Community discussions

MikroTik App
 
Buddy1913
just joined
Topic Author
Posts: 1
Joined: Thu Jun 17, 2021 3:49 pm

Speed issues with PPPoE connection

Mon Jun 21, 2021 3:33 pm

Hi Everyone,

Firstly i appologise for my novice question, i've done some forum searching and have come up empty for a solution for my direct issue so far.
I have recently gone with a new internet provider that has fitted an ONT to my flat, for FTTP service. the ISP system is configured to use PPPoE for link authentication, this differs from my previous provider which used Coax and DHCP.

as such i have attempted to configure my RB 3011UiAS accordingly, i have a connection and am getting the advertised upload speed, however when testing the download speed i am getting capped at ~120Mbps this is by no means terrible however is a far cry from the 300 of the package i am paying for.

using the ISP supplied equipment i am able to get the full speed so i know that the line installed is capable of the speeds advertised.
Torching the connection i cannot see any ongoing connections that are stealing bandwith (like DNS / DNS Amplification), as a sense-check i have returned the configuration back to near-defconf with the bonding for my NAS.
I read up on a few MTU / MSS issues people have had and with testing have found that the MTU of 1480 is the highest i can go before fragmentation (testing with no fragment flag set direct on 3011, this is also what is auto-negociated) and have played around with some Mangle rules that were mentioned on a similar PPPoE thread but alas no solution yet.

as a last ditch hope i ask the forum for guidance, here are my configs extracted with /export hide-sensitive
/interface bridge
add admin-mac=B8:69:F4:F1:D5:22 auto-mac=no comment=defconf name=bridge
/interface ethernet
set [ find default-name=sfp1 ] mtu=1480
/interface pppoe-client
add add-default-route=yes disabled=no interface=ether1 name=pppoe-out1 \
    use-peer-dns=yes user=bthomehub@btbroadband.com
/interface bonding
add name=UnraidServer slaves=ether4,ether5
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=10.0.0.10-10.0.0.250
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether6
add bridge=bridge comment=defconf interface=ether7
add bridge=bridge comment=defconf interface=ether8
add bridge=bridge comment=defconf interface=ether9
add bridge=bridge comment=defconf interface=ether10
add bridge=bridge comment=defconf interface=sfp1
add bridge=bridge interface=UnraidServer
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface detect-internet
set internet-interface-list=WAN lan-interface-list=LAN wan-interface-list=WAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
add interface=pppoe-out1 list=WAN
/ip address
add address=10.0.0.1/16 comment=defconf interface=bridge network=10.0.0.0
/ip dhcp-client
add comment=defconf disabled=no interface=ether1
/ip dhcp-server network
add address=10.0.0.0/16 comment=defconf dns-server=10.0.0.254,1.1.1.1 domain=\
    LlamasBananas gateway=10.0.0.1 netmask=16
/ip dns
set allow-remote-requests=yes servers=10.0.0.254,1.1.1.1
/ip dns static
add address=10.0.0.1 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
    invalid
add action=drop chain=input comment="Drop ICMP" in-interface-list=WAN \
    protocol=icmp
add action=accept chain=input comment=\
    "defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
    in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
    ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
    ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
    connection-state=established,related
add action=accept chain=forward comment=\
    "defconf: accept established,related, untracked" connection-state=\
    established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
    connection-state=invalid
add action=drop chain=forward comment=\
    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
    connection-state=new in-interface-list=WAN
/ip firewall mangle
add action=change-mss chain=forward disabled=yes new-mss=1300 \
    out-interface-list=WAN passthrough=yes protocol=tcp tcp-flags=syn \
    tcp-mss=1301-65535
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" \
    out-interface-list=WAN
add action=dst-nat chain=dstnat comment="SWAG port 80 input" dst-port=80 \
    in-interface-list=WAN protocol=tcp to-addresses=10.0.0.217 to-ports=180
add action=dst-nat chain=dstnat comment="SWAG port 443 Input" dst-port=443 \
    in-interface-list=WAN protocol=tcp to-addresses=10.0.0.217 to-ports=1443
add action=dst-nat chain=dstnat comment="MINEOS port inputs" disabled=yes \
    dst-port=25565-25570 in-interface-list=WAN protocol=tcp to-addresses=\
    10.0.0.3
/ip upnp
set show-dummy-rule=no
/system clock
set time-zone-name=Europe/London
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN

Who is online

Users browsing this forum: teleport and 34 guests