Hi, I’m using CRS125-24G 6.37.1.
Mikrotik is configured as switch. Eth1 - master port. Using /24 subnet from ISP as main LAN (10.254.43.0/24).
I have also added several VLANs in my config. ether2 and endpoint computers on the subnet (for example on VLAN2) have connection speed - 1Gb. BTest gives me max TCP 50Mbps (CPU load 100%) from VLAN2 to main LAN. Btest UDP - 300 Mbps . What can be the problem?
I have CRS125 at home and never had issues like this. I don’t remember my config from top of my head but it looks similar to yours. I think the problem is with a test method. You are sending a loads of traffic to the switch itself. CPU on the switch is to weak to process all the traffic this is why your are hitting 100% CPU and such poor performance in terms of bandwidth.
Try sending traffic trough the switch, from a PC to a PC (on the same VLAN), like this: PC (vlan 2) → CRS125 → PC (vlan2).
Thank you for your reply kamillo, you are right.
I have made some more tests and here are the results
PC (vlan 3) → CRS125 → PC (vlan3) = 500-900Mbps
PC (lan) → CRS125 → PC (lan) = 500-900Mbps
PC (vlan 3) → CRS125 → PC (lan) = 10-20Mbps, speedtest.net from vlan 3 shows around 50 Mbps
PC (lan) → CRS125 → PC (vlan3) = no ping and no connection at all and that’s strange
run Traceroute diagnostic and here is the result:
from vlan3 tracert 10.254.43.37
Tracing route to 10.254.43.37 over a maximum of 30 hops
1 <1 ms <1 ms <1 ms 192.168.203.1
2 <1 ms <1 ms <1 ms 10.254.43.37
from lan tracert 192.168.203.254
Tracing route to 192.168.203.254 over a maximum of 30
1 4 ms <1 ms 2 ms 10.254.43.1
2 * * * Request timed out.
3 * * * Request timed out.
4 * * * Request timed out.
5 3 ms <1 ms 4 ms 10.254.255.16
6 * * * Request timed out.
So the main LAN network knows nothing about 192.168.203.0/24 network… May be that is the cause of the low speed between subnets? Can I somehow manually add routes to other subnets? Unfortunately I do not have access to the 10.254.43.1 switch.
Your trace results:
The first one, you doing that from 192.168.203.254 to 10.254.43.37, and all is good right?
The second, from 10.254.43.37 to 192.168.203.254, which is opposite direction from what you have done in above example, and this is not working?
If I’m right your routes are fine, otherwise in the first example packets wouldn’t know how to come back to you. If this is the case you would have to check if there are no blocking rules on the router.
Thank you for your reply,
Thats correct, the opposite direction, from 10.254.43.37 to 192.168.203.254 is not working.
from 192.168.203.254 to 10.254.43.37 - ping is good, but transfer speed is low, about 50Mbps.
There are no blocking rules in the firewall
I will run some more tests…hope to find some solution.
by looks of it there is no issues with routing, I would check the router for any blocking policies/ speed policies and also check things like speed/ duplex on the interfaces between CRS125 and router
If you need Gigabit routed throughput, CRS is the wrong device because it won’t ever process TCP streams fast enough to get clean throughput for real applications (which is different than maxing out a bandwidth test). Consider adding a CCR1009 or RB3011 to handle routing and then connect the CRS125 in a switched mode to aggregate all of the connections.
From the info presented I’m under impression that CRS125 is not involved in routing and only acts as a switch. It looks like (cisco ?) 10.254.43.1 acts as a router. Is that correct?
Can’t tell anything about the upstream hardware, because I cannot manage cisco-10.254.43.1.
I hope to use CRS125 for routing as well when I deal with this slow subnet speed problem
Don’t do this. The CRS line are switches, not routers. They don’t have the CPU power to do any serious routing. CPU is there so you can manage the switch.
So you want to remove the Cisco router from your network and just use CRS125 instead?
If this is the case like Paternot said, don’t. CPU is too weak. CRS is a switch with limited routing capabilities (hardware wise)
If you need router you will be better of by looking at something like RB2011, RB3011 or CCR series. Depending on you requirements: bandwidth, firewall rules, queues, pppoe, VPNs etc…
