Hello everyone. This is my first post.
I have Mikrotik hAP ax3 FW 7.16.2. My problem is that on wifi (it doesn’t matter 2,4 or 5) once in a dozen or so pings from 17 (in stable) I suddenly get 2000 and more. The problem is that I work on this network and it is very annoying, it interrupts conversations on Teams, I can’t hear them, they can’t hear me, which I use a lot.
Is there any way to diagnose this?
It wasn’t like that on the old Asus, when I connect an access point I don’t have this problem, so it’s 100% Mikrotik’s fault.
Often, the real problem is between the chair and the computer 
If you want it solved, please share your current config so we can check the curren configuration:
/export file=anynameyoulike
Remove serial and any other private info and post between code tags by using the </> button.
thx fya
2025-01-09 09:43:08 by RouterOS 7.16.2
software id = RJEN-U962
model = C53UiG+XXXXXXXXXXXXX
serial number = XXXXXXXXXXXX
/interface bridge
add name=LAN port-cost-mode=short
add name=WAN port-cost-mode=short
/interface ethernet
set [ find default-name=ether1 ] mac-address=XXXXXXXXXXXXX
/interface wifi channel
add disabled=no name=channel1
/interface wifi configuration
add country=Poland disabled=no mode=ap name=WiFi ssid=WiFi tx-power=10
add country=Poland disabled=no mode=ap name=WiFi5 ssid=WiFi5
/interface wifi security
add disabled=no name=xxxxxx
/interface wifi
set [ find default-name=wifi1 ] channel=channel1 configuration=WiFi5
configuration.mode=ap .ssid=WiFi5M disabled=no security=xxxxxx
set [ find default-name=wifi2 ] channel=channel1 configuration=WiFi
configuration.mode=ap .ssid=WiFi security=xxxxxxx
/ip kid-control
add name=XXXXXXX
/ip pool
add name=dhcp_pool0 ranges=192.168.1.100-192.168.1.150
/ip dhcp-server
add address-pool=dhcp_pool0 interface=LAN name=dhcp1
/interface bridge port
add bridge=WAN interface=ether1
add bridge=LAN interface=ether2
add bridge=LAN interface=ether3
add bridge=LAN interface=ether4
add bridge=LAN interface=ether5
add bridge=LAN interface=wifi1
add bridge=LAN interface=wifi2
/ip firewall connection tracking
set udp-timeout=10s
/ipv6 settings
set disable-ipv6=yes
/interface detect-internet
set detect-interface-list=all
/ip address
add address=192.168.1.1/24 interface=LAN network=192.168.1.0
/ip dhcp-client
add interface=WAN
/ip dhcp-server lease
add address=192.168.1.10 client-id=1:2:db:47:bf:fb:f mac-address=
02:DB:47: server=dhcp1
/ip dhcp-server network
add address=192.168.1.0/24 dns-server=8.8.8.8,9.9.9.9,8.8.9.9 gateway=
192.168.1.1 netmask=24
/ip firewall filter
add action=accept chain=input connection-state=established,related,untracked
add action=drop chain=input connection-state=invalid
add action=accept chain=input protocol=icmp
add action=accept chain=input dst-address=127.0.0.1
add action=drop chain=input in-interface=!LAN
add action=accept chain=forward ipsec-policy=in,ipsec
add action=accept chain=forward ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward connection-state=
established,related hw-offload=yes
add action=accept chain=forward connection-state=
established,related,untracked
add action=drop chain=forward connection-state=invalid
add action=drop chain=forward connection-nat-state=!dstnat connection-state=
new in-interface=WAN
/ip firewall nat
add action=masquerade chain=srcnat out-interface=WAN
add action=dst-nat chain=dstnat comment=Teltonika dst-port=5057 protocol=tcp
src-port=5057 to-addresses=192.168.1.10 to-ports=5057
add action=dst-nat chain=dstnat dst-port=5072 protocol=tcp src-port=5027
to-addresses=192.168.1.10 to-ports=8072
add action=dst-nat chain=dstnat dst-port=18682 protocol=tcp src-port=18682
to-addresses=192.168.1.10 to-ports=18682
add action=masquerade chain=srcnat dst-address=!192.168.1.1 src-address=
192.168.1.0/24
/ip ipsec profile
set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
/ip kid-control device
add mac-address=C0:23:8D:E6:69:7F name=Samsung user=""
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set api-ssl disabled=yes
/system clock
set time-zone-name=Europe/Warsaw
/system note
set show-at-login=no
/tool mac-server ping
set enabled=no
/user group
add name=apli policy="api,!local,!telnet,!ssh,!ftp,!reboot,!read,!write,!polic
y,!test,!winbox,!password,!web,!sniff,!sensitive,!romon,!rest-api"
Which SSID is used while you experience problems?
What is signal strength, indicated by wireless station at the spot you normally use it?
If you check WiFi environment (use some WiFi diagnostic AP on your phone), are there many other APs seen?
You have left channel selection to automatic … does it help if you fix channels manually (select some least used from your environment check).
You have limited Tx power on 2.4GHz channel quite a lot. Which doesn’t make much sense since you have different SSIDs for different frequency bands … remember, lower Tx power means lower signal strength for device and you want pretty strong signal strength to offer stability in wireless connection.
Etc.
No matter if it’s WiFi or 5G WiFi, the problem is the same.
5GHz - about 70dBm
2.4 GHz - 60 dBm
If you check WiFi environment (use some WiFi diagnostic AP on your phone), are there many other APs seen? - Yes
You have limited Tx power on 2.4GHz channel quite a lot - how to improve it?
Just remove (max) tx-power.
/interface wifi security
add disabled=no name=xxxxxx
Sure you want an open wifi network?
Could you give this a try:
/interface wifi configuration
add name=cfg2 country=Poland mode=ap ssid=Wifi channel.skip-dfs-channels=10min-cac security.authentication-types=wpa2-psk .passphrase="yourPSKgoesHere" .ft=yes .ft-over-ds=yes
add name=cfg5 country=Poland mode=ap ssid=Wifi5 channel.skip-dfs-channels=10min-cac security.authentication-types=wpa2-psk .passphrase="yourPSKgoesHere" .ft=yes .ft-over-ds=yes
/interface wifi
set [ find default-name=wifi1 ] name=wifi5 configuration=cfg5 channel.band=5ghz-ax .width=20/40/80mhz
set [ find default-name=wifi2 ] configuration=cfg2 channel.band=2ghz-ax .width=20mhz
Config file is great to have all the setup information.
However it is not giving operational information, like the channel choosen to operate on.
In Poland, and other regions of ETSI regulation, make sure to limit the possible channels to be below 5730 Mhz for AX based AP, or you might end up (immediately or from time to time) in the weak 14dBm SRD channels
(SRD: short range device)
[admin@hAPax2] /interface/wifi/radio> reg-info
country: Poland
number: 0
ranges: 2402-2482/20
5170-5250/23/indoor
5250-5330/23/indoor/dfs
5490-5730/30/dfs
5735-5875/14