I am copying data between two gigabit ports connected to NVME drives on an idle network and my transfer speeds won’t peak over 50 MB/s, which is about half of the theoretical bandwidth. Is this due to the Bridge limitations? Should I put my ports in Switch mode and Bridge the Switch to WLAN instead?
Run this and post the output (and remove public IP addresses if you use those
/export hide-sensitive
Also explain from which port to which port are you copying. If Bridge is correctly configured you should get wire speed.
# sep/23/2020 09:10:49 by RouterOS 6.47.1
# software id = 7LWN-MJLR
#
# model = RB4011iGS+5HacQ2HnD
# serial number = HIDDEN
/interface bridge
add admin-mac=HIDDEN arp=proxy-arp auto-mac=no comment=defconf name=\
bridge1
/interface wireless
set [ find default-name=wlan2 ] antenna-gain=0 band=2ghz-b/g/n channel-width=\
20/40mhz-XX country=no_country_set disabled=no distance=indoors frequency=\
auto frequency-mode=manual-txpower installation=indoor mode=ap-bridge name=\
2G ssid=TeaTime station-roaming=enabled wireless-protocol=802.11
set [ find default-name=wlan1 ] antenna-gain=0 band=5ghz-a/n/ac channel-width=\
20/40/80mhz-XXXX country=no_country_set disabled=no distance=indoors \
frequency=auto frequency-mode=manual-txpower installation=indoor mode=\
ap-bridge name=5G secondary-channel=auto ssid=TeaTime station-roaming=\
enabled wireless-protocol=802.11
/interface ethernet
set [ find default-name=ether10 ] poe-priority=0
set [ find default-name=sfp-sfpplus1 ] disabled=yes
/interface ethernet switch port
set 0 default-vlan-id=0
set 1 default-vlan-id=0
set 2 default-vlan-id=0
set 3 default-vlan-id=0
set 4 default-vlan-id=0
set 5 default-vlan-id=0
set 6 default-vlan-id=0
set 7 default-vlan-id=0
set 8 default-vlan-id=0
set 9 default-vlan-id=0
set 10 default-vlan-id=0
set 11 default-vlan-id=0
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" mode=\
dynamic-keys supplicant-identity=MikroTik
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
add name=dhcp_pool1 ranges=192.168.89.10-192.168.89.254
/ip dhcp-server
add address-pool=default-dhcp disabled=no interface=bridge1 name=dhcp1
add address-pool=dhcp_pool1 disabled=no interface=ether10 name=dhcp2
/ppp profile
add change-tcp-mss=yes dns-server=8.8.8.8 local-address=default-dhcp name=\
PPTP-Profile only-one=yes remote-address=default-dhcp use-encryption=yes \
wins-server=8.8.4.4
/user group
set full policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,passw\
ord,web,sniff,sensitive,api,romon,dude,tikapp"
/interface bridge port
add bridge=bridge1 comment=defconf interface=ether2
add bridge=bridge1 comment=defconf interface=ether3
add bridge=bridge1 comment=defconf interface=ether4
add bridge=bridge1 comment=defconf interface=ether5
add bridge=bridge1 comment=defconf interface=ether6
add bridge=bridge1 comment=defconf interface=ether7
add bridge=bridge1 comment=defconf interface=ether8
add bridge=bridge1 comment=defconf interface=ether9
add bridge=bridge1 comment=defconf disabled=yes interface=ether10
add bridge=bridge1 comment=defconf interface=sfp-sfpplus1
add bridge=bridge1 comment=defconf interface=5G
add bridge=bridge1 comment=defconf interface=2G
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge1 list=LAN
add comment=defconf interface=ether1 list=WAN
/interface pptp-server server
set authentication=chap,mschap1,mschap2 default-profile=PPTP-Profile enabled=\
yes
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge1 network=\
192.168.88.0
add address=192.168.89.1/24 comment="Lineage 2" interface=ether10 network=\
192.168.89.0
/ip cloud
/ip cloud
set ddns-enabled=yes ddns-update-interval=15m
/ip dhcp-client
add comment=defconf disabled=no interface=ether1
/ip dhcp-server lease
add address=192.168.88.254 client-id=1:4:92:26:da:63:9c mac-address=\
04:92:26:DA:63:9C server=dhcp1
add address=192.168.88.253 client-id=1:dc:a6:32:44:eb:2d mac-address=\
DC:A6:32:44:EB:2D server=dhcp1
/ip dhcp-server network
add address=192.168.88.0/24 comment=dhcp1 gateway=192.168.88.1
add address=192.168.89.0/24 comment="Lineage 2" gateway=192.168.89.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan type=A
/ip firewall filter
add action=drop chain=forward comment="Lineage 2 - DA SE NE VIDITA" \
dst-address=192.168.89.0/24 src-address=192.168.88.0/24
add action=drop chain=forward comment="Lineage 2 - DA SE NE VIDITA" \
dst-address=192.168.88.0/24 src-address=192.168.89.0/24
add action=accept chain=input comment="PPTP VPN" dst-port=1723 protocol=tcp
add action=accept chain=input comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=\
"defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related
add action=accept chain=forward comment=\
"defconf: accept established,related, untracked" connection-state=\
established,related,untracked
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" \
connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
add action=drop chain=forward comment="defconf: drop invalid" connection-state=\
invalid
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=\
out,none out-interface-list=WAN
add action=dst-nat chain=dstnat comment=RDP-WORKSTATION disabled=yes dst-port=\
3389 protocol=tcp src-port="" to-addresses=192.168.88.254 to-ports=3389
add action=dst-nat chain=dstnat comment=RDP-VISUALSTUDIO disabled=yes dst-port=\
3390 protocol=tcp to-addresses=192.168.88.195 to-ports=3389
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ip upnp
set enabled=yes
/ip upnp interfaces
add interface=bridge1 type=internal
add interface=ether1 type=external
/ppp secret
add name=HIDDEN profile=PPTP-Profile
add name=HIDDEN profile=PPTP-Profile
add name=HIDDEN profile=PPTP-Profile
add name=HIDDEN profile=PPTP-Profile
/system clock
set time-zone-name=Europe/Ljubljana
/system identity
set name="Main Router"
/system leds
add interface=2G leds=\
2G_signal1-led,2G_signal2-led,2G_signal3-led,2G_signal4-led,2G_signal5-led \
type=wireless-signal-strength
add interface=2G leds=2G_tx-led type=interface-transmit
add interface=2G leds=2G_rx-led type=interface-receive
/system package update
set channel=testing
/system routerboard settings
set auto-upgrade=yes
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
I’m connecting between eth2 and eth3
Could you (also) use iPerf for testing the network speed?
Offtopic:
Your wireless settings could be optimized, i.e. antenna gain is incorrect, country code not set and there is a lot that benefits from a proper configuration.
What should I set the antenna gain to?
Here is the log:
C:\Users\Adephx>C:\Users\Adephx\Desktop\iperf-3.1.3-win64\iperf-3.1.3-win64\iperf3.exe -c 192.168.88.253
Connecting to host 192.168.88.253, port 5201
[ 4] local 192.168.88.254 port 50734 connected to 192.168.88.253 port 5201
[ ID] Interval Transfer Bandwidth
[ 4] 0.00-1.00 sec 113 MBytes 950 Mbits/sec
[ 4] 1.00-2.00 sec 113 MBytes 947 Mbits/sec
[ 4] 2.00-3.00 sec 113 MBytes 949 Mbits/sec
[ 4] 3.00-4.00 sec 113 MBytes 949 Mbits/sec
[ 4] 4.00-5.00 sec 113 MBytes 950 Mbits/sec
[ 4] 5.00-6.00 sec 113 MBytes 948 Mbits/sec
[ 4] 6.00-7.00 sec 113 MBytes 949 Mbits/sec
[ 4] 7.00-8.00 sec 113 MBytes 949 Mbits/sec
[ 4] 8.00-9.00 sec 113 MBytes 948 Mbits/sec
[ 4] 9.00-10.00 sec 113 MBytes 948 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval Transfer Bandwidth
[ 4] 0.00-10.00 sec 1.10 GBytes 949 Mbits/sec sender
[ 4] 0.00-10.00 sec 1.10 GBytes 949 Mbits/sec receiver
iperf Done.
It does look like I'm getting the full speed, yet when I try to copy something from my Pi NAS, or Windows 10 to Windows 10 directly, my speeds cap at around 50 MB/s
Defaults (according to https://mikrotik.com/product/rb4011igs_5hacq2hnd_in):
2G = 3
5G = 3
What speeds do you get when you connect those devices directly via cable (you might want to set IP addresses)? Looks like there is no capping caused by your RB4011.
Those are cable connections, like I said 50MB/s Windows to Windows.
Sorry one last thing. I was looking at Antenna gain settings and I can not find them for the life of me. Can you point me in the right direction?-
Directly connected means without the RB in between. Or did you mean without the RB you get Gigabit?
Wireless interface, make sure Advanced mode is enabled.
I tried both versions, with RB and directly between two Windows 10 machines. The logs above are from a Windows 10 to RB 4-B connection.
I am still unable to find Antenna Gain option:

There we go: http://forum.mikrotik.com/t/lhg-5ac-cant-set-regulatory-domain/140243/1
Can you please share /interface wireless export hide-sensitive?
I’m still missing file transfer speed test while both Windows clients are connected directly.
[Update]
Something changed:
/interface wireless
set [ find default-name=wlan2 ] band=2ghz-b/g/n channel-width=20/40mhz-XX country=slovenia distance=indoors frequency=auto mode=ap-bridge name=2G ssid=TeaTime station-roaming=enabled \
wireless-protocol=802.11 wps-mode=disabled
set [ find default-name=wlan1 ] band=5ghz-a/n/ac channel-width=20/40/80mhz-XXXX country=slovenia disabled=no distance=indoors frequency=auto mode=ap-bridge name=5G secondary-channel=auto ssid=\
TeaTime station-roaming=enabled wireless-protocol=802.11 wps-mode=disabled
/interface wireless manual-tx-power-table
set "5G" manual-tx-powers="1Mbps:0,2Mbps:0,5.5Mbps:17,11Mbps:17,6Mbps:17,9Mbps:17,12Mbps:17,18Mbps:17,24Mbps:17,36Mbps:17,48Mbps:17,54Mbps:17,HT20-0:17,HT20-1:17,HT20-2:17,HT20-3:17,HT20-4:17,HT20-\
5:17,HT20-6:17,HT20-7:17,HT40-0:17,HT40-1:17,HT40-2:17,HT40-3:17,HT40-4:17,HT40-5:17,HT40-6:17,HT40-7:17"
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" mode=dynamic-keys supplicant-identity=MikroTik
I will provide the Win10 to Win10 logs in about 2 hours, when I get home. Cheers.
Sorry, this router is driving me nuts. These are my Win10 to Win10 speeds, but sometimes they go up to 980Mb/s. I suspect a faulty network adapter. That being said, the RB 4-B and the Windows 10 Workstation that have a 1000 Mb/s connection, still only manage to transfer the files with 40 MB/s.
Connecting to host 192.168.88.254, port 5201
[ 4] local 192.168.88.197 port 52569 connected to 192.168.88.254 port 5201
[ ID] Interval Transfer Bandwidth
[ 4] 0.00-1.00 sec 41.6 MBytes 348 Mbits/sec
[ 4] 1.00-2.00 sec 42.8 MBytes 359 Mbits/sec
[ 4] 2.00-3.00 sec 42.9 MBytes 360 Mbits/sec
[ 4] 3.00-4.00 sec 42.8 MBytes 359 Mbits/sec
[ 4] 4.00-5.00 sec 42.8 MBytes 359 Mbits/sec
[ 4] 5.00-6.00 sec 42.9 MBytes 359 Mbits/sec
[ 4] 6.00-7.00 sec 42.8 MBytes 359 Mbits/sec
[ 4] 7.00-8.00 sec 42.9 MBytes 359 Mbits/sec
[ 4] 8.00-9.00 sec 42.6 MBytes 358 Mbits/sec
[ 4] 9.00-10.00 sec 42.9 MBytes 360 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval Transfer Bandwidth
[ 4] 0.00-10.00 sec 427 MBytes 358 Mbits/sec sender
[ 4] 0.00-10.00 sec 427 MBytes 358 Mbits/sec receiver
iperf Done.
What I don’t understand is why my WiFi went into a complete tilt, after I changed the Antenna Gain from 0 to 3, to be within my country limits. Even by resetting it to default, it will no longer work with Auto Frequency ON and Channel Width 20/40/80mhz-XXXX. If I set the frequency manually to 5240, then it works.
My WiFi Win10 to CAT6 Win10
Connecting to host 192.168.88.254, port 5201
[ 4] local 192.168.88.196 port 52771 connected to 192.168.88.254 port 5201
[ ID] Interval Transfer Bandwidth
[ 4] 0.00-1.00 sec 35.6 MBytes 299 Mbits/sec
[ 4] 1.00-2.00 sec 35.1 MBytes 295 Mbits/sec
[ 4] 2.00-3.00 sec 34.2 MBytes 287 Mbits/sec
[ 4] 3.00-4.00 sec 33.2 MBytes 280 Mbits/sec
[ 4] 4.00-5.00 sec 29.1 MBytes 243 Mbits/sec
[ 4] 5.00-6.00 sec 27.5 MBytes 231 Mbits/sec
[ 4] 6.00-7.00 sec 28.5 MBytes 240 Mbits/sec
[ 4] 7.00-8.00 sec 29.9 MBytes 250 Mbits/sec
[ 4] 8.00-9.00 sec 26.9 MBytes 226 Mbits/sec
[ 4] 9.00-10.00 sec 28.0 MBytes 235 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval Transfer Bandwidth
[ 4] 0.00-10.00 sec 308 MBytes 258 Mbits/sec sender
[ 4] 0.00-10.00 sec 308 MBytes 258 Mbits/sec receiver
iperf Done.
The 802.11ac should have a realistic scenario of 210 Mbps - 1000 Mbps, but even being near router, all I can get is around 320 Mbps. My connection in Windows is defined as 866.7 Mbps.
40-50MBytes/sec = 400Mbit, seems not to bad for network drives even on PC.
How much do you get with different router or direct PC to PC connection?
It was the PI in the end, it doesn’t seem to handle more than 45MB/s transfer rates, probably the SD card.