theoretical tests - main issue with my ISP :-D It reminds me 2000 when we built Internet and offered people theoretical tests where first 30 seconds are max. burst speed ROFL. I have complained about real speeds to my ISP because no matter what server I use, no matter where (even local Swiss servers...

I have poorly decribed issue....updated original post. I tried direct connection to CATV router. I have got up to 50MBs (400Mbps). I will try to play with with CATV router and try direct connection...there is two times NAT and who knows what is setting of CATV router (I left it default as a technici...

default config, just WAN interface changed

UPDATE - it is poorly described. With queues and firewall filters, max 200Mbps. Everything default + fasttrack 320Mbps Anyone tried bandwidth test for Chateau, please? I have got CATV Internet up to 500Mbps but I cannot get over 25MBs (200Mbps) with queues and some filtering. Using fasttrack pushes...

SSH issue are not problem at Mikrotik router but ISP problem. I have switched ISP - from laggy, lossy LTE to cable Internet. Without changing anything in configuration (except WAN interface), SSH works again. LTE Internet latency over 100ms with at least 10% packet loss Cable Internet 10-20ms (local...

Change-dscp and mangle packets...30+ % CPU usage on Chateau LTE12.

It is unstable and unreliable though

with default Mikrotik firewall rules everything works.

Once, I switch off FORWARD fasttrack...SSH doesn't work anymore.

Your router should not be set to use itself as a DNS server. Under IP->DNS, verify that the only DNS server IPs entered are remote ones and not the router itself. thanks for reply. I have followed your manual . Isn't it incorrectly written or did I misunderstand, please? Example: To set 159.148.60....

already configured this way

Chateau C12 LTE, ROS v7.1beta1 I have setup local DNS cache. There is some weird issues with the default rule defconf: drop all not coming from LAN I see in firewall log Aug/04/2020 19:56:01 firewall,info DROP !LAN: input: in:(unknown 1) out:(unknown 0), proto UDP, 192.168.88.1:43119->192.168.88.1:5...

already linked, check out post #6

I have sent a command for locking primary & CA. It seems to work. You have to try, it is all down to ISP.

I have an issue with two cell towers 2km apart and my modem often use the wrong/weak one.

Try cell lock but guys say CA is automatically determined by cell tower.

viewtopic.php?f=13&t=159889#p798970

forward accepts ESTABLISHED, RELATED as in default config.

new connections from LAN accepted as in default.

there is no reason for firewall to block it. I have on all DROP rules logging and there is nothing in logs???

Chateau C12 LTE, ROS v7.1beta1, LTE modem firmware EG12EAPAR01A06M4G . I have switched off default fasttrack for FORWARD chain in order to use QoS and prioritizing traffic. In default setup, I can connect to my SSH servers. If I switch off fasttrack , I will get an error after timeout: packet_write_...

I have upgraded LTE modem firmware and experimented with cell lock. There is slight improvements.

It may be also related to switched of "fasttrackt" for FORWARD chain. I cannot connect to SSH anymore.

I always have three bands in CA (very good signal).

In your case, it simply disconnect poor connection but you can lock in bands you want as you already did.

I have similar issue on my Chateau C12 LTE. After latest ROS v7.1beta1, I cannot connect to my SSH server. Always get following error: packet_write_wait: Connection to x.x.x.x port 22: Broken pipe I do not see any dropped packets in log UPDATE It is an issue with fasttrack vs normal firewall process...

I am not sure whether it is ISP issue or latest RouterOS v7.1beta1 upgrade. I have got a decent signal I guess Screenshot 2020-07-30 18.26.46.png Internet sometimes doesn't work at all. Sometimes it is fast. 2020-07-29_chateau_c12_lte_latency.txt Usual crap latency. Yesterday, I noticed also some co...

it looks like it is just WebFig issue because above by mentioned command is possible to add over CLI

try this....connection-bytes=!0-5000000

not possible to use "!" in connection-bytes. I have tried connection-bytes=5M-100M and it seems to work

UPDATE:

5M-0 seems to work over CLI but WebUI considers it as an error.

/ip firewall mangle add action=mark-connection chain=prerouting connection-bytes=5000000-0 connection-mark=HTTP connection-rate=2M-300M connection-state=established,related,new dst-address-list=!not_in_internet \ new-connection-mark=HTTP_BIG passthrough=yes protocol=tcp connection-bytes=5000000-0 d...

/ip firewall mangle add action=mark-connection chain=prerouting connection-bytes=5000000-0 connection-mark=HTTP connection-rate=2M-300M connection-state=established,related,new dst-address-list=!not_in_internet \ new-connection-mark=HTTP_BIG passthrough=yes protocol=tcp connection-bytes=5000000-0 d...

it looks like "change-dscp" in firewall/mangle is full of bugs not only for ICMP.

Yesterday, local DNS cache stopped to work and whole Internet connectivity was down.

I have to switch off all "dscp" mangle rules.

Chateau C12 RouterOS v7.1beta1 default config I am working on QoS and marking packets. PC > router (bridge > lte1) > Internet /ip firewall mangle add action=change-dscp chain=prerouting comment="mark ICMP packets (DSCP 46)"\ dscp=!46 in-interface=bridge new-dscp=46 passthrough=yes protocol...

thanks guys

I noticed in documentation about routing cache aka FIB/RIB.

Does that mean only first packet goes full route (as mentioned above by) and RELATED, ESTABLISHED packets go as following:

Thanks for reply. Looking at routing diagram mentioned above by. Packets should flow as follows: Internet > PREROUTING (lte1) > FORWARD (lte1)> POSTROUTING (lte1) > PREROUTING (eth1) > FORWARD (eth1) > my PC my PC > PREROUTING (eth1) > FORWARD (eth1) > POSTROUTING (eth1) > PREROUTING (lte1) > FORWAR...

Hi, I am trying to understand packet flow in my Chateau LTE12 router with RouterOS v7 beta8 . lte1 is WAN connection bridge is (ether + wifi) but only one eth1 port is active...everything else is switched off. Firewall for bridge is switched off. From packet flow diagram , I am not sure how exactly ...

I have got same issue.

I generated SSL certificate, associated with mikrotik web server. Disabled port 80....ever since graphing doesn't work.
Of course everything else works as suppose to (Webfig HTTPS access)