Slow WiFi (Mikrotik WAP)

I have problem with very slow WiFi speed. I use Mikrotik WAP. I try lot of different settings but no change max speed is about 3MB/s from my NAS to device if I use wired connection I get over 100MB/s.

My reality :frowning: Before WAP I use cheap TP-Link for 10€ and I get much higher speed. Around 20-30MB/s or even more.
slow-wifi.png

You likely need to provide more info, start with telling us what model of access point you are using and then how that connects to the rest of your network. You may also want to include the configuration from your access point (run /export compact hide-sensitive). To make it easier when you paste the configuration use the block quote in the editor here.

I stopped using Mikrotik for wifi as I’ve never gotten anything better than 25mbps (3MB/s) on 2.4Ghz. I switched to another brand for wifi APs and performance is better.
Lots of people have this issue and no solutions found yet.
http://forum.mikrotik.com/t/wirelles-can-over-25mb-of-download/109811/1

I’m using Mikrotik WAP, WAP AP is connected to HP switch and directly to that switch is also connected NAS. So WAP and NAS are directly connected to same switch.

My configuration

# jul/07/2017 06:14:03 by RouterOS 6.39.2
# software id = Z031-2NY3
#
/interface bridge
add name=bridge1
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-onlyn channel-width=20/40mhz-Ce \
    disabled=no distance=indoors frequency=2417 mode=ap-bridge ssid=Leutgeb_NET \
    wireless-protocol=802.11 wps-mode=disabled
/ip neighbor discovery
set ether1 discover=no
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk mode=dynamic-keys \
    supplicant-identity=MikroTik
add authentication-types=wpa2-psk mode=dynamic-keys name=guest
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp interface=wlan1 name=defconf
/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=wlan1
/ip address
add address=192.168.1.5/24 comment=defconf interface=wlan1 network=192.168.1.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no interface=ether1
/ip dhcp-server network
add comment=defconf gateway=0.0.0.0
/ip dns
set allow-remote-requests=yes servers=192.168.1.1
/ip dns static
add address=192.168.1.5 name=router
/ip firewall filter
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept established,related" \
    connection-state=established,related
# in/out-interface matcher not possible when interface (ether1) is slave - use mas
 er instead (bridge1)
add action=drop chain=input comment="defconf: drop all from WAN" in-interface=\
    ether1
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
    connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related" \
    connection-state=established,related
add action=drop chain=forward comment="defconf: drop invalid" connection-state=\
    invalid
# in/out-interface matcher not possible when interface (ether1) is slave - use mas
 er instead (bridge1)
add action=drop chain=forward comment=\
    "defconf:  drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
    connection-state=new in-interface=ether1
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" disabled=yes \
    out-interface=ether1
/ip route
add distance=1 gateway=192.168.1.1
/system clock
set time-zone-name=Europe/Ljubljana
/system identity
set name=AP1
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=wlan1
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=wlan1

can u test transfer from a pc or laptop to NAS with wired connection.
i remember in the old days that some NAS network chip, speed u could achive was only 5mb/sec

I use HP ProLiant Microserver Gen8 for NAS, and over wired connection I get around 110-120MB/s.

Please try Setting band=g/n
Is this Channel clear?

I have the similar issue with my cAP that is working as CAPsMAN’s slave from RB2011.
Wi-Fi speed reaches 40 MB/s via RB2011 and 3 MB/s via cAP. Bandwidth test shows ~100 MB/s between the devices.

I will try g/n and only-n modes, and share results in a few days.

I assume the wAP is not your Internet router.

There are several things that can be improved on your wAP configuration.

cAP and wAP are basic APs, conceived for serving as bare APs in high-density deployments. The better you optimize the config for their humble CPU, the better.

If this is serving just as an AP, try this config:

/interface bridge
add name=bridge1
/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=wlan1
/interface bridge
set fast-forward=yes 0
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-onlyn  \
    disabled=no frequency=2417 mode=ap-bridge ssid=Leutgeb_NET \
    wireless-protocol=802.11 wmm-support=enabled wps-mode=disabled
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk mode=dynamic-keys \
    supplicant-identity=MikroTik
add authentication-types=wpa2-psk mode=dynamic-keys name=guest
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no interface=bridge1
/system clock
set time-zone-name=Europe/Ljubljana
/system identity
set name=AP1

This programs the wAP to be essentially a wired/wireless “switch”, which gets it’s management IP from dhcp.

Is it advisable to create a static lease on your LAN router so that wAP always gets the same IP, though you could ever manage it without ip via mac-winbox or RoMON (i.e. without any IP addressing on the wAP).

No firewall, nor anything else, just an optimized config so that CPU requirements on the wAP are the minimum, the better, and everything is handled by hardware where possible.

DHCP to the wireless clients will be handled by your main Internet router.

Pay special attention to the devices Firmware (make sure Upgrade Firmware is the same as Upgrade Firmware @ System > Routerboard)

Prof13: which ROS/Firmware on CAPs and CAPsMAN?

Hello Pukkita,
When I connect with the mobile the map lite shows a connection of 54 mb in tx and 72 mb in rx and I can not exceed more than 20 mb doing a test of speed.I tested it with a unify ac lite and with the Movistar router and the speed test shows 40mb more or less.
It is as if for the download the smartphone will connect in g and for the rise in n.
Has this ever happened to you with some Mikrotik ap?
I have tested with map lite, wap, hap lite and groove, but I always get the same result.

Yes I use WAP only as WiFi AP. I have upgraded both Firmware and Software,

I try your settings but no change, before WAP I use TP Link model TL-WR741ND (cheapest model) and I never have problems with speed. It has slower CPU speed and half the RAM of WAP so I really doubt that problem is in CPU.

Post

  • an export.
  • a screenshot of wireless > Registration, open the phone entry, signal tab

I have noticed, specially on devices which were released with only one chain and were later upgraded to two chains, that the second chain1 sometimes is not enabled, watch out for that.

Map lite is a “personal” N device AP, there are two versions of it, one 1x1, latter models are 2x2. That could explain why half of the bw.

Unify Ac Lite is a different range AP, and it’s AC, so is very possible you were using the 5GHz band. As ubnt doesn’t publish Sensitivity specs but for speakers in their products, I cannot be 100% sure, but would say a more comparable (in hardware terms) product would be the hap AC lite.

That being said, if station is within range, it should be able to get speeds around 35Mbps TCP for 1x1 devices, and around 50-70Mbps for dual chain ones.

That’s in N. Try forcing N mode only.

Hello again Pukkita:
I have tested with a low-end ZTE smartphone and I have not had any problems.
I performed the tests in 20 mhz. The connection shows 72 mbps in both tx and rx.
What I have observed is that this smartphone can also connect in 40 mhz. When I connect at 40 mhz the connection shows 150 mbps tx and 150 mbps rx.
I think the problem is in the smartphones that can only connect in 20 mhz. I have tried disabling g and leaving it alone as n, but the connection still shows me 54 mbps tx and 72 mbps rx. With this data I only get a speed of 20-25 mbps doing with speedtest. My smartphone is a low-end Huawey Yumo. I have also tested with wap and groove.

A greeting.

All devices have RouterOS v6.39 and firmware v3.33.

There is a weirdness in cAP work: first speed test can show dl - 19.93MB, up - 4.91MB and second one that is made in 3 sec after the first one can show dl - 3.28MB, up - 3.91MB

Forget about the Air Rate, and 40MHz in 2.4GHz altogether… what counts is a stable connection, for that 20MHz is a must on 2.4GHz.

AirRate doesn’t mean data will be actually flowing at those rates.

Prof13: check your spectrum, and make optimal picks for channels for each cAP. In 2.4GHz there are only three non-overlapping in 20MHz channels: 1, 6 and 11.

To troubleshoot, you have too look at the signal screenshot I mentioned on my previous post while doing the transmission tests.

Sorry for the late reply.

I changed band mode to 2ghz-onlyn and it had no effect.
The freest channel was 3rd one, so I configured cAP with 2422 MHz with Ce extension.

Here is “/export compact” for both devices:
RB2011 - CAPsMAN

# jul/22/2017 12:36:49 by RouterOS 6.39
# software id = 37XX-0ZSC
#
/caps-man channel
add band=2ghz-g/n control-channel-width=20mhz extension-channel=Ce frequency=\
    2437 name=channel6 tx-power=30
add band=2ghz-g/n control-channel-width=20mhz extension-channel=Ce frequency=\
    2422 name=channel3 tx-power=20
/interface bridge
add name=bridge-guest
add name=bridge-internal
/interface ethernet
set [ find default-name=ether1 ] comment="ISP - Ukrtelecom"
set [ find default-name=ether2 ] name=ether2-master
set [ find default-name=ether3 ] master-port=ether2-master name=ether3-slave
set [ find default-name=ether4 ] master-port=ether2-master name=ether4-slave
set [ find default-name=ether5 ] master-port=ether2-master name=ether5-slave
set [ find default-name=ether6 ] comment="ISP - DataGroup"
set [ find default-name=ether7 ] name=ether7-master
set [ find default-name=ether8 ] master-port=ether7-master name=ether8-slave
set [ find default-name=ether9 ] comment="Inner cAP" master-port=\
    ether7-master name=ether9-slave
set [ find default-name=ether10 ] master-port=ether7-master name=\
    ether10-slave
set [ find default-name=sfp1 ] disabled=yes
/interface wireless
# managed by CAPsMAN
# channel: 2437/20-Ce/gn(30dBm), SSID: Braviy Shveik - Guest, CAPsMAN forwarding
set [ find default-name=wlan1 ] ssid=MikroTik
/interface pppoe-client
add add-default-route=yes comment="PPPoE - DataGroup" disabled=no interface=\
    ether6 name=pppoe-out1 use-peer-dns=yes user=xxxxxxx
/caps-man datapath
add bridge=bridge-guest client-to-client-forwarding=yes name=datapath-guest
/caps-man security
add name=security-guest
/caps-man configuration
add country="united states" datapath=datapath-guest mode=ap name=cfg-guest \
    rx-chains=0,1,2 security=security-guest ssid="Braviy Shveik - Guest" \
    tx-chains=0,1,2
/caps-man interface
add channel=channel6 configuration=cfg-guest disabled=no l2mtu=1600 \
    mac-address=6C:3B:6B:F9:BF:D7 master-interface=none name=cap1 radio-mac=\
    6C:3B:6B:F9:BF:D7
add channel=channel3 configuration=cfg-guest disabled=no l2mtu=1600 \
    mac-address=6C:3B:6B:8B:C5:6F master-interface=none name=cap2 radio-mac=\
    6C:3B:6B:8B:C5:6F
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool1 ranges=10.17.16.100-10.17.16.254
add name=dhcp_pool2 ranges=192.168.0.100-192.168.0.254
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=bridge-internal lease-time=\
    1d name=dhcp1
add address-pool=dhcp_pool2 disabled=no interface=bridge-guest lease-time=1h \
    name=dhcp2
/ppp profile
set *0 dns-server=80.91.161.75,80.91.160.5
/tool user-manager customer
set admin access=\
    own-routers,own-users,own-profiles,own-limits,config-payment-gw
/caps-man manager
set ca-certificate=auto certificate=auto enabled=yes \
    require-peer-certificate=yes
/caps-man provisioning
add action=create-dynamic-enabled master-configuration=cfg-guest
/interface bridge port
add bridge=bridge-internal interface=ether2-master
add bridge=bridge-internal interface=ether7-master
add bridge=bridge-guest interface=cap2
/interface l2tp-server server
set caller-id-type=ip-address
/interface wireless cap
# 
set bridge=bridge-internal caps-man-certificate-common-names=\
    CAPsMAN-6C3B6BF9BFCC certificate=CAP-6C3B6BF9BFCC discovery-interfaces=\
    bridge-internal enabled=yes interfaces=wlan1 lock-to-caps-man=yes
/ip address
add address=192.168.0.1/24 interface=bridge-guest network=192.168.0.0
add address=10.17.16.1/24 interface=bridge-internal network=10.17.16.0
/ip dhcp-client
add add-default-route=no dhcp-options=hostname,clientid interface=ether1
/ip dhcp-server network
add address=10.17.16.0/24 dns-server=8.8.8.8,8.8.4.4 gateway=10.17.16.1
add address=192.168.0.0/24 dns-server=8.8.8.8,8.8.4.4 gateway=192.168.0.1
/ip dns
set allow-remote-requests=yes
/ip firewall address-list
add address=10.17.16.0/24 disabled=yes list=LocalNet
add address=192.168.0.0/24 disabled=yes list=LocalNet
/ip firewall filter
add action=drop chain=input dst-port=53 in-interface=ether1 log=yes \
    log-prefix=53_drop_ether1 protocol=udp
add action=drop chain=input dst-port=53 in-interface=ether6 log=yes \
    log-prefix=53_drop_ether6 protocol=udp
add action=drop chain=input dst-port=53 in-interface=pppoe-out1 log=yes \
    log-prefix=53_drop_pppoe protocol=udp
/ip firewall mangle
add action=mark-connection chain=input disabled=yes dst-address=10.17.16.5 \
    in-interface=ether1 new-connection-mark="Ukrtelecom -> Input" \
    passthrough=no
add action=mark-routing chain=output connection-mark="Ukrtelecom -> Input" \
    disabled=yes new-routing-mark="ISP - Ukrtelecom" passthrough=no
add action=mark-connection chain=input disabled=yes dst-address=94.232.77.199 \
    in-interface=pppoe-out1 new-connection-mark="DataGroup -> Input" \
    passthrough=no
add action=mark-routing chain=output connection-mark="DataGroup -> Input" \
    disabled=yes new-routing-mark="ISP - DataGroup" passthrough=no
add action=mark-routing chain=prerouting disabled=yes dst-address-list=\
    !LocalNet new-routing-mark="Inner network" passthrough=no src-address=\
    10.17.16.0/24
/ip firewall nat
add action=masquerade chain=srcnat comment="ISP - Ukrtelecom" disabled=yes \
    out-interface=ether1
add action=masquerade chain=srcnat comment="ISP - DataGroup" out-interface=\
    pppoe-out1
/ip route
add disabled=yes distance=1 gateway=10.17.16.1 routing-mark=\
    "ISP - Ukrtelecom"
add disabled=yes distance=1 gateway=195.114.143.0 routing-mark=\
    "ISP - DataGroup"
add check-gateway=arp disabled=yes distance=10 gateway=195.114.143.0 \
    routing-mark="Inner network"
add check-gateway=arp disabled=yes distance=11 gateway=10.17.16.1 \
    routing-mark="Inner network"
/ip route rule
add action=unreachable dst-address=10.17.16.0/24 src-address=192.168.0.0/24
add action=unreachable dst-address=192.168.0.0/24 src-address=10.17.16.0/24

cAP

# jun/29/2017 13:09:54 by RouterOS 6.39
# software id = ULE6-YZHP
#
/interface wireless
# managed by CAPsMAN
# channel: 2422/20-Ce/gn(20dBm), SSID: Office - Guest, CAPsMAN forwarding
set [ find default-name=wlan1 ] band=2ghz-g/n channel-width=20/40mhz-Ce \
    country="united states" frequency=2422 frequency-mode=superchannel \
    guard-interval=long hw-protection-mode=rts-cts hw-retries=15 mode=\
    ap-bridge rx-chains=0,1 ssid="Office - Guest" tx-chains=0,1 \
    wireless-protocol=802.11 wps-mode=disabled
/interface wireless nstreme
# managed by CAPsMAN
# channel: 2422/20-Ce/gn(20dBm), SSID: Office - Guest, CAPsMAN forwarding
set wlan1 enable-polling=no
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" \
    supplicant-identity=MikroTik wpa2-pre-shared-key=1234567890
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/tool user-manager customer
set admin access=\
    own-routers,own-users,own-profiles,own-limits,config-payment-gw
/interface l2tp-server server
set caller-id-type=ip-address
/interface wireless cap
# 
set caps-man-certificate-common-names=CAPsMAN-6C3B6BF9BFCC certificate=\
    CAP-6C3B6B8BC56E discovery-interfaces=ether1 enabled=yes interfaces=wlan1 \
    lock-to-caps-man=yes
/ip address
add address=10.17.16.99/24 disabled=yes interface=ether1 network=10.17.16.0
add address=192.168.1.1/24 network=192.168.1.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
/system clock
set time-zone-name=Europe/Kiev
/system identity
set name=AP-inside

Configurations look a bit “dirty” because I tried some new configurations for me.
I would be very grateful if you will tell me where is my mistake.

Do a spectral-history on both, are you sure the spectrum is useable? Please post it here.

Can you connect another RB as wireless client to cAPs, and post: wireless interface status, and wireless registration signal tab.