We’re having a some extreme throughput issues here with a RB1200.
It is currently acting as a NAT within a private network. It also obviously assigning DHCP to this isolated network behind the NAT. This is to remain undiscoverable, but still obtain access to the resources in the other network. However, with the current setup we are only getting about 10Mb connections when going through the NAT where both sides are 1Gb connections. We are still unsure if this is related to the NAT or not, as all other communication appears unaffected.
[admin@MikroTik] > /export compact
# apr/04/2013 12:31:02 by RouterOS 6.0rc12
# software id = ZM99-GQY1
#
/interface bridge
add admin-mac=00:DE:AD:BE:EF:00 auto-mac=no l2mtu=1598 name=ENGLAB
add admin-mac=10:DE:AD:BE:EF:01 auto-mac=no l2mtu=1600 name=PCO
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=2m
/ip pool
add name=dhcp_pool1 ranges=172.16.1.1-172.16.5.254
/ip dhcp-server
add add-arp=yes address-pool=dhcp_pool1 always-broadcast=yes disabled=no interface=\
ENGLAB name=dhcp1
/tool user-manager customer
add backup-allowed=yes disabled=no login=admin password="" paypal-accept-pending=no \
paypal-allowed=no paypal-secure-response=no permissions=owner signup-allowed=no \
time-zone=-00:00
/interface bridge port
add bridge=ENGLAB interface=ether1
add bridge=ENGLAB interface=ether2
add bridge=ENGLAB interface=ether3
add bridge=ENGLAB interface=ether4
add bridge=ENGLAB interface=ether5
add bridge=ENGLAB interface=ether6
add bridge=ENGLAB interface=ether7
add bridge=ENGLAB interface=ether8
add bridge=ENGLAB interface=ether9
add bridge=PCO interface=ether10
/ip accounting
set account-local-traffic=yes enabled=yes
/ip address
add address=10.200.200.202/8 interface=ether10 network=10.0.0.0
add address=172.16.0.1/16 interface=ENGLAB network=172.16.0.0
/ip dhcp-server network
add address=172.16.0.0/16 dns-server=172.16.0.1 gateway=172.16.0.1
/ip dns
set allow-remote-requests=yes servers=10.0.0.19,10.0.0.55
/ip firewall nat
add action=src-nat chain=srcnat dst-address=!172.16.0.0/16 out-interface=PCO protocol=\
!ggp src-address=172.16.0.0/16 to-addresses=10.200.200.202
/ip proxy
set max-cache-size=none
/ip route
add check-gateway=ping distance=1 gateway=10.0.0.51
add distance=1 dst-address=10.0.0.0/8 gateway=PCO
add check-gateway=ping distance=1 dst-address=172.16.0.0/16 gateway=ENGLAB
/system clock
set time-zone-name=America/Los_Angeles
/system ntp client
set enabled=yes primary-ntp=108.61.73.243
/tool graphing interface
add
/tool graphing queue
add
/tool graphing resource
add