High Packet Loss - VPN Drops

RouterOS Beginner Basics
1

Hi,

I have just installed this Mikrotik and had complains from VPN users that they had a lot of drops out.
On inspection I found that the router is showing a high latency and packet loss. The line has been tested and is working fine.
The results of my ping tests are below - I have tried other addresses too.

My CPU usage is normal around 10% and there is no complex set up. Just standard NAT rules for port forwarding (mail, pptp vpn).
I noticed that I was missing a mangle rule on my other users they have 2 mangle rules. It must have been deleted by mistake so I have manually re-created it.

Would this cause an issue?

HOST                                     SIZE TTL TIME  STATUS
8.8.8.8                                    56  58 163ms
8.8.8.8                                    56  58 167ms
8.8.8.8                                    56  58 163ms
8.8.8.8                                    56  58 162ms
8.8.8.8                                    56  58 160ms
8.8.8.8                                    56  58 144ms
8.8.8.8                                    56  58 153ms
8.8.8.8                                    56  58 155ms
8.8.8.8                                    56  58 149ms
8.8.8.8                                                 timeout
8.8.8.8                                    56  58 155ms
8.8.8.8                                    56  58 159ms
8.8.8.8                                    56  58 164ms
8.8.8.8                                                 timeout
8.8.8.8                                    56  58 151ms
8.8.8.8                                    56  58 157ms
8.8.8.8                                    56  58 145ms
8.8.8.8                                    56  58 160ms
8.8.8.8                                    56  58 166ms
8.8.8.8                                    56  58 182ms
    sent=20 received=18 packet-loss=10% min-rtt=144ms avg-rtt=158ms
2

I made a typo in the mangle rule which has been corrected and my reply time is much better - but I still have an issue with packet loss.

HOST                                     SIZE TTL TIME  STATUS
8.8.8.8                                    56  58 66ms
8.8.8.8                                    56  58 60ms
8.8.8.8                                                 timeout
8.8.8.8                                                 timeout
8.8.8.8                                    56  58 69ms
8.8.8.8                                    56  58 68ms
8.8.8.8                                                 timeout
8.8.8.8                                    56  58 75ms
8.8.8.8                                    56  58 84ms
8.8.8.8                                    56  58 74ms
8.8.8.8                                    56  58 64ms
8.8.8.8                                    56  58 64ms
8.8.8.8                                    56  58 67ms
8.8.8.8                                    56  58 59ms
8.8.8.8                                    56  58 59ms
8.8.8.8                                    56  58 60ms
8.8.8.8                                                 timeout
8.8.8.8                                    56  58 54ms
8.8.8.8                                    56  58 57ms
8.8.8.8                                    56  58 56ms
    sent=20 received=16 packet-loss=20% min-rtt=54ms avg-rtt=64ms
   max-rtt=84ms
3

Well, there are a number of things that could be causing these problems.

  1. Check the WAN and LAN uplinks on the MTK under Interfaces to see what there current duplex and speed are and to see if there are errors on either of these interfaces. If the links aren’t operating at full duplex, or are not synchronizing the speed properly then there are some serious issues at hand that can be quickly resolved.

  2. I would also ping the MikroTik from you lan to see if you have any packet loss internally.

  3. If above two are good, then I would to a tracer -d 8.8.8.8 and see where the packets are being dropped. You can also ping your WAN gateway which is the IP address of your ISP modem or router to see if there is a problem anywhere on your premise in relation to packet loss.

  4. If all of this is good then you can focus on the VPN. Depending on the VPN you may be having MTU issues.