Home Network is Failing

RouterOS General
1

I have a home office with heavy network usage.
And I find the MikroTik Router is failing and dropping connections at times. I upgraded the firmware to the latest version
I think I need an upgrade on the Mikrotik router to a stronger one.

This is my set up.. What hardware would you recommend?

Current Internet Bandwidth

  • 10Mbps UP


  • 300mbps Down

Current Hardware
Mikrotik RB4011iGS+RM
https://www.amazon.ca/gp/product/B07HBW2NTR/ref=ppx_yo_dt_b_search_asin_title?ie=UTF8&psc=1
TP-Link EAP245
https://www.amazon.ca/gp/product/B07NMZR3F1/ref=ppx_yo_dt_b_search_asin_title?ie=UTF8&psc=1

Current Usage (used all at the same time)

  • 4 Smart switchs


  • 6 RPis (webserver, homeassistant, etc)


  • 1 Tablets (my 85 yr old Father-in-Law is addicted to YouTube and streams all day)


  • 2 Laptops (Team video meetings, Video streaming, VPN to work)


  • 1 Netflix Streaming (mother-in-law 80yrs)


  • 2 Cell phones (intermittent wifi usage)

Any Suggestions are very welcomed

2

There is almost no chance that the RB4011 is not good enough for you.
Do you believe that the CPU load is too high?

3

We need more info. I run my connection over (500/500) and I have no issues working from home with other family members using internet at the same time. I also have a 4011 (none wireless).

How are you connected? If wireless I bet that is the problem.

4

Well I loose internet a few times a day. It goes down for about a minute then comeback online.
Right now I am plugged into my ISP modem with no problems

Yesterday, I was working on a local machine and the Router just froze with no internet at all.
I had to power cycle it and still nothing
Then, hard reset, now it is routing all triffic to ISP with no DHCP.
I will try and reset again

5

Im connected via wireless but the Intner goes down for all users, wired and wireless

6

Some filter rule or NAT rules?

You can paste your config to do troubleshooting on config in case that be necessary. Quality of cables is also important and last, do local bandwidth tests with iPerf can help to get a better idea of your scenario.

Regards.

7

Concur for your setup its overkill but in a good way.
The rb4011 is an excelled powerful wired router perfect for small business SOHO etc…
The EAP245 I have in two locations and both have been more stable rock solid with better speeds then my capacs.
You have the right pieces.
…check cables modem to router
…check cables router to AP
… any issue with house power to router or ap??

Perhaps a bad port on from ISP to router (try different port on router for ISP for example).

If anything I would say your ISP bandwidth is the weak link if anything, can you get a fibre 1gig service ???

8

Thanks To Everyone…
So Far I was able to reinstall the following config… Everything is working fine… Fingers Crossed

I am going to …

  1. Change all the network cables from the switch right next to the Mikrotik
  2. Change the Cable to the Router and AP
  3. Change the Power Bars (they r cheapo’s)
  4. Kiss my wife and hope she forgives me for the Network Hiccups :wink:
# jan/19/2021 18:58:11 by RouterOS 6.48
# software id = E7KR-KZ0Z
#
# model = RB4011iGS+
# serial number = D4460CC95D62
/interface bridge
add admin-mac=48:8F:5A:85:82:E5 auto-mac=no comment=defconf name=bridge
/interface ethernet
set [ find default-name=ether1 ] name=ether1-ISP
/interface ethernet switch port
set 0 default-vlan-id=0
set 1 default-vlan-id=0
set 2 default-vlan-id=0
set 3 default-vlan-id=0
set 4 default-vlan-id=0
set 5 default-vlan-id=0
set 6 default-vlan-id=0
set 7 default-vlan-id=0
set 8 default-vlan-id=0
set 9 default-vlan-id=0
set 10 default-vlan-id=0
set 11 default-vlan-id=0
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=192.168.1.10-192.168.1.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge lease-time=12h name=\
    defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=ether6
add bridge=bridge comment=defconf interface=ether7
add bridge=bridge comment=defconf interface=ether8
add bridge=bridge comment=defconf interface=ether9
add bridge=bridge comment=defconf interface=ether10
add bridge=bridge comment=defconf interface=sfp-sfpplus1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment="defconf LAN" interface=bridge list=LAN
add comment=defconf interface=ether1-ISP list=WAN
/ip address
add address=192.168.1.1/24 comment=defconf interface=bridge network=\
    192.168.1.0
/ip dhcp-client
add comment=defconf disabled=no interface=ether1-ISP
/ip dhcp-server lease
add address=192.168.1.150 client-id=1:dc:a6:32:b7:2d:f5 comment=MobileSVR \
    mac-address=DC:A6:32:B7:2D:F5 server=defconf
add address=192.168.1.110 client-id=1:62:32:b1:9a:84:f3 comment=PiGarage \
    mac-address=62:32:B1:9A:84:F3 server=defconf
add address=192.168.1.120 client-id=1:dc:a6:32:b7:2d:d9 comment=VPN_MQTT \
    mac-address=DC:A6:32:B7:2D:D9 server=defconf
add address=192.168.1.130 client-id=1:dc:A6:32:01:d4:b7 comment=PiMedia \
    mac-address=DC:A6:32:01:D4:B7 server=defconf
add address=192.168.1.100 client-id=1:00:90:A9:E8:25:06 comment=MyCloud \
    mac-address=00:90:A9:E8:25:06 server=defconf
add address=192.168.1.35 client-id=1:DC:A6:32:1A:55:08 comment=PiSignage \
    mac-address=DC:A6:32:1A:55:08 server=defconf
/ip dhcp-server network
add address=192.168.1.0/24 comment=defconf gateway=192.168.1.1 netmask=24
/ip dns
set allow-remote-requests=yes servers=192.168.0.1,8.8.8.8,8.8.4.4
/ip dns static
add address=192.168.1.1 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
    invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=\
    "defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
    in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
    ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
    ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
    connection-state=established,related
add action=accept chain=forward comment=\
    "defconf: accept established,related, untracked" connection-state=\
    established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
    connection-state=invalid
add action=drop chain=forward comment=\
    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
    connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" \
    ipsec-policy=out,none out-interface=ether1-ISP out-interface-list=WAN
add action=dst-nat chain=dstnat comment="PiMedia HTTPS" dst-port=443 \
    in-interface-list=WAN protocol=tcp to-addresses=192.168.1.130 to-ports=\
    443
add action=dst-nat chain=dstnat comment="PiMedia SSH" dst-port=32022 \
    in-interface-list=WAN protocol=tcp to-addresses=192.168.1.130 to-ports=22
add action=dst-nat chain=dstnat comment="MQTT Broker" dst-port=11883 \
    in-interface-list=WAN protocol=tcp to-addresses=192.168.1.120 to-ports=\
    11883
/ip route
add distance=1 gateway=ether1-ISP
/system clock
set time-zone-name=America/Toronto
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
9

RouterOS 6.48


You might want to step down a notch, say to version 6.47.7 or 6.47.8
This 6.48 has some serious issues, port-flappings etc.
Nothing in the logs in interface-flaps?

10

I switched to LTS, currently version 6.47.9. Great performance, might help you as well.

11

Thanks for the downgrade suggestions.

I just applied RouterOS v6.47.9 (long-term) and see how that works