I am having some issues with the RB2011 specifically dealing with poor throughput on PPOE and would appreciate any guidance the experts here could offer. The problem in a nutshell, is that the download and upload speeds are poor when compared to my ASUS RtN16 running Tomato. The upload speed in particular is terrible with my 25/10 connection barley able to sustain 1mbps. Sometimes, the RB2011 will work ok for a day or so but then the upload speed slows to a trickle. I own 2 Routerboard 750 models which did not have this problem. Right now the RB2011 is pretty much unusable for me.
I was thinking it might be firewall or NAT related. Could the rule order be somehow connected to my issue? Here is my NAT config:
# jul/05/2016 04:51:18 by RouterOS 6.35.4
# software id = 94WL-XXXX
#
/ip firewall nat
add action=masquerade chain=srcnat
add action=src-nat chain=srcnat disabled=yes out-interface=pppoe-out1 \
to-addresses=XX.XXX.XXX.XXX
add action=masquerade chain=srcnat src-address=192.168.1.0/24 to-addresses=\
XX.XXX.XXX.XXX
add chain=dstnat dst-address=192.168.1.0/24 protocol=tcp src-address=0.0.0.0
add action=masquerade chain=srcnat comment=\
"Hairpin Nat for Zmail - Local WAN All ports" dst-address=192.168.1.10 \
out-interface=lan3 protocol=tcp src-address=192.168.1.0/24
add action=dst-nat chain=dstnat comment="DNS to Zimbra" dst-address=\
XX.XXX.XXX.XXX dst-port=20-22 protocol=tcp to-addresses=192.168.1.10 \
to-ports=20-22
add action=dst-nat chain=dstnat comment="DNS to Zimbra" dst-address=\
XX.XXX.XXX.XXX dst-port=25 protocol=tcp to-addresses=192.168.1.10 \
to-ports=25
add action=dst-nat chain=dstnat comment="Web Interface for Zmail" \
dst-address=XX.XXX.XXX.XXX dst-port=80 protocol=tcp to-addresses=\
192.168.1.10 to-ports=80
add action=dst-nat chain=dstnat comment="DNS to Zimbra" dst-address=\
XX.XXX.XXX.XXX dst-port=53 protocol=tcp to-addresses=192.168.1.10 \
to-ports=53
add action=dst-nat chain=dstnat comment="Web Interface for Zmail" \
dst-address=XX.XXX.XXX.XXX dst-port=443 protocol=tcp to-addresses=\
192.168.1.10 to-ports=443
add action=dst-nat chain=dstnat comment="Mail ports for Zmail" dst-address=\
XX.XXX.XXX.XXX dst-port=110,143,389,465,587,636 protocol=tcp \
to-addresses=192.168.1.10 to-ports=0-65535
add action=dst-nat chain=dstnat comment="Webmin for Zmail" dst-address=\
XX.XXX.XXX.XXX dst-address-type=local dst-port=10000,10024,10025 \
protocol=tcp to-addresses=192.168.1.10 to-ports=0-65535
add action=dst-nat chain=dstnat comment="Secure ports for Zmail" dst-address=\
XX.XXX.XXX.XXX dst-port=993,995 protocol=tcp to-addresses=192.168.1.10 \
to-ports=0-65535
add action=dst-nat chain=dstnat comment="Admin IF for Zmail" dst-address=\
XX.XXX.XXX.XXX dst-address-type=local dst-port=7025,7071,7306,7307,7780 \
protocol=tcp to-addresses=192.168.1.10 to-ports=0-65535
add action=dst-nat chain=dstnat comment="Admin IF for Zmail" dst-address=\
XX.XXX.XXX.XXX dst-address-type=local dst-port=60000-65535 protocol=tcp \
to-addresses=192.168.1.10 to-ports=60000-65535
add action=dst-nat chain=dstnat comment="Torrent to NAS UDP" dst-address=\
XX.XXX.XXX.XXX dst-port=56969 protocol=tcp to-addresses=192.168.1.51 \
to-ports=56969
add action=dst-nat chain=dstnat comment="Torrent to NAS UDP" dst-address=\
XX.XXX.XXX.XXX dst-port=49152-65535 protocol=tcp to-addresses=\
192.168.1.51 to-ports=49152-65535
add action=dst-nat chain=dstnat comment="Torrent to NAS" dst-address=\
XX.XXX.XXX.XXX dst-port=56969 protocol=udp to-addresses=192.168.1.51 \
to-ports=56969
add action=dst-nat chain=dstnat comment="Torrent to NAS" dst-address=\
XX.XXX.XXX.XXX dst-port=49152-65535 protocol=udp to-addresses=\
192.168.1.51 to-ports=49152-65535
add action=dst-nat chain=dstnat comment="Torrent to NAS" dst-address=\
XX.XXX.XXX.XXX dst-port=21000 protocol=tcp to-addresses=192.168.1.51 \
to-ports=21000
add action=dst-nat chain=dstnat comment="Torrent to NAS" dst-address=\
XX.XXX.XXX.XXX dst-port=873 protocol=tcp to-addresses=192.168.1.51 \
to-ports=873
add action=dst-nat chain=dstnat comment="SSH to NAS" dst-address=\
XX.XXX.XXX.XXX dst-port=2222 protocol=tcp to-addresses=192.168.1.3 \
to-ports=2222
add action=dst-nat chain=dstnat comment="Torrent to NAS" dst-address=\
XX.XXX.XXX.XXX dst-port=8222-8320 protocol=tcp to-addresses=192.168.1.10 \
to-ports=8222-8320
add action=dst-nat chain=dstnat comment="DNS to Zimbra" dst-address=\
XX.XXX.XXX.XXX dst-port=25 protocol=tcp to-addresses=192.168.1.10 \
to-ports=25
add action=dst-nat chain=dstnat comment="Zoneminder on Zimbra" dst-address=\
XX.XXX.XXX.XXX dst-port=8099 protocol=tcp to-addresses=192.168.1.10 \
to-ports=8099
Firewall Rules:
# jul/05/2016 04:52:10 by RouterOS 6.35.4
# software id = 94WL-XXXX
#
/ip firewall filter
add chain=input connection-state=established
add chain=input connection-state=related
add action=drop chain=input connection-state=invalid
add chain=input in-interface=lan3
add action=drop chain=input
add chain=forward connection-state=established
add chain=forward connection-state=related
add action=drop chain=forward connection-state=invalid disabled=yes
add chain=forward in-interface=lan3
add chain=forward comment="Mail Ports for Zmail" dst-address=192.168.1.10 \
dst-port=10000,10024,10025 protocol=tcp
add chain=forward comment="DNS IF for Zmail" dst-address=192.168.1.10 \
dst-port=20-22 protocol=tcp
add chain=forward comment="Mail Ports for Zmail" dst-address=192.168.1.10 \
dst-port=60000-65535 protocol=tcp
add chain=forward comment="DNS IF for Zmail" dst-address=192.168.1.10 \
dst-port=25 protocol=tcp
add chain=forward comment="DNS IF for Zmail" dst-address=192.168.1.10 \
dst-port=53 protocol=tcp
add chain=forward comment="Web IF for Zmail" dst-address=192.168.1.10 \
dst-port=80 protocol=tcp
add chain=forward comment="Web IF for Zmail" dst-address=192.168.1.10 \
dst-port=443 protocol=tcp
add chain=forward comment="Secure ports for Zmail" dst-address=192.168.1.10 \
dst-port=993,995 protocol=tcp
add chain=forward comment="Admin IF for Zmail" dst-address=192.168.1.10 \
dst-port=7025,7071,7306,7307,7780 protocol=tcp
add chain=forward comment="Web IF for Zmail" dst-address=192.168.1.10 \
dst-port=110,143,389,465,587,636 protocol=tcp
add chain=forward comment="Torrent for NAS UDP" dst-address=192.168.1.51 \
dst-port=56969 protocol=tcp
add chain=forward comment="Torrent for NAS UDP" dst-address=192.168.1.51 \
dst-port=49152-65535 protocol=tcp
add chain=forward comment="Torrent for NAS" dst-address=192.168.1.51 \
dst-port=56969 protocol=udp
add chain=forward comment="Torrent for NAS" dst-address=192.168.1.51 \
dst-port=49152-65535 protocol=udp
add chain=forward comment="Torrent for NAS" dst-address=192.168.1.51 \
dst-port=8222-8320 protocol=tcp
add chain=forward comment="Torrent for NAS" dst-address=192.168.1.51 \
dst-port=21000 protocol=tcp
add chain=forward comment="Torrent for NAS" dst-address=192.168.1.51 \
dst-port=2222 protocol=tcp
add chain=forward comment="Torrent for NAS" dst-address=192.168.1.51 \
dst-port=873 protocol=tcp
add action=drop chain=forward
I have searched these forums for hours but have not succeeded in finding any solutions. What I do know is that when the network is connected to the PPOE modem with the ASUS router running Tomato, I don’t have the problem. Any advice will be gratefully received.