Starlink + crs326-24g-2s+

RouterOS Beginner Basics
1

Hello Everyone i would like some help please.

Firstly i have moved to a new 2 story house and when i moved here i had a local ISP internet. But since i wasnt happy with the internet speeds i have chosen to buy Starlink.

My problem is since i am not working with a local ISP i have to do all the settings by my self and i am not that much experienced could anyone help me please ?

Basically my setup is

Starlink cable coming from the roof going in to ethernet 1 of crs326-24g-2s+

Then i have 4 RBcAPL-2nD devices in the corridors
Then i have 7 RB941-2nD devices inside the rooms mostly behind the televisions
Then i have 1 RBcAPGi-5acD2nD in the kitchen
Then i have 1 RB95Ui-2HnD in my office
And last device RBcAP2nd in another room

Also i have direct ethernet ports on the wall coming from the crs326-24g-2s+ device.


When i was using with the local ISP i didnt have any problem all my devices was working perfectly, yesterday i got my starlink and plugged starlink into ether 1. i have internet acces on my local wifi but with limited to 10-12mbs. my old isp created virtual guest wifi but at the moment that hasnt got any internet, also my computer doesnt have any internet access that is connected to the wall socket that goes into the crs326-24g-2s+ device.

its probably something to do with settings but i dont know how and what to do.

Thanks in advance
mikrotikconfig.rsc (12.7 KB)

2

So you have a bunch of basically switches and low end access points, but no router??

3

@anav
Doesn’t a Starlink provide anyway something in the 100 to 200 Mb range?

The CRS326 should be capable of routing those (if used as router, but right now it seems like all interfaces are into a bridge).

@Startmoon
Your configuration is not the typical home setup, 14 Access Points, your house must be really large.
Set aside the (surley complicated) capsman configuration (that however if it worked with the old ISP should not need any change), I can see at first sight two things that should be checked:
1:

/interface detect-internet
set detect-interface-list=all

this should normally be disabled, i.e. set detect-interface-list=none, as it is known to create strange issues.

2:
right now you have the switch with a static IP address:

/ip address
add address=192.168.254.150/24 interface=LOCAL network=192.168.254.0

So the DHCP server should be running on the Starlink, that BTW should have address 192.168.254.254, as that is the set gateway in your configuration:

/ip route
add distance=1 gateway=192.168.254.254

4

Hello again, i got my friend to help me and he has configured the device and now i have internet on my ethernet ports + my wifi. and speed is between 200 to 350mbps.

posting the configuration file below. i think its okay and working fine but could you check for me ?
configgg.rsc (13.1 KB)

5

Yep, now you have the DHCP server (actually two of them) on the CRS326.

I would rethink this:

/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=GUEST name=dhcp1
add address-pool=dhcp_pool2 disabled=no interface=LOCAL name=dhcp2

/ip pool
add name=dhcp_pool0 ranges=10.0.0.2-10.0.0.254
add name=dhcp_pool1 ranges=192.168.254.1-192.168.254.120
add name=dhcp_pool2 ranges=192.168.254.1-192.168.254.253

/ip dhcp-server network
add address=10.0.0.0/24 dns-server=8.8.8.8,8.8.4.4 gateway=10.0.0.1
add address=192.168.254.0/24 dns-server=8.8.8.8 gateway=192.168.254.254

You don’t need pool1 (you are not using it) and having address-pool=dhcp_pool0 name=dhcp1 is likely to create confusion checking the config.
I would leave a few more addresses out of the 192.168.254.0 pool. like - say - ranges=192.168.254.1-192.168.254.240.

Now the CRS is setup as a router, with the Starlink with IP address 192.168.1.1 connected to ether1, right?
Since you have a DHCP client on ether1, very likely the Starlink is already providing a Dynamic route to itself, and so you can remove the static one you have now.

Which speed do you get when connecting a PC directly to the Starlink?
Your report of 200-350 Mbps may be both due to the max speed of your Starlink or to a bottleneck caused by the CRS326, though I doubt the latter as you have no firewall filter rules, but better check.

I would still set set detect-interface-list=none.

6

The OP already stated the need for at least guest wifi, so I was thinking a router that is vlan capable but if the OP is content with 326 performance…

7

Thanks for the reply’s. i had a little of health problems so couldnt reply back soon or even use the internet properly :slight_smile:



my First İSP said that the devices were enough so i just accepted it when i first installed the internet. at the time he used to give me 15mbps…


When the isp installed the RBcAPGi-5acD2nD ( cap XL ) in the kitchen he didnt use the gigabit poe and just used the basic poe so i was getting only 40mbps but i have changed to the gigabit poe now and there is no problem in the kitchen.

Also there is no problem in my office roomwith one computer since i have got ethernet cable coming from the CRS switch to my wall and from there direct to my computer.

My problems now are;

** other than the kitchen all my wifi speed tests are only about 35 40 mbps where as the kitchen is 300+.

** my office room has 2 ethernet ports on the wall 1 is for my computer and second one is for my wife’s computer. my computer adapter settings shows " Link Speed (Recieve/Transmit): 1000/1000 (Mbps)
but my Wifes computer adapter shows " Link Speed (Recieve/Transmit): 100/100 (Mbps) " when i plug my cable in to her computer it shows her one as 1000/1000, tried changing her cable but still the same. could it be a problem with CRS router settings or could the wall socket be damaged etc. ?

# mar/08/2025 12:41:04 by RouterOS 6.49.17
# software id = **
#
# model = CRS326-24G-2S+
# serial number = **
/caps-man channel
add band=2ghz-b/g/n frequency=2412 name=1
add band=2ghz-b/g/n frequency=2422 name=2
add band=2ghz-b/g/n frequency=2432 name=3
add band=5ghz-a/n/ac frequency=5210 name=5g
add band=2ghz-b/g/n comment=2442 frequency=2442 name="7 (2442)"
add band=2ghz-b/g/n comment="2412 (M)" frequency=2412 name="1 (2412)"
add band=2ghz-b/g/n comment=2422 frequency=2422 name="3 (2422)"
add band=2ghz-b/g/n comment=2452 frequency=2452 name="9 (2452)"
add band=2ghz-b/g/n comment="2462 (M)" frequency=2462 name="11 (2462)"
add band=2ghz-b/g/n comment=2432 frequency=2432 name="5 (2432)"
add band=2ghz-b/g/n comment="2437 (M)" frequency=2437 name="6 (2437)"
add band=2ghz-b/g/n comment=2457 frequency=2457 name="10 2457"
add band=5ghz-a/n/ac control-channel-width=20mhz frequency=\
    5180,5200,5220,5240,5260,5280,5300,5320,5745 name=auto_5Ghz \
    reselect-interval=30m
add band=2ghz-b/g/n control-channel-width=20mhz extension-channel=disabled \
    frequency=2412,2417,2422,2427,2432,2437,2442,2447,2462 name=auto_2.4Ghz \
    reselect-interval=30m
add band=5ghz-a/n/ac frequency=5180 name=CH36
add band=5ghz-a/n/ac frequency=5200 name=CH40
add band=5ghz-a/n/ac frequency=5220 name=CH44
add band=5ghz-a/n/ac frequency=5240 name=CH48
add band=5ghz-a/n/ac frequency=5260 name=CH52
add band=5ghz-a/n/ac frequency=5280 name=CH56
add band=5ghz-a/n/ac frequency=5300 name=CH60
add band=5ghz-a/n/ac frequency=5320 name=CH64
add band=5ghz-a/n/ac frequency=5500 name=CH100
add band=5ghz-a/n/ac frequency=5520 name=CH104
add band=5ghz-a/n/ac frequency=5540 name=CH108
add band=5ghz-a/n/ac frequency=5560 name=CH112
add band=5ghz-a/n/ac frequency=5580 name=CH116
add band=5ghz-a/n/ac frequency=5600 name=CH120
add band=5ghz-a/n/ac frequency=5620 name=CH124
add band=5ghz-a/n/ac frequency=5640 name=CH128
add band=5ghz-a/n/ac frequency=5660 name=CH132
add band=5ghz-a/n/ac frequency=5680 name=CH136
add band=5ghz-a/n/ac frequency=5700 name=CH140
add band=5ghz-a/n/ac frequency=5745 name=CH149
add band=5ghz-a/n/ac frequency=5765 name=CH153
add band=5ghz-a/n/ac frequency=5785 name=CH157
add band=5ghz-a/n/ac frequency=5805 name=CH161
add band=5ghz-a/n/ac frequency=5825 name=CH165
/interface bridge
add name=GUEST protocol-mode=none
add name=LOCAL protocol-mode=none
/interface ethernet
set [ find default-name=ether1 ] comment="ANA INTERNET DAM"
set [ find default-name=ether2 ] comment="Garaj Cap"
set [ find default-name=ether3 ] comment="2. Kat Cap"
set [ find default-name=ether4 ] comment="Sistem Oda Hap"
set [ find default-name=ether5 ] comment=Qnap
set [ find default-name=ether6 ] comment="1. Kat Cap"
set [ find default-name=ether7 ] comment="Havuz Balkon Cap"
set [ find default-name=ether8 ] comment="Yarimci Ev Cap"
set [ find default-name=ether9 ] comment="Can Oda Duvar 1 Burcin"
set [ find default-name=ether10 ] comment="Oyun Odasi Hap"
set [ find default-name=ether11 ] comment="Mutfak Duvar Data"
set [ find default-name=ether12 ] comment="Mekanik Oda Hap"
set [ find default-name=ether13 ] comment="Yatak Oda Hap"
set [ find default-name=ether14 ] comment="Mutfak Caps"
set [ find default-name=ether15 ] comment="Can Oda Duvar 2 Can"
set [ find default-name=ether16 ] comment="Ege Oda Hap"
set [ find default-name=ether17 ] comment="NVR 156"
set [ find default-name=ether19 ] comment="NVR RING"
set [ find default-name=ether20 ] comment="Sistem Oda Laptop"
set [ find default-name=ether21 ] comment="NVR 155"
set [ find default-name=ether22 ] comment="Salon Oda Hap"
set [ find default-name=ether23 ] comment="Mustafa Oda Hap"
set [ find default-name=ether24 ] comment="Can Oda Duvar 3 Hap"
/caps-man datapath
add bridge=LOCAL name=LOCAL
add bridge=GUEST name=GUEST
/caps-man security
add authentication-types=wpa-psk,wpa2-psk name=** passphrase=\
    **
add authentication-types=wpa-psk,wpa2-psk name=** passphrase=\
    **
/caps-man configuration
add channel=auto_2.4Ghz datapath=LOCAL mode=ap name=LOCAL security=\
    ** ssid=WayFi
add channel=1 datapath=GUEST mode=ap name=Guest security=** \
    ssid=GuestWayFi
add channel=CH48 datapath=LOCAL mode=ap name=LOCAL_5GHZ security=\
    ** ssid=WayFi
/caps-man interface
add channel="7 (2442)" channel.frequency=2442 configuration=LOCAL disabled=no \
    l2mtu=1600 mac-address=D4:01:C3:DD:6B:EB master-interface=none name=\
    Mutfak_Cap_AC_XL radio-mac=D4:01:C3:DD:6B:EB radio-name=D401C3DD6BEB
add channel=CH44 configuration=LOCAL_5GHZ disabled=no l2mtu=1600 mac-address=\
    D4:01:C3:DD:6B:EC master-interface=none name=Mutfak_Cap_AC_XL_5GHz \
    radio-mac=D4:01:C3:DD:6B:EC radio-name=D401C3DD6BEC
add configuration=Guest disabled=no l2mtu=1600 mac-address=D6:01:C3:DD:6B:EB \
    master-interface=Mutfak_Cap_AC_XL name=Mutfak_guest radio-mac=\
    00:00:00:00:00:00 radio-name=""
add channel="11 (2462)" configuration=LOCAL disabled=no l2mtu=1600 \
    mac-address=48:A9:8A:DE:5F:99 master-interface=none name=\
    "cAP_Lite-153 Havuz Balkon Cap" radio-mac=48:A9:8A:DE:5F:99 radio-name=\
    48A98ADE5F99
add channel=2 configuration=LOCAL disabled=no l2mtu=1600 mac-address=\
    48:A9:8A:E0:AA:1D master-interface=none name="cAP_Lite-157 2.kat Cap" \
    radio-mac=48:A9:8A:E0:AA:1D radio-name=48A98AE0AA1D
add channel="3 (2422)" configuration=LOCAL disabled=no l2mtu=1600 \
    mac-address=48:A9:8A:E0:AA:27 master-interface=none name=\
    "cAP_Lite-159 Garaj Cap" radio-mac=48:A9:8A:E0:AA:27 radio-name=\
    48A98AE0AA27
add channel="5 (2432)" configuration=LOCAL disabled=no l2mtu=1600 \
    mac-address=78:9A:18:52:67:01 master-interface=none name=\
    "cAP_Lite-160 YatakOda" radio-mac=78:9A:18:52:67:01 radio-name=\
    789A18526701
add channel="6 (2437)" configuration=LOCAL disabled=no l2mtu=1600 \
    mac-address=48:A9:8A:48:89:53 master-interface=none name=\
    cAP_Lite-161-YardimciEv radio-mac=48:A9:8A:48:89:53 radio-name=\
    48A98A488953
add channel="6 (2437)" configuration=LOCAL disabled=no l2mtu=1600 \
    mac-address=48:A9:8A:E0:AC:9F master-interface=none name=\
    "cAP_Lite-165 1.kat Cap" radio-mac=48:A9:8A:E0:AC:9F radio-name=\
    48A98AE0AC9F
add channel="11 (2462)" channel.band=2ghz-b/g/n \
    channel.control-channel-width=20mhz configuration=LOCAL disabled=no \
    l2mtu=1600 mac-address=48:A9:8A:AC:98:D6 master-interface=none name=\
    hAP_Lite-151-CanOda radio-mac=48:A9:8A:AC:98:D6 radio-name=48A98AAC98D6 \
    rates.supported="" security.authentication-types=wpa-psk,wpa2-psk \
    security.encryption=""
add channel="1 (2412)" configuration=LOCAL disabled=no l2mtu=1600 \
    mac-address=78:9A:18:52:61:49 master-interface=none name=\
    hAP_Lite-152-MustafaOda radio-mac=78:9A:18:52:61:49 radio-name=\
    789A18526149
add channel="11 (2462)" configuration=LOCAL disabled=no l2mtu=1600 \
    mac-address=78:9A:18:52:66:7D master-interface=none name=\
    hAP_Lite-153-SistemOda radio-mac=78:9A:18:52:66:7D radio-name=\
    789A1852667D
add channel="11 (2462)" configuration=LOCAL disabled=no l2mtu=1600 \
    mac-address=78:9A:18:52:66:83 master-interface=none name=\
    hAP_Lite-154-Salon radio-mac=78:9A:18:52:66:83 radio-name=789A18526683
add channel="11 (2462)" configuration=LOCAL disabled=no l2mtu=1600 \
    mac-address=78:9A:18:52:65:8D master-interface=none name=\
    "hAP_Lite-162-Mekanik Oda" radio-mac=78:9A:18:52:65:8D radio-name=\
    789A1852658D
add channel="11 (2462)" configuration=LOCAL disabled=no l2mtu=1600 \
    mac-address=78:9A:18:52:64:CD master-interface=none name=\
    "hAP_Lite-163 OyunOdasi" radio-mac=78:9A:18:52:64:CD radio-name=\
    789A185264CD
add channel="11 (2462)" channel.save-selected=no configuration=LOCAL \
    disabled=no l2mtu=1600 mac-address=78:9A:18:52:67:C7 master-interface=\
    none name=hAP_Lite-164-EgeOda radio-mac=78:9A:18:52:67:C7 radio-name=\
    789A185267C7
add configuration=Guest disabled=no l2mtu=1600 mac-address=4A:A9:8A:E0:AC:9F \
    master-interface="cAP_Lite-165 1.kat Cap" name="1.kat Guest" radio-mac=\
    00:00:00:00:00:00 radio-name=""
add configuration=Guest disabled=no l2mtu=1600 mac-address=4A:A9:8A:E0:AA:1D \
    master-interface="cAP_Lite-157 2.kat Cap" name="2.Kat Guest" radio-mac=\
    00:00:00:00:00:00 radio-name=""
add configuration=Guest disabled=no l2mtu=1600 mac-address=4A:A9:8A:AC:98:D6 \
    master-interface=hAP_Lite-151-CanOda name="Can Oda Guest" radio-mac=\
    00:00:00:00:00:00 radio-name=""
add configuration=Guest disabled=no l2mtu=1600 mac-address=7A:9A:18:52:67:C7 \
    master-interface=hAP_Lite-164-EgeOda name="Ege Oda Guest" radio-mac=\
    00:00:00:00:00:00 radio-name=""
add configuration=Guest disabled=no l2mtu=1600 mac-address=4A:A9:8A:E0:AA:27 \
    master-interface="cAP_Lite-159 Garaj Cap" name="Garaj Guest" radio-mac=\
    00:00:00:00:00:00 radio-name=""
add configuration=Guest disabled=no l2mtu=1600 mac-address=4A:A9:8A:DE:5F:99 \
    master-interface="cAP_Lite-153 Havuz Balkon Cap" name=\
    "Havuz Balkon Guest" radio-mac=00:00:00:00:00:00 radio-name=""
add configuration=Guest disabled=no l2mtu=1600 mac-address=7A:9A:18:52:65:8D \
    master-interface="hAP_Lite-162-Mekanik Oda" name="Mekanik Oda Guest" \
    radio-mac=00:00:00:00:00:00 radio-name=""
add configuration=Guest disabled=no l2mtu=1600 mac-address=7A:9A:18:52:61:49 \
    master-interface=hAP_Lite-152-MustafaOda name="Mustafa Oda Guest" \
    radio-mac=00:00:00:00:00:00 radio-name=""
add configuration=Guest disabled=no l2mtu=1600 mac-address=7A:9A:18:52:64:CD \
    master-interface="hAP_Lite-163 OyunOdasi" name="Oyun Odasi Guest" \
    radio-mac=00:00:00:00:00:00 radio-name=""
add configuration=Guest disabled=no l2mtu=1600 mac-address=7A:9A:18:52:66:83 \
    master-interface=hAP_Lite-154-Salon name="Salon Guest" radio-mac=\
    00:00:00:00:00:00 radio-name=""
add configuration=Guest disabled=no l2mtu=1600 mac-address=7A:9A:18:52:66:7D \
    master-interface=hAP_Lite-153-SistemOda name="Sistem Oda Guest" \
    radio-mac=00:00:00:00:00:00 radio-name=""
add configuration=Guest disabled=no l2mtu=1600 mac-address=4A:A9:8A:48:89:53 \
    master-interface=cAP_Lite-161-YardimciEv name="Yardimci Ev Guest" \
    radio-mac=00:00:00:00:00:00 radio-name=""
add configuration=Guest disabled=no l2mtu=1600 mac-address=7A:9A:18:52:67:01 \
    master-interface="cAP_Lite-160 YatakOda" name="Yatak Oda Guest" \
    radio-mac=00:00:00:00:00:00 radio-name=""
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip kid-control
add fri=0s-1d mon=0s-1d name=system-dummy sat=0s-1d sun=0s-1d thu=0s-1d tue=\
    0s-1d tur-fri=0s-1d tur-mon=0s-1d tur-sat=0s-1d tur-sun=0s-1d tur-thu=\
    0s-1d tur-tue=0s-1d tur-wed=0s-1d wed=0s-1d
/ip pool
add name=dhcp_pool0 ranges=10.0.0.2-10.0.0.254
add name=dhcp_pool1 ranges=192.168.254.1-192.168.254.120
add name=dhcp_pool2 ranges=192.168.254.1-192.168.254.253
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=GUEST name=dhcp1
add address-pool=dhcp_pool2 disabled=no interface=LOCAL name=dhcp2
/queue simple
add disabled=yes max-limit=1M/5M name="Guest Limit" target=GUEST
/caps-man access-list
add action=reject allow-signal-out-of-range=10s client-to-client-forwarding=\
    yes disabled=no interface=any signal-range=-120..-75 ssid-regexp=""
add action=accept allow-signal-out-of-range=10s client-to-client-forwarding=\
    yes disabled=no interface=any signal-range=-75..120 ssid-regexp=""
/caps-man manager
set enabled=yes
/interface bridge port
add bridge=LOCAL interface=ether2
add bridge=LOCAL interface=ether3
add bridge=LOCAL interface=ether4
add bridge=LOCAL interface=ether5
add bridge=LOCAL interface=ether6
add bridge=LOCAL interface=ether7
add bridge=LOCAL interface=ether8
add bridge=LOCAL interface=ether9
add bridge=LOCAL interface=ether10
add bridge=LOCAL interface=ether11
add bridge=LOCAL interface=ether12
add bridge=LOCAL interface=ether13
add bridge=LOCAL interface=ether14
add bridge=LOCAL interface=ether15
add bridge=LOCAL interface=ether16
add bridge=LOCAL interface=ether17
add bridge=LOCAL interface=ether18
add bridge=LOCAL interface=ether19
add bridge=LOCAL interface=ether20
add bridge=LOCAL interface=ether21
add bridge=LOCAL interface=ether22
add bridge=LOCAL interface=ether23
add bridge=LOCAL interface=ether24
/ip address
add address=192.168.254.254/24 interface=LOCAL network=192.168.254.0
add address=10.0.0.1/24 interface=GUEST network=10.0.0.0
/ip dhcp-client
add disabled=no interface=ether1
/ip dhcp-server network
add address=10.0.0.0/24 dns-server=8.8.8.8,8.8.4.4 gateway=10.0.0.1
add address=192.168.254.0/24 dns-server=8.8.8.8 gateway=192.168.254.254
/ip dns
set servers=8.8.8.8
/ip firewall nat
add action=masquerade chain=srcnat src-address=10.0.0.0/24
add action=masquerade chain=srcnat src-address=192.168.254.0/24
add action=dst-nat chain=dstnat dst-address=192.168.254.150 dst-port=150 \
    protocol=tcp to-addresses=192.168.254.150 to-ports=8291
/ip route
add distance=1 gateway=192.168.1.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set ssh disabled=yes
set winbox port=4321
set api-ssl disabled=yes
/system clock
set time-zone-name=America/Toronto
/system identity
set name="cAP_Main-150 Ana Cihaz"
/system routerboard settings
set boot-os=router-os
8

Needs to be tested.
Consider that 10/100 ehernet needs only 4 wires (2 pairs) while 1000 needs all 8 wires (all 4 pairs).

Ros has a cable test feature, while it is not very reliable, trying it costs nothing, see here:
http://forum.mikrotik.com/t/hap-ax2-poe-port-suddenly-limited-to-100mbps/181713/1

9

Will try the cable test.

Beside that what could the problem be with the other caps and haps speed that it only gives 40mbps speed while the kitchen cap xl that has a gigabit poe is giving 250+ and my computer is getting 300+ hard wired connected ?