Change my gateway from ether1 to ether6?

Hi all,
I’m a new Mikrotik user and new to the forum. I’m definitely no IT guy. I probably barely qualify as a layman, so you’ll have to bear with me here.

I’m having speed issues on my LAN between my two wired clients. I’m getting ≈500mbps down and just over 400mb up. I’m using Cat5e cabling and both machines have gigabit-capable cards.

After unboxing, I hooked everything up as instructed and ran QuickSet inside the browser interface. That gave me ether1-gateway, ether2-master-local and ether3-slave-local.

Insofar as I can find applicable information regarding my speed issues, others that have had the problem fixed it by moving their gateway from ether1 to something on the second switch (i.e., ether6-10), then setting ether1 as the master and slaving ether2-5 to it.

I’ve tried creating a gateway on ether6 by referring to the wiki and to the manual, or by copying the settings already applied to ether1, but I can’t get it to work.

If someone could be so kind as to walk me through this, or even just outline the steps for me, I’d greatly appreciate it.

Which device model do you have? 400-500Mbit is a good speed. Since a router is processing things, this is what you should expect from a mid-range device.

If you want to improve speed for the home, you can add a few rules to make your LAN traffic go though without processing, then you will not be able to limit speed and such things. This will give you improved throughput. You can do it with Fasttrack:

Pasting this into the command line should be enough:

/ip firewall filter add chain=forward action=fasttrack-connection connection-state=established,related

Hi,

What device you have ? I assume RB2011. If yes then you need

  • unmaster eg. eth10 from eth6
  • change all firewall rules reffering eth1 to refer eth10
  • change WAN address in IP Address to be assigned to eth10 instead of eth1 or change DHCP client to listen on eth10 instead of eth1
  • make eth2 - eth5 slaves of eth1

Voila.

Sure, but it will not automagically make the download faster.

What’s the difference this and fast path???

Sent from my Che2-L11

Sorry. It’s an RB2011.

I did try that and it didn’t make a bit of difference.

Thanks anyways, though.

Yes - It’s an RB2011.

In order:
Unmaster Switch 2 ports - Works fine.

Change firewall rules: No problem, I have no rules that refer to eth1.

Change WAN to eth6 or change DHCP client to eth6 instead of eth1: This just loses my internet access. When I move the cable from 1 to 6, it goes from SEARCHING to BOUND, but I still can’t ping outside my LAN.

Make eth2-5 slaves of eth1: This just boots me out of winbox. Even just changing the name of the port kicks me out, and once I can reconnect, the setting that got me booted is back to what it was before I tried changing it.

What am I doing wrong? Should I move my cables to Switch 2 while I make the changes to SW1?

Make export in cli to see how and where the ether1 was set. Then apply this setting to new wan port instead. It is not possible to have working wan with nat without any firewall rules. At least natting rule should be present.

I would have thought that’s all it takes. And that’s all I’m trying to do. But doing that either boots me out of Winbox (by disconnecting me from the router) or it throws me an error.

And are you connected to it by some other port that is not involved in the change?

Yes. My desktop (that I’m working from) is on eth2.

Last night, I tried making the switch from eth1 to eth6, and then I unplugged he cable from my desktop and plugged it into eth7 so I could continue to work. That part seemed to go OK, but once I started changing the properties of eth2, I got booted anyways, and when I got back into Winbox, all the settings had reverted to what they were before I was booted.

You are doing also other things probably. Try to avoid that.

That’s easier said than done when I don’t really have much of a clue as to what I’m doing to begin with.

This is the Beginner Basics board, but some of the help I’m getting is assuming a certain level of competence that I, quite frankly, don’t have.

I’d advise connecting with Windox and using a MAC not IP connection while making the changes.

I do. Both.

As an interim measure unslave port 10 and assign it an address, eg 192.168.90.1/24 .
Connect your laptop to this port with 192.168.90.2 and attempt your config changes. This connection should stay solid while you make the changes.

This could be good idea. But staying at bridged port should do the same. Hope the bridge has fixed administrative mac address. Otherwise it could change on fly that can lead to problems you have described.

Alright. I got it to a working state. It’s not done, but it works.

As is, I have my gateway on eth6, and my two wired connections on eth1 & eth2. But none of my addresses match what I have set in the DHCP server. It’s handing out 192.168.0.X addresses, when I have it set to assign 192.168.88.XXX.

Could one of you have a look at this export and tell me where I screwed up?

[admin@MikroTik] > export
# aug/30/2015 15:30:45 by RouterOS 6.31
# software id = 64RV-JMEM
#
/interface bridge
add admin-mac=00:0C:42:FD:2F:92 auto-mac=no name=bridge-local
/interface ethernet
set [ find default-name=ether1 ] name=eth1-master-local
set [ find default-name=ether2 ] master-port=eth1-master-local name=eth2-slave-local
set [ find default-name=ether3 ] master-port=eth1-master-local name=eth3-slave-local
set [ find default-name=ether4 ] master-port=eth1-master-local name=eth4-slave-local
set [ find default-name=ether5 ] master-port=eth1-master-local name=eth5-slave-local
set [ find default-name=ether6 ] name=eth6-gateway
set [ find default-name=ether7 ] name=eth7-master-local
set [ find default-name=ether8 ] master-port=eth7-master-local name=eth8-slave-local
set [ find default-name=ether9 ] master-port=eth7-master-local name=eth9-slave-local
set [ find default-name=ether10 ] master-port=eth7-master-local name=eth10-slave-local
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-onlyn channel-width=20/40mhz-Ce country="united states" default-authentication=no disabled=no distance=indoors frequency=auto l2mtu=1600 mode=ap-bridge ssid=XXXXXXXXXX \
    wireless-protocol=802.11
/ip neighbor discovery
set eth1-master-local discover=no
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=dynamic-keys wpa-pre-shared-key="XXXXXXXXXXXXXXX" wpa2-pre-shared-key="XXXXXXXXXXXXXXX"
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge-local name=default
/interface bridge port
add bridge=bridge-local interface=eth1-master-local
add bridge=bridge-local interface=eth6-gateway
add bridge=bridge-local interface=sfp1
add bridge=bridge-local interface=wlan1
/interface wireless access-list
add comment=laptop mac-address=9C:B7:0D:40:E8:5A vlan-mode=no-tag
add comment=mobile mac-address=B0:45:19:2E:3A:3B vlan-mode=no-tag
/ip address
add address=192.168.88.1/24 comment="default configuration" disabled=yes interface=eth2-slave-local network=192.168.88.0
add address=192.168.88.1/24 comment="default configuration" interface=eth1-master-local network=192.168.88.0
/ip arp
add address=192.168.88.252 comment=###LAPTOP### interface=bridge-local mac-address=9C:B7:0D:40:E8:5A
add address=192.168.88.253 comment=###DESKTOP### interface=bridge-local mac-address=84:2B:2B:98:B7:D7
add address=192.168.88.254 comment=###HTPC### interface=bridge-local mac-address=C8:60:00:C9:A7:5A
add
add address=192.168.88.250 comment=mobile interface=bridge-local mac-address=B0:45:19:2E:3A:3B
/ip dhcp-client
add comment="default configuration" dhcp-options=hostname,clientid disabled=no interface=eth6-gateway
/ip dhcp-server lease
add address=192.168.88.254 mac-address=C8:60:00:C9:A7:5A server=default
add address=192.168.88.253 client-id=1:84:2b:2b:98:b7:d7 mac-address=84:2B:2B:98:B7:D7 server=default
add address=192.168.88.252 client-id=1:9c:b7:d:40:e8:5a mac-address=9C:B7:0D:40:E8:5A server=default
add address=192.168.88.250 mac-address=B0:45:19:2E:3A:3B server=default
/ip dhcp-server network
add address=192.168.88.0/24 comment="default configuration" gateway=192.168.88.1 netmask=24
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router
/ip firewall filter
add action=drop chain=input comment="Disallow weird packets" connection-state=invalid
add chain=input comment="Allow LAN access to the router itself" connection-state=new in-interface=!bridge-local
add chain=input comment=" ^^ that originated from LAN" connection-state=established
add chain=input comment=" ^^ that originated from LAN" connection-state=related
add chain=input comment="Allow ping ICMP from anywhere" protocol=icmp
add action=drop chain=input comment="Disallow anything else"
add action=drop chain=forward comment="Disallow weird packets" connection-state=invalid
add chain=forward comment="Allow LAN access to move through the router" connection-state=new in-interface=bridge-local
add chain=forward comment=" ^^ that originated from LAN" connection-state=established
add chain=forward comment=" ^^ that originated from LAN" connection-state=related
add action=drop chain=forward comment="Disallow anything else"
add action=fasttrack-connection chain=forward connection-state=established,related
/ip firewall nat
add action=masquerade chain=srcnat comment="default configuration" out-interface=eth7-master-local
/lcd interface pages
set 0 interfaces=sfp1,eth1-master-local,eth2-slave-local,eth3-slave-local,eth4-slave-local,eth5-slave-local,eth6-gateway,eth7-master-local,eth8-slave-local,eth9-slave-local,eth10-slave-local
/system clock
set time-zone-name=America/Detroit
/system package update
set channel=current
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=eth2-slave-local
add interface=eth3-slave-local
add interface=eth4-slave-local
add interface=eth5-slave-local
add interface=eth6-gateway
add interface=eth7-master-local
add interface=eth8-slave-local
add interface=eth9-slave-local
add interface=eth10-slave-local
add interface=sfp1
add interface=wlan1
add interface=bridge-local
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=eth2-slave-local
add interface=eth3-slave-local
add interface=eth4-slave-local
add interface=eth5-slave-local
add interface=eth6-gateway
add interface=eth7-master-local
add interface=eth8-slave-local
add interface=eth9-slave-local
add interface=eth10-slave-local
add interface=sfp1
add interface=wlan1
add interface=bridge-local
/tool romon port
add

I think you need to remove this

add bridge=bridge-local interface=eth6-gateway

I think this is where your 192.168.0.x addresses are coming from.
You also need to move the IP address from port 1 to the bridge.
And change this from port 7 to the new gateway port 6

add action=masquerade chain=srcnat comment="default configuration" out-interface=eth7-master-local