PtP link for 20+km

RouterOS Wireless Networking
1

Hey There,

I been going thru a lot of posts to try to get an idea but I feel like i cant move forward without some direction.

# mar/27/1970 14:51:45 by RouterOS 7.2.3
# software id = TRJD-QWV4
#
# model = RB911G-5HPacD
# serial number = 
/interface bridge
add admin-mac=2C:C8:1B:AE:6B:B3 auto-mac=no comment=defconf name=bridge
/interface wireless
set [ find default-name=wlan1 ] adaptive-noise-immunity=ap-and-client-mode \
    amsdu-limit=2048 amsdu-threshold=2048 antenna-gain=30 band=5ghz-a/n/ac \
    channel-width=20/40/80mhz-eCee country=turkey disabled=no frequency=5640 \
    frequency-mode=superchannel hw-retries=3 mode=ap-bridge nv2-cell-radius=\
    23 nv2-downlink-ratio=60 nv2-security=enabled rx-chains=0,1 ssid=\
    Invul_WIFI tx-chains=0,1 wireless-protocol=nv2
/interface wireless nstreme
set wlan1 disable-csma=yes enable-polling=no
/interface list
add name=WAN
add name=LAN
/interface lte apn
set [ find default=yes ] ip-type=ipv4 use-network-apn=no
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk eap-methods="" \
    mode=dynamic-keys supplicant-identity=MikroTik
/routing bgp template
set default disabled=no output.network=bgp-networks
/routing ospf instance
add disabled=no name=default-v2
/routing ospf area
add disabled=yes instance=default-v2 name=backbone-v2
/interface bridge port
add bridge=bridge comment=defconf ingress-filtering=no interface=ether1
add bridge=bridge comment=defconf ingress-filtering=no interface=wlan1
/ip settings
set max-neighbor-entries=8192
/ipv6 settings
set disable-ipv6=yes max-neighbor-entries=8192
/interface detect-internet
set detect-interface-list=all
/interface list member
add interface=ether1 list=WAN
add interface=wlan1 list=LAN
/interface ovpn-server server
set auth=sha1,md5
/ip address
add address=192.168.1.23 disabled=yes interface=wlan1 network=192.168.1.0
add address=192.168.1.221/24 interface=bridge network=192.168.1.0
/ip dhcp-client
add comment=defconf disabled=yes interface=bridge
/ip dns static
add address=159.148.172.226 name=upgrade.mikrotik.com
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=192.168.1.1
/system identity
set name=INVULBASE

Above is my export file. Im not a professional just an someone that needed better connection than we i had access to in suburbs
My bridge is in the city center hosting my 1000mbps fiber connection. Distance is 21km at sea level while my receiver is 650 meter higher altitude
Initially i was able to reach to 120-140mbps which is something I can live with. At the moment my speed is in range of 40mbps and even tho i keep playing with settings i cant seem to improve it.

Could you give me an idea if any of my settings might be causing conflict between them.
I would appreciate any feedback :slight_smile:

Thank you!

2

It may seem counterintuitive, but I suggest that you’ll get better performance from using 802.11 mode on a long distance PtP link. The other protocols were made for dealing with the hidden node problem in PtMP links. Despite the Mikrotik wifi driver stack not being “the best” for 802.11, it does very well in long distance situations where the directional antennas are aimed well and the protocol reduces latency. Set a password for your link security and ultimately do not fiddle with many advanced settings, the 802.11 stack is well built to operate in environments where many of the same RF protocols are being used. There is a downside, WPA2 has been shown to be vulnerable, so you may have extra risk for interception and to mitigate this you may need to run a PtP VPN in addition across the wireless link. Please also be a courteous WiFi neighbor and refrain from using superchannel. Using channel-width=20/40/80mhz-XXXX might also produce better results as you let the radio chip analyze the wireless environment. If you feel like you want your radio to use only certain RF channels then you should define some scan lists.

3

You can only tweak a little bit on this data.
antenna-gain=30 this parameter indicates how much you need to lower the output power of the device. Usually it is set to 0 and the signal level is adjusted directly with the transmitting power parameter (Tx power). The maximum allowable radiated power is regulated by the laws of the country.

band=5ghz-a/n/ac do not need standard a (1998) compatibility mode, here use band=5ghz-only-ac

channel-width=20/40/80mhz-eCee use XXXX then the device will be able to automatically change the position of the center channel depending on the interference.

hw-retries=3 number of repeats in case of unsuccessful transmission you can put 7 (maximum value 15)
nv2-downlink-ratio=60 if you don’t know what it is, you should leave the default value of 50

The main problems should be sought in the radio airwaves. To do this, you need to show a scan of the air from each point and the Winbox/Wireless/Interface wlan1/Status tab from each point

4

Thank you for the feedback already. I will apply the recommendations and let you know the results :slight_smile:

5

Well some of the settings I was able to adapt but rest didnt work so well.

I changed the channel width to XXXX but it`s not letting me change to 5ghz-only-N
I am broadcasting now on 5680mhz and getting an error when i try to change to only N

I tried 802.11 mode but that did made me lose the signal quality for 15dbs which in overall was somehow slower.

6

@Invulon

post actual config of both of your devices using on terminal “/export show-sensitive”
remember to censore the serial numbers and private data, but do not remove anything, just censore.

And what are the antenna used on both side?
Are two QRT? I read RB911G-5HPacD on the export and can be anything…

After you do that, do not touch anything on the config until I reply

7

OFC, I used a premade package from a network partner in Turkey,

Setup is below identical set
2 x MTAD-5G-30D3-PA MANT 30 PA ( Antenna )
2 x NETBOX 5 ( AP / PTP Link Unit ) - Mikrotik RB911G-5HPacD-NB NetBox 5 5 Ghz , AC , PTP/PTMP ,L4


This is the AP

[admin@INVULBASE] > /export show-sensitive
# mar/29/1970 08:05:40 by RouterOS 7.4
# software id = TRJD-QWV4
#
# model = RB911G-5HPacD
# serial number = xxxxxxx
/interface bridge
add admin-mac=xxxxx auto-mac=no comment=defconf name=bridge
/interface wireless
set [ find default-name=wlan1 ] adaptive-noise-immunity=ap-and-client-mode \
    ampdu-priorities=0,1,2 amsdu-limit=3839 amsdu-threshold=3839 band=\
    5ghz-a/n/ac channel-width=20/40/80mhz-XXXX country=no_country_set disabled=\
    no frequency=5680 frequency-mode=superchannel mode=ap-bridge \
    nv2-cell-radius=23 nv2-preshared-key=1154 nv2-security=enabled rx-chains=\
    0,1 ssid=Invul_WIFI tx-chains=0,1 wireless-protocol=nv2
/interface wireless nstreme
set wlan1 disable-csma=yes enable-polling=no
/interface list
add name=WAN
add name=LAN
/interface lte apn
set [ find default=yes ] ip-type=ipv4 use-network-apn=no
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk eap-methods="" \
    mode=dynamic-keys supplicant-identity=MikroTik wpa-pre-shared-key=\
    xxxxx wpa2-pre-shared-key=xxxxxx
/routing bgp template
set default disabled=no output.network=bgp-networks
/routing ospf instance
add disabled=no name=default-v2
/routing ospf area
add disabled=yes instance=default-v2 name=backbone-v2
/interface bridge port
add bridge=bridge comment=defconf ingress-filtering=no interface=ether1
add bridge=bridge comment=defconf ingress-filtering=no interface=wlan1
/ip settings
set max-neighbor-entries=8192
/ipv6 settings
set disable-ipv6=yes max-neighbor-entries=8192
/interface detect-internet
set detect-interface-list=all
/interface list member
add interface=ether1 list=WAN
add interface=wlan1 list=LAN
/interface ovpn-server server
set auth=sha1,md5
/interface wireless align
set filter-mac=xxxxxxx receive-all=yes ssid-all=yes
/ip address
add address=192.168.1.23 disabled=yes interface=wlan1 network=192.168.1.0
add address=192.168.1.221/24 interface=bridge network=192.168.1.0
/ip dhcp-client
add comment=defconf disabled=yes interface=bridge
/ip dns static
add address=159.148.172.226 name=upgrade.mikrotik.com
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=192.168.1.1
/system identity
set name=INVULBASE

and this is the CPE

# mar/21/1970 23:26:05 by RouterOS 7.4
# software id = S1KQ-ITYZ
#
# model = RB911G-5HPacD
# serial number = xxxxxxx
/interface bridge
add name=bridge1
/interface wireless
set [ find default-name=wlan1 ] adaptive-noise-immunity=ap-and-client-mode \
    ampdu-priorities=0,1,2 amsdu-limit=3839 amsdu-threshold=3839 band=\
    5ghz-a/n/ac channel-width=20/40/80mhz-XXXX country=no_country_set disabled=\
    no frequency=5680 frequency-mode=superchannel mode=station-bridge \
    nv2-preshared-key=xxxx nv2-security=enabled rx-chains=0,1 ssid=Invul_WIFI \
    tx-chains=0,1 wireless-protocol=nv2
/interface list
add name=WAN
add name=LAN
/interface lte apn
set [ find default=yes ] ip-type=ipv4 use-network-apn=no
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk eap-methods="" \
    group-ciphers=tkip,aes-ccm mode=dynamic-keys supplicant-identity=MikroTik \
    unicast-ciphers=tkip,aes-ccm wpa-pre-shared-key=xxxxx \
    wpa2-pre-shared-key=xxxxx
/routing bgp template
set default disabled=no output.network=bgp-networks
/interface bridge port
add bridge=bridge1 ingress-filtering=no interface=wlan1
add bridge=bridge1 ingress-filtering=no interface=ether1
/ip settings
set max-neighbor-entries=8192
/ipv6 settings
set disable-ipv6=yes max-neighbor-entries=8192
/interface detect-internet
set detect-interface-list=all
/interface list member
add interface=wlan1 list=WAN
add interface=ether1 list=LAN
/interface ovpn-server server
set auth=sha1,md5
/ip address
add address=192.168.1.222/24 interface=ether1 network=192.168.1.0
/ip dns static
add address=159.148.172.226 name=upgrade.mikrotik.com
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=192.168.1.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/system identity
set name=client
[admin@client] >

tx/rx ccq is around 80/80 in general
Signal to noise 45-46 dBm
Noise Floor : -103-105 dBm

AP is connected straight to my fiber modem with 1000mbps
CPE is receiving at best 40-60mbps.

I would be grateful if i can get above 100mbps since i saw this speed few times but as i kept trying to improve the settings i couldn’t get back to it.
there is 650metre elevation and i aligned it as well as possible with nothing blocking in between.
20,1km exact distance
Only concern i have is there is one electric pole with cables in the same alignment. I don’t know if it could be the issue

Due to my job i need a decent speed in middle of nowhere basically. So I’m the only one using this link.
I also checked a lot of channels and the one im using seems to be the one of the least used one

thank you

8

Give me the time to read both export and reply

9

You call the 2nd “CPE”, is simply a station?..

Insctuction: paste on termial the script at your own risk, on the respective device.
If you do not know what you are doing, read each script until you do not understand each line.
Do not alter the scripts, is not supposed to enter anything on old wpa key, leave it alone.

Do not omit strting { and }

This is for the AP-bridge

{
/interface bridge
set [find] admin-mac=[/interface ethernet get ether1 mac-address] auto-mac=no name=bridge
/interface wireless nstreme
set wlan1 disable-csma=no enable-polling=yes
/interface list
remove [find]
/routing bgp template
remove [find]
/routing ospf instance
remove [find]
/routing ospf area
remove [find]
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods=passthrough wpa-pre-shared-key=""
/interface lte apn
set [ find default=yes ] ip-type=auto use-network-apn=yes
/interface bridge port
set [find] ingress-filtering=yes
/ip settings
set max-neighbor-entries=4096
/ipv6 settings
set max-neighbor-entries=2048
/interface detect-internet
set detect-interface-list=none
/interface list member
remove [find]
/interface ovpn-server server
set auth=sha1,md5,sha256,sha512
/interface wireless
set [ find default-name=wlan1 ] adaptive-noise-immunity=none ampdu-priorities=0 amsdu-limit=8192 amsdu-threshold=8192 \
    band=5ghz-onlyac installation=outdoor max-station-count=6 tdma-period-size=auto wps-mode=disabled
/ip service
set telnet disabled=yes
set ftp disabled=yes
set api disabled=yes
set api-ssl disabled=yes
}

And this is for the “CPE” station-bridge

{
/interface bridge
set [find] admin-mac=[/interface wireless get wlan1 mac-address] auto-mac=no name=bridge
/interface list
remove [find]
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods=passthrough wpa-pre-shared-key=""
/interface lte apn
set [ find default=yes ] ip-type=auto use-network-apn=yes
/routing bgp template
remove [find]
/interface list member
remove [find]
/interface ovpn-server server
set auth=sha1,md5,sha256,sha512
/ip address
set [find] interface=bridge
/interface bridge port
set [find] ingress-filtering=yes
/ip settings
set max-neighbor-entries=4096
/ipv6 settings
set max-neighbor-entries=2048
/interface detect-internet
set detect-interface-list=none
/interface wireless
set [ find default-name=wlan1 ] adaptive-noise-immunity=none ampdu-priorities=0 amsdu-limit=8192 amsdu-threshold=8192 \
    band=5ghz-onlyac installation=outdoor max-station-count=6 tdma-period-size=auto wps-mode=disabled
}
10

thank you, i will try to make it work. I tried to run both scripts however somehow my settings hasnt changed
trying to find out the source of the issue now

11

What mean? The speed is the same or the script are not applied?
If the latter, test pasting one line at time except the first { and end } until you do not have some error,

if is the first, try to not use 80MHz, but only 20+20, with “Ce” and not “XX”
do a scan and see if some intervals are free, and test thats.

On crowed spectrum, often 40MHz 20+20 go faster than 80MHz 20+20+20+20

12

Of course you can not work in standard N because it does not support a bandwidth of 80 (XXXX), but only supports a width of 40 (XX). You need to use 5ghz-only-ac
Apply the recommended settings . They will tidy up the general device settings.

And then show this data and we will help you fine tune the radio settings.

13

Thank you for the further support,

i did manage to mess up the whole network yesterday and had to go reset the settings and import the script after on both sides
I think script actually ran on both sides ok. Based on what i read i checked and settings seems up to date.

I was able to take a screenshot from the station bridge where i receive the connection.
It doesnt show so many channels being used but when i did it earlier in the city list was about 80-90 different users in the city.
I cant seem to scan from this location i think i need to be in the bridge location to do it tomorrow.

HomeNet_5G is my asus router that i use within the house.
Invul_WIFI is the bridge

14

Try 5680 20/40 eC on both sides, do not use XX

paste this on both devices:

/interface bridge
set [find] protocol-mode=none
15

I have been testing for few days but issue was still the same, stayed around 30-50mbps max limit
i also play some MMO`s on and off and i noticed some spike on the connection occasionally raising the ms significantly.

I did change few settings like previous recommendations to try nstreme and that seem to have improved the ping and speed is now up to 60-80mbps.

I still dont know what i mess up to lose my original speed.
I have a feeling that antenna alignment might be part of the issue my station bridge is aligned well but i think the bridge where i got the main connection needs to be micro adjusted.
I was hoping to receive up to 200mbps but i think only way to improve is with a better antenna?

thank you for all of the suggestion so far it has been very helpful

16

You did not provide the necessary data to help you set it up.
You must use the 802.11 wireless protocol to scan the air in the background.
…Background scan feature is working in such conditions:
Wireless interface should be enabled
For wireless interface in AP mode - when it is operating in 802.11 protocol mode and is on fixed channel (that is - channel selection and initial radar checking is over)
For wireless interface in Station mode - when it is connected to 802.11 protocol AP.
https://wiki.mikrotik.com/wiki/Manual:Interface/Wireless#Scan
To analyze the scan of the air, you need to see not only the frequency of the neighboring point, but also the width of the band used
Screenshot_14.jpg
Full parameters with which the radio channel works can be seen in the registration table
Screenshot_16.jpg

17

For scan is not necessary at all to set the radio on 802.11 only, just scan list is used.

“Background scan” is another thing.

18

thank you guys, i will do that tomorrow, i have been traveling last couple days so i didn’t had any chance to do anything with it.

19

ok i was able to look at it today

This scan is from where i have the 1000mbps connection where im using as bridge.

a lot of people using the channels here its about 98 of them so its 2 pages

here is the one where i use as station bridge where i receive the connection directly.

Invul_WIFI is me, at 5660 it seems

I also updated the 3rd picture ^^

20

cropped “chan…” on the last screenshot do not help…


Try 5600-Ce