WiFi with password download very slow\without work just fine

RouterOS Wireless Networking
1

Hello ,
when a client connect to the WiFi with pass he get a download rate of ~ 1-2M
but when I cancel the password - he get a downlad rate of ~ 6-7M (as should be)
how is it possible ?
have try this with IOS and also Android
this is my WiFi setting -

/interface wireless security-profiles
authentication-types=wpa2-psk eap-methods="" group-ciphers=tkip \
    management-protection=allowed mode=dynamic-keys name=123456789 \
    supplicant-identity="" unicast-ciphers=tkip wpa2-pre-shared-key=\
    123456789
 /interface wireless
set [ find default-name=wlan1 ] band=2ghz-onlyg disabled=no l2mtu=2290 mode=\
    ap-bridge security-profile=123456789 ssid="My Free WiFi" \
    wireless-protocol=802.11 wmm-support=enabled

???

Thanks ,

2

TKIP—Temporal Key Integrity Protocol. The replacement encryption system for WEP. Several features were added to make keys more secure than they were under WEP.
AES—Advanced Encryption Standard. This is now the preferred encryption method, replacing the old TKIP. AES is implemented in WPA2/802.11i.

3

Have you tried to disable wmm-support ?
What is mtu value ? Maybe packets without encryption fit into 1500 limit, but encrypted ones do not and are fragmented what lowers transmission speed.

4

This is mine configuration, and everything working fine.

[admin@MikroTik] /interface wireless security-profiles> print
Flags: * - default 
 0 * name="default" mode=dynamic-keys authentication-types=wpa-psk,wpa2-psk 
     unicast-ciphers=aes-ccm group-ciphers=aes-ccm 
     wpa-pre-shared-key="mykey" wpa2-pre-shared-key="mykey" 
     supplicant-identity="MikroTik" eap-methods="" tls-mode=no-certificates 
     tls-certificate=none mschapv2-username="" mschapv2-password="" 
     static-algo-0=none static-key-0="" static-algo-1=none static-key-1="" 
     static-algo-2=none static-key-2="" static-algo-3=none static-key-3="" 
     static-transmit-key=key-0 static-sta-private-algo=none 
     static-sta-private-key="" radius-mac-authentication=no 
     radius-mac-accounting=no radius-eap-accounting=no interim-update=0s 
     radius-mac-format=XX:XX:XX:XX:XX:XX radius-mac-mode=as-username 
     radius-mac-caching=disabled group-key-update=5m 
     management-protection=disabled management-protection-key=""




[admin@MikroTik] /interface wireless> print
Flags: X - disabled, R - running 
 0  R name="wlan1" mtu=1500 mac-address=XX:XX:XX:XX:XX arp=enabled 
      interface-type=Atheros AR9300 mode=ap-bridge ssid="MikroTik" 
      frequency=2472 band=2ghz-b/g/n channel-width=20mhz scan-list=default 
      wireless-protocol=802.11 wds-mode=disabled wds-default-bridge=none 
      wds-ignore-ssid=no bridge-mode=enabled default-authentication=yes 
      default-forwarding=yes default-ap-tx-limit=0 default-client-tx-limit=0 
      hide-ssid=no security-profile=default compression=no
5

the mtu is 1500
I have disable the wmm-support
change to AES
also change the network name to only uppercase letter “TEST”
but still the same

what else could it be ?

Thanks ,

6

What version on RouterOS do you use?

7

Yes TKIP is evil, use AES and all will work fine.

8

I’m using v6.23 , I have change it t aes
and I can see a change , I will let it work like this for a week - and see what the people say

Thanks ,