hello folks - I wanted to test mikrotik products and i ran accross the cap ax wireless ap. Pretty easy to install and certainly full of options once you get your way around it. I was pretty happy with it until i tested performance. For some reason both freqs 2.4 and 5 ghz are providing an extremely poor experience no higher than 80mbps in the best scenario.I played around with channels and all that but the number never seems to improve. So here is the question for those that are more experienced with mikrotik that are willing to give me some feedback:
- Is this performance good for the product or I am screwing up the config somewhere?
- I tried to look at the options to see if there was some sort of tcp or bridge option enabled that could be affecting overall performance but i couldn't find anything.
- In the same network I have another product that is able to reach around 450-500 gbps, when i looked in the mikrotik winbox scanner this device was showing as channel 5180/ax/Ceeeeeee. That doesn't seem to be an option on the cap ax product, I configured the channel as 80+80Mhz 5180+5290
- The biggest problem i see other than the speed is that wireless sessions just drop, on both frequences it seems the devices just randomly drops the clients. I have tried in multiple clients, linux, windows and macos devices. They all get randomly disconnected at times. Could this be a configuration option?
I am also running on v7.9.1 in case that could be related, i saw some posts saying that this v7 is not very good for wireless, not sure if its true.
Appreciate any help on the subject, I like all the options the device seems really complete, but I am trying not to waste a lot of time if this is the best that i can get out of it. the random client drops are really the biggest problem and I think i may just return the product if this is the best i can expect from it. thank you!
-
-
Smoerrebroed
Frequent Visitor
- Posts: 63
- Joined:
Re: cAP ax performance and problems
(7.9.1 and even on an ac link; the actual download speed is higher.)
You do not have the required permissions to view the files attached to this post.
Re: cAP ax performance and problems
Post config between code quotes.
I can get close to or over 800 using tp-link ax20u as wireless adapter for laptop towards AX3 (same chip and resources as Cap ax)
In order of asking:
1- most likely something wrong in the config. Hence the request to have a look how you have it configured now.
2- I assume you like to use the device as a simple access point ? Routing, DHCP,... is done by another device ?
3-
However, if that "other device" is already using channel 5180, why are you using the SAME channel ? That's not smart.
Plan your frequencies so you stay AWAY from other access points already occupying certain channels. If that's not possible, try to use the least occupied ones (usually better but not always).
4- as of ROS7.9 (and 7.9.1 and 7.10b8) there are some AX-wifi issues (which is what you may see). What does the log file say about this (provided you have enabled logging) ?
Might be best (for now) to downgrade to 7.8.
But let's first have a look at your config.
I can get close to or over 800 using tp-link ax20u as wireless adapter for laptop towards AX3 (same chip and resources as Cap ax)
In order of asking:
1- most likely something wrong in the config. Hence the request to have a look how you have it configured now.
2- I assume you like to use the device as a simple access point ? Routing, DHCP,... is done by another device ?
3-
Hard to believe over wifiIn the same network I have another product that is able to reach around 450-500 gbps
However, if that "other device" is already using channel 5180, why are you using the SAME channel ? That's not smart.
Plan your frequencies so you stay AWAY from other access points already occupying certain channels. If that's not possible, try to use the least occupied ones (usually better but not always).
4- as of ROS7.9 (and 7.9.1 and 7.10b8) there are some AX-wifi issues (which is what you may see). What does the log file say about this (provided you have enabled logging) ?
Might be best (for now) to downgrade to 7.8.
But let's first have a look at your config.
Re: cAP ax performance and problems
hi Holvoetn, appreciate your response and that you take a look at my config
I did experience a new issue today, seem the device just hung up during the night, the device was showing activity on the poe port, but there was no ssid to connect to. I had to do a hard reset to get them back.
here is my config:
and here below are my current logs, for some reason when the device first comes up is very shaky and disconnects me a few times before getting more stable too:
Once again, i appreciate your reply and your help.
best wifi everHard to believe over wifi
I really hope the config is the issue, i do like the routerOS overall. I understand networking but honestly wireless is a very weak area.1- most likely something wrong in the config. Hence the request to have a look how you have it configured now.
Correct, I don't even want nat, i'm just routing to the main firewall that will take care of routing, nat, etc.2- I assume you like to use the device as a simple access point ?
good point, for some reason there were no available channel configured in the device and the antenna was down, I found this page and used it to do some testing: https://en.wikipedia.org/wiki/List_of_W ... j/n/ac/ax) but the ultimate result was all the same, did not make a difference if i was using 5180 versus 5210, i even configured the secondary frequency to try and do 80+80 but my tests always showed the same result.I finally set to try and mirror the other AP to see if i could match the speed.However, if that "other device" is already using channel 5180, why are you using the SAME channel ? That's not smart.
I followed this troubleshooting guide and enabled wireless debugging, did not really see much there other than signaling issues (https://wiki.mikrotik.com/wiki/Manual:W ... Debug_Logs) I will post logs below.4- as of ROS7.9 (and 7.9.1 and 7.10b8) there are some AX-wifi issues (which is what you may see). What does the log file say about this (provided you have enabled logging) ?
I did experience a new issue today, seem the device just hung up during the night, the device was showing activity on the poe port, but there was no ssid to connect to. I had to do a hard reset to get them back.
here is my config:
Code: Select all
# may/28/2023 14:04:58 by RouterOS 7.9.1
# software id = GUKW-BIS8
#
# model = cAPGi-5HaxD2HaxD
# serial number = HEE08H9PBM8
/interface bridge
add admin-mac=48:A9:8A:C0:3D:29 auto-mac=no comment=defconf name=bridge
/interface wifiwave2
set [ find default-name=wifi1 ] channel.band=5ghz-ax .frequency=5180 .secondary-frequency=5290 .skip-dfs-channels=disabled .width=20/40/80mhz configuration.chains="" .country=\
"United States" .hide-ssid=no .mode=ap .rrm=no .ssid=ma5 .tx-chains="" disabled=no security.authentication-types=wpa3-psk
set [ find default-name=wifi2 ] channel.skip-dfs-channels=10min-cac configuration.country="United States" .mode=ap .ssid=ma4 disabled=no security.authentication-types=wpa2-psk,wpa3-psk
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp interface=bridge lease-time=10m name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=wifi1
add bridge=bridge comment=defconf interface=wifi2
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface detect-internet
set detect-interface-list=all
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/interface wifiwave2 cap
set enabled=yes
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0
add address=192.168.251.14/24 interface=ether1 network=192.168.251.0
/ip dhcp-client
add comment=defconf disabled=yes interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf dns-server=192.168.88.1 gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes servers=1.1.1.1,8.8.8.8
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related hw-offload=yes
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" disabled=yes ipsec-policy=out,none out-interface-list=WAN
/ip ssh
set always-allow-password-login=yes strong-crypto=yes
/ip upnp
set enabled=yes
/ip upnp interfaces
add interface=bridge type=internal
add interface=ether1 type=external
/ipv6 firewall address-list
add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
add address=::1/128 comment="defconf: lo" list=bad_ipv6
add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
add address=100::/64 comment="defconf: discard only " list=bad_ipv6
add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
/ipv6 firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMPv6" protocol=icmpv6
add action=accept chain=input comment="defconf: accept UDP traceroute" port=33434-33534 protocol=udp
add action=accept chain=input comment="defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=udp src-address=fe80::/10
add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 protocol=udp
add action=accept chain=input comment="defconf: accept ipsec AH" protocol=ipsec-ah
add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=ipsec-esp
add action=accept chain=input comment="defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=input comment="defconf: drop everything else not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" hop-limit=equal:1 protocol=icmpv6
add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=icmpv6
add action=accept chain=forward comment="defconf: accept HIP" protocol=139
add action=accept chain=forward comment="defconf: accept IKE" dst-port=500,4500 protocol=udp
add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=ipsec-ah
add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=ipsec-esp
add action=accept chain=forward comment="defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=forward comment="defconf: drop everything else not coming from LAN" in-interface-list=!LAN
/system clock
set time-zone-name=America/Denver
/system logging
add topics=wireless,debug
/system note
set show-at-login=no
/system routerboard mode-button
set enabled=yes on-event=dark-mode
/system script
add comment=defconf dont-require-permissions=no name=dark-mode owner=*sys policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\r\
\n :if ([system leds settings get all-leds-off] = \"never\") do={\r\
\n /system leds settings set all-leds-off=immediate \r\
\n } else={\r\
\n /system leds settings set all-leds-off=never \r\
\n }\r\
\n "
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LANCode: Select all
16:57:40 system,error,critical router rebooted without proper shutdown, probably power outage
16:57:40 interface,info bridge detect LAN
16:57:50 interface,info ether1 link up (speed 1G, full duplex)
16:57:50 interface,info ether1 detect LAN
16:57:51 interface,info ether1 detect UNKNOWN
16:57:57 interface,info ether1 detect INTERNET
16:58:06 wireless,info AE:B2:FF:7C:3F:99@wifi1 reauthenticating
16:58:06 wireless,info AE:B2:FF:7C:3F:99@wifi1 connected, signal strength -51
16:58:06 interface,info wifi1 detect LAN
19:59:52 system,critical,info cloud change time May/28/2023 16:58:09 => May/28/2023 19:59:52
13:59:55 dhcp,info defconf assigned 192.168.88.254 for AE:B2:FF:7C:3F:99
14:00:34 wireless,info 44:AF:28:A8:3F:1D@wifi1 reauthenticating
14:00:34 wireless,info 44:AF:28:A8:3F:1D@wifi1 connected, signal strength -74
14:00:36 dhcp,info defconf assigned 192.168.88.250 for 44:AF:28:A8:3F:1D elmox
14:00:39 system,info,account user admin logged in from 192.168.88.250 via winbox
14:00:40 system,info,account user admin logged in from 192.168.88.250 via local
14:00:50 wireless,info 44:AF:28:A8:3F:1D@wifi1 disconnected, connection lost, signal strength -74
14:00:52 wireless,info 44:AF:28:A8:3F:1D@wifi1 connected, signal strength -72
14:01:09 wireless,info 44:AF:28:A8:3F:1D@wifi1 disconnected, connection lost, signal strength -74
14:01:35 ssh,info auth timeout
14:01:38 system,info,account user admin logged out from 192.168.88.250 via winbox
14:01:38 system,info,account user admin logged out from 192.168.88.250 via local
14:01:48 wireless,info 44:AF:28:A8:3F:1D@wifi2 reauthenticating
14:01:48 wireless,info 44:AF:28:A8:3F:1D@wifi2 connected, signal strength -63
14:01:49 wireless,info 44:AF:28:A8:3F:1D@wifi2 reauthenticating
14:01:49 wireless,info 44:AF:28:A8:3F:1D@wifi2 reauthenticating
14:01:49 wireless,debug 44:AF:28:A8:3F:1D@wifi2 connected, but was associated
14:01:49 interface,info wifi2 detect LAN
14:01:53 dhcp,info defconf deassigned 192.168.88.250 for 44:AF:28:A8:3F:1D elmox
14:01:53 dhcp,info defconf assigned 192.168.88.250 for 44:AF:28:A8:3F:1D elmox
14:01:59 system,info,account user admin logged in from 192.168.88.250 via ssh
14:02:00 system,info,account user admin logged in from 192.168.88.250 via winbox
14:02:00 system,info,account user admin logged in from 192.168.88.250 via local
14:02:05 wireless,info 44:AF:28:A8:3F:1D@wifi2 disconnected, connection lost, signal strength -63
14:02:06 wireless,info 44:AF:28:A8:3F:1D@wifi2 connected, signal strength -62
14:02:07 wireless,info 44:AF:28:A8:3F:1D@wifi2 disconnected, connection lost, signal strength -61
14:02:08 wireless,info 44:AF:28:A8:3F:1D@wifi2 connected, signal strength -62
14:02:09 wireless,info 44:AF:28:A8:3F:1D@wifi2 disconnected, connection lost, signal strength -61
14:02:14 wireless,info 44:AF:28:A8:3F:1D@wifi2 connected, signal strength -62
14:02:14 interface,info wifi2 detect LAN
14:02:23 wireless,info 44:AF:28:A8:3F:1D@wifi2 disconnected, connection lost, signal strength -61
14:02:33 wireless,info 44:AF:28:A8:3F:1D@wifi2 reauthenticating
14:02:33 wireless,info 44:AF:28:A8:3F:1D@wifi2 connected, signal strength -62
14:02:33 interface,info wifi2 detect LAN
14:02:35 system,info,account user admin logged out from 192.168.88.250 via winbox
14:02:35 system,info,account user admin logged out from 192.168.88.250 via local
14:03:44 system,info,account user admin logged in from 192.168.88.250 via winbox
14:03:44 system,info,account user admin logged in from 192.168.88.250 via local
14:04:07 system,info,account user admin logged in from 192.168.88.250 via ssh
14:06:15 wireless,info AE:B2:FF:7C:3F:99@wifi1 disconnected, connection lost, signal strength -73
14:07:57 wireless,info AE:B2:FF:7C:3F:99@wifi1 connected, signal strength -75
14:07:57 interface,info wifi1 detect LAN
14:14:26 wireless,info AE:B2:FF:7C:3F:99@wifi1 disconnected, connection lost, signal strength -73
14:15:04 wireless,info AE:B2:FF:7C:3F:99@wifi1 connected, signal strength -75
14:15:04 interface,info wifi1 detect LANOnce again, i appreciate your reply and your help.
Re: cAP ax performance and problems
Reset device and set only county setting for wifi. If troughtput is still bad try to set channel manualy, but touch only frequency. Test speed near AP.hi Holvoetn, appreciate your response and that you take a look at my config
best wifi everHard to believe over wifi
I really hope the config is the issue, i do like the routerOS overall. I understand networking but honestly wireless is a very weak area.1- most likely something wrong in the config. Hence the request to have a look how you have it configured now.Correct, I don't even want nat, i'm just routing to the main firewall that will take care of routing, nat, etc.2- I assume you like to use the device as a simple access point ?good point, for some reason there were no available channel configured in the device and the antenna was down, I found this page and used it to do some testing: https://en.wikipedia.org/wiki/List_of_W ... j/n/ac/ax) but the ultimate result was all the same, did not make a difference if i was using 5180 versus 5210, i even configured the secondary frequency to try and do 80+80 but my tests always showed the same result.I finally set to try and mirror the other AP to see if i could match the speed.However, if that "other device" is already using channel 5180, why are you using the SAME channel ? That's not smart.
I followed this troubleshooting guide and enabled wireless debugging, did not really see much there other than signaling issues (https://wiki.mikrotik.com/wiki/Manual:W ... Debug_Logs) I will post logs below.4- as of ROS7.9 (and 7.9.1 and 7.10b8) there are some AX-wifi issues (which is what you may see). What does the log file say about this (provided you have enabled logging) ?
I did experience a new issue today, seem the device just hung up during the night, the device was showing activity on the poe port, but there was no ssid to connect to. I had to do a hard reset to get them back.
here is my config:and here below are my current logs, for some reason when the device first comes up is very shaky and disconnects me a few times before getting more stable too:Code: Select all# may/28/2023 14:04:58 by RouterOS 7.9.1 # software id = GUKW-BIS8 # # model = cAPGi-5HaxD2HaxD # serial number = HEE08H9PBM8 /interface bridge add admin-mac=48:A9:8A:C0:3D:29 auto-mac=no comment=defconf name=bridge /interface wifiwave2 set [ find default-name=wifi1 ] channel.band=5ghz-ax .frequency=5180 .secondary-frequency=5290 .skip-dfs-channels=disabled .width=20/40/80mhz configuration.chains="" .country=\ "United States" .hide-ssid=no .mode=ap .rrm=no .ssid=ma5 .tx-chains="" disabled=no security.authentication-types=wpa3-psk set [ find default-name=wifi2 ] channel.skip-dfs-channels=10min-cac configuration.country="United States" .mode=ap .ssid=ma4 disabled=no security.authentication-types=wpa2-psk,wpa3-psk /interface list add comment=defconf name=WAN add comment=defconf name=LAN /ip pool add name=dhcp ranges=192.168.88.10-192.168.88.254 /ip dhcp-server add address-pool=dhcp interface=bridge lease-time=10m name=defconf /interface bridge port add bridge=bridge comment=defconf interface=ether2 add bridge=bridge comment=defconf interface=wifi1 add bridge=bridge comment=defconf interface=wifi2 /ip neighbor discovery-settings set discover-interface-list=LAN /interface detect-internet set detect-interface-list=all /interface list member add comment=defconf interface=bridge list=LAN add comment=defconf interface=ether1 list=WAN /interface wifiwave2 cap set enabled=yes /ip address add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0 add address=192.168.251.14/24 interface=ether1 network=192.168.251.0 /ip dhcp-client add comment=defconf disabled=yes interface=ether1 /ip dhcp-server network add address=192.168.88.0/24 comment=defconf dns-server=192.168.88.1 gateway=192.168.88.1 /ip dns set allow-remote-requests=yes servers=1.1.1.1,8.8.8.8 /ip dns static add address=192.168.88.1 comment=defconf name=router.lan /ip firewall filter add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp add action=accept chain=input comment="defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1 add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related hw-offload=yes add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN /ip firewall nat add action=masquerade chain=srcnat comment="defconf: masquerade" disabled=yes ipsec-policy=out,none out-interface-list=WAN /ip ssh set always-allow-password-login=yes strong-crypto=yes /ip upnp set enabled=yes /ip upnp interfaces add interface=bridge type=internal add interface=ether1 type=external /ipv6 firewall address-list add address=::/128 comment="defconf: unspecified address" list=bad_ipv6 add address=::1/128 comment="defconf: lo" list=bad_ipv6 add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6 add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6 add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6 add address=100::/64 comment="defconf: discard only " list=bad_ipv6 add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6 add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6 add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6 /ipv6 firewall filter add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid add action=accept chain=input comment="defconf: accept ICMPv6" protocol=icmpv6 add action=accept chain=input comment="defconf: accept UDP traceroute" port=33434-33534 protocol=udp add action=accept chain=input comment="defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=udp src-address=fe80::/10 add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 protocol=udp add action=accept chain=input comment="defconf: accept ipsec AH" protocol=ipsec-ah add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=ipsec-esp add action=accept chain=input comment="defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec add action=drop chain=input comment="defconf: drop everything else not coming from LAN" in-interface-list=!LAN add action=accept chain=forward comment="defconf: accept established,related,untracked" connection-state=established,related,untracked add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid add action=drop chain=forward comment="defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6 add action=drop chain=forward comment="defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6 add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" hop-limit=equal:1 protocol=icmpv6 add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=icmpv6 add action=accept chain=forward comment="defconf: accept HIP" protocol=139 add action=accept chain=forward comment="defconf: accept IKE" dst-port=500,4500 protocol=udp add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=ipsec-ah add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=ipsec-esp add action=accept chain=forward comment="defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec add action=drop chain=forward comment="defconf: drop everything else not coming from LAN" in-interface-list=!LAN /system clock set time-zone-name=America/Denver /system logging add topics=wireless,debug /system note set show-at-login=no /system routerboard mode-button set enabled=yes on-event=dark-mode /system script add comment=defconf dont-require-permissions=no name=dark-mode owner=*sys policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\r\ \n :if ([system leds settings get all-leds-off] = \"never\") do={\r\ \n /system leds settings set all-leds-off=immediate \r\ \n } else={\r\ \n /system leds settings set all-leds-off=never \r\ \n }\r\ \n " /tool mac-server set allowed-interface-list=LAN /tool mac-server mac-winbox set allowed-interface-list=LANCode: Select all16:57:40 system,error,critical router rebooted without proper shutdown, probably power outage 16:57:40 interface,info bridge detect LAN 16:57:50 interface,info ether1 link up (speed 1G, full duplex) 16:57:50 interface,info ether1 detect LAN 16:57:51 interface,info ether1 detect UNKNOWN 16:57:57 interface,info ether1 detect INTERNET 16:58:06 wireless,info AE:B2:FF:7C:3F:99@wifi1 reauthenticating 16:58:06 wireless,info AE:B2:FF:7C:3F:99@wifi1 connected, signal strength -51 16:58:06 interface,info wifi1 detect LAN 19:59:52 system,critical,info cloud change time May/28/2023 16:58:09 => May/28/2023 19:59:52 13:59:55 dhcp,info defconf assigned 192.168.88.254 for AE:B2:FF:7C:3F:99 14:00:34 wireless,info 44:AF:28:A8:3F:1D@wifi1 reauthenticating 14:00:34 wireless,info 44:AF:28:A8:3F:1D@wifi1 connected, signal strength -74 14:00:36 dhcp,info defconf assigned 192.168.88.250 for 44:AF:28:A8:3F:1D elmox 14:00:39 system,info,account user admin logged in from 192.168.88.250 via winbox 14:00:40 system,info,account user admin logged in from 192.168.88.250 via local 14:00:50 wireless,info 44:AF:28:A8:3F:1D@wifi1 disconnected, connection lost, signal strength -74 14:00:52 wireless,info 44:AF:28:A8:3F:1D@wifi1 connected, signal strength -72 14:01:09 wireless,info 44:AF:28:A8:3F:1D@wifi1 disconnected, connection lost, signal strength -74 14:01:35 ssh,info auth timeout 14:01:38 system,info,account user admin logged out from 192.168.88.250 via winbox 14:01:38 system,info,account user admin logged out from 192.168.88.250 via local 14:01:48 wireless,info 44:AF:28:A8:3F:1D@wifi2 reauthenticating 14:01:48 wireless,info 44:AF:28:A8:3F:1D@wifi2 connected, signal strength -63 14:01:49 wireless,info 44:AF:28:A8:3F:1D@wifi2 reauthenticating 14:01:49 wireless,info 44:AF:28:A8:3F:1D@wifi2 reauthenticating 14:01:49 wireless,debug 44:AF:28:A8:3F:1D@wifi2 connected, but was associated 14:01:49 interface,info wifi2 detect LAN 14:01:53 dhcp,info defconf deassigned 192.168.88.250 for 44:AF:28:A8:3F:1D elmox 14:01:53 dhcp,info defconf assigned 192.168.88.250 for 44:AF:28:A8:3F:1D elmox 14:01:59 system,info,account user admin logged in from 192.168.88.250 via ssh 14:02:00 system,info,account user admin logged in from 192.168.88.250 via winbox 14:02:00 system,info,account user admin logged in from 192.168.88.250 via local 14:02:05 wireless,info 44:AF:28:A8:3F:1D@wifi2 disconnected, connection lost, signal strength -63 14:02:06 wireless,info 44:AF:28:A8:3F:1D@wifi2 connected, signal strength -62 14:02:07 wireless,info 44:AF:28:A8:3F:1D@wifi2 disconnected, connection lost, signal strength -61 14:02:08 wireless,info 44:AF:28:A8:3F:1D@wifi2 connected, signal strength -62 14:02:09 wireless,info 44:AF:28:A8:3F:1D@wifi2 disconnected, connection lost, signal strength -61 14:02:14 wireless,info 44:AF:28:A8:3F:1D@wifi2 connected, signal strength -62 14:02:14 interface,info wifi2 detect LAN 14:02:23 wireless,info 44:AF:28:A8:3F:1D@wifi2 disconnected, connection lost, signal strength -61 14:02:33 wireless,info 44:AF:28:A8:3F:1D@wifi2 reauthenticating 14:02:33 wireless,info 44:AF:28:A8:3F:1D@wifi2 connected, signal strength -62 14:02:33 interface,info wifi2 detect LAN 14:02:35 system,info,account user admin logged out from 192.168.88.250 via winbox 14:02:35 system,info,account user admin logged out from 192.168.88.250 via local 14:03:44 system,info,account user admin logged in from 192.168.88.250 via winbox 14:03:44 system,info,account user admin logged in from 192.168.88.250 via local 14:04:07 system,info,account user admin logged in from 192.168.88.250 via ssh 14:06:15 wireless,info AE:B2:FF:7C:3F:99@wifi1 disconnected, connection lost, signal strength -73 14:07:57 wireless,info AE:B2:FF:7C:3F:99@wifi1 connected, signal strength -75 14:07:57 interface,info wifi1 detect LAN 14:14:26 wireless,info AE:B2:FF:7C:3F:99@wifi1 disconnected, connection lost, signal strength -73 14:15:04 wireless,info AE:B2:FF:7C:3F:99@wifi1 connected, signal strength -75 14:15:04 interface,info wifi1 detect LAN
Once again, i appreciate your reply and your help.
Re: cAP ax performance and problems
Less invasive then what I was going to suggest but a good first step.
We first need to make sure the device behaves as expected.
Setting the channel manually is recommended (use scanner or frequency usage mode to detect which channels are occupied at your location, select other ones).
I don't have cAP AX in my hands now so I don't know what Quickset options it has to start from.
If that first steps works, I would go as far as recommending to reset without config, keeping user account.
Then build up everything again.
Alternative: You can also start from default config and then tear things down (remove DHCP server, move DHCP client to bridge, connect all ports to bridge, change interface list for ether1 to LAN iso WAN, ...)
Your last remark about the device hanging up overnight is what worries me a bit. It's a behaviour reported by some for their AX-devices starting with 7.9 and 7.9.1.
It might be better (for now) to downgrade to 7.8 (what was the version it came with off-factory ? 7.6 perhaps ?) since that one did not show this symptom.
We first need to make sure the device behaves as expected.
Setting the channel manually is recommended (use scanner or frequency usage mode to detect which channels are occupied at your location, select other ones).
I don't have cAP AX in my hands now so I don't know what Quickset options it has to start from.
If that first steps works, I would go as far as recommending to reset without config, keeping user account.
Then build up everything again.
Alternative: You can also start from default config and then tear things down (remove DHCP server, move DHCP client to bridge, connect all ports to bridge, change interface list for ether1 to LAN iso WAN, ...)
Your last remark about the device hanging up overnight is what worries me a bit. It's a behaviour reported by some for their AX-devices starting with 7.9 and 7.9.1.
It might be better (for now) to downgrade to 7.8 (what was the version it came with off-factory ? 7.6 perhaps ?) since that one did not show this symptom.
Re: cAP ax performance and problems
I followed both recommendations, I screwed up when i downgraded and I had to initiate a new quest to recover the box. I followed a video on how to downgrade ( https://www.youtube.com/watch?v=YHg8YJT1D0E ) and i did not look into details, apparently in order to get these cap-ax to downgrade successfully you have to copy both files the routeros + wifiwave2, and I only did routeros. I ended up recovering the box using netinstall and guessing that I had to add the 2 files to the command line, which unfortunately is not mentioned in this document at all ( https://help.mikrotik.com/docs/display/ROS/Netinstall )
I am back to the initial problems and using os v7.8 instead. The speed is a little bit better, i was able to get to 420 mbps this time on both the 4 and 5 ghz network. So it would appear that routeros 7.9 wasn't tested on these devices
. The signal looks about the same doesn't really have a great range. Also, the disconnects continue even when the signal shows complete bars. I wonder if i have a bad device and how i could test it.
the 2.4ghz network is configured by default as per the recommendation, but the 5ghz one does not work by default. It says unsupported channels and It doesn't even show up unless i put some configuration manually. Right now my config looks like this:
set [ find default-name=wifi1 ] channel.band=5ghz-ax .frequency=5170-5250 .secondary-frequency=5290 .skip-dfs-channels=disabled \
.width=20/40/80mhz configuration.country="United States" .mode=ap .ssid=ma5 disabled=no security.authentication-types=\
wpa3-psk
The speed i can live with after this change, but the disconnects are still the main problem. Any idea on how i could test the hardware to see if it's faulty? Maybe Mikrotik simply doesn't work well with the frequencies used in the US? I compared it to Australia and some other countries and they really look alike. I appreciate all the input, any other suggestions to try to resolve the client drop problems?
I am back to the initial problems and using os v7.8 instead. The speed is a little bit better, i was able to get to 420 mbps this time on both the 4 and 5 ghz network. So it would appear that routeros 7.9 wasn't tested on these devices
. The signal looks about the same doesn't really have a great range. Also, the disconnects continue even when the signal shows complete bars. I wonder if i have a bad device and how i could test it.the 2.4ghz network is configured by default as per the recommendation, but the 5ghz one does not work by default. It says unsupported channels and It doesn't even show up unless i put some configuration manually. Right now my config looks like this:
set [ find default-name=wifi1 ] channel.band=5ghz-ax .frequency=5170-5250 .secondary-frequency=5290 .skip-dfs-channels=disabled \
.width=20/40/80mhz configuration.country="United States" .mode=ap .ssid=ma5 disabled=no security.authentication-types=\
wpa3-psk
The speed i can live with after this change, but the disconnects are still the main problem. Any idea on how i could test the hardware to see if it's faulty? Maybe Mikrotik simply doesn't work well with the frequencies used in the US? I compared it to Australia and some other countries and they really look alike. I appreciate all the input, any other suggestions to try to resolve the client drop problems?
Re: cAP ax performance and problems
Set the frequency to be used manually after checking it is clear for the environment your device is placed in.
No range.
Don't use secondary frequency. I am not 100 sure it can be used on that chipset since that one only supports 80MHz channels.
No range.
Don't use secondary frequency. I am not 100 sure it can be used on that chipset since that one only supports 80MHz channels.
Re: cAP ax performance and problems
Well whats funny, the best performance i got out of any of mikrotik new AX devices was to NOT select any country, moment i select my country it drops TX power from 26 to 18db and range and performance drops so drastically(almost 50%) that i wonder whats even the point of having this new router...
Re: cAP ax performance and problems
Already for some time, Mikrotik is pretty strict on following country regulations for channels to be used and TX power.
No country = USA.
If you do not set your device as it should be for your location, that's your responsibility.
There are countries with heavy fines when authorities find you are breaking the rules.
No country = USA.
If you do not set your device as it should be for your location, that's your responsibility.
There are countries with heavy fines when authorities find you are breaking the rules.
Re: cAP ax performance and problems
Do you mean only use the center frequency instead of the range? for example 5210 in the US? I thought the device supports 80+80 when using the secondary frequency, but i will try it like that if that's what you mean. Also, Ivicast I think i read that leaving the power empty will use the max power the antenna supports, did not say anything about the country, version 7.8 doesn't show it for me but I'm sure when i was in version 7.9 under status the TX power was showing 24.
Re: cAP ax performance and problems
I have very pour performance with hap ax2 as APs connected to RB5009 via capsman. When downloading large files to my iPad from my NAS I get about 6-7 MBps while I get twice as much connecting through 5 year old Asus router. All devices in direct view to each other. The same slow speeds are obvious compared to Asus”s when using Samsung SmartTV on 2.4. Version 7.9.
Re: cAP ax performance and problems
Well then all other vendors are breaking regulatory (ASUS,DLINK,HUAWEI,ARUBA,entire ISP routers in my country )etc, or there is something broken with regulatory on mikrotik
If you take cheapest asus ax router it costs exactly HALF price then cap ax and i get almost double range or speed then any mikrotik ax wireless.
Only setting mikrotik to no country(max power) gives about same speeds/range as other vendors.
If you take cheapest asus ax router it costs exactly HALF price then cap ax and i get almost double range or speed then any mikrotik ax wireless.
Only setting mikrotik to no country(max power) gives about same speeds/range as other vendors.
Re: cAP ax performance and problems
Not related to cAP AX but I also have an AX2 connected to RB5009.I have very pour performance with hap ax2 as APs connected to RB5009 via capsman. When downloading large files to my iPad from my NAS I get about 6-7 MBps while I get twice as much connecting through 5 year old Asus router. All devices in direct view to each other. The same slow speeds are obvious compared to Asus”s when using Samsung SmartTV on 2.4. Version 7.9.
Close to 600Mbps on internal testing.
Be careful with the way you use size indicators.
Mbps = Mega bits per second <> MBps = Mega BYTE per second.
Normally 1 MBps = 8Mbps (8 bits, in old telco standards there was also 1 start and stop bit, not sure if that's still applicable here)
If your old Asus only reaches about 15MBps (120 Mbps ?), I think there might be something wrong there too.
Are you sure the frequencies you use on AX2 are as clear as possible from interference ?
And 5 year old Asus ? You may be pretty sure it is not compliant to latest regulations which cAP AX does comply with ...
Related:
I should get a batch of cAP AX somewhere this week (I hope).
Will do some testing of my own (lab conditions) before having them mounted against the ceiling in warehouse.
And then repeat testing when they are hanging there, between metal racks with plenty of metal cans
Re: cAP ax performance and problems
Guess what just got delivered ...
Password protected, as expected ... only visible on the device label.
Nothing else on or in the box with that password.
Sorry but that's plain STUPID !
So I have to make sure to take pictures of each and every device as of now.
Default config is for Home AP Dual band. Personally I would have set it at AP period. No firewall, no NAT, nada.
But ok, I can change that ...
Out of the box, no tweaking except for
- changed user name/passwd
- add ether1 to bridge
- remove DHCP server
- remove IP address
- changed country
- set 5GHz channel to free area (in this case I used 5660)
Iperf3 results:
Password protected, as expected ... only visible on the device label.
Nothing else on or in the box with that password.
Sorry but that's plain STUPID !
So I have to make sure to take pictures of each and every device as of now.
Default config is for Home AP Dual band. Personally I would have set it at AP period. No firewall, no NAT, nada.
But ok, I can change that ...
Out of the box, no tweaking except for
- changed user name/passwd
- add ether1 to bridge
- remove DHCP server
- remove IP address
- changed country
- set 5GHz channel to free area (in this case I used 5660)
Iperf3 results:
You do not have the required permissions to view the files attached to this post.
Re: cAP ax performance and problems
could you show your config? I still use the dhcp server but i don't think thats the reason for the poor performance on my box. Which routeros you have in that device? did you run that iperf between 2 devices in the same network? what do you get from fast.com? sorry for all the questions just trying to figure out of i should send it back.
Re: cAP ax performance and problems
In the mean time I already configured that device as an AP for usage with CAPSMAN.
But I still have 7 others to do (will be at least 3 weeks before I tackle those).
As indicated (my take was to rule out config issues as much as possible):
- config as default as it gets out of the box !!
- only changes mentioned above.
- of UTMOST importance is the frequency selection. Make SURE you get a clear channel. As reference (and see further), 20cm next to that cAP AX was an AX3 also blasting out its wifi channels.
- tested both with factory ROS 7.8 and ROS 7.10rc1 (test results shown are from 7.10) -> I had to go to 7.10rc1 since 7.9-chain is too buggy for Wifi but only from there default caps config is added. So 7.10-chain ...
- iperf was from (and now it gets funny )
Laptop with TP-Link TX20U Wifi adapter towards
cAP AX under test cabled towards
AX3 which serves as AP/Switch in my home office, 2.5G trunk to
RB5009 with
iperf3 container (still with me ? )
- wired to AX3 from my laptop I get 960-ish using that same iperf3 server. So I know my base setup is good.
- test to fast.com is useless since my ISP connection is 500/30 (yeah, quite unbalanced, I know but far less then what is needed to saturate that wifi channel, so ... useless).
But I still have 7 others to do (will be at least 3 weeks before I tackle those).
As indicated (my take was to rule out config issues as much as possible):
- config as default as it gets out of the box !!
- only changes mentioned above.
- of UTMOST importance is the frequency selection. Make SURE you get a clear channel. As reference (and see further), 20cm next to that cAP AX was an AX3 also blasting out its wifi channels.
- tested both with factory ROS 7.8 and ROS 7.10rc1 (test results shown are from 7.10) -> I had to go to 7.10rc1 since 7.9-chain is too buggy for Wifi but only from there default caps config is added. So 7.10-chain ...
- iperf was from (and now it gets funny )
Laptop with TP-Link TX20U Wifi adapter towards
cAP AX under test cabled towards
AX3 which serves as AP/Switch in my home office, 2.5G trunk to
RB5009 with
iperf3 container (still with me ?
)- wired to AX3 from my laptop I get 960-ish using that same iperf3 server. So I know my base setup is good.
- test to fast.com is useless since my ISP connection is 500/30 (yeah, quite unbalanced, I know but far less then what is needed to saturate that wifi channel, so ... useless).
Re: cAP ax performance and problems
Great feedback.In the mean time I already configured that device as an AP for usage with CAPSMAN.
But I still have 7 others to do (will be at least 3 weeks before I tackle those).
As indicated (my take was to rule out config issues as much as possible):
- config as default as it gets out of the box !!
- only changes mentioned above.
- of UTMOST importance is the frequency selection. Make SURE you get a clear channel. As reference (and see further), 20cm next to that cAP AX was an AX3 also blasting out its wifi channels.
- tested both with factory ROS 7.8 and ROS 7.10rc1 (test results shown are from 7.10) -> I had to go to 7.10rc1 since 7.9-chain is too buggy for Wifi but only from there default caps config is added. So 7.10-chain ...
- iperf was from (and now it gets funny )
Laptop with TP-Link TX20U Wifi adapter towards
cAP AX under test cabled towards
AX3 which serves as AP/Switch in my home office, 2.5G trunk to
RB5009 with
iperf3 container (still with me ?
- wired to AX3 from my laptop I get 960-ish using that same iperf3 server. So I know my base setup is good.
- test to fast.com is useless since my ISP connection is 500/30 (yeah, quite unbalanced, I know but far less then what is needed to saturate that wifi channel, so ... useless).
- This was in the same room as cAP ax?
- 80MHz?
Thanks.
Re: cAP ax performance and problems
Laptop was in the same room as the devices, yes.
Both cAP AX and AX3 where using 80MHz channels.
cAP AX was on 5660 (now not anymore, it moved 105km and is already hanging on the ceiling of a meeting room ).
AX3 is on 5260.
I did some time ago a test with that same wifi adapter to AX3 on other location of my house (with a roughly 25cm thick brick and concrete wall in between, diagonally up so that width becomes even more then). Still managed to get close or over 500.
I have the impression from tests I did yesterday, cAP AX performed a bit better then AX3. Not much but just that bit more.
I'll try to test it again with cAP AX and laptop in other room on one of the following devices.
Both cAP AX and AX3 where using 80MHz channels.
cAP AX was on 5660 (now not anymore, it moved 105km and is already hanging on the ceiling of a meeting room
).AX3 is on 5260.
I did some time ago a test with that same wifi adapter to AX3 on other location of my house (with a roughly 25cm thick brick and concrete wall in between, diagonally up so that width becomes even more then). Still managed to get close or over 500.
I have the impression from tests I did yesterday, cAP AX performed a bit better then AX3. Not much but just that bit more.
I'll try to test it again with cAP AX and laptop in other room on one of the following devices.
Re: cAP ax performance and problems
Here are my 5G WiFi tests near and far. I have a big thick chimney in the way where I am testing from so I'll also add the the signals for context.
Testing from hAP ax2 and cAP ax to a btest server running on windows11 using ax210 Intel WiFi Card.
So mulitithread 10 streams gives 800/900Mbps and the far end on my range upstairs cAP ax gives me 200/250Mbps
Download WiFi6 hAP ax2 Near
status: running
duration: 15s
tx-current: 934.2Mbps
tx-10-second-average: 927.0Mbps
tx-total-average: 921.7Mbps
random-data: no
direction: transmit
connection-count: 10
local-cpu-load: 41%
remote-cpu-load: 1%
Upload Wifi6 hAP ax2 Near
status: running
duration: 10s
rx-current: 790.5Mbps
rx-10-second-average: 769.8Mbps
rx-total-average: 769.8Mbps
random-data: no
direction: receive
connection-count: 10
local-cpu-load: 69%
Download WifI6 cAP ax Far
status: running
duration: 30s
tx-current: 220.3Mbps
tx-10-second-average: 219.4Mbps
tx-total-average: 204.3Mbps
random-data: no
direction: transmit
connection-count: 10
local-cpu-load: 9%
remote-cpu-load: 1%
Upload WiFi6 cAP ax Far
status: running
duration: 26s
rx-current: 238.0Mbps
rx-10-second-average: 254.6Mbps
rx-total-average: 270.3Mbps
random-data: no
direction: receive
connection-count: 10
local-cpu-load: 20%
Testing from hAP ax2 and cAP ax to a btest server running on windows11 using ax210 Intel WiFi Card.
So mulitithread 10 streams gives 800/900Mbps and the far end on my range upstairs cAP ax gives me 200/250Mbps
Download WiFi6 hAP ax2 Near
status: running
duration: 15s
tx-current: 934.2Mbps
tx-10-second-average: 927.0Mbps
tx-total-average: 921.7Mbps
random-data: no
direction: transmit
connection-count: 10
local-cpu-load: 41%
remote-cpu-load: 1%
Upload Wifi6 hAP ax2 Near
status: running
duration: 10s
rx-current: 790.5Mbps
rx-10-second-average: 769.8Mbps
rx-total-average: 769.8Mbps
random-data: no
direction: receive
connection-count: 10
local-cpu-load: 69%
Download WifI6 cAP ax Far
status: running
duration: 30s
tx-current: 220.3Mbps
tx-10-second-average: 219.4Mbps
tx-total-average: 204.3Mbps
random-data: no
direction: transmit
connection-count: 10
local-cpu-load: 9%
remote-cpu-load: 1%
Upload WiFi6 cAP ax Far
status: running
duration: 26s
rx-current: 238.0Mbps
rx-10-second-average: 254.6Mbps
rx-total-average: 270.3Mbps
random-data: no
direction: receive
connection-count: 10
local-cpu-load: 20%
You do not have the required permissions to view the files attached to this post.
Who is online
Users browsing this forum: holvoetn and 5 guests