Hello,
Whenever I setup these hap ac lite’s they always get 18-19 Mbps on wireless. I’m sure it’s something within the configuration that I’m ignorant of, but can anyone give me some pointers?
Please and thanks
post your current configuration here.
/export hide-sensitive
# 2024-06-18 20:59:36 by RouterOS 7.15.1
# software id = Y5UY-K8IX
#
# model = RB952Ui-5ac2nD
# serial number = <xxxxxxx>
/interface bridge
add admin-mac=CC:2D:E0:C1:E2:1C auto-mac=no comment=defconf name=bridge port-cost-mode=short
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce disabled=no distance=indoors frequency=auto mode=ap-bridge ssid=ERM_KB6 station-roaming=enabled wireless-protocol=802.11
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=20/40/80mhz-Ceee country="united states" disabled=no distance=indoors frequency=auto mode=ap-bridge ssid=ERM_KB6-5GHz station-roaming=enabled wireless-protocol=802.11
/interface ethernet
set [ find default-name=ether1 ] advertise=10M-baseT-half,10M-baseT-full,100M-baseT-half,100M-baseT-full,1G-baseT-half,1G-baseT-full
set [ find default-name=ether2 ] advertise=10M-baseT-half,10M-baseT-full,100M-baseT-half,100M-baseT-full,1G-baseT-half,1G-baseT-full
set [ find default-name=ether3 ] advertise=10M-baseT-half,10M-baseT-full,100M-baseT-half,100M-baseT-full,1G-baseT-half,1G-baseT-full
set [ find default-name=ether4 ] advertise=10M-baseT-half,10M-baseT-full,100M-baseT-half,100M-baseT-full,1G-baseT-half,1G-baseT-full
set [ find default-name=ether5 ] advertise=10M-baseT-half,10M-baseT-full,100M-baseT-half,100M-baseT-full,1G-baseT-half,1G-baseT-full
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface lte apn
set [ find default=yes ] ip-type=ipv4 use-network-apn=no
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk group-ciphers=tkip mode=dynamic-keys supplicant-identity=MikroTik unicast-ciphers=tkip
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp interface=bridge lease-time=10m name=defconf
/interface bridge port
add bridge=bridge comment=defconf ingress-filtering=no interface=ether2 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf ingress-filtering=no interface=ether3 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf ingress-filtering=no interface=ether4 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf ingress-filtering=no interface=ether5 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf ingress-filtering=no interface=wlan1 internal-path-cost=10 path-cost=10
add bridge=bridge comment=defconf ingress-filtering=no interface=wlan2 internal-path-cost=10 path-cost=10
/ip firewall connection tracking
set udp-timeout=10s
/ip neighbor discovery-settings
set discover-interface-list=LAN
/ip settings
set max-neighbor-entries=8192
/ipv6 settings
set disable-ipv6=yes max-neighbor-entries=8192
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/interface ovpn-server server
set auth=sha1,md5
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0
/ip dhcp-client
add comment=defconf interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router.lan
/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related hw-offload=yes
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
/routing bfd configuration
add disabled=no interfaces=all min-rx=200ms min-tx=200ms multiplier=5
/system note
set show-at-login=no
/system package update
set channel=testing
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
Don’t use auto for frequency selection.
Use a frequency after scanning the environment. Preferably a channel which is completely free, if that’s not possible use the least used one.
Also don’t set your width to the max possible (only when you have clear channels you can do this), you’ll have higher chance getting interference from others crossing those frequencies.
holvoetn,
How do I scan the enviroment and know if a channel is free to use or know what is least used?
For the width, should I just set it to 20MHz for now or use something else?
Thanks
Also set country code on both wifi interfaces.
Winbox
Wireless / Wireless
Select Freq. Usage and then the radio you want to use for scanning (on your device wlan1 will be 2Ghz, wlan2 will be 5Ghz)
I usually set 20/40 for 5Ghz and 10 for 2GHz but you need to see first how crowded (or not) your area is.
At home (zero interference) I set max width. Nobody is going to disturb me (and vice versa).
ac lites are quite crappy in terms of wifi on both radios. that said - put 2ghz on 20mhz, and 5ghz on 80mhz and you’ll see 100mbit on 5ghz.
i have 2 of them in my network, 2ghz is really just for IOT and such stupid things, and all laptops and phones are on 5ghz. with 80mhz i can get 100mbit out of them. with 40, it would top at about 70.
(also worth noting - that is in the same room with no obstacles).
scan for “old” / “legacy”
→ https://help.mikrotik.com/docs/display/ROS/Wireless+Interface#WirelessInterface-Scan
scan for new “wifi-qcom” / “wifi-qcom-ac” (i am not sure if the latter has all options available for scan and sniff)
→ https://help.mikrotik.com/docs/display/ROS/WiFi#WiFi-Frequencyscan