Nice test site. I used Germany.Try that packetloss site. E.g. when using low-latency audio the performance is not acceptable. At least in my case and that of the OP.
I like these tools.2GHz is very very vulnerable to interference, and there is plenty of it. You can run a wireless Scan or Snopper and see what frequencies are used nearby. My guess - it's all full
# jan/24/2022 07:08:00 by RouterOS 6.48.6
#
# model = RB941-2nD
/interface bridge
add admin-mac=08:55:31:E4:E4:C5 auto-mac=no comment=defconf name=bridge
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-XX country=austria disabled=no distance=indoors frequency=auto installation=indoor mode=ap-bridge ssid=jupiter wireless-protocol=\
802.11
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=dynamic-keys supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=pwr-line1
add bridge=bridge comment=defconf interface=wlan1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0
/ip dhcp-client
add comment=defconf disabled=no interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan
add address=192.168.88.244 name=zelenka.home.arpa
/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
/system clock
set time-zone-name=Europe/Vienna
/system package update
set channel=long-term
/system routerboard settings
set auto-upgrade=yes
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
[admin@MikroTik] > interface wireless monitor 0
status: running-ap
channel: 2452/20-Ce/gn(18dBm)
wireless-protocol: 802.11
noise-floor: -116dBm
overall-tx-ccq: 72%
registered-clients: 6
authenticated-clients: 6
wmm-enabled: yes
current-tx-powers: 1Mbps:15(15/18),
2Mbps:15(15/18),
[admin@MikroTik] /interface wireless registration-table> print stats where mac-address=A8:7E:EA:55:9F:10
0 interface=wlan1 mac-address=A8:7E:EA:55:9F:10 ap=no wds=no bridge=no rx-rate="57.7Mbps-20MHz/2S/SGI"
tx-rate="54Mbps-40MHz/1S" packets=30382,17788 bytes=33627218,3559003 frames=24035,17792 frame-bytes=33816306,3452725
hw-frames=43019,18298 hw-frame-bytes=56935646,4208593 tx-frames-timed-out=0 uptime=10m13s last-activity=0ms
signal-strength=-75dBm@6Mbps signal-to-noise=41dB signal-strength-ch0=-79dBm signal-strength-ch1=-79dBm
strength-at-rates=-70dBm@1Mbps 41s350ms,-75dBm@6Mbps 550ms,-77dBm@24Mbps 6m20s950ms,-75dBm@36Mbps 2m22s900ms,-
75dBm@48Mbps 4m43s890ms,-75dBm@HT20-0 14s230ms,-75dBm@HT20-1 10s250ms,-76dBm@HT20-2 2s420ms,-75dBm@HT20-3
0ms,-74dBm@HT20-4 14s880ms,-78dBm@HT40-0 2m22s830ms,-79dBm@HT40-1 2m23s40ms,-77dBm@HT40-2 2m24s30ms,-
77dBm@HT40-3 2m40s570ms,-77dBm@HT40-4 2m41s80ms
tx-ccq=71% p-throughput=43455 last-ip=192.168.88.240 802.1x-port-enabled=yes authentication-type=wpa2-psk
encryption=aes-ccm group-encryption=aes-ccm management-protection=no wmm-enabled=yes
tx-rate-set="CCK:1-11 OFDM:6-54 BW:1x-2x SGI:1x-2x HT:0-15"
ping 192.168.88.1
PING 192.168.88.1 (192.168.88.1) 56(84) bytes of data.
64 bytes from 192.168.88.1: icmp_seq=1 ttl=64 time=1.30 ms
64 bytes from 192.168.88.1: icmp_seq=2 ttl=64 time=21.7 ms
64 bytes from 192.168.88.1: icmp_seq=3 ttl=64 time=33.3 ms
64 bytes from 192.168.88.1: icmp_seq=4 ttl=64 time=48.8 ms
64 bytes from 192.168.88.1: icmp_seq=5 ttl=64 time=92.9 ms
64 bytes from 192.168.88.1: icmp_seq=6 ttl=64 time=1.36 ms
64 bytes from 192.168.88.1: icmp_seq=7 ttl=64 time=1.34 ms
64 bytes from 192.168.88.1: icmp_seq=8 ttl=64 time=1.32 ms
64 bytes from 192.168.88.1: icmp_seq=9 ttl=64 time=0.981 ms
64 bytes from 192.168.88.1: icmp_seq=10 ttl=64 time=1.30 ms
64 bytes from 192.168.88.1: icmp_seq=11 ttl=64 time=1.35 ms
64 bytes from 192.168.88.1: icmp_seq=12 ttl=64 time=2.10 ms
64 bytes from 192.168.88.1: icmp_seq=13 ttl=64 time=1.28 ms
64 bytes from 192.168.88.1: icmp_seq=14 ttl=64 time=34.3 ms
64 bytes from 192.168.88.1: icmp_seq=15 ttl=64 time=62.7 ms
64 bytes from 192.168.88.1: icmp_seq=16 ttl=64 time=4.20 ms
64 bytes from 192.168.88.1: icmp_seq=17 ttl=64 time=13.0 ms
64 bytes from 192.168.88.1: icmp_seq=18 ttl=64 time=6.95 ms
64 bytes from 192.168.88.1: icmp_seq=19 ttl=64 time=19.9 ms
64 bytes from 192.168.88.1: icmp_seq=20 ttl=64 time=1.29 ms
64 bytes from 192.168.88.1: icmp_seq=21 ttl=64 time=1.45 ms
64 bytes from 192.168.88.1: icmp_seq=22 ttl=64 time=0.918 ms
64 bytes from 192.168.88.1: icmp_seq=23 ttl=64 time=1.33 ms
64 bytes from 192.168.88.1: icmp_seq=24 ttl=64 time=3.33 ms
64 bytes from 192.168.88.1: icmp_seq=25 ttl=64 time=4.88 ms
64 bytes from 192.168.88.1: icmp_seq=26 ttl=64 time=2.10 ms
64 bytes from 192.168.88.1: icmp_seq=27 ttl=64 time=9.75 ms
64 bytes from 192.168.88.1: icmp_seq=28 ttl=64 time=8.58 ms
64 bytes from 192.168.88.1: icmp_seq=29 ttl=64 time=1.29 ms
64 bytes from 192.168.88.1: icmp_seq=30 ttl=64 time=1.30 ms
64 bytes from 192.168.88.1: icmp_seq=31 ttl=64 time=29.7 ms
64 bytes from 192.168.88.1: icmp_seq=32 ttl=64 time=1.23 ms
64 bytes from 192.168.88.1: icmp_seq=33 ttl=64 time=11.3 ms
64 bytes from 192.168.88.1: icmp_seq=34 ttl=64 time=61.0 ms
64 bytes from 192.168.88.1: icmp_seq=35 ttl=64 time=30.0 ms
64 bytes from 192.168.88.1: icmp_seq=36 ttl=64 time=0.851 ms
64 bytes from 192.168.88.1: icmp_seq=37 ttl=64 time=1.31 ms
64 bytes from 192.168.88.1: icmp_seq=38 ttl=64 time=0.888 ms
64 bytes from 192.168.88.1: icmp_seq=39 ttl=64 time=1.32 ms
64 bytes from 192.168.88.1: icmp_seq=40 ttl=64 time=3.28 ms
64 bytes from 192.168.88.1: icmp_seq=41 ttl=64 time=104 ms
64 bytes from 192.168.88.1: icmp_seq=42 ttl=64 time=104 ms
64 bytes from 192.168.88.1: icmp_seq=43 ttl=64 time=1011 ms
64 bytes from 192.168.88.1: icmp_seq=44 ttl=64 time=1001 ms
64 bytes from 192.168.88.1: icmp_seq=45 ttl=64 time=603 ms
64 bytes from 192.168.88.1: icmp_seq=46 ttl=64 time=195 ms
64 bytes from 192.168.88.1: icmp_seq=47 ttl=64 time=14.6 ms
64 bytes from 192.168.88.1: icmp_seq=48 ttl=64 time=15.2 ms
64 bytes from 192.168.88.1: icmp_seq=49 ttl=64 time=1.36 ms
64 bytes from 192.168.88.1: icmp_seq=50 ttl=64 time=1.29 ms
64 bytes from 192.168.88.1: icmp_seq=51 ttl=64 time=1.35 ms
64 bytes from 192.168.88.1: icmp_seq=52 ttl=64 time=1.35 ms
64 bytes from 192.168.88.1: icmp_seq=53 ttl=64 time=0.884 ms
64 bytes from 192.168.88.1: icmp_seq=54 ttl=64 time=1.32 ms
64 bytes from 192.168.88.1: icmp_seq=55 ttl=64 time=1.30 ms
64 bytes from 192.168.88.1: icmp_seq=56 ttl=64 time=1.29 ms
64 bytes from 192.168.88.1: icmp_seq=57 ttl=64 time=1.28 ms
64 bytes from 192.168.88.1: icmp_seq=61 ttl=64 time=12.9 ms
64 bytes from 192.168.88.1: icmp_seq=62 ttl=64 time=35.6 ms
64 bytes from 192.168.88.1: icmp_seq=63 ttl=64 time=0.851 ms
64 bytes from 192.168.88.1: icmp_seq=64 ttl=64 time=47.0 ms
64 bytes from 192.168.88.1: icmp_seq=65 ttl=64 time=20.2 ms
64 bytes from 192.168.88.1: icmp_seq=66 ttl=64 time=1.48 ms
64 bytes from 192.168.88.1: icmp_seq=67 ttl=64 time=1.31 ms
64 bytes from 192.168.88.1: icmp_seq=68 ttl=64 time=0.864 ms
64 bytes from 192.168.88.1: icmp_seq=72 ttl=64 time=1.41 ms
64 bytes from 192.168.88.1: icmp_seq=73 ttl=64 time=0.869 ms
64 bytes from 192.168.88.1: icmp_seq=74 ttl=64 time=4.44 ms
64 bytes from 192.168.88.1: icmp_seq=75 ttl=64 time=22.9 ms
64 bytes from 192.168.88.1: icmp_seq=76 ttl=64 time=21.5 ms
64 bytes from 192.168.88.1: icmp_seq=77 ttl=64 time=1.28 ms
64 bytes from 192.168.88.1: icmp_seq=78 ttl=64 time=1.30 ms
64 bytes from 192.168.88.1: icmp_seq=79 ttl=64 time=1.36 ms
64 bytes from 192.168.88.1: icmp_seq=80 ttl=64 time=1.36 ms
64 bytes from 192.168.88.1: icmp_seq=81 ttl=64 time=1.61 ms
64 bytes from 192.168.88.1: icmp_seq=82 ttl=64 time=1.38 ms
64 bytes from 192.168.88.1: icmp_seq=83 ttl=64 time=6.85 ms
64 bytes from 192.168.88.1: icmp_seq=84 ttl=64 time=1.05 ms
64 bytes from 192.168.88.1: icmp_seq=85 ttl=64 time=1.24 ms
64 bytes from 192.168.88.1: icmp_seq=86 ttl=64 time=1.37 ms
64 bytes from 192.168.88.1: icmp_seq=87 ttl=64 time=2.08 ms
64 bytes from 192.168.88.1: icmp_seq=88 ttl=64 time=1.31 ms
64 bytes from 192.168.88.1: icmp_seq=89 ttl=64 time=33.6 ms
64 bytes from 192.168.88.1: icmp_seq=90 ttl=64 time=20.1 ms
64 bytes from 192.168.88.1: icmp_seq=91 ttl=64 time=43.3 ms
64 bytes from 192.168.88.1: icmp_seq=92 ttl=64 time=51.9 ms
64 bytes from 192.168.88.1: icmp_seq=93 ttl=64 time=0.956 ms
64 bytes from 192.168.88.1: icmp_seq=94 ttl=64 time=1.27 ms
64 bytes from 192.168.88.1: icmp_seq=95 ttl=64 time=25.7 ms
64 bytes from 192.168.88.1: icmp_seq=99 ttl=64 time=1.65 ms
64 bytes from 192.168.88.1: icmp_seq=100 ttl=64 time=4.76 ms
^C
--- 192.168.88.1 ping statistics ---
100 packets transmitted, 91 received, 9% packet loss, time 99335ms
rtt min/avg/max/mdev = 0.851/43.558/1010.933/159.414 ms, pipe 2
inf ~ ping 192.168.88.1
PING 192.168.88.1 (192.168.88.1) 56(84) bytes of data.
64 bytes from 192.168.88.1: icmp_seq=1 ttl=64 time=16.3 ms
64 bytes from 192.168.88.1: icmp_seq=2 ttl=64 time=39.2 ms
64 bytes from 192.168.88.1: icmp_seq=3 ttl=64 time=1.21 ms
64 bytes from 192.168.88.1: icmp_seq=4 ttl=64 time=14.0 ms
64 bytes from 192.168.88.1: icmp_seq=5 ttl=64 time=1.20 ms
64 bytes from 192.168.88.1: icmp_seq=6 ttl=64 time=3.91 ms
64 bytes from 192.168.88.1: icmp_seq=7 ttl=64 time=1.20 ms
64 bytes from 192.168.88.1: icmp_seq=8 ttl=64 time=13.1 ms
64 bytes from 192.168.88.1: icmp_seq=9 ttl=64 time=1.23 ms
64 bytes from 192.168.88.1: icmp_seq=14 ttl=64 time=267 ms
64 bytes from 192.168.88.1: icmp_seq=15 ttl=64 time=85.2 ms
64 bytes from 192.168.88.1: icmp_seq=16 ttl=64 time=48.6 ms
64 bytes from 192.168.88.1: icmp_seq=23 ttl=64 time=22.1 ms
64 bytes from 192.168.88.1: icmp_seq=24 ttl=64 time=84.0 ms
64 bytes from 192.168.88.1: icmp_seq=25 ttl=64 time=1.99 ms
64 bytes from 192.168.88.1: icmp_seq=26 ttl=64 time=1.81 ms
64 bytes from 192.168.88.1: icmp_seq=27 ttl=64 time=21.1 ms
64 bytes from 192.168.88.1: icmp_seq=28 ttl=64 time=26.6 ms
64 bytes from 192.168.88.1: icmp_seq=29 ttl=64 time=1.29 ms
64 bytes from 192.168.88.1: icmp_seq=30 ttl=64 time=1.27 ms
64 bytes from 192.168.88.1: icmp_seq=31 ttl=64 time=15.1 ms
64 bytes from 192.168.88.1: icmp_seq=32 ttl=64 time=1.26 ms
64 bytes from 192.168.88.1: icmp_seq=33 ttl=64 time=1.19 ms
64 bytes from 192.168.88.1: icmp_seq=34 ttl=64 time=53.2 ms
64 bytes from 192.168.88.1: icmp_seq=35 ttl=64 time=1.31 ms
64 bytes from 192.168.88.1: icmp_seq=36 ttl=64 time=74.3 ms
64 bytes from 192.168.88.1: icmp_seq=37 ttl=64 time=18.9 ms
^C
--- 192.168.88.1 ping statistics ---
37 packets transmitted, 27 received, 27.027% packet loss, time 36166ms
rtt min/avg/max/mdev = 1.194/30.272/266.800/53.018 ms
[admin@MikroTik] /interface wireless> registration-table print interval=1
# INTERFACE RADIO-NAME MAC-ADDRESS AP SIGNAL-STRENGTH TX-RATE UPTIME
0 wlan1 A8:7E:EA:55:9F:10 no -71dBm@HT20-5 24Mbps 8m19s
1 wlan1 2CC81B432764 2C:C8:1B:43:27:64 no -86dBm@1Mbps 26Mb... 8m18s
2 wlan1 FC:49:2D:10:BE:1A no -72dBm@1Mbps 72.2... 8m17s
3 wlan1 68:A4:0E:23:A9:69 no -70dBm@1Mbps 5.5Mbps 8m16s
4 wlan1 76:6E:4F:6A:81:57 no -73dBm@1Mbps 26Mb... 8m2s
5 wlan1 B8:C3:85:AA:5E:2E no -56dBm@1Mbps 11Mbps 5m45s
Where is the loss (I would expect to see it in one of the 37 lines as well...)?37 packets transmitted, 27 received, 27.027% packet loss, time 36166ms
rtt min/avg/max/mdev = 1.194/30.272/266.800/53.018 ms
sequence 10, 11, 12, 13 is missing.Where is the loss (I would expect to see it in one of the 37 lines as well...)?37 packets transmitted, 27 received, 27.027% packet loss, time 36166ms
rtt min/avg/max/mdev = 1.194/30.272/266.800/53.018 ms
Indeed...now I see, and more is missing.sequence 10, 11, 12, 13 is missing.
Doing video conferencing or even just audio calls, this is hardly possible with such a) lost packets and b) packets arriving out of order.That is the kind of pattern I saw as well. Not a problem when just browsing, but very irritating when doing audio chat and conferencing.
How can I set it as AP instead of router? I unchecked the "Firewall Router" checkbox on Quickset. That apparently removed all firewall filter rules. Did you mean that?Have you tried configuring it as an accesspoint instead of a router? Might take some workload away from the device.
Could you set encryption to wpa2-aes only?
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" mode=dynamic-keys supplicant-identity=MikroTik
Quickset is not the proper way to make changes to your config, either use CLI, Webfig or Winbox.How can I set it as AP instead of router? I unchecked the "Firewall Router" checkbox on Quickset. That apparently removed all firewall filter rules. Did you mean that?
This will do goodI just disabled WPA and left only WPA2. Lets see.
Code: Select all/interface wireless security-profiles set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" mode=dynamic-keys supplicant-identity=MikroTik
# jan/25/2022 13:36:52 by RouterOS 6.48.6
#
# model = RB941-2nD
/interface bridge
add admin-mac=08:55:31:E4:E4:C5 auto-mac=no comment=defconf name=bridge
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-onlyn country=austria disabled=no distance=indoors frequency=2452 installation=indoor mode=\
ap-bridge ssid=jupiter wireless-protocol=802.11
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" mode=dynamic-keys supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=pwr-line1
add bridge=bridge comment=defconf interface=wlan1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0
/ip dhcp-client
add comment=defconf disabled=no interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan
add address=192.168.88.244 name=zelenka.home.arpa
/ip firewall filter
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=\
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new \
in-interface-list=WAN
add action=accept chain=input protocol=icmp
add action=accept chain=input connection-state=established
add action=accept chain=input connection-state=related
add action=drop chain=input in-interface-list=!LAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
/system clock
set time-zone-name=Europe/Vienna
/system package update
set channel=long-term
/system routerboard settings
set auto-upgrade=yes
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
Lol...so you want it to behave as router, and not as access-point (which you mentioned in the title).Disabling Firewall router MAYBE not the best idea in my case. Someone already trying to login from outside. ROFL
43019 transmits for 24035 frames ! Quite some retransmits. Hidden node problem ?frames=24035,17792 frame-bytes=33816306,3452725 hw-frames=43019,18298 hw-frame-bytes=56935646,4208593
Interface throughput is defined by the slowest talker. One client at 56Mbps, one client at 5 Mbps, both have throughput at (5*56)/(5+56) or 5 Mbps !1 wlan1 2CC81B432764 2C:C8:1B:43:27:64 no -86dBm@1Mbps
I'll give this a try later. Sounds promising.There is a noise handling parameter you can try: "adaptive noise immunity".
Not a single USB 3.0 source any near the HAP lite. My client I use for testing all this in the thread, has some USB 3.0 ports. But no USB3 in the same room as HAP lite and not within 5meters. I barely have any devices with USB3 in my household.Spectrum-history also shows non-802.11 RF signals, I assume.
Spectrum-scan is 802.11 only ???? Not sure of this.
Spectrum scan should be run long enough. You are looking for this PING test moment where it fails. Other tests were OK. So it is something that appears at a specific time.
The signals above 2472MHz are not in our wifi range channel 1-13.
Black is silence, see legend at the top. Fairly quiet right now. Wifi should be OK.
Source can be USB 3.0 : https://www.usb.org/sites/default/files/327216.pdf
# jan/26/2022 11:25:03 by RouterOS 6.44.5
# model = RB941-2nD
/interface bridge
add admin-mac=08:55:31:E4:E4:C5 auto-mac=no comment=defconf name=bridge
/interface wireless
set [ find default-name=wlan1 ] antenna-gain=2 band=2ghz-b/g/n channel-width=20/40mhz-XX country=austria disabled=no distance=indoors \
frequency=auto frequency-mode=regulatory-domain installation=indoor mode=ap-bridge ssid=jupiter wireless-protocol=802.11
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=dynamic-keys supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=pwr-line1
add bridge=bridge comment=defconf interface=wlan1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=ether2 network=192.168.88.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router.lan
/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=\
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new \
in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
/system clock
set time-zone-name=Europe/Vienna
/system routerboard settings
set auto-upgrade=yes
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
Yes poor coding!Something is disturbing the 2.4GHz spectrum at random times. Or something else is disturbing the network (spanning tree?). Or some priority process (Firewall hits?) is taking all the CPU.frames=24035,17792 frame-bytes=33816306,3452725 hw-frames=43019,18298 hw-frame-bytes=56935646,4208593