vlans and wifi with two separate internet routers - download problem

Hi all,

Wondering if anyone might have any tips on how I might toubleshoot this.

Several days ago I created the following set up:
SwOS System.png
As far as I could tell it has all been working fine, but today:

  • Download speeds are very low (less than 1mbps) whereas upload speeds are normal when connected to the starlink network via either wAP_ac_1 or wAP_ac_2
    Tested with speedtest.net on the PC and Wifiman on android phone. Also evident with very slow internet browsing and Youtube barely useable.

  • Connecting directly to the starlink router wifi is fine (both upload and download speeds normal)

  • Rebooting the Starlink router did not help

  • Rebooting wAP_ac_2 did not help

  • Problem is on both the 5GHz and 2.4GHz wlans

  • Problem appears to be on all clients (tested android phone and windows PC)

  • No interference, or overlap, on any of the wifi channels

  • The LTE wlan (2.4GHz only) works normally for both upload and download

  • I did see this problem when setting up - I can’t recall at exactly what stage but I think it was after I configured the first wAP and tested it. But the problem “went away” after that…

VLAN configuration of the SwOS switch:
schematic.png
SwOS VLANs.png
SwOS VLAN.png
Export of wAP_ac_2 (wAp_ac_1 has the same configuration apart from wifi channels):

# 1970-01-05 19:27:23 by RouterOS 7.11.2
# software id = SUXT-S139
#
# model = RBwAPG-5HacT2HnD
# serial number = 
/interface bridge
add name=BR1 vlan-filtering=yes
/interface wireless
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=20/40mhz-Ce \
    country=kenya disabled=no frequency=5500 mode=ap-bridge name=\
    starlink5GWlan ssid="Starlink 5G" wireless-protocol=802.11
set [ find default-name=wlan1 ] country=kenya disabled=no frequency=2462 \
    mode=ap-bridge name=starlinkWlan ssid=Starlink wireless-protocol=802.11
/interface vlan
add interface=BR1 name=LTE_vlan vlan-id=20
/interface wireless
add disabled=no mac-address=76:4D:28:D3:D1:14 master-interface=starlinkWlan \
    name=LTEWlan ssid="LTE"
/interface list
add name=LTE
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk mode=dynamic-keys \
    supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/interface bridge port
add bridge=BR1 frame-types=admit-only-untagged-and-priority-tagged interface=\
    starlinkWlan pvid=10
add bridge=BR1 frame-types=admit-only-untagged-and-priority-tagged interface=\
    starlink5GWlan pvid=10
add bridge=BR1 frame-types=admit-only-untagged-and-priority-tagged interface=\
    LTEWlan pvid=20
add bridge=BR1 frame-types=admit-only-vlan-tagged interface=ether1
/ip neighbor discovery-settings
set discover-interface-list=LTE
/interface bridge vlan
add bridge=BR1 tagged=ether1 vlan-ids=10
add bridge=BR1 tagged=BR1,ether1 vlan-ids=20
/interface list member
add interface=LTE_vlan list=LTE
/ip address
add address=192.168.40.97/24 interface=LTE_vlan network=192.168.40.0
/ip route
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=192.168.40.1 \
    pref-src="" routing-table=main scope=30 suppress-hw-offload=no \
    target-scope=10
/system identity
set name=wAP_ac_2
/system logging
set 0 topics=info,!wireless
/system note
set show-at-login=no
/tool mac-server
set allowed-interface-list=LTE
/tool mac-server mac-winbox
set allowed-interface-list=LTE

(more discussion on the set up here:
http://forum.mikrotik.com/t/vlans-and-wifi-with-two-separate-internet-routers/169727/1)