Slow upload on new E62iUGS-2axD5axT

holvoetn · May 21, 2026, 11:44am

For fun, did some tests again ...

hAP AX S reset to defconf, ROS 7.23rc3
Internal iperf3 test server on Proxmox, verified as reference by connecting laptop via ethernet cable to switch which then goes to Proxmox, normal 1Gb speeds both ways (950-ish)

Then I inserted that hAP AX S in between laptop and switch, ether1 or SFP as uplink, laptop connected to ether3.
First on ether1, then using SFP also as WAN so minor change in config:

remove SFP from bridge
add SFP to WAN list
add DHCP client to SFP
enabled ROMON (I always do)

4 possible test combinations:
iperf from laptop to server, 4 streams, using ether1 as uplink
Iperf from server to laptop, 4 streams, using ether1 as uplink
iperf from laptop to server, 4 streams, using SFP as uplink
Iperf from server to laptop, 4 streams, using SFP as uplink

In all 4 cases I got normal Gb speeds. 945-950ish

Towards external test server (Openspeedtest), I got speeds more or less in line with my ISP connection (1000/100). Verified as well with direct connection from laptop to switch, similar results.

Wifi, that's another thing. NO WAY near AX2 speeds, let be wAP AX.
But using ethernet, I am sorry but I don't see the problem ?

Config as reference:

# 2026-05-21 13:42:34 by RouterOS 7.23rc3
# software id = 6I80-RTCG
#
# model = E62iUGS-2axD5axT
# serial number = [ removed ]
/interface bridge
add admin-mac=<edit> auto-mac=no comment=defconf name=bridge
/interface wifi
set [ find default-name=wifi1 ] channel.band=2ghz-ax .skip-dfs-channels=\
    10min-cac .width=20/40mhz configuration.mode=ap .ssid=MikroTik-8DDFA5 \
    disabled=no security.authentication-types=wpa2-psk,wpa3-psk .ft=yes \
    .ft-over-ds=yes
set [ find default-name=wifi2 ] channel.band=5ghz-ax .skip-dfs-channels=\
    10min-cac .width=20/40/80mhz configuration.mode=ap .ssid=MikroTik-8DDFA5 \
    disabled=no security.authentication-types=wpa2-psk,wpa3-psk .ft=yes \
    .ft-over-ds=yes
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp interface=bridge name=defconf
/disk settings
set auto-media-interface=bridge auto-media-sharing=yes auto-smb-sharing=yes
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=wifi1
add bridge=bridge comment=defconf interface=wifi2
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
add comment=defconf interface=sfp1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=\
    192.168.88.0
/ip dhcp-client
add comment=defconf interface=ether1 name=client1
# Interface not active
add comment=defconf interface=sfp1 name=client2
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf dns-server=192.168.88.1 gateway=\
    192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan type=A
/ip firewall filter
add action=accept chain=input comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
    invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=\
    "defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1 \
    in-interface=lo src-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
    in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
    ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
    ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
    connection-state=established,related
add action=accept chain=forward comment=\
    "defconf: accept established,related, untracked" connection-state=\
    established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
    connection-state=invalid
add action=drop chain=forward comment=\
    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
    in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" \
    ipsec-policy=out,none out-interface-list=WAN
/ipv6 firewall address-list
add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
add address=::1/128 comment="defconf: lo" list=bad_ipv6
add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
add address=100::/64 comment="defconf: discard only " list=bad_ipv6
add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
/ipv6 firewall filter
add action=accept chain=input comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
    invalid
add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
    icmpv6
add action=accept chain=input comment="defconf: accept UDP traceroute" \
    dst-port=33434-33534 protocol=udp
add action=accept chain=input comment=\
    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
    udp src-address=fe80::/10
add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
    protocol=udp
add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
    ipsec-ah
add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
    ipsec-esp
add action=accept chain=input comment=\
    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=input comment=\
    "defconf: drop everything else not coming from LAN" in-interface-list=\
    !LAN
add action=fasttrack-connection chain=forward comment="defconf: fasttrack6" \
    connection-state=established,related
add action=accept chain=forward comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
    connection-state=invalid
add action=drop chain=forward comment=\
    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
add action=drop chain=forward comment=\
    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
    hop-limit=equal:1 protocol=icmpv6
add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
    icmpv6
add action=accept chain=forward comment="defconf: accept HIP" protocol=139
add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
    500,4500 protocol=udp
add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
    ipsec-ah
add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
    ipsec-esp
add action=accept chain=forward comment=\
    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=forward comment=\
    "defconf: drop everything else not coming from LAN" in-interface-list=\
    !LAN
/system clock
set time-zone-name=Europe/Brussels
/system identity
set name="hAP"
/system routerboard settings
set auto-upgrade=yes
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
/tool romon
set enabled=yes

jaclaz · May 21, 2026, 2:14pm

Very likely your ISP is one of the "good" ones that don't create the issue with pause frames/flow control.

From other previous reports seems that ether1 (and not SFP) is the slow/problematic one, so you should have seen a difference between them.

The hypothesis is that the SFP module itself acts as a sort of buffer/cache/whatever largely mitigating the issue, and as well a "plain" switch in the middle when using ether1 (or the adoption of a queue) has the same effect BUT IF your ISP provides "good" flow control (or whatever) there is no need of this, and you would have similar results.

But if you have the switch in the middle, then it may be the switch that avoids the slowness.

holvoetn · May 21, 2026, 2:26pm

Valid point but shouldn't be too hard for MT to test that part, I guess ?

jaclaz · May 21, 2026, 2:36pm

Sorry, I don't understand.

There is an issue reported about ether1^[1] being slow if used as WAN DIRECTLY connected to ISP.

The same issue reportedly goes away when a switch is interposed between ether1 and ISP.

If you tested the latter it is normal that you have no issues, but it doesn't say anything about what happens with a direct connection (it is possible that your ISP connection doesn't create the issue at all or that it creates it but the interposed switch mitigates or nullifies it).

^[1] AND NOT SFP

holvoetn · May 21, 2026, 2:58pm

But I did

Your summary is exactly where the problem probably is.
And that shouldn't be too hard for MT to test it. They should be able to play with various flow control settings on the "ISP" side of things.

Buckeye · September 10, 2026, 5:48pm

Problem still exists with

# 2026-09-08 21:53:41 by RouterOS 7.24.2
# model = E62iUGS-2axD5axT

See this thread where resolution was moving WAN from ether1 to ether3 (see post)

This affects all EN7562 based routers, currently HEX refresh (E50UG), HEX S 2025 (E60iUGS), hAP ax S (E62iUGS). This is why I won't recommend these models to friends and family. It may only affect specific ISPs but I don't want to be in the situation where they switch ISP and then have problems, which they will then want help with.

enemy509 · October 3, 2026, 7:52pm

E62iUGS-2axD5axT - slow wifi upload in cap mode

ethernet works fine

caspman - RB5009UG+S+ is in the same network

OS version is 7.24.5 on both capsman and cap.

if I connect E62iUGS-2axD5axT as CAP by port ether1 (POE)
I have download speed by wifi5 500Mbps / upload not more 100Mbps

if I connect E62iUGS-2axD5axT as CAP by port ether2 / ether3

I have download speed by wifi5 500Mbps / upload more 500Mbps

tested on ipad mini7, iphone 17pro, dell laptop, macbook pro m4 - on AX and AC standard

support ticket created - SUP-225458