Slow hotspot login page with more than 10 users

RouterOS Beginner Basics
1

Hello

I have an issue with slow hotspot login page on WLAN on my RB 951g ros ver 6.4.2 when connected more than 10,11 users on it. The internet is good.
I have found some topics about it but non of them can solve my problem.
The CPU is about 5%. Some of the answers is uncheck transparent proxy which I did but nothing change.
When connected 3,4,5 or so users everything is ok but more users make that issue, slow popup login page and connection on it.
When I click on WLAN hotspot to connect, it is so slow to get an IP and when finally get IP address took 20-30 sek to open login page.
If somebody knows what can causes that, or I miss something.
Thank you

2

Here is my config:

/interface bridge
add admin-mac=E4:8D:8C:A0:5A:F5 auto-mac=no comment=defconf name=bridge
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce
default-forwarding=no disabled=no distance=indoors frequency=auto mode=
ap-bridge ssid="HOTSPOT" wireless-protocol=802.11
/interface ethernet
set [ find default-name=ether2 ] name=ether2-master
set [ find default-name=ether3 ] master-port=ether2-master
set [ find default-name=ether4 ] master-port=ether2-master
set [ find default-name=ether5 ] master-port=ether2-master
/ip neighbor discovery
set ether1 discover=no
set bridge comment=defconf
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
add hotspot-address=10.5.50.1 http-cookie-lifetime=1d login-by=
cookie,http-chap,trial name=hsprof1 trial-uptime-limit=2h30m
trial-uptime-reset=8h30m
/ip hotspot
add disabled=no idle-timeout=15m interface=wlan1 keepalive-timeout=15m name=
hotspot1 profile=hsprof1
/ip hotspot user profile
set [ find default=yes ] add-mac-cookie=no keepalive-timeout=15m on-login=
“Counter users” shared-users=70 status-autorefresh=2m
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
add name=hs-pool-6 ranges=10.5.50.2-10.5.50.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge name=defconf
add address-pool=hs-pool-6 disabled=no interface=wlan1 lease-time=1h name=
dhcp1
/system logging action
set 0 memory-lines=1500
set 1 disk-lines-per-file=1500
/tool user-manager customer
set admin access=
own-routers,own-users,own-profiles,own-limits,config-payment-gw
/interface bridge port
add bridge=bridge comment=defconf interface=ether2-master
add bridge=bridge comment=defconf disabled=yes interface=wlan1
/ip address
add address=192.168.88.1/24 comment=defconf interface=ether2-master network=
192.168.88.0
add address=10.5.50.1/24 comment="hotspot network" interface=wlan1 network=
10.5.50.0
add address=192.168.1.75/24 interface=ether1 network=192.168.1.0
/ip cloud
set ddns-enabled=yes
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid interface=ether1
/ip dhcp-server network
add address=10.5.50.0/24 comment="hotspot network" gateway=10.5.50.1
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8
/ip dns static
add address=10.5.50.1 name=router
/ip firewall filter
add chain=input comment=Winbox dst-port=8291 protocol=tcp
add action=passthrough chain=unused-hs-chain comment=
"place hotspot rules here" disabled=yes
add chain=input comment="defconf: accept ICMP" protocol=icmp
add chain=input comment="defconf: accept established,related"
connection-state=established,related
add action=drop chain=input comment="defconf: drop all from WAN"
in-interface=ether1
add action=fasttrack-connection chain=forward comment="defconf: fasttrack"
connection-state=established,related
add chain=forward comment="defconf: accept established,related"
connection-state=established,related
add action=drop chain=forward comment="defconf: drop invalid"
connection-state=invalid
add action=drop chain=forward comment=
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat
connection-state=new in-interface=ether1
add action=drop chain=forward comment=
“no internet HOTSPOT OD 00:30 DO 06:30" src-address=
10.5.50.0/24 time=30m-6h30m,sun,mon,tue,wed,thu,fri,sat
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=
"place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat comment="defconf: masquerade"
out-interface=ether1
add action=masquerade chain=srcnat comment="masquerade hotspot network"
src-address=10.5.50.0/24
/ip hotspot user
set [ find default=yes ] limit-bytes-total=4000000
add disabled=yes name=admin
/ip route
add distance=1 gateway=192.168.1.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api-ssl disabled=yes
/system clock
set time-zone-name=Europe
/system identity
set name=“HOTSPOT1”
/system leds
set 0 interface=wlan1
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=bridge
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=bridge

3

You must reserve some bandwidth for your hotspot domain

Sent from my C6833 using Tapatalk

4

Thanks for your suggestion but not sure for the best way and best limits to do that. You think this may be the problem?
My internet connection is 20Mbps for download and 5Mbps for upload. Usually have 10,15 users max 20 per day active at once.
On eth port is not connected any thing, using internet only on wifi hotspot.
What is your suggestions to set appropriate rx/tx limits, and the best way to do that. I think in user profile on hotspot.
Thanks