Hello, everyone.
I’ve been having RB493AH board in my home config for a long time and had no problems with it until I bought LG Smart TV. The TV is connected by cable to the router (cat. 6). As I don’t have any cable antenna at my home and unfortunately can’t have any, the only way for me to watch the TV broadcast is over the internet (OTT).
While the TV is the only device being turned on in the network everything is absolutely fine. With iPad connected to Wi-Fi it’s also good. The problem occurs when I switch on a PC which is connected via cable. I have 2 different PCs and tried different network cards (built-in nVidia, built-in Intel, external Intel PRO/100 PCI) and this doesn’t bring any difference, as does not changing ethernet ports on RouterBoard and changing ethernet cables going to the TV.
The average bandwidth of the TV stream is 3-4 mbit\s and after the PC switches on, the bandwidth of the link shown on a WinBox graph drops down to 1.5-1.7 mbits, resulting in stuttering live stream. The same 1.5-1.7 mbit\s speed I’m also getting on the PC in a speedtest.net test. But if I switch off the TV, the PC starts to get normal 10 mbit\s speed (this is the speed of my internet link). Likewise, if I switch the PC off, the TV get’s the full speed and live stream shows fine.
Originally I had RouterOS 4.9 and upgrading it to 6.1 didn’t change anything. I have a simple NAT config with nothing special in it. Changing the router to a simple Linksys box solved the issue, so it’s 100% something wrong here. But I don’t want to change Mikrotik to anything else. Yet I don’t know what to blame - the RouterBoard or the RouterOS.
Can you please suggest where I have to dig in?
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" \
disabled=yes
add action=drop chain=forward in-interface=wlan3 out-interface=WLAN_Bridge
add chain=input comment="Allow ICMP" protocol=icmp
add chain=input comment="Accept connections" connection-state=established \
in-interface=ether1-Gars
add chain=input comment="Accept connections" connection-state=related \
in-interface=ether1-Gars
add chain=input comment="Accept incoming packets" dst-port=8291 in-interface=\
ether1-Gars protocol=tcp
add chain=input comment="DVBVIewer rec service WEB" disabled=yes dst-port=8089 \
in-interface=ether1-Gars protocol=tcp
add chain=input disabled=yes dst-port=21 in-interface=NetByNet_pppoe-out1 \
protocol=tcp
add chain=input in-interface=ether9-OnLime protocol=gre
add chain=input in-interface=ether9-OnLime protocol=igmp
add chain=input dst-port=1194 in-interface=ether9-OnLime protocol=tcp
add chain=input dst-port=500 in-interface=ether9-OnLime protocol=tcp
add chain=input comment="Added by webbox" dst-port=80 in-interface=ether1-Gars \
protocol=tcp
add chain=input comment="Added by webbox API" dst-port=8728 in-interface=\
ether1-Gars protocol=tcp
add action=drop chain=input comment="Drop incoming packets" in-interface=\
ether1-Gars
add action=drop chain=input in-interface=NetByNet_pppoe-out1
add action=drop chain=forward in-interface="(unknown)" out-interface=\
WLAN_Bridge protocol=tcp
add action=reject chain=output disabled=yes dst-address=62.181.46.73 \
out-interface=ether2 protocol=icmp reject-with=icmp-admin-prohibited
add action=drop chain=forward comment="Drop DVBViewer authorization" \
dst-address=38.102.151.0/24 out-interface=ether9-OnLime
add action=drop chain=forward comment="Drop UnKnown traffic" disabled=yes \
dst-address=83.69.89.0/24 out-interface=ether9-OnLime
add action=drop chain=forward comment="Drop UnKnown traffic" disabled=yes \
dst-address=173.194.69.0/24 out-interface=ether9-OnLime
add action=drop chain=forward comment="Drop UnKnown traffic" disabled=yes \
dst-port=5938 out-interface=ether9-OnLime protocol=tcp
/ip firewall mangle
add action=mark-connection chain=input in-interface=ether9-OnLime \
new-connection-mark=wan1_conn
add action=mark-connection chain=input in-interface=NetByNet_pppoe-out1 \
new-connection-mark=wan2_conn
add action=mark-connection chain=input in-interface=pptp-out1-Sovintel \
new-connection-mark=wan3_conn
add action=mark-routing chain=output connection-mark=wan1_conn \
new-routing-mark=to_wan1
add action=mark-routing chain=output connection-mark=wan2_conn \
new-routing-mark=to_wan2
add action=mark-routing chain=output connection-mark=wan3_conn disabled=yes \
new-routing-mark=to_wan3
add action=change-ttl chain=prerouting disabled=yes in-interface=ether2 \
new-ttl=increment:1
add action=change-mss chain=forward disabled=yes in-interface=ether2 new-mss=\
1386 protocol=tcp tcp-flags=syn tcp-mss=1387-65535
add action=mark-routing chain=prerouting connection-mark=wan1_conn disabled=yes \
in-interface=WLAN_Bridge new-routing-mark=to_wan1
add action=mark-packet chain=forward comment="HTTP Traffic" disabled=yes \
dst-port=80 new-packet-mark=HTTP out-interface=ether9-OnLime protocol=tcp
add action=mark-packet chain=forward comment="All Traffic" disabled=yes \
new-packet-mark=All_traffic out-interface=ether9-OnLime protocol=tcp
/ip firewall nat
add action=return chain=srcnat comment="Drop traffic from IP" disabled=yes \
out-interface=ether9-OnLime src-address=192.168.1.148 to-addresses=0.0.0.0
add action=redirect chain=dstnat comment="Transparent proxy" dst-port=80 \
in-interface=WLAN_Bridge protocol=tcp to-ports=8010
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" \
disabled=yes to-addresses=0.0.0.0
add action=masquerade chain=srcnat out-interface=ether1-Gars to-addresses=\
0.0.0.0
add action=masquerade chain=srcnat out-interface=NetByNet_pppoe-out1 \
to-addresses=0.0.0.0
add action=masquerade chain=srcnat out-interface=ether9-OnLime to-addresses=\
0.0.0.0
add action=masquerade chain=srcnat disabled=yes out-interface=ether1-Gars \
to-addresses=0.0.0.0
add action=masquerade chain=srcnat disabled=yes out-interface=ether2 \
to-addresses=0.0.0.0
add action=dst-nat chain=dstnat disabled=yes dst-port=2701 in-interface=\
ether1-Gars protocol=tcp to-addresses=10.54.135.26 to-ports=5900
add action=dst-nat chain=dstnat comment="Torrent access" dst-port=7005 \
in-interface=ether9-OnLime protocol=tcp to-addresses=192.168.1.149 \
to-ports=7005
add action=dst-nat chain=dstnat comment="DVBViewer access" dst-port=8089 \
in-interface=ether9-OnLime protocol=tcp to-addresses=192.168.1.149 \
to-ports=8089
add action=dst-nat chain=dstnat comment="DVBViewer NetStream access" dst-port=\
2345 in-interface=ether9-OnLime protocol=tcp to-addresses=192.168.1.149 \
to-ports=2345
add action=dst-nat chain=dstnat comment="RDP access" dst-port=7001 \
in-interface=ether9-OnLime protocol=tcp to-addresses=192.168.1.149 \
to-ports=3389
add action=dst-nat chain=dstnat comment=i2p dst-port=17531 in-interface=\
ether9-OnLime protocol=udp to-addresses=192.168.1.145 to-ports=17531
add action=dst-nat chain=dstnat comment="OVPN duplicate port" dst-port=1025 \
in-interface=ether9-OnLime protocol=tcp to-addresses=192.168.1.1 to-ports=\
1194
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
out-interface=NetByNet_pppoe-out1 src-address=10.5.50.0/24
add action=dst-nat chain=dstnat comment="Torrent access" dst-port=81 \
in-interface=ether9-OnLime protocol=tcp to-addresses=192.168.1.149 \
to-ports=80
add action=dst-nat chain=dstnat comment="Torrent access" dst-port=1024 \
in-interface=ether9-OnLime protocol=tcp to-addresses=192.168.1.149 \
to-ports=80
add action=dst-nat chain=dstnat comment=lgiptv disabled=yes dst-address=\
91.236.183.236 to-addresses=79.98.29.9
add action=dst-nat chain=dstnat comment=lgiptv disabled=yes dst-address=\
91.236.183.236 to-addresses=79.98.29.9