Community discussions

MikroTik App
 
shsnider
just joined
Topic Author
Posts: 5
Joined: Sat May 27, 2023 7:24 pm

cAP ax performance and problems

Sat May 27, 2023 7:43 pm

hello folks - I wanted to test mikrotik products and i ran accross the cap ax wireless ap. Pretty easy to install and certainly full of options once you get your way around it. I was pretty happy with it until i tested performance. For some reason both freqs 2.4 and 5 ghz are providing an extremely poor experience no higher than 80mbps in the best scenario.I played around with channels and all that but the number never seems to improve. So here is the question for those that are more experienced with mikrotik that are willing to give me some feedback:
- Is this performance good for the product or I am screwing up the config somewhere?
- I tried to look at the options to see if there was some sort of tcp or bridge option enabled that could be affecting overall performance but i couldn't find anything.
- In the same network I have another product that is able to reach around 450-500 gbps, when i looked in the mikrotik winbox scanner this device was showing as channel 5180/ax/Ceeeeeee. That doesn't seem to be an option on the cap ax product, I configured the channel as 80+80Mhz 5180+5290
- The biggest problem i see other than the speed is that wireless sessions just drop, on both frequences it seems the devices just randomly drops the clients. I have tried in multiple clients, linux, windows and macos devices. They all get randomly disconnected at times. Could this be a configuration option?

I am also running on v7.9.1 in case that could be related, i saw some posts saying that this v7 is not very good for wireless, not sure if its true.

Appreciate any help on the subject, I like all the options the device seems really complete, but I am trying not to waste a lot of time if this is the best that i can get out of it. the random client drops are really the biggest problem and I think i may just return the product if this is the best i can expect from it. thank you!
 
User avatar
Smoerrebroed
Frequent Visitor
Frequent Visitor
Posts: 75
Joined: Mon Feb 12, 2018 10:21 am

Re: cAP ax performance and problems

Sun May 28, 2023 10:18 am

speed.jpg
(7.9.1 and even on an ac link; the actual download speed is higher.)
You do not have the required permissions to view the files attached to this post.
 
holvoetn
Forum Guru
Forum Guru
Posts: 5317
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: cAP ax performance and problems

Sun May 28, 2023 10:40 am

Post config between code quotes.

I can get close to or over 800 using tp-link ax20u as wireless adapter for laptop towards AX3 (same chip and resources as Cap ax)

In order of asking:
1- most likely something wrong in the config. Hence the request to have a look how you have it configured now.
2- I assume you like to use the device as a simple access point ? Routing, DHCP,... is done by another device ?
3-
In the same network I have another product that is able to reach around 450-500 gbps
Hard to believe over wifi :lol:
However, if that "other device" is already using channel 5180, why are you using the SAME channel ? That's not smart.
Plan your frequencies so you stay AWAY from other access points already occupying certain channels. If that's not possible, try to use the least occupied ones (usually better but not always).
4- as of ROS7.9 (and 7.9.1 and 7.10b8) there are some AX-wifi issues (which is what you may see). What does the log file say about this (provided you have enabled logging) ?
Might be best (for now) to downgrade to 7.8.

But let's first have a look at your config.
 
shsnider
just joined
Topic Author
Posts: 5
Joined: Sat May 27, 2023 7:24 pm

Re: cAP ax performance and problems

Sun May 28, 2023 11:25 pm

hi Holvoetn, appreciate your response and that you take a look at my config
Hard to believe over wifi :lol:
best wifi ever :)
1- most likely something wrong in the config. Hence the request to have a look how you have it configured now.
I really hope the config is the issue, i do like the routerOS overall. I understand networking but honestly wireless is a very weak area.
2- I assume you like to use the device as a simple access point ?
Correct, I don't even want nat, i'm just routing to the main firewall that will take care of routing, nat, etc.
However, if that "other device" is already using channel 5180, why are you using the SAME channel ? That's not smart.
good point, for some reason there were no available channel configured in the device and the antenna was down, I found this page and used it to do some testing: https://en.wikipedia.org/wiki/List_of_W ... j/n/ac/ax) but the ultimate result was all the same, did not make a difference if i was using 5180 versus 5210, i even configured the secondary frequency to try and do 80+80 but my tests always showed the same result.I finally set to try and mirror the other AP to see if i could match the speed.
4- as of ROS7.9 (and 7.9.1 and 7.10b8) there are some AX-wifi issues (which is what you may see). What does the log file say about this (provided you have enabled logging) ?
I followed this troubleshooting guide and enabled wireless debugging, did not really see much there other than signaling issues (https://wiki.mikrotik.com/wiki/Manual:W ... Debug_Logs) I will post logs below.

I did experience a new issue today, seem the device just hung up during the night, the device was showing activity on the poe port, but there was no ssid to connect to. I had to do a hard reset to get them back.

here is my config:
# may/28/2023 14:04:58 by RouterOS 7.9.1
# software id = GUKW-BIS8
#
# model = cAPGi-5HaxD2HaxD
# serial number = HEE08H9PBM8
/interface bridge
add admin-mac=48:A9:8A:C0:3D:29 auto-mac=no comment=defconf name=bridge
/interface wifiwave2
set [ find default-name=wifi1 ] channel.band=5ghz-ax .frequency=5180 .secondary-frequency=5290 .skip-dfs-channels=disabled .width=20/40/80mhz configuration.chains="" .country=\
    "United States" .hide-ssid=no .mode=ap .rrm=no .ssid=ma5 .tx-chains="" disabled=no security.authentication-types=wpa3-psk
set [ find default-name=wifi2 ] channel.skip-dfs-channels=10min-cac configuration.country="United States" .mode=ap .ssid=ma4 disabled=no security.authentication-types=wpa2-psk,wpa3-psk
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp interface=bridge lease-time=10m name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=wifi1
add bridge=bridge comment=defconf interface=wifi2
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface detect-internet
set detect-interface-list=all
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/interface wifiwave2 cap
set enabled=yes
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0
add address=192.168.251.14/24 interface=ether1 network=192.168.251.0
/ip dhcp-client
add comment=defconf disabled=yes interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf dns-server=192.168.88.1 gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes servers=1.1.1.1,8.8.8.8
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related hw-offload=yes
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" disabled=yes ipsec-policy=out,none out-interface-list=WAN
/ip ssh
set always-allow-password-login=yes strong-crypto=yes
/ip upnp
set enabled=yes
/ip upnp interfaces
add interface=bridge type=internal
add interface=ether1 type=external
/ipv6 firewall address-list
add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
add address=::1/128 comment="defconf: lo" list=bad_ipv6
add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
add address=100::/64 comment="defconf: discard only " list=bad_ipv6
add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
/ipv6 firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMPv6" protocol=icmpv6
add action=accept chain=input comment="defconf: accept UDP traceroute" port=33434-33534 protocol=udp
add action=accept chain=input comment="defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=udp src-address=fe80::/10
add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 protocol=udp
add action=accept chain=input comment="defconf: accept ipsec AH" protocol=ipsec-ah
add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=ipsec-esp
add action=accept chain=input comment="defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=input comment="defconf: drop everything else not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" hop-limit=equal:1 protocol=icmpv6
add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=icmpv6
add action=accept chain=forward comment="defconf: accept HIP" protocol=139
add action=accept chain=forward comment="defconf: accept IKE" dst-port=500,4500 protocol=udp
add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=ipsec-ah
add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=ipsec-esp
add action=accept chain=forward comment="defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=forward comment="defconf: drop everything else not coming from LAN" in-interface-list=!LAN
/system clock
set time-zone-name=America/Denver
/system logging
add topics=wireless,debug
/system note
set show-at-login=no
/system routerboard mode-button
set enabled=yes on-event=dark-mode
/system script
add comment=defconf dont-require-permissions=no name=dark-mode owner=*sys policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\r\
    \n   :if ([system leds settings get all-leds-off] = \"never\") do={\r\
    \n     /system leds settings set all-leds-off=immediate \r\
    \n   } else={\r\
    \n     /system leds settings set all-leds-off=never \r\
    \n   }\r\
    \n "
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
and here below are my current logs, for some reason when the device first comes up is very shaky and disconnects me a few times before getting more stable too:
16:57:40 system,error,critical router rebooted without proper shutdown, probably power outage
 16:57:40 interface,info bridge detect LAN
 16:57:50 interface,info ether1 link up (speed 1G, full duplex)
 16:57:50 interface,info ether1 detect LAN
 16:57:51 interface,info ether1 detect UNKNOWN
 16:57:57 interface,info ether1 detect INTERNET
 16:58:06 wireless,info AE:B2:FF:7C:3F:99@wifi1 reauthenticating
 16:58:06 wireless,info AE:B2:FF:7C:3F:99@wifi1 connected, signal strength -51
 16:58:06 interface,info wifi1 detect LAN
 19:59:52 system,critical,info cloud change time May/28/2023 16:58:09 => May/28/2023 19:59:52
 13:59:55 dhcp,info defconf assigned 192.168.88.254 for AE:B2:FF:7C:3F:99 
 14:00:34 wireless,info 44:AF:28:A8:3F:1D@wifi1 reauthenticating
 14:00:34 wireless,info 44:AF:28:A8:3F:1D@wifi1 connected, signal strength -74
 14:00:36 dhcp,info defconf assigned 192.168.88.250 for 44:AF:28:A8:3F:1D elmox
 14:00:39 system,info,account user admin logged in from 192.168.88.250 via winbox
 14:00:40 system,info,account user admin logged in from 192.168.88.250 via local
 14:00:50 wireless,info 44:AF:28:A8:3F:1D@wifi1 disconnected, connection lost, signal strength -74
 14:00:52 wireless,info 44:AF:28:A8:3F:1D@wifi1 connected, signal strength -72
 14:01:09 wireless,info 44:AF:28:A8:3F:1D@wifi1 disconnected, connection lost, signal strength -74
 14:01:35 ssh,info auth timeout
 14:01:38 system,info,account user admin logged out from 192.168.88.250 via winbox
 14:01:38 system,info,account user admin logged out from 192.168.88.250 via local
 14:01:48 wireless,info 44:AF:28:A8:3F:1D@wifi2 reauthenticating
 14:01:48 wireless,info 44:AF:28:A8:3F:1D@wifi2 connected, signal strength -63
 14:01:49 wireless,info 44:AF:28:A8:3F:1D@wifi2 reauthenticating
 14:01:49 wireless,info 44:AF:28:A8:3F:1D@wifi2 reauthenticating
 14:01:49 wireless,debug 44:AF:28:A8:3F:1D@wifi2 connected, but was associated
 14:01:49 interface,info wifi2 detect LAN
 14:01:53 dhcp,info defconf deassigned 192.168.88.250 for 44:AF:28:A8:3F:1D elmox
 14:01:53 dhcp,info defconf assigned 192.168.88.250 for 44:AF:28:A8:3F:1D elmox
 14:01:59 system,info,account user admin logged in from 192.168.88.250 via ssh
 14:02:00 system,info,account user admin logged in from 192.168.88.250 via winbox
 14:02:00 system,info,account user admin logged in from 192.168.88.250 via local
 14:02:05 wireless,info 44:AF:28:A8:3F:1D@wifi2 disconnected, connection lost, signal strength -63
 14:02:06 wireless,info 44:AF:28:A8:3F:1D@wifi2 connected, signal strength -62
 14:02:07 wireless,info 44:AF:28:A8:3F:1D@wifi2 disconnected, connection lost, signal strength -61
 14:02:08 wireless,info 44:AF:28:A8:3F:1D@wifi2 connected, signal strength -62
 14:02:09 wireless,info 44:AF:28:A8:3F:1D@wifi2 disconnected, connection lost, signal strength -61
 14:02:14 wireless,info 44:AF:28:A8:3F:1D@wifi2 connected, signal strength -62
 14:02:14 interface,info wifi2 detect LAN
 14:02:23 wireless,info 44:AF:28:A8:3F:1D@wifi2 disconnected, connection lost, signal strength -61
 14:02:33 wireless,info 44:AF:28:A8:3F:1D@wifi2 reauthenticating
 14:02:33 wireless,info 44:AF:28:A8:3F:1D@wifi2 connected, signal strength -62
 14:02:33 interface,info wifi2 detect LAN
 14:02:35 system,info,account user admin logged out from 192.168.88.250 via winbox
 14:02:35 system,info,account user admin logged out from 192.168.88.250 via local
 14:03:44 system,info,account user admin logged in from 192.168.88.250 via winbox
 14:03:44 system,info,account user admin logged in from 192.168.88.250 via local
 14:04:07 system,info,account user admin logged in from 192.168.88.250 via ssh
 14:06:15 wireless,info AE:B2:FF:7C:3F:99@wifi1 disconnected, connection lost, signal strength -73
 14:07:57 wireless,info AE:B2:FF:7C:3F:99@wifi1 connected, signal strength -75
 14:07:57 interface,info wifi1 detect LAN
 14:14:26 wireless,info AE:B2:FF:7C:3F:99@wifi1 disconnected, connection lost, signal strength -73
 14:15:04 wireless,info AE:B2:FF:7C:3F:99@wifi1 connected, signal strength -75
 14:15:04 interface,info wifi1 detect LAN

Once again, i appreciate your reply and your help.
 
maigonis
Member Candidate
Member Candidate
Posts: 180
Joined: Sat Jul 20, 2019 8:16 pm

Re: cAP ax performance and problems

Mon May 29, 2023 12:04 am

hi Holvoetn, appreciate your response and that you take a look at my config
Hard to believe over wifi :lol:
best wifi ever :)
1- most likely something wrong in the config. Hence the request to have a look how you have it configured now.
I really hope the config is the issue, i do like the routerOS overall. I understand networking but honestly wireless is a very weak area.
2- I assume you like to use the device as a simple access point ?
Correct, I don't even want nat, i'm just routing to the main firewall that will take care of routing, nat, etc.
However, if that "other device" is already using channel 5180, why are you using the SAME channel ? That's not smart.
good point, for some reason there were no available channel configured in the device and the antenna was down, I found this page and used it to do some testing: https://en.wikipedia.org/wiki/List_of_W ... j/n/ac/ax) but the ultimate result was all the same, did not make a difference if i was using 5180 versus 5210, i even configured the secondary frequency to try and do 80+80 but my tests always showed the same result.I finally set to try and mirror the other AP to see if i could match the speed.
4- as of ROS7.9 (and 7.9.1 and 7.10b8) there are some AX-wifi issues (which is what you may see). What does the log file say about this (provided you have enabled logging) ?
I followed this troubleshooting guide and enabled wireless debugging, did not really see much there other than signaling issues (https://wiki.mikrotik.com/wiki/Manual:W ... Debug_Logs) I will post logs below.

I did experience a new issue today, seem the device just hung up during the night, the device was showing activity on the poe port, but there was no ssid to connect to. I had to do a hard reset to get them back.

here is my config:
# may/28/2023 14:04:58 by RouterOS 7.9.1
# software id = GUKW-BIS8
#
# model = cAPGi-5HaxD2HaxD
# serial number = HEE08H9PBM8
/interface bridge
add admin-mac=48:A9:8A:C0:3D:29 auto-mac=no comment=defconf name=bridge
/interface wifiwave2
set [ find default-name=wifi1 ] channel.band=5ghz-ax .frequency=5180 .secondary-frequency=5290 .skip-dfs-channels=disabled .width=20/40/80mhz configuration.chains="" .country=\
    "United States" .hide-ssid=no .mode=ap .rrm=no .ssid=ma5 .tx-chains="" disabled=no security.authentication-types=wpa3-psk
set [ find default-name=wifi2 ] channel.skip-dfs-channels=10min-cac configuration.country="United States" .mode=ap .ssid=ma4 disabled=no security.authentication-types=wpa2-psk,wpa3-psk
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp interface=bridge lease-time=10m name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=wifi1
add bridge=bridge comment=defconf interface=wifi2
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface detect-internet
set detect-interface-list=all
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/interface wifiwave2 cap
set enabled=yes
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0
add address=192.168.251.14/24 interface=ether1 network=192.168.251.0
/ip dhcp-client
add comment=defconf disabled=yes interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf dns-server=192.168.88.1 gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes servers=1.1.1.1,8.8.8.8
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related hw-offload=yes
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" disabled=yes ipsec-policy=out,none out-interface-list=WAN
/ip ssh
set always-allow-password-login=yes strong-crypto=yes
/ip upnp
set enabled=yes
/ip upnp interfaces
add interface=bridge type=internal
add interface=ether1 type=external
/ipv6 firewall address-list
add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
add address=::1/128 comment="defconf: lo" list=bad_ipv6
add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
add address=100::/64 comment="defconf: discard only " list=bad_ipv6
add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
/ipv6 firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMPv6" protocol=icmpv6
add action=accept chain=input comment="defconf: accept UDP traceroute" port=33434-33534 protocol=udp
add action=accept chain=input comment="defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=udp src-address=fe80::/10
add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 protocol=udp
add action=accept chain=input comment="defconf: accept ipsec AH" protocol=ipsec-ah
add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=ipsec-esp
add action=accept chain=input comment="defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=input comment="defconf: drop everything else not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" hop-limit=equal:1 protocol=icmpv6
add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=icmpv6
add action=accept chain=forward comment="defconf: accept HIP" protocol=139
add action=accept chain=forward comment="defconf: accept IKE" dst-port=500,4500 protocol=udp
add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=ipsec-ah
add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=ipsec-esp
add action=accept chain=forward comment="defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=forward comment="defconf: drop everything else not coming from LAN" in-interface-list=!LAN
/system clock
set time-zone-name=America/Denver
/system logging
add topics=wireless,debug
/system note
set show-at-login=no
/system routerboard mode-button
set enabled=yes on-event=dark-mode
/system script
add comment=defconf dont-require-permissions=no name=dark-mode owner=*sys policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\r\
    \n   :if ([system leds settings get all-leds-off] = \"never\") do={\r\
    \n     /system leds settings set all-leds-off=immediate \r\
    \n   } else={\r\
    \n     /system leds settings set all-leds-off=never \r\
    \n   }\r\
    \n "
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
and here below are my current logs, for some reason when the device first comes up is very shaky and disconnects me a few times before getting more stable too:
16:57:40 system,error,critical router rebooted without proper shutdown, probably power outage
 16:57:40 interface,info bridge detect LAN
 16:57:50 interface,info ether1 link up (speed 1G, full duplex)
 16:57:50 interface,info ether1 detect LAN
 16:57:51 interface,info ether1 detect UNKNOWN
 16:57:57 interface,info ether1 detect INTERNET
 16:58:06 wireless,info AE:B2:FF:7C:3F:99@wifi1 reauthenticating
 16:58:06 wireless,info AE:B2:FF:7C:3F:99@wifi1 connected, signal strength -51
 16:58:06 interface,info wifi1 detect LAN
 19:59:52 system,critical,info cloud change time May/28/2023 16:58:09 => May/28/2023 19:59:52
 13:59:55 dhcp,info defconf assigned 192.168.88.254 for AE:B2:FF:7C:3F:99 
 14:00:34 wireless,info 44:AF:28:A8:3F:1D@wifi1 reauthenticating
 14:00:34 wireless,info 44:AF:28:A8:3F:1D@wifi1 connected, signal strength -74
 14:00:36 dhcp,info defconf assigned 192.168.88.250 for 44:AF:28:A8:3F:1D elmox
 14:00:39 system,info,account user admin logged in from 192.168.88.250 via winbox
 14:00:40 system,info,account user admin logged in from 192.168.88.250 via local
 14:00:50 wireless,info 44:AF:28:A8:3F:1D@wifi1 disconnected, connection lost, signal strength -74
 14:00:52 wireless,info 44:AF:28:A8:3F:1D@wifi1 connected, signal strength -72
 14:01:09 wireless,info 44:AF:28:A8:3F:1D@wifi1 disconnected, connection lost, signal strength -74
 14:01:35 ssh,info auth timeout
 14:01:38 system,info,account user admin logged out from 192.168.88.250 via winbox
 14:01:38 system,info,account user admin logged out from 192.168.88.250 via local
 14:01:48 wireless,info 44:AF:28:A8:3F:1D@wifi2 reauthenticating
 14:01:48 wireless,info 44:AF:28:A8:3F:1D@wifi2 connected, signal strength -63
 14:01:49 wireless,info 44:AF:28:A8:3F:1D@wifi2 reauthenticating
 14:01:49 wireless,info 44:AF:28:A8:3F:1D@wifi2 reauthenticating
 14:01:49 wireless,debug 44:AF:28:A8:3F:1D@wifi2 connected, but was associated
 14:01:49 interface,info wifi2 detect LAN
 14:01:53 dhcp,info defconf deassigned 192.168.88.250 for 44:AF:28:A8:3F:1D elmox
 14:01:53 dhcp,info defconf assigned 192.168.88.250 for 44:AF:28:A8:3F:1D elmox
 14:01:59 system,info,account user admin logged in from 192.168.88.250 via ssh
 14:02:00 system,info,account user admin logged in from 192.168.88.250 via winbox
 14:02:00 system,info,account user admin logged in from 192.168.88.250 via local
 14:02:05 wireless,info 44:AF:28:A8:3F:1D@wifi2 disconnected, connection lost, signal strength -63
 14:02:06 wireless,info 44:AF:28:A8:3F:1D@wifi2 connected, signal strength -62
 14:02:07 wireless,info 44:AF:28:A8:3F:1D@wifi2 disconnected, connection lost, signal strength -61
 14:02:08 wireless,info 44:AF:28:A8:3F:1D@wifi2 connected, signal strength -62
 14:02:09 wireless,info 44:AF:28:A8:3F:1D@wifi2 disconnected, connection lost, signal strength -61
 14:02:14 wireless,info 44:AF:28:A8:3F:1D@wifi2 connected, signal strength -62
 14:02:14 interface,info wifi2 detect LAN
 14:02:23 wireless,info 44:AF:28:A8:3F:1D@wifi2 disconnected, connection lost, signal strength -61
 14:02:33 wireless,info 44:AF:28:A8:3F:1D@wifi2 reauthenticating
 14:02:33 wireless,info 44:AF:28:A8:3F:1D@wifi2 connected, signal strength -62
 14:02:33 interface,info wifi2 detect LAN
 14:02:35 system,info,account user admin logged out from 192.168.88.250 via winbox
 14:02:35 system,info,account user admin logged out from 192.168.88.250 via local
 14:03:44 system,info,account user admin logged in from 192.168.88.250 via winbox
 14:03:44 system,info,account user admin logged in from 192.168.88.250 via local
 14:04:07 system,info,account user admin logged in from 192.168.88.250 via ssh
 14:06:15 wireless,info AE:B2:FF:7C:3F:99@wifi1 disconnected, connection lost, signal strength -73
 14:07:57 wireless,info AE:B2:FF:7C:3F:99@wifi1 connected, signal strength -75
 14:07:57 interface,info wifi1 detect LAN
 14:14:26 wireless,info AE:B2:FF:7C:3F:99@wifi1 disconnected, connection lost, signal strength -73
 14:15:04 wireless,info AE:B2:FF:7C:3F:99@wifi1 connected, signal strength -75
 14:15:04 interface,info wifi1 detect LAN

Once again, i appreciate your reply and your help.
Reset device and set only county setting for wifi. If troughtput is still bad try to set channel manualy, but touch only frequency. Test speed near AP.
 
holvoetn
Forum Guru
Forum Guru
Posts: 5317
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: cAP ax performance and problems

Mon May 29, 2023 1:02 am

Less invasive then what I was going to suggest but a good first step.
We first need to make sure the device behaves as expected.
Setting the channel manually is recommended (use scanner or frequency usage mode to detect which channels are occupied at your location, select other ones).

I don't have cAP AX in my hands now so I don't know what Quickset options it has to start from.
If that first steps works, I would go as far as recommending to reset without config, keeping user account.
Then build up everything again.
Alternative: You can also start from default config and then tear things down (remove DHCP server, move DHCP client to bridge, connect all ports to bridge, change interface list for ether1 to LAN iso WAN, ...)

Your last remark about the device hanging up overnight is what worries me a bit. It's a behaviour reported by some for their AX-devices starting with 7.9 and 7.9.1.
It might be better (for now) to downgrade to 7.8 (what was the version it came with off-factory ? 7.6 perhaps ?) since that one did not show this symptom.
 
shsnider
just joined
Topic Author
Posts: 5
Joined: Sat May 27, 2023 7:24 pm

Re: cAP ax performance and problems

Mon May 29, 2023 3:15 am

I followed both recommendations, I screwed up when i downgraded and I had to initiate a new quest to recover the box. I followed a video on how to downgrade ( https://www.youtube.com/watch?v=YHg8YJT1D0E ) and i did not look into details, apparently in order to get these cap-ax to downgrade successfully you have to copy both files the routeros + wifiwave2, and I only did routeros. I ended up recovering the box using netinstall and guessing that I had to add the 2 files to the command line, which unfortunately is not mentioned in this document at all ( https://help.mikrotik.com/docs/display/ROS/Netinstall )

I am back to the initial problems and using os v7.8 instead. The speed is a little bit better, i was able to get to 420 mbps this time on both the 4 and 5 ghz network. So it would appear that routeros 7.9 wasn't tested on these devices :shock: . The signal looks about the same doesn't really have a great range. Also, the disconnects continue even when the signal shows complete bars. I wonder if i have a bad device and how i could test it.

the 2.4ghz network is configured by default as per the recommendation, but the 5ghz one does not work by default. It says unsupported channels and It doesn't even show up unless i put some configuration manually. Right now my config looks like this:

set [ find default-name=wifi1 ] channel.band=5ghz-ax .frequency=5170-5250 .secondary-frequency=5290 .skip-dfs-channels=disabled \
.width=20/40/80mhz configuration.country="United States" .mode=ap .ssid=ma5 disabled=no security.authentication-types=\
wpa3-psk

The speed i can live with after this change, but the disconnects are still the main problem. Any idea on how i could test the hardware to see if it's faulty? Maybe Mikrotik simply doesn't work well with the frequencies used in the US? I compared it to Australia and some other countries and they really look alike. I appreciate all the input, any other suggestions to try to resolve the client drop problems?
 
holvoetn
Forum Guru
Forum Guru
Posts: 5317
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: cAP ax performance and problems

Mon May 29, 2023 10:08 am

Set the frequency to be used manually after checking it is clear for the environment your device is placed in.
No range.

Don't use secondary frequency. I am not 100 sure it can be used on that chipset since that one only supports 80MHz channels.
 
ivicask
Member
Member
Posts: 417
Joined: Tue Jul 07, 2015 2:40 pm
Location: Croatia, Zagreb

Re: cAP ax performance and problems

Mon May 29, 2023 10:15 am

Well whats funny, the best performance i got out of any of mikrotik new AX devices was to NOT select any country, moment i select my country it drops TX power from 26 to 18db and range and performance drops so drastically(almost 50%) that i wonder whats even the point of having this new router...
 
holvoetn
Forum Guru
Forum Guru
Posts: 5317
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: cAP ax performance and problems

Mon May 29, 2023 10:24 am

Already for some time, Mikrotik is pretty strict on following country regulations for channels to be used and TX power.

No country = USA.

If you do not set your device as it should be for your location, that's your responsibility.
There are countries with heavy fines when authorities find you are breaking the rules.
 
shsnider
just joined
Topic Author
Posts: 5
Joined: Sat May 27, 2023 7:24 pm

Re: cAP ax performance and problems

Mon May 29, 2023 6:40 pm

Do you mean only use the center frequency instead of the range? for example 5210 in the US? I thought the device supports 80+80 when using the secondary frequency, but i will try it like that if that's what you mean. Also, Ivicast I think i read that leaving the power empty will use the max power the antenna supports, did not say anything about the country, version 7.8 doesn't show it for me but I'm sure when i was in version 7.9 under status the TX power was showing 24.
 
User avatar
aspen63
newbie
Posts: 42
Joined: Sat Feb 04, 2023 8:58 am

Re: cAP ax performance and problems

Wed May 31, 2023 10:16 am

I have very pour performance with hap ax2 as APs connected to RB5009 via capsman. When downloading large files to my iPad from my NAS I get about 6-7 MBps while I get twice as much connecting through 5 year old Asus router. All devices in direct view to each other. The same slow speeds are obvious compared to Asus”s when using Samsung SmartTV on 2.4. Version 7.9.
 
ivicask
Member
Member
Posts: 417
Joined: Tue Jul 07, 2015 2:40 pm
Location: Croatia, Zagreb

Re: cAP ax performance and problems

Wed May 31, 2023 10:33 am

Well then all other vendors are breaking regulatory (ASUS,DLINK,HUAWEI,ARUBA,entire ISP routers in my country )etc, or there is something broken with regulatory on mikrotik
If you take cheapest asus ax router it costs exactly HALF price then cap ax and i get almost double range or speed then any mikrotik ax wireless.

Only setting mikrotik to no country(max power) gives about same speeds/range as other vendors.
 
holvoetn
Forum Guru
Forum Guru
Posts: 5317
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: cAP ax performance and problems

Wed May 31, 2023 10:51 am

I have very pour performance with hap ax2 as APs connected to RB5009 via capsman. When downloading large files to my iPad from my NAS I get about 6-7 MBps while I get twice as much connecting through 5 year old Asus router. All devices in direct view to each other. The same slow speeds are obvious compared to Asus”s when using Samsung SmartTV on 2.4. Version 7.9.
Not related to cAP AX but I also have an AX2 connected to RB5009.
Close to 600Mbps on internal testing.

Be careful with the way you use size indicators.
Mbps = Mega bits per second <> MBps = Mega BYTE per second.
Normally 1 MBps = 8Mbps (8 bits, in old telco standards there was also 1 start and stop bit, not sure if that's still applicable here)
If your old Asus only reaches about 15MBps (120 Mbps ?), I think there might be something wrong there too.
Are you sure the frequencies you use on AX2 are as clear as possible from interference ?

And 5 year old Asus ? You may be pretty sure it is not compliant to latest regulations which cAP AX does comply with ...

Related:
I should get a batch of cAP AX somewhere this week (I hope).
Will do some testing of my own (lab conditions) before having them mounted against the ceiling in warehouse.

And then repeat testing when they are hanging there, between metal racks with plenty of metal cans :shock:
 
holvoetn
Forum Guru
Forum Guru
Posts: 5317
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: cAP ax performance and problems

Wed May 31, 2023 2:31 pm

Guess what just got delivered ...

Password protected, as expected ... only visible on the device label.
Nothing else on or in the box with that password.
Sorry but that's plain STUPID !
So I have to make sure to take pictures of each and every device as of now.

Default config is for Home AP Dual band. Personally I would have set it at AP period. No firewall, no NAT, nada.
But ok, I can change that ...

Out of the box, no tweaking except for
- changed user name/passwd
- add ether1 to bridge
- remove DHCP server
- remove IP address
- changed country
- set 5GHz channel to free area (in this case I used 5660)

Iperf3 results:
You do not have the required permissions to view the files attached to this post.
 
shsnider
just joined
Topic Author
Posts: 5
Joined: Sat May 27, 2023 7:24 pm

Re: cAP ax performance and problems

Thu Jun 01, 2023 7:03 am

could you show your config? I still use the dhcp server but i don't think thats the reason for the poor performance on my box. Which routeros you have in that device? did you run that iperf between 2 devices in the same network? what do you get from fast.com? sorry for all the questions just trying to figure out of i should send it back.
 
holvoetn
Forum Guru
Forum Guru
Posts: 5317
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: cAP ax performance and problems

Thu Jun 01, 2023 8:21 am

In the mean time I already configured that device as an AP for usage with CAPSMAN.
But I still have 7 others to do (will be at least 3 weeks before I tackle those).

As indicated (my take was to rule out config issues as much as possible):
- config as default as it gets out of the box !!
- only changes mentioned above.
- of UTMOST importance is the frequency selection. Make SURE you get a clear channel. As reference (and see further), 20cm next to that cAP AX was an AX3 also blasting out its wifi channels.
- tested both with factory ROS 7.8 and ROS 7.10rc1 (test results shown are from 7.10) -> I had to go to 7.10rc1 since 7.9-chain is too buggy for Wifi but only from there default caps config is added. So 7.10-chain ...
- iperf was from (and now it gets funny )
Laptop with TP-Link TX20U Wifi adapter towards
cAP AX under test cabled towards
AX3 which serves as AP/Switch in my home office, 2.5G trunk to
RB5009 with
iperf3 container (still with me ? :lol: )
- wired to AX3 from my laptop I get 960-ish using that same iperf3 server. So I know my base setup is good.
- test to fast.com is useless since my ISP connection is 500/30 (yeah, quite unbalanced, I know but far less then what is needed to saturate that wifi channel, so ... useless).
 
McKajVah
just joined
Posts: 23
Joined: Sun Jun 05, 2022 10:43 pm

Re: cAP ax performance and problems

Thu Jun 01, 2023 10:54 am

In the mean time I already configured that device as an AP for usage with CAPSMAN.
But I still have 7 others to do (will be at least 3 weeks before I tackle those).

As indicated (my take was to rule out config issues as much as possible):
- config as default as it gets out of the box !!
- only changes mentioned above.
- of UTMOST importance is the frequency selection. Make SURE you get a clear channel. As reference (and see further), 20cm next to that cAP AX was an AX3 also blasting out its wifi channels.
- tested both with factory ROS 7.8 and ROS 7.10rc1 (test results shown are from 7.10) -> I had to go to 7.10rc1 since 7.9-chain is too buggy for Wifi but only from there default caps config is added. So 7.10-chain ...
- iperf was from (and now it gets funny )
Laptop with TP-Link TX20U Wifi adapter towards
cAP AX under test cabled towards
AX3 which serves as AP/Switch in my home office, 2.5G trunk to
RB5009 with
iperf3 container (still with me ? :lol: )
- wired to AX3 from my laptop I get 960-ish using that same iperf3 server. So I know my base setup is good.
- test to fast.com is useless since my ISP connection is 500/30 (yeah, quite unbalanced, I know but far less then what is needed to saturate that wifi channel, so ... useless).
Great feedback.

- This was in the same room as cAP ax?
- 80MHz?

Thanks.
 
holvoetn
Forum Guru
Forum Guru
Posts: 5317
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: cAP ax performance and problems

Thu Jun 01, 2023 11:08 am

Laptop was in the same room as the devices, yes.
Both cAP AX and AX3 where using 80MHz channels.
cAP AX was on 5660 (now not anymore, it moved 105km and is already hanging on the ceiling of a meeting room :lol: ).
AX3 is on 5260.

I did some time ago a test with that same wifi adapter to AX3 on other location of my house (with a roughly 25cm thick brick and concrete wall in between, diagonally up so that width becomes even more then). Still managed to get close or over 500.
I have the impression from tests I did yesterday, cAP AX performed a bit better then AX3. Not much but just that bit more.

I'll try to test it again with cAP AX and laptop in other room on one of the following devices.
 
ToTheFull
Member Candidate
Member Candidate
Posts: 227
Joined: Fri Mar 24, 2023 3:24 pm

Re: cAP ax performance and problems

Mon Sep 18, 2023 2:07 pm

Here are my 5G WiFi tests near and far. I have a big thick chimney in the way where I am testing from so I'll also add the the signals for context.

Testing from hAP ax2 and cAP ax to a btest server running on windows11 using ax210 Intel WiFi Card.
So mulitithread 10 streams gives 800/900Mbps and the far end on my range upstairs cAP ax gives me 200/250Mbps

Download WiFi6 hAP ax2 Near

status: running
duration: 15s
tx-current: 934.2Mbps
tx-10-second-average: 927.0Mbps
tx-total-average: 921.7Mbps
random-data: no
direction: transmit
connection-count: 10
local-cpu-load: 41%
remote-cpu-load: 1%

Upload Wifi6 hAP ax2 Near

status: running
duration: 10s
rx-current: 790.5Mbps
rx-10-second-average: 769.8Mbps
rx-total-average: 769.8Mbps
random-data: no
direction: receive
connection-count: 10
local-cpu-load: 69%

Download WifI6 cAP ax Far


status: running
duration: 30s
tx-current: 220.3Mbps
tx-10-second-average: 219.4Mbps
tx-total-average: 204.3Mbps
random-data: no
direction: transmit
connection-count: 10
local-cpu-load: 9%
remote-cpu-load: 1%

Upload WiFi6 cAP ax Far


status: running
duration: 26s
rx-current: 238.0Mbps
rx-10-second-average: 254.6Mbps
rx-total-average: 270.3Mbps
random-data: no
direction: receive
connection-count: 10
local-cpu-load: 20%
You do not have the required permissions to view the files attached to this post.
 
User avatar
smotrov
Frequent Visitor
Frequent Visitor
Posts: 56
Joined: Mon Dec 26, 2022 8:55 pm
Location: Ukraine 🇺🇦

Re: cAP ax performance and problems

Thu Dec 21, 2023 12:04 am

Does cAP AX 80+80Mhz width?
Mine is always end up with «no supported channels»
Last edited by smotrov on Thu Dec 21, 2023 12:12 pm, edited 1 time in total.
 
holvoetn
Forum Guru
Forum Guru
Posts: 5317
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: cAP ax performance and problems

Thu Dec 21, 2023 8:17 am

Does cAP AX Mhz?
Mine is always end up with «no supported channels»
No surprise there, I don't even understand the question... why should cap ?
Serious, you may want to rephrase or clarify that question. Doesn't make any sense.
 
User avatar
smotrov
Frequent Visitor
Frequent Visitor
Posts: 56
Joined: Mon Dec 26, 2022 8:55 pm
Location: Ukraine 🇺🇦

Re: cAP ax performance and problems

Thu Dec 21, 2023 12:13 pm

I don't even understand the question..
Sorry. Mistyped. Updated. I was talking about 80+80 channel width.
 
User avatar
smotrov
Frequent Visitor
Frequent Visitor
Posts: 56
Joined: Mon Dec 26, 2022 8:55 pm
Location: Ukraine 🇺🇦

Re: cAP ax performance and problems

Thu Dec 21, 2023 12:19 pm

- set 5GHz channel to free area (in this case I used 5660)
What do you mean by free area here?
 
maigonis
Member Candidate
Member Candidate
Posts: 180
Joined: Sat Jul 20, 2019 8:16 pm

Re: cAP ax performance and problems

Thu Dec 21, 2023 12:58 pm

I don't even understand the question..
Sorry. Mistyped. Updated. I was talking about 80+80 channel width.
You cant use 80+80 on cap ax, or any ax device at this point.
 
holvoetn
Forum Guru
Forum Guru
Posts: 5317
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: cAP ax performance and problems

Thu Dec 21, 2023 2:12 pm

- set 5GHz channel to free area (in this case I used 5660)
What do you mean by free area here?
Do a frequency scan with radio 1 and see which frequencies are free, if any.

Who is online

Users browsing this forum: No registered users and 30 guests