hap3 low WiFi speed

RouterOS Wireless Networking
1

Hello everyone, I’ve bought hap ac3 WiFi router and using it with 1Gbit internet connection. While using ethernet cable I can get up to 900 Mbit/s on speedtest. However when switching to 5GHz wireless connection it’s speed can’t get higher than 160-180 Mbit/s while I’m sitting right next to it.
Could anyone please advise on how to diagnose any issue related to this?

Here is my config:

# 2023-11-03 00:50:44 by RouterOS 7.11.2
# software id = N7SS-IHK8
#
# model = RBD53iG-5HacD2HnD
# serial number = <removed>
/interface bridge
add admin-mac=48:A9:8A:21:A4:14 auto-mac=no comment=defconf name=bridge
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX country=ukraine disabled=no distance=indoors frequency=auto installation=indoor mode=ap-bridge ssid=GiskardNet wireless-protocol=802.11
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=20/40/80mhz-XXXX country=no_country_set disabled=no distance=indoors frequency=auto installation=indoor mode=ap-bridge ssid="GiskardNet 5G" wireless-protocol=802.11
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=dynamic-keys supplicant-identity=MikroTik
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp interface=bridge lease-time=10m name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=wlan1
add bridge=bridge comment=defconf interface=wlan2
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0
/ip dhcp-client
add comment=defconf interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf dns-server=192.168.88.1 gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related hw-offload=yes
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
/ip upnp
set enabled=yes
/ip upnp interfaces
add interface=bridge type=internal
add interface=ether1 type=external
/ipv6 firewall address-list
add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
add address=::1/128 comment="defconf: lo" list=bad_ipv6
add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
add address=100::/64 comment="defconf: discard only " list=bad_ipv6
add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
/ipv6 firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMPv6" protocol=icmpv6
add action=accept chain=input comment="defconf: accept UDP traceroute" port=33434-33534 protocol=udp
add action=accept chain=input comment="defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=udp src-address=fe80::/10
add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 protocol=udp
add action=accept chain=input comment="defconf: accept ipsec AH" protocol=ipsec-ah
add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=ipsec-esp
add action=accept chain=input comment="defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=input comment="defconf: drop everything else not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" hop-limit=equal:1 protocol=icmpv6
add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=icmpv6
add action=accept chain=forward comment="defconf: accept HIP" protocol=139
add action=accept chain=forward comment="defconf: accept IKE" dst-port=500,4500 protocol=udp
add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=ipsec-ah
add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=ipsec-esp
add action=accept chain=forward comment="defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=forward comment="defconf: drop everything else not coming from LAN" in-interface-list=!LAN
/system clock
set time-zone-name=Europe/Kyiv
/system note
set show-at-login=no
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
2

1- DON’T use auto for frequency selection if you want optimal results.
2- use scanner and see which frequency is the least used in your area
3- use correct country settings on that radio

Then test again.

3

0 - install wifiwave2 package (and reconfigure wireless setup, wifiwave2 uses different configuration tree).

You’re running legacy wireless drivers and those make much slower wireless than the new wifiwave2 drivers. And you’re lucky to have hAP ac3 which is one of few pre-ax devices capable of running new drivers.

4
  1. Don’t ever use WPA-PSK, use WPA2-PSK only.
  2. Don’t use legacy protocols, use 802.11n on 2.4GHz and 802.11n/ac on 5GHz
  3. Don’t use 40MHz bandwidth on the 2.4GHz radio, unless you live in the middle of nowhere

Then test again.

At what speed is the testdevice connected to the router?

5

Or…

Turn off the wireless and use another manufacture for that part.

Seriously, using a hAP AC2 as the router and using a wifi6E access point with my 6e phone… I have speedtests in the low 800s.

6

I have that on AX2 and AX3.
AC3 can go to around 700 using wifiwave2 driver.

7

Yup… put 26 other clients on the same radio (not just the wap, the radio), install it in a busy wireless area… then try that again… from more than 10 feet away.

I got pretty impressive results (speedtest and the like) out of the Audience, when I used its 4x4 to serve clients in a flat network.

But bulls–t aside… the cheap price isn’t worth me constantly having to excuse performance issues. And the wounds of paying thousands of dollars out of my own pocket to replace Mikrotik radios… will not soon be forgotten.

8

Thanks mkx, after switching to wifiwave2 I’m getting 500+ Mb/s instead of 180 while sitting right next to router. Still not the 1 Gbit but much MUCH better. So once more thanks you for this advice.
However after getting to my workplace (which is about 7-10 meters and 1 wall from the router) I’m getting only about 220-230 Mbit, which is half of what I get close to it. Is it ok or are there any options to increase speed on this distance?

Also switched to WPA2-PSK|WPA2-PSK and checked scanned frequencies around and there aren’t much around me, so I don’t think it should interfere

9

You’ll never get 1Gb, not even on ax3 ( low 800).

Ac3 using wifiwave2 should get 500 to 600 so that sounds about right.

Walls are famous for killing wifi signal, especially higher frequencies.