Good day,

Im running on fiber 1000/100 to my ISP router Huawei HG8245H. If i connect laptop/pc to huawei my speed is 950/100 everytime. Thats fine but as soon as i plug my Mikrotik switch and plug pc to it i cant get over 120mb/s download. It starts at 500 but immediately drops to 120 or even lower.And then bounces between 90-200 sometimes even 500. Mikrotik is set to bridge. Im little newbie to this what can cause this issue. Attaching /export hide-sensitive compact. Thanks for any help.

https://pastebin.com/77QYLsEn

try to change interface queue to ethernet default. if you have crs125 as switch...then you must reconfigure to switch mode

In the firewall your first two rules should be like these:

/ip firewall filter
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
...

By issuing these CLI commands:

/ip firewall filter
print

you can see the ordinal number of each rule, and then use the "move" command to move a rule to a different position.
Example: moves rule #12 to #1 (FYI: the rule #0 is a built-in one, it can't be modified):

/ip firewall filter
move numbers=12 destination=1

Of course in the CLI the "/ip firewall filter" you need to give only once, it then goes to that location and stays there, similar to "chdir" or "cd" in normal OS shell...
And: after each move you should do a new print, as the move affects the numbering...

Your Huawei Router is connected to what port?

If it is connected to ether1 your CRS is not working as switch but additional router. Disable DHCP server, plug the Huawei Router to any other port and try again.

Hmm. I would suggest to have each device have its own LAN, ie. 2 independent local IP networks. Then connect CRS.ether1 (the WAN port) to the uplink router.
I personally am using that method with success.
Of course one must assign an IP to ether1 that is inside the IP range of the uplink router, and that IP must not be inside the IP range of the switch side (ie. the bridged ports).
Example:
ether1 (WAN): 192.168.254.253/24 --> goes to uplink router which has the IP 192.168.254.254/24 (ie. network 192.168.254.0/24).
bridge (ie. for all the other interfaces of LAN): 192.168.88.1/24
clients need to have IPs 192.168.88.x/24 (ie. mask 255.255.255.0) and their gateway is then 192.168.88.1

try to change interface queue to ethernet default. if you have crs125 as switch...then you must reconfigure to switch mode

I already did that but didnt helped. Im using crs125 as router thats a problem i ordered Mikrotik RB40 and will setup it as a router and crs as a switch and hope for the best.

In the firewall your first two rules should be like these:

/ip firewall filter
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
...

By issuing these CLI commands:

/ip firewall filter
print

you can see the ordinal number of each rule, and then use the "move" command to move a rule to a different position.
Example: moves rule #12 to #1 (FYI: the rule #0 is a built-in one, it can't be modified):

/ip firewall filter
move numbers=12 destination=1

Of course in the CLI the "/ip firewall filter" you need to give only once, it then goes to that location and stays there, similar to "chdir" or "cd" in normal OS shell...
And: after each move you should do a new print, as the move affects the numbering...

Tried fasttrack but zero change dont know if something is wrong or what but as i said i ordered RB40 and will configure it as a router and crs125 as switch

Folks, sorry, I'm suddenly having similar performance problems like the OP
I can swear I had about 950 Mbps download speed in the past, but now getting only about 250 Mbps
I don't know what the reason is, but suspect firewall and/or the latest beta8 I'm using.

Update: hmm. I now remember I previously was using an Ubiquiti EdgeRouter ER3 (or something that) as my 2nd router, now using MikroTik hAP ac^2. This could be the reason. Too bad.

I dont know what happend but literally after i press order on the new router it fixed itself. That CRS got scared

Odoslané z SM-N975F pomocou Tapatalku

https://mikrotik.com/product/CRS125-24G ... estresults

To confirm any speed issues you need to reset everything and start adding settings from scratch, one by one, unitl you find the issue. Techically there is no reason you couldn't get reasonable performance out of a CRS125.

Probably a bad idea. CRS125 is a switch, and in no way it can route a gigabit.

"no way"
"route"
Please be much much more specific, you present the subject like routing would be some magical high overhead process.

"no way"
"route"
Please be much much more specific, you present the subject like routing would be some magical high overhead process.

I suggest you look at the link cited in the message before yours. It doesn't get more specific than that and it shows that yes, routing is 'some magical high overhead process' compared to ASIC-assisted L2 switching, and that the CRS125 is in no way a gigabit router.

@Joni:

https://mikrotik.com/product/CRS125-24G ... estresults

Techically there is no reason you couldn't get reasonable performance out of a CRS125.

The link you posted has all the information: CRS125 can do wirespeed switching (table "Switching results"), but can't do wirespeed bridging (i.e. L2 frame forwarding when CPU does it - table "Ethernet test results", mode "Bridging") and even less can it do wirespeed routing (i.e. L3 packet forwarding - "Ethernet test results", mode "Routing").