Hello world !!!
Since a few days one of my MikTiks does not perform as usual.
Internet traffic is very slow which was better before.
Pings to the router take 650~700ms which seems a bit too high.
When connecting a laptop to the router, the internet speed is OK.
Already changed the cables and changed public port from 1 to 5.
Device is : RB951Ui-2HnD with ROS 6.38.3
Some info :
/ip route> print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 ADS 0.0.0.0/0 10.168.0.1 0
1 S 0.0.0.0/0 ether5 1
2 DS 0.0.0.0/0 172.31.1.1 1
3 X S 10.0.0.0/8 pptp-neu 1
4 ADb 10.0.0.0/24 172.31.1.1 200
5 ADC 10.168.0.0/14 10.170.197.254 ether5 0
6 ADS 82.82.98.162/32 10.168.0.1 0
7 ADb 172.18.255.0/24 172.31.1.1 200
8 ADC 172.18.255.1/32 172.18.255.105 FlyConnect 0
9 ADC 172.31.1.1/32 172.31.1.5 pptp-neu 0
10 ADb 192.168.1.0/24 172.31.1.1 200
11 ADb 192.168.3.0/24 172.31.1.1 200
12 ADb 192.168.4.0/24 172.31.1.1 200
13 ADC 192.168.5.0/24 192.168.5.1 bridge1 0
CPU-Load : ~2 %
I can´t find what´s wrong.
Thx
AS you say the internet is normal when connected directly to router. If this is the case you need to look at the devices connected to the router. switches, wireless acess points. look at the interface connected to your lan and ensure there no errors.
The MT is the only device connected to the router.
Router has no wifi and only one LAN port.
Did not find errors in the MT logs.
are you runnning any simple queues or other configs on your mikrotik. please provide export or mikrotik.
No simple queues.
And no special configs, just 2 VPN
Export :
[admin@MikroTik] > export
# mar/07/2017 21:58:11 by RouterOS 6.38.3
# software id = 1FGY-2R3S
#
/interface bridge
add mtu=1500 name=bridge1
/interface ethernet
set [ find default-name=ether1 ] mac-address=D4:CA:6D:DA:79:F4 mtu=1460
set [ find default-name=ether2 ] mac-address=D4:CA:6D:DA:79:F5
set [ find default-name=ether3 ] l2mtu=1522 mac-address=00:0C:42:CA:B1:49 \
master-port=ether2
set [ find default-name=ether4 ] l2mtu=1522 mac-address=00:0C:42:CA:B1:4A \
master-port=ether2
set [ find default-name=ether5 ] l2mtu=1522 mac-address=00:0C:42:CA:B1:4B mtu=\
1360
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n country=germany disabled=no \
frequency=2462 mode=ap-bridge rx-chains=0 ssid=<SSID> tx-chains=0 \
wireless-protocol=802.11
/interface pptp-client
add add-default-route=yes allow=mschap2 connect-to=89.27.251.196 \
default-route-distance=3 keepalive-timeout=disabled mrru=1600 name=\
pptp-groth password=<password> user=pptp-groth
add add-default-route=yes allow=mschap2 connect-to=host.dyndns.org \
default-route-distance=1 disabled=no keepalive-timeout=disabled mrru=1600 \
name=pptp-neu password=<password> user=pptp-groth
/interface ethernet switch port
set 0 vlan-mode=fallback
set 1 vlan-mode=fallback
set 2 vlan-mode=fallback
set 5 vlan-mode=fallback
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk eap-methods="" \
mode=dynamic-keys supplicant-identity=MikroTik wpa-pre-shared-key=<key> \
wpa2-pre-shared-key=<key>
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=3des
/ip pool
add name=dhcp ranges=192.168.5.100-192.168.5.150
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge1 lease-time=3d name=default
/port
set 0 name=serial0
/ppp profile
add local-address=172.18.255.105 name=FC remote-address=172.18.255.1 \
use-encryption=required
set *FFFFFFFE local-address=172.31.1.5 remote-address=172.31.1.1 \
use-encryption=required
/interface pptp-client
add allow=mschap2 connect-to=<address> disabled=no mrru=1600 name=\
FlyConnect password=<password> profile=FC user=<user>
/queue interface
set ether3 queue=ethernet-default
set ether4 queue=ethernet-default
set ether5 queue=ethernet-default
/routing bgp instance
set default as=100 client-to-client-reflection=no router-id=172.31.1.5
/system logging action
set 0 memory-lines=100
set 1 disk-lines-per-file=100
set 3 remote=<syslog> remote-port=528
/interface bridge port
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=wlan1
/ip address
add address=192.168.5.1/24 comment="default configuration" interface=ether2 \
network=192.168.5.0
/ip dhcp-client
add default-route-distance=0 dhcp-options=hostname,clientid disabled=no \
interface=ether1 use-peer-dns=no use-peer-ntp=no
add default-route-distance=0 dhcp-options=hostname,clientid disabled=no \
interface=ether5 use-peer-dns=no use-peer-ntp=no
/ip dhcp-server network
add address=192.168.5.0/24 dns-server=8.8.8.8 gateway=192.168.5.1 netmask=24
/ip dns
set allow-remote-requests=yes max-udp-packet-size=512 servers=8.8.8.8
/ip dns static
add address=192.168.5.1 name=router
/ip firewall filter
add action=accept chain=input comment="default configuration" protocol=icmp
add action=accept chain=input comment="default configuration" connection-state=\
established
add action=accept chain=input comment="default configuration" connection-state=\
related
add action=drop chain=input comment="drop ftp brute forcers" dst-port=21 \
protocol=tcp src-address-list=ftp_blacklist
add action=accept chain=output content="530 Login incorrect" dst-limit=\
1/1m,9,dst-address/1m protocol=tcp
add action=add-dst-to-address-list address-list=ftp_blacklist \
address-list-timeout=3h chain=output content="530 Login incorrect" \
protocol=tcp
add action=drop chain=input comment="drop ssh brute forcers" dst-port=22 \
protocol=tcp src-address-list=ssh_blacklist
add action=add-src-to-address-list address-list=ssh_blacklist \
address-list-timeout=1w3d chain=input connection-state=new dst-port=22 \
protocol=tcp src-address-list=ssh_stage3
add action=add-src-to-address-list address-list=ssh_stage3 \
address-list-timeout=1m chain=input connection-state=new dst-port=22 \
protocol=tcp src-address-list=ssh_stage2
add action=add-src-to-address-list address-list=ssh_stage2 \
address-list-timeout=1m chain=input connection-state=new dst-port=22 \
protocol=tcp src-address-list=ssh_stage1
add action=add-src-to-address-list address-list=ssh_stage1 \
address-list-timeout=1m chain=input connection-state=new dst-port=22 \
protocol=tcp
add action=drop chain=input comment="drop ftp brute forcers" dst-port=21 \
protocol=tcp src-address-list=ftp_blacklist
add action=accept chain=output content="530 Login incorrect" dst-limit=\
1/1m,9,dst-address/1m protocol=tcp
add action=add-dst-to-address-list address-list=ftp_blacklist \
address-list-timeout=3h chain=output content="530 Login incorrect" \
protocol=tcp
add action=drop chain=input comment="drop ssh brute forcers" dst-port=22 \
protocol=tcp src-address-list=ssh_blacklist
add action=add-src-to-address-list address-list=ssh_blacklist \
address-list-timeout=1w3d chain=input connection-state=new dst-port=22 \
protocol=tcp src-address-list=ssh_stage3
add action=add-src-to-address-list address-list=ssh_stage3 \
address-list-timeout=1m chain=input connection-state=new dst-port=22 \
protocol=tcp src-address-list=ssh_stage2
add action=add-src-to-address-list address-list=ssh_stage2 \
address-list-timeout=1m chain=input connection-state=new dst-port=22 \
protocol=tcp src-address-list=ssh_stage1
add action=add-src-to-address-list address-list=ssh_stage1 \
address-list-timeout=1m chain=input connection-state=new dst-port=22 \
protocol=tcp
/ip firewall nat
add action=masquerade chain=srcnat comment="default configuration" \
to-addresses=0.0.0.0
add action=masquerade chain=srcnat out-interface=ether1
/ip route
add distance=1 gateway=ether5
add bgp-local-pref=100 bgp-origin=igp disabled=yes distance=1 dst-address=\
10.0.0.0/8 gateway=pptp-neu scope=40 target-scope=30
/ip service
set api disabled=yes
/routing bgp network
add network=192.168.5.0/24 synchronize=no
/routing bgp peer
add name=MT-Groth remote-address=172.31.1.1 remote-as=100 ttl=default
/system clock
set time-zone-autodetect=no time-zone-name=Europe/Berlin
/system clock manual
set time-zone=+01:00
/system identity
set name="<name>"
/system logging
add action=remote prefix=groth topics=!e-mail
/system ntp client
set enabled=yes primary-ntp=130.149.17.8
/tool mac-server
add interface=ether3
add interface=ether4
add interface=ether5
add
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=ether3
add interface=ether4
add interface=ether5
add
[admin@MikroTik] >