We are using RB3011UiAS (RouterOS 6.48.1) for our enterprise network.
Three ports are configured into WAN List and remaining ones bridged for LAN.
The 2/3 WAN connections are directly terminated through fiber converter with Public IPs (with local and remote IPs assignment) and 3rd one is GPON shared link, and terminated through CPE with static private IP from the pool of Huawei GPON CPE DHCP server, but again we had acquired a public IP onto this link as well.
Recently we had configured RB750Gr3(RouterOS 6.48) as a backup of the above device, and replicated all config of the above router.
The problem we are facing now is that from RB750, we are unable to Speed Test from ookla, as when we open the site, it stuck at “finding the optimal Sever” and never get any server and in that scenario, when we hiot the Go button, the test never runs.
Please advice if there is any particular command for RB750Gr3 to do so, what can be the alternative for that.
Make sure that you use the same RouterOS version (and consider using LTS instead of stable).
To compare please post configs from both devices (/export hide-sensitive file=anynameyoulike)
Its not a hardware error, since my RB750Gr3 runes Ookla Speed test without any problem.
Here is a test on my 100/100 fiber line.
Its limited for one user to max 90Mbps download and 80Mbps upload. (without limit, I get close to 100/100)
.
Since your router has 6.48, you have upgraded after it was hacked, so you have had this problem some time.
Problem is that there was som older version of RouterOS that was open for attack when winbox was open from internet.
I have posted this information several times on the forum.
Do you need to administrate the router from the outside?
If yes, VPN is the way to go for Router admin from the outside.
If VPN is not possible to use, then to access the route:
Use another port than default.
Use port knocking. This prevents someone from seeing open ports.
Use a long and good password.
Use access list to prevent any random internet from accessing your router.
Log everything. (See my signature for example.)
If possible, setup a remote router and make all routers (to administrate) connect to it using VPN to an admin the router.
7.++++
\
I guess its not normal to use proxy as well, so all this is part of a hack as well.
PS it does not help to just delete lines in config or use a restore. As Znevna write, netinstall is the only way to go (or replace the router)
