Getting back to inform on what mikrotik support has replied: RouterOS v7 will have worse slow path performance compared to v6. Take a look at the forum article below for a more detailed explanation: https://forum.mikrotik.com/viewtopic.php?p=882867#p882867 And my next question is if they were sugges...

I was also finding poor throughput about 210mbps max with 86%+ utilization. Same config with HAP AC^2 would give same throughput with 27% max cpu utilization. I have upgraded to RB5009 as mikrotik support said thats the best we can get from RB3011 on v7.

So the solution is to downgrade to v6?

Looking at the block diagram, eth1-eth5 has access to both cpus. You have a module in sfp1 (looing at the comments on the interface at least) which means sfp1 and eth6-eth10 only have access to one cpu core. You could try to move the interfaces around to see if that helps performance. You don't sta...

Looking at official test results one can get impression that this device can route at speeds around 840Mbps (routing 25 rules, 512 byte packet size). However, this figure represents real-life performance with fast-track enabled. With fast-track dissbled performance will be much lower. Your device i...

Hello, my ISP recently upgraded my speed to 200/20Mbps (PPPoE VDSL). I have been using a 3011 since 2016, and I never had any speed issues. But now, running a simple speedtest or download test, I can see the CPU *almost* maxing out while getting 140-160 Mbps. The reasons I am NOT using fast track or...

Want are you expecting the /ip firewall nat rule #1 at siteA to do?

I guess nothing. Saw it in a tutorial and tried it. This site runs multiple tunnels to multiple sites, and by having that, I can access the remote subnets from that site (supposedly)

Any other ideas on this?
Tried with PPTP site to site and I am getting same results.
Can ping from both sides but can not access anything

Yes I have done the static routes and are reachable.

I always prefer IPSec but in my case with both routers on dynamic ip, it's kind of a pain to setup with all the scripts etc to update the peers etc

Any ideas?

Hello guys, I got an OpenVPN site to site setup running and I can ping both subnets from the routers without any problems but I can not access any resources via IP while connected. (I can access e.g. the router though the vpn ip address (192.168.89.1 (RB3011) & 192.168.89.100 (RB2011)) SITE A: 1...

The strange fact about this situation is that for example L2TP over IPsec works flawlessly on iOS clients while on Windows it doesn't while using the same Secrets and profile.

And on the same idea, roadwarrior pptp works from windows machines while it does not as site to site

It is really weird.

That is really strange.
Site to site PPTP uses MTU: 1450 and MRU: 1450 - DOESNT WORK
Windows L2TP uses MTU: 1400 and MRU: 1450 - DOESNT WORK
iOS L2TP uses MTU: 1450, MRU: 1450 - WORKS
Windows PPTP uses MTU: 1400 and MRU 1450 - WORKS

For example this is what I get when I log into winbox from a host in Tomato router domain (PPTP Site-To-Site). The winbox session disconnects after around 1 minute
Putty ssh connection and configuration works.

Hello guys, I am experiencing a weird problem with my vpn setup on a RB3011. At the moment I am using a PPTP Site-to-Site and PPTP/L2TP Road Warrior setups. The biggest problem which is the site to site pptp stopped working after upgrading from 6.32 to 6.38 Now the weird stuff. - Site to site PPTP w...

Hello I just got 2 routerboards and I ran into some problem. After creating PPTP VPN, I can not access the network connected to eth5 or the VLAN. Whatever is in the same subnet I can access without any problems. /interface print Flags: D - dynamic, X - disabled, R - running, S - slave # NAME TYPE AC...