RB1200 throughput issues

We’re having a some extreme throughput issues here with a RB1200.

It is currently acting as a NAT within a private network. It also obviously assigning DHCP to this isolated network behind the NAT. This is to remain undiscoverable, but still obtain access to the resources in the other network. However, with the current setup we are only getting about 10Mb connections when going through the NAT where both sides are 1Gb connections. We are still unsure if this is related to the NAT or not, as all other communication appears unaffected.

[admin@MikroTik] > /export compact
# apr/04/2013 12:31:02 by RouterOS 6.0rc12
# software id = ZM99-GQY1
#
/interface bridge
add admin-mac=00:DE:AD:BE:EF:00 auto-mac=no l2mtu=1598 name=ENGLAB
add admin-mac=10:DE:AD:BE:EF:01 auto-mac=no l2mtu=1600 name=PCO
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=2m
/ip pool
add name=dhcp_pool1 ranges=172.16.1.1-172.16.5.254
/ip dhcp-server
add add-arp=yes address-pool=dhcp_pool1 always-broadcast=yes disabled=no interface=\
    ENGLAB name=dhcp1
/tool user-manager customer
add backup-allowed=yes disabled=no login=admin password="" paypal-accept-pending=no \
    paypal-allowed=no paypal-secure-response=no permissions=owner signup-allowed=no \
    time-zone=-00:00
/interface bridge port
add bridge=ENGLAB interface=ether1
add bridge=ENGLAB interface=ether2
add bridge=ENGLAB interface=ether3
add bridge=ENGLAB interface=ether4
add bridge=ENGLAB interface=ether5
add bridge=ENGLAB interface=ether6
add bridge=ENGLAB interface=ether7
add bridge=ENGLAB interface=ether8
add bridge=ENGLAB interface=ether9
add bridge=PCO interface=ether10
/ip accounting
set account-local-traffic=yes enabled=yes
/ip address
add address=10.200.200.202/8 interface=ether10 network=10.0.0.0
add address=172.16.0.1/16 interface=ENGLAB network=172.16.0.0
/ip dhcp-server network
add address=172.16.0.0/16 dns-server=172.16.0.1 gateway=172.16.0.1
/ip dns
set allow-remote-requests=yes servers=10.0.0.19,10.0.0.55
/ip firewall nat
add action=src-nat chain=srcnat dst-address=!172.16.0.0/16 out-interface=PCO protocol=\
    !ggp src-address=172.16.0.0/16 to-addresses=10.200.200.202
/ip proxy
set max-cache-size=none
/ip route
add check-gateway=ping distance=1 gateway=10.0.0.51
add distance=1 dst-address=10.0.0.0/8 gateway=PCO
add check-gateway=ping distance=1 dst-address=172.16.0.0/16 gateway=ENGLAB
/system clock
set time-zone-name=America/Los_Angeles
/system ntp client
set enabled=yes primary-ntp=108.61.73.243
/tool graphing interface
add
/tool graphing queue
add
/tool graphing resource
add

There are problems with port 9 and 10 on RB1200. There are many posts on related to these 2 ports. Try to avoid to use these ports.

Disabled port 9 and 10, removed 8 and 9 from the bridge, and used port 8 instead. Did a quick test with SMB throughput and got about 50MB/s which is acceptable considering the environment.

This news is rather upsetting to me though, to find out that the device does not function as advertised, and will not work for what we had planned. That’s 20% of the device that is almost completely unusable due to this. Do you know of any other issues that we should be aware of? Are there other models that would fit our needs better? Or should we just try and return this thing for a full refund?

This is the only model that have this problem - if you take a RB1100hx2, no problem on any port.

I slammed into this head first several months ago as well. Same result. Kill ports 9 and 10. Things work great.