wireless APs (e.g. hAP lites, perfectly fine as cheap APs) and use the three non-overlapping channels (1, 6, 11). The SSID could than indicate there are thr...

In my case I just needed a DNS cache (the ISP box can't query any other servers than the hardcoded resolvers) and traffic shaping, but no routing. So there are definitely some valid use cases.

Wow, thanks for the research!

I tried to ping the IPv6 address behind ipv6.google.com (dig ipv6.google.com AAAA) and it did work after setting forward to no and accept-router-advertisements to yes. So it seems RouterOS does indeed get autoconfigured via SLAAC. Nice!

I'm in the same situation but according to the wiki, there is an option: http://wiki.mikrotik.com/wiki/Manual:IPv6/Settings

However if I disable forwarding through the cli it doesn't change anything. The ipv6 address menu still requires a "pool".

Remember the Heartbleed SSL bug. It was probably inserted as a backdoor, yet it was not easily identifiable as such. It was part of a dissertation about a heartbeat extension for OpenSSL. There's even an RFC about it: https://tools.ietf.org/html/rfc6520 The bug is well understood and certainly was ...

Actually, I have no idea, but so far it just works. I have a global prefix from my ISP and use ULAs primarily to limit some services to my local network. E.g. my local unbound instance (a DNS resolver) answers only to queries from devices with addresses from my ULA prefix. I don't know if this is a ...

Let me give you another good reason for NAT66. You want to use IPv6 internally in your network. Your ISP hands out dynamic /64 prefixes. Now how would one expect to have a static internal network with full IPv6 acces? A simple NAT between prefixes solves this fully. A NAT isn't simple nor needed. Y...

The RB850Gx2 would be a nice upgrade with its dual core PPC CPU.

Personally I would wait for the RB3011. It will be more expensive than an RB850Gx2, but the ARM CPU is clocked at 1,4 GHz and should be noticeable faster than other MikroTik devices, even compared to the RB850Gx2.

Wireless connections and walls are always problematic, but higher antenna gain can give you better results. You won't magically bypass more walls, of course. If it's possible you should just buy more APs and let the clients roam between them.

I'm actually really happy with the coverage, but it's probably a good idea to buy one of the APs with higher antenna gain if you're not sure. The hAP lite has ~1.5 dbi and the RB951G-2HnD / RB951Ui-2HnD ~2.5 dbi. There's also the new wAP with 2 dbi.

You shouldn't, that's the point. From what I can see you use 40 MHz wide channels, but that's only possible if the 2.4 GHz band is completely free of interferences (which is extremely rare). You could switch to the 20-MHz-only option and see if it helps.

I don't think you need to generate any traffic. This is only the Tx Rate. Real throughput would be way lower anyway.

Are you somehow forcing 40 MHz channels?

The RB951Ui-2HnD, RB951G-2HnD and RB941-2nD have only two chains as far as I know and 40 MHz wide channels probably aren't possible in your area. More information on this topic: http://www.smallnetbuilder.com/wireless/wireless-features/31743-bye-bye-40-mhz-mode-in-24-ghz-part-1 135 MBit/s Tx Rate is...