MikroTik

Posted: **Thu May 12, 2022 10:54 pm**

I have a unique issue I am experiencing utilizing a RB960PGS WRT poor WiFi throughput and would appreciate some input/opinions.

Background:
Broadband provider is using a RB960PGS to terminate provider fiber via LC SFP. The RB960PGS is then being powered via a iCREATin POE Power Injector, model PSE-480040G. The customer side of the POE Power Injector then goes to the WAN port of my ASUS RT-AX88U router.

Cat6e is ran from RB960PGS to POE Injector
Cat6e is ran from Power Injector to RTR

Issue:
I am seeing the advertised 950/950 (down/up) speeds via direct CAT6e to desktop and other directly connected computers. However, WiFi speeds over 5Ghz are consistently around 300/500, well below both advertised and wired performance. *I understand WiFi will likely not be exactly the same as wired performance.

Testing:
To rule out an internal networking issue, I configured my ASUS RTR for DUAL WAN and can switch back and forth between my Cable Internet provider and Broadband provider by unplugging the WAN uplink. When back on cable, I get 700/35 5Ghz speeds.

Notes:
*RB960PGS is on version 6.45.9
RouterBOARD is on 6.45.9
*RB960PGS is in bridge mode
*All speed tests were performed via Speedtest.net using the same remote server for both wired and wireless.
*NTP is not configured for the correct day/month/year/time
*I do not manage the RB960PGS, as this is managed by the provider at this time. Minimally, I would think a software upgrade to the latest LT version (6.48.6) should be performed, but, likely isn't the culprit. However, from a security standpoint, looks like there are several CVE's addressed between the two versions.

Any input would be greatly appreciated.

Posted: **Sat May 14, 2022 2:10 pm**

This issue has nothing to do with the RB960, if you're seeing 950/950 wired.

Sadly I don't use Asus since purchasing a dud from them, the Asus VDSL modem showed 80/20 sync, but the throughput within the router was a 10th of the sync.

Posted: **Sat May 14, 2022 2:35 pm**

I also think it's config related on the Asus side since you are able to get full speed when using cable connected to Hex POE.
The only variable in the equation is then that Asus.

Is there a possibility to configure that Asus as a simple AP, no routing / switching whatsoever ? Just to rule out any config issues on that device...

Posted: **Wed May 18, 2022 2:03 am**

The only config difference between the broadband provider and cable is the external IP and gateway. Both use DHCP. A trace route did reveal I am behind a double NAT with the broadband provider. However, this likely isn’t the culprit.

I did remove the ASUS RTR and use the broadband providers router with the same results. So, this rules out the customer side device or internal network being an issue.

I have not to use the providers router as anything other than a bridge, as I do not manage it.

I agree it seems unlikely something on the providers router. And, wifi throttling isn’t a thing. Confusing for sure.

Posted: **Fri Jun 03, 2022 3:23 pm**

Update: I connected my ASUS AP directly to ether1 and let the mikrotik handle DHCP requests. The result is the same: 300d/700u.

I looked through the release notes and see nothing notable between the current firmware and the latest LT release.

/interface bridge
add name=CBridge vlan-filtering=yes
add name=bridge
/interface ethernet
set [ find default-name=sfp1 ] auto-negotiation=no
/interface vlan
add comment=MGMT_int interface=sfp1 name=sfp.10 vlan-id=10
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
add name=MGMT

/interface bridge port
add bridge=CBridge interface=sfp1
add bridge=CBridge interface=ether1 pvid=5

/interface bridge vlan
add bridge=CBridge tagged=sfp1 vlan-ids=10
add bridge=CBridge tagged=sfp1 untagged=ether1 vlan-ids=5
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=MGMT_int interface=sfp.10 list=MGMT

/ip firewall filter
add action=accept chain=input in-interface=sfp.10
add action=accept chain=input comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
    invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=\
    "defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
    in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
    ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
    ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
    connection-state=established,related
add action=accept chain=forward comment=\
    "defconf: accept established,related, untracked" connection-state=\
    established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
    connection-state=invalid
add action=drop chain=forward comment=\
    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
    connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" \
    ipsec-policy=out,none out-interface-list=WAN

MikroTik

Poor WiFi Throughput - Broadband

Poor WiFi Throughput - Broadband

Re: Poor WiFi Throughput - Broadband

Re: Poor WiFi Throughput - Broadband

Re: Poor WiFi Throughput - Broadband

Re: Poor WiFi Throughput - Broadband