Community discussions

MikroTik App
 
Paulxp
just joined
Topic Author
Posts: 1
Joined: Sun Nov 18, 2018 3:14 pm

hAP AC - slow eth speed to INET

Sun Nov 18, 2018 3:31 pm

Hi guys,
i have big issues with my hAP AC. At start i would say that i have tried different configurations, different router OS version but nothing helped me. For debugging i did factory reset with no default configuration. My hap ac has DHCP client at eth1 (WAN) and Bridge1 with ports eth2 - eth5 and wlan1 + wlan2. Firewall contains only masquerade rule and block administrative ports from public INET.

My internet speed is 400 Mbit/s download and upload. When i try to test internet speed at speedtest.net from macbook or another wifi device, my result is approx 350 Mbit/s what is ok. But, when i place test on computer connected to eth2 - eth5 (i have tried different computers) my down and up speed is max to 10 Mbit/s. Why? Throughput between eth ports is also fine, but i have issues with internet. My ISP don't block any ports, so no firewall on ISP. Router has public IP with NAT 1:1 at ISP

Interesting things happens when i disable both wlan interfaces. INET speed on eth ports is excellent - 400 Mbit/s. When i enable wifi, internet speed on eth port is poor. What can cause this issues?

My configuration:
# nov/18/2018 14:31:26 by RouterOS 6.43.4
# software id = MLN3-CAB7
#
# model = RouterBOARD 962UiGS-5HacT2HnT
# serial number = 673705170084
/interface bridge
add fast-forward=no name=Bridge1
/interface ethernet
set [ find default-name=sfp1 ] disabled=yes
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-g/n channel-width=20/40mhz-Ce \
    country=slovakia disabled=no frequency=2447 mode=ap-bridge ssid=\
    "Jurko NET KE" wireless-protocol=802.11
set [ find default-name=wlan2 ] band=5ghz-onlyac channel-width=20/40/80mhz-Ceee \
    country=slovakia disabled=no frequency=auto mode=ap-bridge ssid=\
    "Jurko NET KE" wireless-protocol=802.11
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" mode=\
    dynamic-keys supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=dhcp_pool_lan ranges=192.168.185.21-192.168.185.200
/ip dhcp-server
add address-pool=dhcp_pool_lan disabled=no interface=Bridge1 lease-time=1d \
    name=dhcp1
/interface bridge port
add bridge=Bridge1 interface=ether2
add bridge=Bridge1 interface=ether3
add bridge=Bridge1 interface=ether4
add bridge=Bridge1 interface=ether5
add bridge=Bridge1 interface=wlan1
add bridge=Bridge1 interface=wlan2
/ip address
add address=192.168.185.1/24 interface=Bridge1 network=192.168.185.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether1
/ip dhcp-server network
add address=192.168.185.0/24 dns-server=8.8.8.8,1.1.1.1 gateway=192.168.185.1
/ip firewall filter
add action=drop chain=input dst-port=22,80,8291 in-interface=ether1 protocol=\
    tcp
/ip firewall nat
add action=masquerade chain=srcnat
/ip service
set telnet disabled=yes
set ftp disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/system clock
set time-zone-name=Europe/Bratislava
/system routerboard settings
set silent-boot=no
 
Kindis
Member
Member
Posts: 434
Joined: Tue Nov 01, 2011 6:54 pm
Location: Sweden

Re: hAP AC - slow eth speed to INET

Tue Nov 20, 2018 9:31 am

I have not seen this issue in any of my setups but you should consider adding more safety to your setup. Right now you do not drop everything new to efter1 which is you WAN port. I woudl recommend that you do the following:

/ip firewall filter
add action=fasttrack-connection chain=forward connection-state=established,related
add action=accept chain=forward comment="Allow all connections that are established and related" connection-state=established,related
add action=drop chain=input comment="Default input drop rules" connection-state=new in-interface=ether1

This would add fasttrack to you setup which might help with speed. Don't know if this will help with the speed issues but it might.
The last rule will drop all inbound connections on ether1 that are in connection-state new. This will secure your WAN interface better while making the input chain (admin access) possible from the inside.
 
User avatar
m4t7e0
Frequent Visitor
Frequent Visitor
Posts: 81
Joined: Tue Jun 09, 2015 12:17 am
Contact:

Re: hAP AC - slow eth speed to INET

Tue Nov 20, 2018 6:35 pm

you can use hw swtich instead the "bridge" or change the qos rules for single interface

Who is online

Users browsing this forum: AndreKR, Bing [Bot], CHUPAPEE, Google [Bot], jaclaz, li77616211 and 171 guests