Problem with RB1100AHx2 not more than 24 Mbps

Hello,

I have a customer with 50/50 fiber connection. My core router is a 1100AHx2.

the router has a rstp bridge with 2 links to a mountain, and there starts a network with 70 access points. All is routed and working fine.

I have about 70/70 link between the end of the network and the core router.. all is tested with bandwidth test in TCP and UDP.. There are parts of the network with 40/40 Mbps and 30/30Mbps.. Its a network with many parts.

My fiber company made tests in the connection and they get the 50/50. All correct for them.
We tested the network from the core to all the parts.. and we get more bandwith available..

Our customer cant get more than 24 Mbps to internet when the core is connected to the fiber. We tested connected via ethernet in the 1100AHx2.. through links in the network.. many tests, and we are not able to get more. We changed the wire from the core router to fiber.. but its the same. We changed the ether1 connected to the fiber with 100 full duplex fixed instead of auto.. and nothing changed.

When all users are getting 20 Mbps from internet, we can make speed tests through the network getting 70/70 Mbps aprox.. arriving the core router, but not to Internet O_O


Anyone has an idea?

We have many rules in NAT doing src and dst nat. About 100 rules..
The CPU is 35%.
10 basic filter rules..


My customer will try on monday to put a switch in the middle of the RB1100 and the ethernet coming from the fiber conversor. Lets see...

We noticed that we have errors in VLAN. They give us the connection with this vlan..


< IMAGE >

http://screencast.com/t/lzsNvTi7Y8GB

< /IMAGE >

Can you clarify - is the 50/50 ISP fibre connection the ISP connection or a customer connection?

50/50 is ISP fiber to ether1 of core router. It arrives to fiber conversor and they give us via ethernet with one VLAN.

I would check the ISP link with a simple config - e.g. PC with VLAN configured or PC plus switch to tag VLAN and make sure that the ISP is delivering the internet connectivity at the expected speed before considering anything else. The link speed and the internet access speed may not be the same thing.