I have a Routerboard CRS-125-24G-1S (Gigabit ports) with 6.34.3 routerOS.
My ISP fiber is about bandwith of 200M for down and 100M for up.
The settings are standards and I do not implemented queue type or restriction .
I only have one rule for NAT masquerade .
The navigation works , it’s all right , but all my downloads are limited to exactly 100M even my devices having Gigabit ports.
Does anyone have any idea what might be to help me ? Thanks.
Check actual negotiated speed on the CRS WAN port is 1Gbps, looks like it’s actually 100Mbps (faulty cable?, autonegotiation problem, 100Mbps port on the ISP router…).
pukkita:
Check actual negotiated speed on the CRS WAN port is 1Gbps, looks like it’s actually 100Mbps (faulty cable?, autonegotiation problem, 100Mbps port on the ISP router…).
Both is 1Gbps. Wan port ISP OTM (fiber) and ether port for my PC.. 1Gbps full duplex.
Any ideas?
Does it happen from a device directly connected to the CRS?
Open a new terminal and issue:
/export hide-sensitive
That will generate an export of your configuration, so that you can post it here.
Additionally, issue:
/system routerboard print
And post it here.
The limitation being exactly 100Mbps seems to indicate an interface speed negotiation problem.
Check wit your ISP support if there’s any upgrade for the router that may include a fix for these, you wouldn’t be the first case…
I configured on a PC x86 the trial version of Mikotik with two gigabit ports , and there was no limitation of bandwidth . My download was 197Mb !!
#
/interface ethernet
set [ find default-name=ether1 ] name=ether1-wan1 rx-flow-control=auto \
tx-flow-control=auto
set [ find default-name=ether2 ] name=ether2-wan2
set [ find default-name=ether3 ] name=ether3-lan1-master
set [ find default-name=ether4 ] master-port=ether3-lan1-master name=\
ether4-slave-local
set [ find default-name=ether5 ] master-port=ether3-lan1-master name=\
ether5-slave-local
set [ find default-name=ether6 ] master-port=ether3-lan1-master \
name=ether6-slave-local
set [ find default-name=ether7 ] master-port=ether3-lan1-master name=\
ether7-slave-local
set [ find default-name=ether8 ] master-port=ether3-lan1-master name=\
ether8-slave-local
set [ find default-name=ether9 ] master-port=ether3-lan1-master name=\
ether9-slave-local
set [ find default-name=ether10 ] master-port=ether3-lan1-master name=\
ether10-slave-local
set [ find default-name=ether11 ] master-port=ether3-lan1-master name=\
ether11-slave-local
set [ find default-name=ether12 ] name=ether12-slave-local
set [ find default-name=ether13 ] name=ether13-slave-local
set [ find default-name=ether14 ] name=ether14-slave-local
set [ find default-name=ether15 ] name=ether15-slave-local
set [ find default-name=ether16 ] name=ether16-slave-local
set [ find default-name=ether17 ] name=ether17-iptv-master
set [ find default-name=ether18 ] master-port=ether17-iptv-master name=\
ether18-iptv-slave
set [ find default-name=ether19 ] master-port=ether17-iptv-master name=\
ether19-iptv-slave
set [ find default-name=ether20 ] master-port=ether17-iptv-master name=\
ether20-iptv-slave
set [ find default-name=ether21 ] name=ether21-slave-local
set [ find default-name=ether22 ] name=ether22-slave-local
set [ find default-name=ether23 ] name=ether23-slave-local
set [ find default-name=ether24 ] name=ether24-slave-local
set [ find default-name=sfp1 ] name=sfp1-slave-local
/interface vlan
add comment=Internet interface=ether2-wan1 name=vlan10 vlan-id=10
add comment=IPTV interface=ether2-wan1 name=vlan20 vlan-id=20
/interface pppoe-client
add add-default-route=yes disabled=no interface=vlan10 max-mru=1500 max-mtu=\
1500 mrru=1600 name=pppoe-vivo-fibra user=cliente@cliente
/ip neighbor discovery
set vlan10 comment=Internet
set vlan20 comment=IPTV
/ip pool
add name=pool-lan ranges=10.0.1.100-10.0.1.229
add name=pool-iptv ranges=10.0.2.100-10.0.2.229
/ip dhcp-server
add address-pool=pool-lan disabled=no interface=ether3-lan1-master lease-time=\
1d name=dhcp-lan1
add address-pool=pool-iptv disabled=no interface=ether17-iptv-master name=\
dhcp-iptv
/tool user-manager customer
set admin access=\
own-routers,own-users,own-profiles,own-limits,config-payment-gw
/ip address
add address=10.0.1.1/24 interface=ether3-lan1-master network=10.0.1.0
add address=10.229.129.72/17 interface=vlan20 network=10.229.128.0
add address=10.0.2.1/24 interface=ether17-iptv-master network=10.0.2.0
/ip dhcp-server lease
add address=10.0.1.100 client-id=1:d4:9a:20:e8:b2:f8 comment=iMac mac-address=\
D4:9A:20:E8:B2:F8 server=dhcp-lan1
add address=10.0.2.230 comment=stb-iptv mac-address=10:5F:49:EE:F7:A4 server=\
dhcp-iptv
add address=10.0.2.231 comment=stb-iptv mac-address=10:5F:49:EE:59:4F server=\
dhcp-iptv
/ip dhcp-server network
add address=10.0.1.0/24 domain=beraldidomain.local gateway=10.0.1.1
add address=10.0.2.0/24 domain=beraldidomain.local gateway=10.0.2.1
add address=10.0.2.230/32 dns-server=172.29.130.5,172.29.130.6 domain=\
iptv.local gateway=10.0.2.1
add address=10.0.2.231/32 dns-server=172.29.130.5,172.29.130.6 domain=\
iptv.local gateway=10.0.2.1
/ip dns
set allow-remote-requests=yes servers=200.204.0.138,200.204.0.10
/ip firewall filter
add chain=input disabled=yes dst-port=1194 protocol=tcp
add action=drop chain=input comment="Acesso externo via SSH" dst-port=22 \
protocol=tcp src-address=!10.0.1.0/24
add action=drop chain=input comment="Acesso externo via WinBox" dst-port=8291 \
protocol=tcp src-address=!10.0.1.0/24
add action=drop chain=input comment="Disallow weird packets" connection-state=\
invalid
add chain=input comment="Allow LAN access to router and Internet" \
connection-state=new in-interface=ether3-lan1-master
add chain=forward comment="Allow LAN access to router and Internet" \
connection-state=new in-interface=ether3-lan1-master
add chain=input comment="Allow connections that originated from LAN" \
connection-state=established
add chain=input comment="Allow connections that originated from LAN" \
connection-state=related
add action=drop chain=forward comment="Disallow weird packets" \
connection-state=invalid
add chain=forward comment="Allow connections that originated from LAN" \
connection-state=established
add chain=forward comment="Allow connections that originated from LAN" \
connection-state=related
add action=drop chain=input comment="Bloqueia ping externo" in-interface=\
pppoe-vivo-fibra protocol=icmp
/ip route
add comment=IPTV-Multicast distance=1 dst-address=172.28.0.0/14 gateway=\
10.229.128.1
add distance=1 dst-address=200.161.71.41/32 gateway=10.229.128.1
add distance=1 dst-address=200.161.71.42/32 gateway=10.229.128.1
add distance=1 dst-address=200.161.71.46/32 gateway=10.229.128.1
add distance=1 dst-address=200.161.71.47/32 gateway=10.229.128.1
add distance=1 dst-address=200.161.71.48/32 gateway=10.229.128.1
add distance=1 dst-address=200.161.71.49/32 gateway=10.229.128.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/lcd
set default-screen=informative-slideshow
/routing igmp-proxy interface
add alternative-subnets=0.0.0.0/0 interface=vlan20 upstream=yes
add alternative-subnets=172.28.0.0/14 interface=ether17-iptv-master
/system clock
set time-zone-name=America/Sao_Paulo
/system ntp client
set enabled=yes primary-ntp=200.160.0.8 secondary-ntp=201.49.148.35
/system package update
set channel=development
/system routerboard settings
set protected-routerboot=disabled
routerboard: yes
model: CRS125-24G-1S
serial-number: 632205..........
firmware-type: ar9344
factory-firmware: 3.24
current-firmware: 3.24
upgrade-firmware: 3.24
post the output of
/interface ethernet monitor 1
/interface ethernet monitor 1
name: ether1-wan2
status: no-link
auto-negotiation: done
advertising: 10M-half,10M-full,100M-half,100M-full,1000M-half,
1000M-full
/interface ethernet monitor 0
name: ether2-wan1
status: link-ok
auto-negotiation: done
rate: 1Gbps
full-duplex: yes
tx-flow-control: no
rx-flow-control: no
advertising: 10M-half,10M-full,100M-half,100M-full,1000M-half,
1000M-full
link-partner-advertising: 10M-half,10M-full,100M-half,100M-full,1000M-ful
Can you monitor if CPU rises to 100% while doing a speed test?
If so, try fasttrack, see http://wiki.mikrotik.com/wiki/Manual:Wiki/Fasttrack
CRS is a swicth with a CPU to do some L3 duties and offer more versatility, fasttrack will help it reduce CPU load.
pukkita:
Can you monitor if CPU rises to 100% while doing a speed test?
If so, try fasttrack, see http://wiki.mikrotik.com/wiki/Manual:Wiki/Fasttrack
CRS is a swicth with a CPU to do some L3 duties and offer more versatility, fasttrack will help it reduce CPU load.
Thanks again for your help!
I monitor without Fasttrack and max usage is 90%
I enable fasttrack and speed test increase to 122Mb : and CPU usage average 75%
Latest RC (6.34) channel contains more enhancements for fasttrack/PPPoE, which in your case you will benefit more, make sure you also upgrade firmware once you update ROS, you should be able to reach 200Mbps with lower CPU usage.