Hotspot user speed problem

[alexj]

Hi ,

I am new with mikrotik trying to migrate from mesh type locustworld software. The difference is huge. I should have done this earlier. There is no way to compare two os. Mikrotik is far ahead of locustworld.

I have setup two test Mikrotik APs and Nanostation5 as gateway unit. All Aps are connected in WDS AP mode on 5.8Ghz for backhaul. Both MT APs have hotspots running on 2.4ghz.

AP1
Nanostation5 as Gateway unit
Mode: ap bridge 5.8ghz


AP1 has WDS connection to AP2


AP2
rb150 board with 3.2 ver
wlan1 5.8ghz backhaul mode ap bridge
wlan2 2.4ghz hospot

AP2 has WDS connection to AP3

AP3
WRAP board with 2.9 ver
wlan1 5.8ghz backhaul mode ap bridge
wlan2 2.4ghz hospot

The problem I have is with hotspot user profile speed on AP2 with software ver 3.2.
AP2 and AP3 have exactly same HOTSPOT setup and same user classes.

Client connected to AP2 with assigned user class of 256k/1024k DOES NOT GET MORE THAN 450k speed.
The same client connected to AP3 with assigned user class of 256k/1024k gets between 850k and 980k. NO PROBLEM HERE.


What is very interested the lower user classes with assigned speed classes as 64k/128k 128k/128k 128/256 128k/384k are shaping the user speed OK. So my questions is why I can not get the ap2 to shape the bandwidth for clients with user classes as 256k/768k user classes above 256/1024. Maximum speed I get is from 350k up to 500k not more than that after so many bandwidth testing.

ANY SUGGESTIONS

[normis]

we would need to see more of your configuration, especially the profile of the user who gets wrong limitation, and also some network diagram drawing would be nice

[swissiws]

hi there,

yep, i have a simular requirement as you want to archive. I do not understand why you want to implement 2 hotspots on both MT’s. Try to centralise such tasks to one MT.

If you are using WDS bridge, the hotspot has to run on the bridge interface. I am/was using Wireless Orbit Radius server for wifi user authentication, which works good and reliable.

Additionally, i configure both MT’s to do WDS bridging and configure WLAN interface to be ap-bridge. All has to be running on same spectrum frequency, if you would decide to ony use 1 radio on each MT.


One more thing: If you are trying to use an older router board, eg serie 100, it will NOT work as the CPU will shut up to 100% permanent while trying to run WDS bridge, DHCP, DNS and hotspot services. I just tried all sorts of combinations, deinstallation of not used packets, without any success. Running the services without Hotspot with OS 3.22, the CPU is idling around 5-10%.

my thoughts.

Matt

[alexj]

@normis

we would need to see more of your configuration, especially the profile of the user who gets wrong limitation, and also some network diagram drawing would be nice

Sorry for my late reply to your posting Please see atachment. Here are some settings. Following settings are from MT AP with 2.9ver and wrap board. The other MT AP with 3.2.7 ver and rb150 bords has same settings as this one but doesn not shape the user speed as I explained in my first posting. I have reset the AP couple of times with no luck.

[admin@MikroTik] interface> print
Flags: X - disabled, D - dynamic, R - running

NAME TYPE RX-RATE TX-RATE MTU

0 R ether1 ether 0 0 1500
1 R wlan1 wlan 0 0 1500
2 R wds-bridge bridge 0 0 1500
3 R wlan2 wlan 0 0 1500
4 DR wds1 wds 0 0 1500
5 DR wds2 wds 0 0 1500

[admin@MikroTik] interface bridge port> print
Flags: X - disabled, I - inactive, D - dynamic

INTERFACE BRIDGE PRIORITY PATH-COST

0 wlan2 wds-bridge 0x80 10
1 ether1 wds-bridge 0x80 10
2 D wds1 wds-bridge 0x80 58
3 D wds2 wds-bridge 0x80 94

[admin@MikroTik] > interface wireless print
Flags: X - disabled, R - running
0 R name="wlan1" mtu=1500 mac-address=00:02:6F:4A:66:B2 arp=enabled disable-running-check=no
interface-type=Prism prism-cardtype=200mW radio-name="00026F4A66B2" mode=ap-bridge
ssid="AirDSL" area="" frequency-mode=superchannel country=no_country_set antenna-gain=0
frequency=2472 band=2.4ghz-b scan-list=default rate-set=default
supported-rates-b=1Mbps,2Mbps,5.5Mbps,11Mbps basic-rates-b=1Mbps max-station-count=2007
tx-power-mode=default periodic-calibration=default periodic-calibration-interval=60
dfs-mode=none antenna-mode=ant-a wds-mode=disabled wds-default-bridge=none
wds-default-cost=100 wds-cost-range=50-150 wds-ignore-ssid=no
update-stats-interval=disabled default-authentication=yes default-forwarding=yes
default-ap-tx-limit=0 default-client-tx-limit=0 proprietary-extensions=post-2.9.25
hide-ssid=no security-profile=default disconnect-timeout=3s on-fail-retry-time=100ms
compression=no allow-sharedkey=no

1 R name="wlan2" mtu=1500 mac-address=00:0E:62:CB:64:D7 arp=enabled disable-running-check=no
interface-type=Atheros AR5212 radio-name="000E62CB64D7" mode=ap-bridge ssid="AirDSLplus"
area="" frequency-mode=superchannel country=no_country_set antenna-gain=0 frequency=5825
band=5ghz scan-list=default rate-set=default
supported-rates-a/g=6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps
basic-rates-a/g=6Mbps max-station-count=2007 ack-timeout=dynamic tx-power=20
tx-power-mode=card-rates noise-floor-threshold=default periodic-calibration=default
periodic-calibration-interval=60 burst-time=disabled dfs-mode=none antenna-mode=ant-a
wds-mode=dynamic wds-default-bridge=wds-bridge wds-default-cost=100 wds-cost-range=50-150
wds-ignore-ssid=no update-stats-interval=disabled default-authentication=yes
default-forwarding=yes default-ap-tx-limit=0 default-client-tx-limit=0
proprietary-extensions=post-2.9.25 hide-ssid=no security-profile=UBNT5.8 profile1
disconnect-timeout=3s on-fail-retry-time=100ms preamble-mode=both compression=no

[admin@MikroTik] > ip address print
Flags: X - disabled, I - invalid, D - dynamic

ADDRESS NETWORK BROADCAST INTERFACE

0 10.0.10.1/24 10.0.10.0 10.0.10.255 wlan1
1 192.168.20.30/24 192.168.20.0 192.168.20.255 wds-bridge

admin@MikroTik] > ip route print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf

DST-ADDRESS PREF-SRC G GATEWAY DISTANCE INTERFACE

0 A S 0.0.0.0/0 r 192.168.20.1 1 wds-bridge
1 ADC 10.0.10.0/24 10.0.10.1 0 wlan1
2 ADC 192.168.20.0/24 192.168.20.30 0 wds-bridge

[admin@MikroTik] ip firewall nat> print
Flags: X - disabled, I - invalid, D - dynamic

0 ;;; masquerade hotspot network
chain=srcnat src-address=10.0.10.0/24 action=masquerade
[admin@MikroTik] ip hotspot> print
Flags: X - disabled, I - invalid, S - HTTPS

NAME INTERFACE ADDRESS-POOL PROFILE IDLE-TIMEOUT

0 hotspot1 wlan1 hs-pool-6 hsprof1 5m

[admin@MikroTik] ip hotspot user profile> print
Flags: * - default
0 * name="default" address-pool=hs-pool-6 idle-timeout=none keepalive-timeout=2m
status-autorefresh=1m shared-users=1 rate-limit="128k/512k 128k/786k 128k/600k 30/30 8"
transparent-proxy=yes open-status-page=always advertise=no

1 name="256rate" address-pool=hs-pool-6 idle-timeout=none keepalive-timeout=2m
status-autorefresh=1m shared-users=1 rate-limit="128k/256k 128k/384k 128k/300k 30/30 8"
transparent-proxy=yes open-status-page=always advertise=no

2 name="128rate" address-pool=hs-pool-6 idle-timeout=none keepalive-timeout=2m
status-autorefresh=1m shared-users=1 rate-limit="128k/128k 128k/256k 128k/200k 30/30 8"
transparent-proxy=yes open-status-page=always advertise=no

3 name="64rate" address-pool=hs-pool-6 idle-timeout=none keepalive-timeout=2m
status-autorefresh=1m shared-users=1 rate-limit="64k/64k" transparent-proxy=yes
open-status-page=always advertise=no

4 name="387rate" address-pool=hs-pool-6 idle-timeout=none keepalive-timeout=2m
status-autorefresh=1m shared-users=1 rate-limit="128k/384k 128k/512k 128k/400k 30/30 8"
transparent-proxy=yes open-status-page=always advertise=no

5 name="512rate" address-pool=hs-pool-6 idle-timeout=none keepalive-timeout=2m
status-autorefresh=1m shared-users=1 rate-limit="128k/512k 128k/768k 128k/600k 30/30 8"
transparent-proxy=yes open-status-page=always advertise=no

6 name="768rate" address-pool=hs-pool-6 idle-timeout=none keepalive-timeout=2m
status-autorefresh=1m shared-users=1 rate-limit="256k/768k 256k/1024k 128k/850k 30/30 8"
transparent-proxy=yes open-status-page=always advertise=no

7 name="1024rate" address-pool=hs-pool-6 idle-timeout=none keepalive-timeout=2m
status-autorefresh=1m shared-users=1 rate-limit="256k/1024k 256k/1536k 128k/768k 30/30 8"
transparent-proxy=no

Further more I have followed and applied this p2p bandwidth limitation example:

ip firewall mangle add chain=forward p2p=all-p2p action=mark-connection new-connection-mark=p2p_conn passthrough=yes
ip firewall mangle add chain=forward connection-mark=p2p_conn action=mark-packet new-packet-mark=p2p passthrough=yes
ip firewall mangle add chain=forward connection-mark=!p2p_conn action=mark-packet new-packet-mark=other passthrough=yes

queue type add name=p2p-Down kind=pcq pcq-rate=56000 pcq-limit=50 pcq-classifier=dst-address pcq-total-limit=2000
queue type add name=p2p-Up kind=pcq pcq-rate=56000 pcq-limit=50 pcq-classifier=src-address pcq-total-limit=2000
queue type add name=Down kind=pcq pcq-rate=128000 pcq-limit=50 pcq-classifier=dst-address pcq-total-limit=2000
queue type add name=Up kind=pcq pcq-rate=128000 pcq-limit=50 pcq-classifier=src-address pcq-total-limit=2000
queue tree add name=p2p-up parent= packet-mark=p2p limit-at=0 queue=p2p-Up priority=8 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s

queue tree add name=p2p-up parent=wds-bridge packet-mark=p2p limit-at=0 queue=p2p-Up priority=8 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s
queue tree add name=p2p-Down parent=wlan1 packet-mark=p2p limit-at=0 queue=p2p-Down priority=8 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s
queue tree add name=Upload parent=wds-bridge packet-mark=other limit-at=0 queue=Up priority=1 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s
queue tree add name=Download parent=wlan1 packet-mark=other limit-at=0 queue=Down priority=1 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s

THESE QUEUES TYPES RULES WORK ONLY WHEN A USER IS ASSIGNED WITH USER PROFILE "name="default". P2p trafic is shaped ok and limited at 128k. beside that pcq is limiting p2p at 56k. http traffic is shaped OK as per profile "name="default" rate-limit="128k/512k 128k/786k 128k/600k 30/30 8"

ALL other user profiels that I have asigned and added to hotspot as 64rate, 128rate, 512rate etc. profiels get 128k TOTAL download for p2p and http traffic. So http trafic is limited along with p2p at 128k. UPLOAD speed works fine for http.

I do not know what am I doing wrong. Any advice please.