Page 1 of 1

Slow WiFi

Posted: Tue Dec 31, 2019 4:08 pm
by corriganc
Hi all,

I recently purchased a MikroTik RB3011UIAS-RM router (my first MikroTik device) to replace a Ubiquiti USG-3P that I had installed on my network. I replaced the Ubiquiti device after only a few days when I learned that to use queues and other functions, you had to limit your throughput to an unacceptable rate (My internet is 200/20 D/U).

I still have some Ubiquiti Unifi AP-AC-LRs installed in my network, as I was happy with the performance of these devices. However, since removing the USG and installing the MikroTik device, speedtests (speedtest.net app) on mobile WiFi clients has been greatly reduced. Previously, I was able to achieve 200/20 almost every time, whereas now, it ranges anywhere between 40-100 on the same clients. Wired clients achieve between 150-200/20 on average.

I was just wondering if anyone had any ideas about this? I don't believe that WiFi clients should be experiencing speed issues due to swapping out a router, when the WiFi access points they are connecting to have not changed at all.

To my knowledge, my MikroTik configuration is fairly default. FastTrack rules didn't seem to be enabled at first, so I used the terminal commands from the MikroTik website to enable these, but this didn't seem to change anything. Other than that, the only things that I am aware I have changed are some port forwarding rules to my Windows Server for Plex and HTTP(S) along with enabling L2TP IPSEC VPN on the MikroTik device.

I appreciate any help or information that can be provided regarding this.

Re: Slow WiFi

Posted: Wed Jan 01, 2020 1:54 am
by CZFan
First thing that comes to mind with you saying you had to enable fasttrack rules is probably firewall rule order.
Where is the fasttrack rule currently? Move to higher up, i.e. First or second rule as example, depending you firewall rule config

Re: Slow WiFi

Posted: Wed Jan 01, 2020 2:18 am
by corriganc
Hi there,

As far as I can see, it's the only firewall rule in there. I can try changing the priority if you think that would help?

Re: Slow WiFi

Posted: Thu Jan 02, 2020 12:21 am
by CZFan
Best will be to post a copy of the configuration here, BETWEEN code brackets please.
Run "export hide-sensitive" in cli interface and post results here, then someone might spot a problem and advise

Re: Slow WiFi

Posted: Thu Jan 02, 2020 1:14 pm
by corriganc
Please see below:
# jan/02/2020 11:12:23 by RouterOS 6.46.1
# software id = 7K2X-LPLT
#
# model = RB3011UiAS
# serial number = B88F0B48E723
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=192.168.0.10-192.168.0.254
add name=vpn ranges=192.168.89.2-192.168.89.255
/ip dhcp-server
add address-pool=dhcp disabled=no interface=ether2 name=dhcp1
/ppp profile
set *FFFFFFFE dns-server=192.168.0.1 local-address=192.168.89.1 remote-address=\
    vpn use-encryption=required
/interface detect-internet
set detect-interface-list=all
/interface l2tp-server server
set enabled=yes use-ipsec=yes
/interface list member
add interface=ether1 list=WAN
add list=LAN
/interface pptp-server server
set enabled=yes
/interface sstp-server server
set default-profile=default-encryption enabled=yes
/ip address
add address=192.168.0.1/24 interface=ether2 network=192.168.0.0
/ip arp
add address=192.168.0.27 interface=ether2 mac-address=00:0A:CD:2A:B6:F1
add address=192.168.0.18 interface=ether2 mac-address=04:D9:F5:F5:5E:A1
add address=192.168.0.97 interface=ether2 mac-address=B4:A3:82:B0:2A:EF
/ip cloud
set ddns-enabled=yes
/ip dhcp-client
add disabled=no interface=ether1
/ip dhcp-server lease
add address=192.168.0.29 client-id=1:0:c:29:86:5b:b1 mac-address=\
    00:0C:29:86:5B:B1 server=dhcp1
add address=192.168.0.28 client-id=1:0:c:29:86:5b:bb mac-address=\
    00:0C:29:86:5B:BB server=dhcp1
/ip dhcp-server network
add address=192.168.0.0/24 gateway=192.168.0.1 netmask=24
/ip dns
set servers=1.1.1.1,8.8.8.8
/ip firewall filter
add action=fasttrack-connection chain=forward connection-state=\
    established,related
add action=accept chain=forward connection-state=established,related
/ip firewall nat
add action=masquerade chain=srcnat out-interface-list=WAN
add action=masquerade chain=srcnat comment="masq. vpn traffic" src-address=\
    192.168.89.0/24
add action=dst-nat chain=dstnat comment=HTTP dst-port=80 in-interface=ether1 \
    protocol=tcp to-addresses=192.168.0.27 to-ports=32400
add action=dst-nat chain=dstnat comment=HTTPS dst-port=443 in-interface=ether1 \
    protocol=tcp to-addresses=192.168.0.27 to-ports=32400
add action=dst-nat chain=dstnat comment=Unifi dst-port=8443 in-interface=ether1 \
    protocol=tcp to-addresses=192.168.0.27 to-ports=8443
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www address=192.168.0.0/24
set ssh port=2200
set api disabled=yes
set api-ssl disabled=yes
/ip ssh
set allow-none-crypto=yes forwarding-enabled=remote
/lcd
set backlight-timeout=never default-screen=interfaces
/lcd pin
set hide-pin-number=yes pin-number=4479
/lcd interface
set ether3 disabled=yes
set ether4 disabled=yes
set ether5 disabled=yes
set sfp1 disabled=yes
set ether6 disabled=yes
set ether7 disabled=yes
set ether8 disabled=yes
set ether9 disabled=yes
set ether10 disabled=yes
/ppp secret
add local-address=192.168.89.18 name=callum@yourmsp.org profile=\
    default-encryption service=l2tp
/system clock
set time-zone-name=Europe/London
/system identity
set name=BWD-CCN-RB01
/tool bandwidth-server
set authenticate=no enabled=no
/tool graphing interface
add
/tool graphing queue
add
/tool graphing resource
add