Problems with internet speed

RouterOS Beginner Basics
1

hi, i have a problem with my speed internet. My ISP is orange with VLAN20 NEBA. My speed is about 300 Mb and i only have about 7 Mb with my router mikrotik. however if i do the test with my router of orange i have 300 Mb. down you can see my configuration of my router. Thanks very much for yours help

2025-12-18 21:41:20 by RouterOS 7.20.6

software id = LHDK-4SWS

model = RB4011iGS+5HacQ2HnD

serial number = XXXXXXXXXXX

/interface bridge
add name=bridge1
/interface ethernet
set [ find default-name=ether1 ] auto-negotiation=no
set [ find default-name=ether2 ] auto-negotiation=no comment="Entrada WAN"
name=ether2-WAN
set [ find default-name=ether3 ] auto-negotiation=no
set [ find default-name=ether4 ] auto-negotiation=no
set [ find default-name=ether5 ] auto-negotiation=no
set [ find default-name=ether6 ] auto-negotiation=no
set [ find default-name=ether7 ] auto-negotiation=no
set [ find default-name=ether8 ] auto-negotiation=no
set [ find default-name=ether9 ] auto-negotiation=no
set [ find default-name=ether10 ] auto-negotiation=no
set [ find default-name=sfp-sfpplus1 ] disabled=yes
/interface vlan
add interface=ether2-WAN name=vlan20 vlan-id=20
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa-psk,wpa2-psk group-ciphers=tkip,aes-ccm mode=
dynamic-keys name=profile1 supplicant-identity="" unicast-ciphers=
tkip,aes-ccm
/interface wireless
set [ find default-name=wlan1 ] disabled=no mode=ap-bridge name=XXXXXX2G
security-profile=profile1 ssid=XXXXXX-F62D2
set [ find default-name=wlan2 ] disabled=no mode=ap-bridge name=XXXXXX5G
security-profile=profile1 ssid=XXXXXX-F62D5
/ip pool
add name=dhcp_pool0 ranges=192.168.1.50-192.168.1.250
/ip dhcp-server
add address-pool=dhcp_pool0 interface=bridge1 name=dhcp1
/port
set 0 name=serial0
set 1 name=serial1
/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
add bridge=bridge1 interface=ether6
add bridge=bridge1 interface=XXXXX-5G
add bridge=bridge1 interface=ether7
add bridge=bridge1 interface=ether8
add bridge=bridge1 interface=ether9
add bridge=bridge1 interface=ether10
add bridge=bridge1 interface=XXXXX-2G
/ip address
add address=192.168.1.1/24 interface=bridge1 network=192.168.1.0
/ip dhcp-client
add default-route-tables=main interface=vlan20
/ip dhcp-server network
add address=192.168.1.0/24 dns-server=8.8.8.8 gateway=192.168.1.1
/ip firewall filter
add action=accept chain=forward comment="Trafico de salida desde la LAN"
out-interface=ether2-WAN src-address=192.168.1.0/24
add action=accept chain=input comment="Conexiones establecidas"
connection-state=established,related
add action=accept chain=input comment="Permitir DNS desde LAN" dst-port=53
protocol=tcp src-address=192.168.1.0/24
add action=drop chain=input comment="Bloqueo Winbox desde fuera LAN"
dst-port=8291 in-interface=ether2-WAN layer7-protocol="" protocol=tcp
add action=accept chain=input comment="Trafico administraci\C3\B3n local"
dst-port=8291,80 protocol=tcp src-address=192.168.1.0/24
add action=accept chain=input comment="Permitir protocolo ICMP" protocol=icmp
src-address=192.168.1.0/24
add action=drop chain=input comment="Rechazo de paquetes no autorizados"
/ip firewall nat
add action=masquerade chain=srcnat comment="Salida enmascarada internet"
out-interface=vlan20
/ip firewall service-port
set ftp disabled=yes
/ip service
set ftp disabled=yes
set telnet disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/system clock
set time-zone-name=Europe/Madrid
/system routerboard settings
set enter-setup-on=delete-key

2

So low, have you checked the Link Speed on the Ethernet side ?
Sounds like you just have a link speed of 10Mbit

3

@damuro Why auto negotiation is off in all the interfaces? Why you are not using the default firewall rules? You definitely should, you are exposing yourself! You just need to add the NAT masquerade for connectivity (and then add your rules on top of the default rules, but it’s better to leave them!

4

why did you disable it?

5

Might be helpful to tell us which country you are in, what internet delivery [fibre, coax, mobile phone network etc] and what router hardware.

7

99% sure that’s Spain with FTTH. Hardware is in the description

But the speed thing is almost certain to be caused by the disabled negotiation.

8

So it is. In letters so big, I ignored them. With the ISP being stated as Orange, I was wondering whether this was a mobile phone network connection.

9

hi everyone, the first thanks to all for yours comments. I am in spain, my conexion is fibre, i have the ONT orange connect and configurated in my mikrotik. My speed is the same with auto negotiation activated or disabled. i added the rules of firewalls of @gardlaerk and i has had a little up of speed of 7 Mb to 16 Mb. The software of mikrotik has been updated, but before of updated the problem was the same.

Thanks to all.

10

Reset to defaults, add VLAN (and change NAT accordingly) and try again. This router is able to do Gigabit easily.

You are testing with LAN cable, aren't you?

11

Olay, so if auto negotiation doesn't change anything… What's the link speed on the WAN interface then?

12

Hi, here i send you a picture of my configuration.

Thanks.

captura2
captura2721×844 49.4 KB

13

You don't show the Status section, where the currently running parameters are shown.

14

Hi, I send you the picture of status conexion.

Thanks.

captura
captura724×676 29.5 KB