Hello,
I live in a house with a basement and have fiber internet to an hAP ac in the basement and am using POE via cat 5e over ethernet 1 to power an hAP ac2 access point on the second floor. I get 80-100 Mbps up/down in close proximity to the hAP ac, but only 20 Mbps up/down in close proximity to the hAP ac2. I followed the instructions at RouterOS - RouterOS - MikroTik Documentation and HapAC2 as simple access point I've also tested with a random TP-Link router I had lying around (https://www.amazon.com/gp/product/B003Y5RYNY) and got the same poor results. Note that for now I have a different SSID for the hAP ac2, though I get the same results when the SSID is the same as the hAP ac.
In some rooms on the second floor, I get much better throughput from the hAP ac than the ac2 (60+ Mbps vs. 20). I realize the ac is triple chain vs. dual chain for the ac2, but I don't think this large of a difference is explained by that.
ETA: after some more digging, I realized that I hadn't enabled 802.11 a/n/ac in the ac2, nor multiple channel widths. I updated the band to 5Ghz-A/N/AC and channel width to 20/40/80 eCee (the hAP ac is on Ceee). However, after doing so I found the ac2 would reboot when pushed (i.e., when doing a speed test but not just browsing the Internet). I experimented with and without the dc power cable and I guess POE isn't enough (this is an older home, but it's still cat5e). With the dc power cable plugged in, I'm getting 100 Mbps in the bedroom farthest from the ac2 and 250-300 Mbps in the same room.
hAP ac config:
jul/03/2022 22:49:11 by RouterOS 6.45.6
software id = 12H5-JY9C
model = RouterBOARD 962UiGS-5HacT2HnT
serial number = ****
/interface bridge
add admin-mac=*** auto-mac=no comment=defconf name=bridge
/interface ethernet
set [ find default-name=ether1 ] speed=100Mbps
set [ find default-name=ether2 ] speed=100Mbps
set [ find default-name=ether3 ] speed=100Mbps
set [ find default-name=ether4 ] speed=100Mbps
set [ find default-name=ether5 ] speed=100Mbps
set [ find default-name=sfp1 ] advertise=
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce
disabled=no distance=indoors frequency=auto mode=ap-bridge ssid=
chief2-2ghz wireless-protocol=802.11 wps-mode=disabled
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=
20/40/80mhz-Ceee disabled=no distance=indoors frequency=auto mode=
ap-bridge ssid=chief2 wireless-protocol=802.11 wps-mode=disabled
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=
dynamic-keys supplicant-identity=MikroTik
add authentication-types=wpa-psk,wpa2-psk mode=dynamic-keys name=profile
supplicant-identity=MikroTik
/interface wireless
add disabled=no mac-address=*** master-interface=wlan2 name=
wlan3 security-profile=profile ssid=chief2_guest wps-mode=disabled
add disabled=no mac-address=*** master-interface=wlan1 name=
wlan4 security-profile=profile ssid=chief2_guest wps-mode=disabled
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
add name=dhcp_pool1 ranges=192.168.88.2-192.168.88.254
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=bridge name=dhcp1
/interface bridge filter
add action=drop chain=forward in-interface=wlan3
add action=drop chain=forward out-interface=wlan3
add action=drop chain=forward in-interface=wlan4
add action=drop chain=forward out-interface=wlan4
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=sfp1
add bridge=bridge comment=defconf interface=wlan1
add bridge=bridge comment=defconf interface=wlan2
add bridge=bridge interface=wlan3
add bridge=bridge interface=wlan4
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=ether2 network=
192.168.88.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no interface=
ether1 use-peer-dns=no
/ip dhcp-server lease
add address=192.168.88.236 client-id=1:0:11:32:18:c7:38 mac-address=
*** server=dhcp1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf dns-server=1.1.1.1,1.0.0.1
gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes servers=1.1.1.1,1.0.0.1
/ip dns static
add address=192.168.88.1 name=router.lan
/ip firewall filter
add action=accept chain=input comment=
"defconf: accept established,related,untracked" connection-state=
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=
invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=drop chain=input comment="defconf: drop all not coming from LAN"
in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy"
ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy"
ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack"
connection-state=established,related
add action=accept chain=forward comment=
"defconf: accept established,related, untracked" connection-state=
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid"
connection-state=invalid
add action=drop chain=forward comment=
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat
connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade"
ipsec-policy=out,none out-interface-list=WAN
add action=dst-nat chain=dstnat dst-port=22 in-interface=ether1 protocol=tcp
to-addresses=192.168.88.236 to-ports=22
/ip ssh
set allow-none-crypto=yes forwarding-enabled=remote
/system clock
set time-zone-name=America/Denver
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
hAP ac2 config:
0 name="1234.rsc" type="script" size=999 creation-time=jul/03/2022 23:01:24
contents=
jul/03/2022 23:01:23 by RouterOS 6.48.6
software id = E0RZ-I73P
model = RBD52G-5HacD2HnD
serial number = HCH07KAV328
/interface bridge
add name=bridge1
/interface wireless
set [ find default-name=wlan1 ] disabled=no ssid=MikroTik
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk mode=dynamic-keys name=chief2
supplicant-identity=""
/interface wireless
set [ find default-name=wlan2 ] disabled=no frequency=auto mode=ap-bridge
security-profile=chief2 ssid=chief2_2
/interface bridge port
add bridge=bridge1 interface=wlan1
add bridge=bridge1 interface=wlan2
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
/ip dhcp-client
add disabled=no interface=bridge1
/system clock
set time-zone-name=America/Denver
/system identity
set name=RouterOS