Ethernet through put VERY slow

godzone · Mon May 20, 2024 8:07 am

I have an RB962UiGS-5HacT2HnT running 6.49.7 I have been struggling with identifying the cause of a weird issue.
I am pretty sure it hasn't always existed but I can't work out what was changed or when.
I have a hardwired connection on Ethernet 2 and a Netgear ORBI mesh router network connected to Ethernet 5. Using a Dell laptop I can easily get 80-90Mbit thoughput on wireless via the ORBI and ethernet 5 but only 5Mbit when connected directly via ethernet 2. There are no errors on the cable, no packet loss etc. Ping times are the same on both.
Initially thought it was something like fasttrack but ethernet 2 and 5 are both connected to the same bridge and the fasttrack rule is first in the firewall.
Any clues as to what to look for would be appreciated.

vingjfg · Mon May 20, 2024 8:36 am

Can you post the config, as well as the interface ether2 stats and details?

godzone · Mon May 20, 2024 10:55 am

# may/20/2024 19:42:04 by RouterOS 6.49.7
# software id = 3PW9-X6WZ
#
# model = RB962UiGS-5HacT2HnT
# serial number = CC510D260766
/interface bridge
add fast-forward=no name="HV Bridge"
add name="HV Hotspot"
/interface ethernet
set [ find default-name=ether1 ] name=ether1-UFB speed=100Mbps
set [ find default-name=ether2 ] name="ether2-HV Wired" speed=100Mbps
set [ find default-name=ether3 ] name=ether3-Trunk2Garage speed=100Mbps
set [ find default-name=ether4 ] auto-negotiation=no name="ether4-HV AV" speed=100Mbps
set [ find default-name=ether5 ] name=ether5-ORBI poe-out=off speed=100Mbps
set [ find default-name=sfp1 ] disabled=yes name=sfp1-unused
/interface vlan
add interface=ether3-Trunk2Garage name="HV Hotspot VLAN" vlan-id=21
add interface=ether3-Trunk2Garage name="HV VLAN" vlan-id=20
add interface=ether1-UFB name=UFB-Vlan10 vlan-id=10
/interface pppoe-client
add add-default-route=yes disabled=no interface=UFB-Vlan10 name="Voyager Internet" password=xxxxxxxx service-name="Voyager Internet" user=xxxxxxxx
/interface list
add exclude=dynamic name=discover
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk mode=dynamic-keys supplicant-identity=MikroTik wpa-pre-shared-key=xxxxxxxx wpa2-pre-shared-key=xxxxxxxx
add authentication-types=wpa2-psk management-protection=allowed mode=dynamic-keys name="Hope Vineyard" supplicant-identity=Router-6 wpa-pre-shared-key=xxxxxxxx wpa2-pre-shared-key=xxxxxxxx
add authentication-types=wpa2-psk group-ciphers=tkip,aes-ccm management-protection=allowed name="Hope Vineyard Guests" supplicant-identity=Router-6 unicast-ciphers=tkip,aes-ccm wpa2-pre-shared-key=Aug-2016
add authentication-types=wpa2-psk mode=dynamic-keys name="Hope Vineyard Music" supplicant-identity="" wpa2-pre-shared-key=Worship156
/interface wireless
set [ find default-name=wlan1 ] antenna-gain=0 band=2ghz-b/g/n country="new zealand" disabled=no distance=indoors frequency=auto frequency-mode=manual-txpower mode=ap-bridge name="HV 2.4G Hotspot" security-profile="Hope Vineyard Guests" ssid=\
    "Hope Vineyard Guests" station-roaming=enabled wireless-protocol=802.11 wps-mode=disabled
set [ find default-name=wlan2 ] band=5ghz-a/n/ac channel-width=20/40/80mhz-XXXX country="new zealand" disabled=no distance=indoors frequency=auto frequency-mode=manual-txpower mode=ap-bridge name="HV 5G Hotspot" security-profile=\
    "Hope Vineyard Guests" ssid="Hope Vineyard Guests" wireless-protocol=802.11 wps-mode=disabled
add disabled=no mac-address=0A:55:31:55:5F:15 master-interface="HV 2.4G Hotspot" name="HV Music 2.4G" security-profile="Hope Vineyard Music" ssid="Hope Vineyard Music" wps-mode=disabled
/ip hotspot profile
add dns-name=guests.hopevineyard.nz hotspot-address=10.1.2.1 html-directory=flash/hopevineyard login-by=mac,http-pap,mac-cookie name="HV Hotspot" radius-default-domain=guests.hopevineyard.nz use-radius=yes
/ip hotspot user profile
set [ find default=yes ] mac-cookie-timeout=2w
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=aes-128-cbc
/ip pool
add name=HV ranges=10.1.0.66-10.1.1.254
add name="HV Hotspot" ranges=10.1.2.2-10.1.2.254
/ip dhcp-server
add address-pool=HV authoritative=after-2sec-delay bootp-support=dynamic disabled=no interface="HV Bridge" lease-time=12h name=HV
add address-pool="HV Hotspot" disabled=no interface="HV Hotspot" lease-time=1h name="HV Guest Hotspot"
/ip hotspot
add address-pool="HV Hotspot" disabled=no interface="HV Hotspot" name="HV Hotspot" profile="HV Hotspot"
/routing bgp instance
set default disabled=yes
/snmp community
set [ find default=yes ] addresses=0.0.0.0/0
/user group
add name=hotspotadm policy=ftp,read,write,!local,!telnet,!ssh,!reboot,!policy,!test,!winbox,!password,!web,!sniff,!sensitive,!api,!romon,!dude,!tikapp
add comment="Used to manage Let's Encrypt Certificates" name=acmedns policy=ssh,read,write,web,!local,!telnet,!ftp,!reboot,!policy,!test,!winbox,!password,!sniff,!sensitive,!api,!romon,!dude,!tikapp
/interface bridge port
add bridge="HV Bridge" interface="HV VLAN"
add bridge="HV Hotspot" interface="HV Hotspot VLAN"
add bridge="HV Bridge" hw=no interface="ether2-HV Wired"
add bridge="HV Hotspot" interface="HV 2.4G Hotspot"
add bridge="HV Bridge" interface="ether4-HV AV"
add bridge="HV Hotspot" interface="HV 5G Hotspot"
add bridge="HV Bridge" interface="HV Music 2.4G"
add bridge="HV Bridge" interface=ether5-ORBI
/ip neighbor discovery-settings
set discover-interface-list=all
/interface wireless access-list
add signal-range=-67..120
/ip address
add address=10.1.0.1/23 comment="Hope Vineyard Wired and Wireless" interface="HV Bridge" network=10.1.0.0
add address=10.1.2.1/24 comment="Hope Vineyard WiFi Hotspot" interface="HV Hotspot" network=10.1.2.0
/ip dhcp-server lease
add address=10.1.0.45 client-id=1:a0:8c:fd:6a:ed:72 comment="Printer - HP6960-A" mac-address=A0:8C:FD:6A:ED:72 server=HV
add address=10.1.0.43 client-id=1:a0:8c:fd:b2:ff:68 comment="Printer - HP6960-B" mac-address=A0:8C:FD:B2:FF:68 server=HV
add address=10.1.0.42 client-id=1:d8:9d:67:ef:43:d6 comment="Printer - HP7110" mac-address=D8:9D:67:EF:43:D6 server=HV
add address=10.1.0.41 client-id=1:d8:9d:67:ec:23:38 comment="Printer - HP8600" mac-address=D8:9D:67:EC:23:38 server=HV
add address=10.1.0.46 allow-dual-stack-queue=no mac-address=18:0C:AC:2A:D5:06 server=HV
add address=10.1.0.44 client-id=1:e8:9e:b4:30:d2:1d comment="Printer - BRWE89EB430D21D" mac-address=E8:9E:B4:30:D2:1D server=HV
add address=10.1.0.3 allow-dual-stack-queue=no comment="AGREE-50 Switch" mac-address=F4:AC:C1:15:E3:25
add address=10.1.0.4 client-id=1:bc:51:fe:b:7:d7 comment="Swan DVR" mac-address=BC:51:FE:0B:07:D7 server=HV
add address=10.1.0.10 client-id=1:cc:46:4e:cf:eb:da comment="Cafe LoyVerse Devices" mac-address=CC:46:4E:CF:EB:DA server=HV
add address=10.1.0.12 client-id=1:4:54:53:34:e3:2d mac-address=04:54:53:34:E3:2D server=HV
add address=10.1.0.11 client-id=1:bc:92:6b:78:92:8a mac-address=BC:92:6B:78:92:8A server=HV
add address=10.1.0.13 client-id=1:28:6a:ba:da:99:50 mac-address=28:6A:BA:DA:99:50 server=HV
add address=10.1.0.21 client-id=1:bc:77:37:75:8:91 mac-address=BC:77:37:75:08:91 server=HV
add address=10.1.0.20 client-id=1:c0:25:a5:79:30:6d comment="Media Computers" mac-address=C0:25:A5:79:30:6D server=HV
add address=10.1.0.22 client-id=1:18:3:73:77:35:b9 mac-address=18:03:73:77:35:B9 server=HV
add address=10.1.0.5 client-id=1:94:18:65:71:5a:a8 comment="ORBI Wireless" mac-address=94:18:65:71:5A:A8 server=HV
add address=10.1.0.6 mac-address=94:18:65:71:2A:A1 server=HV
add address=10.1.0.7 mac-address=94:18:65:71:2A:A5 server=HV
add address=10.1.0.8 mac-address=94:18:65:74:8B:22 server=HV
add address=10.1.0.30 comment="Proxmox VE Node 1" mac-address=D4:BE:D9:8C:EA:E6
add address=10.1.0.15 client-id=1:56:24:b:d4:73:54 mac-address=56:24:0B:D4:73:54 server=HV
add address=10.1.0.16 client-id=1:de:e8:a4:dd:e7:91 mac-address=DE:E8:A4:DD:E7:91 server=HV
add address=10.1.0.40 client-id=1:58:38:79:34:66:55 comment="Ricoh MFD - Mezzanine" mac-address=58:38:79:34:66:55 server=HV
add address=10.1.0.50 client-id=1:c8:d0:83:a9:5c:63 mac-address=C8:D0:83:A9:5C:63 server=HV
/ip dhcp-server network
add address=10.1.0.0/23 comment="Hope Vineyard" dns-server=8.8.8.8,8.8.4.4 domain=hopevineyard.nz gateway=10.1.0.1 netmask=23
add address=10.1.2.0/24 comment="Hope Vineyard WiFi Guests" dns-server=10.1.2.1 domain=hopevineyard.nz gateway=10.1.2.1 netmask=24
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip dns static
add address=10.1.0.20 name=media-1.hopevineyard.nz
add address=10.1.0.21 name=media-2.hopevineyard.nz
add address=10.1.0.1 name=router-1.hopevineyard.nz
add address=10.1.0.2 name=router-2.hopevineyard.nz
add address=10.1.0.31 name=hotspotadm.hopevineyard.nz
add address=10.1.0.31 name=nxfilter.hopevineyard.nz
add address=10.1.0.31 name=hotspot.hopevineyard.nz
/ip firewall address-list
add address=x.x.x.x comment="Home - Voyager Internet" list="trusted networks"
add address=10.1.0.0/23 comment="Hope Vineyard" list="trusted networks"
/ip firewall filter
add action=fasttrack-connection chain=forward comment="Fasttrack Connections" connection-state=established,related
add action=accept chain=forward connection-state=established,related
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" disabled=yes
add action=accept chain=forward dst-address=8.8.8.8 dst-port=53 protocol=tcp src-address=10.1.0.0/23
add action=accept chain=forward dst-address=8.8.8.8 dst-port=53 protocol=udp src-address=10.1.0.0/23
add action=accept chain=input dst-port=53 in-interface="Voyager Internet" protocol=udp src-address=8.8.8.8
add action=accept chain=forward dst-address=8.8.4.4 dst-port=53 protocol=tcp src-address=10.1.0.0/23
add action=accept chain=forward dst-address=8.8.4.4 dst-port=53 protocol=udp src-address=10.1.0.0/23
add action=accept chain=input dst-port=53 in-interface="Voyager Internet" protocol=udp src-address=8.8.4.4
add action=drop chain=forward dst-port=53 protocol=tcp
add action=drop chain=forward dst-port=53 protocol=udp
add action=drop chain=input dst-port=53 in-interface="Voyager Internet" protocol=udp
add action=accept chain=forward comment="Normal Traffic"
add action=accept chain=input comment="Router Management" src-address-list="trusted networks"
add action=accept chain=forward connection-nat-state=dstnat
add action=drop chain=input comment="Secure Shell access to the router" dst-port=22 protocol=tcp
add action=drop chain=input comment="Web access to the router" dst-port=80 protocol=tcp
add action=drop chain=input dst-port=81 protocol=tcp
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat out-interface="Voyager Internet"
add action=dst-nat chain=dstnat comment="Web Access to router-8" dst-address=x.x.x.x dst-port=82 protocol=tcp to-addresses=10.1.0.2 to-ports=81
add action=dst-nat chain=dstnat comment="Hope Vineyard Security DVR" dst-address=x.x.x.x dst-port=85 protocol=tcp to-addresses=10.1.0.4 to-ports=85
add action=dst-nat chain=dstnat dst-address=x.x.x.x dst-port=9000 protocol=tcp to-addresses=10.1.0.4 to-ports=9000
add action=dst-nat chain=dstnat dst-address=x.x.x.x dst-port=554 protocol=tcp to-addresses=10.1.0.4 to-ports=554
add action=dst-nat chain=dstnat comment="Hotspot Admin" dst-address=x.x.x.x dst-port=84 protocol=tcp to-addresses=10.1.0.31 to-ports=84
add action=dst-nat chain=dstnat comment="Cisco Switch" dst-address=x.x.x.x dst-port=83 protocol=tcp to-addresses=10.1.0.3 to-ports=80
/ip hotspot user
add name=hsadmin password=xxxxxxxxxx
/ip hotspot walled-garden
add comment="place hotspot rules here" disabled=yes
add dst-host=hotspot.hopevineyard.nz dst-port=80 server="HV Hotspot"
/ip hotspot walled-garden ip
add action=accept comment="Hotspot Admin" disabled=no dst-address=10.1.0.31 !dst-address-list !dst-port !protocol server="HV Hotspot" !src-address !src-address-list
add action=accept comment=Router disabled=no dst-address=10.1.2.1 !dst-address-list !dst-port !protocol server="HV Hotspot" !src-address !src-address-list
/ip service
set telnet disabled=yes
set ftp address=10.1.0.31/32
set www address=10.1.0.0/23,10.1.2.0/24,xxxx:xxxx:xxxx:x301::/64,xxxx:xxxx:xxxx:x100::/56 port=81
set ssh address=x.x.x.x/32 port=1022
set api disabled=yes
set winbox disabled=yes
set api-ssl disabled=yes
/ip ssh
set allow-none-crypto=yes forwarding-enabled=remote
/ipv6 address
add address=xxxx:xxxx:xxxx:x100::1 interface="Voyager Internet"
add address=xxxx:xxxx:xxxx:x103::1 interface="HV Bridge"
/ipv6 dhcp-client
add add-default-route=yes interface="Voyager Internet" pool-name=Voyager-IPv6 pool-prefix-length=56 request=prefix use-peer-dns=no
/ipv6 firewall address-list
add address=2001:df0:dc::/48 comment="GodZone Internet Services" list="trusted networks"
add address=xxxx:xxxx:xxxx:x301::/64 comment="GodZone Internet Services - Home" list="trusted networks"
add address=xxxx:xxxx:xxxx:x100::/56 comment="Hope Vineyard" list="trusted networks"
add address=fe80::/16 comment="Local Networks" list="trusted networks"
/ipv6 firewall filter
add action=accept chain=forward comment="Default Rules"
add action=accept chain=input comment="Router Management" src-address-list="trusted networks"
add action=drop chain=input
/ipv6 nd
set [ find default=yes ] advertise-dns=no
/radius
add address=10.1.0.31 secret=GodZone service=hotspot timeout=2s
/system clock
set time-zone-name=Pacific/Auckland
/system identity
set name=Router-1
/system leds
set 2 leds="" type=interface-status
/system logging
add topics=debug,hotspot
/system ntp client
set enabled=yes primary-ntp=216.239.35.4 secondary-ntp=216.239.35.0
/tool graphing interface
add
/tool sniffer
set filter-interface="HV 2.4G Hotspot"

I am working remotely and there is nothing currently connected to ethernet 2. What stats wouldbe of interest, I can try to collect the next time I am in the building

vingjfg · Mon May 20, 2024 11:01 am

Ah, you set the speed on ether2. It means you end up as 100Mb/s half-duplex.

Can you remove the speed setting on ether2?

vingjfg · Mon May 20, 2024 11:06 am

On ether5, not 2.

godzone · Mon May 20, 2024 11:12 am

Lousy cut and paste, I was trying to anonymize and pasted too much. I think I have corrected it all now.
Even though the config appears to set the speed on all the interfaces to 100M, they are all currently negotiating so not sure how that works.

Ethernet 5 works fine and is current speed sensing to 1Gbit Full duplex.

godzone · Mon May 20, 2024 11:14 am

Ethernet 2 is set for auto speed and duplex negotiation. But as there is nothing currently plugged in it says unknown.

Even if it were being set to 100M, only getting 5Mbit through it doesnt make sense.

vingjfg · Mon May 20, 2024 2:04 pm

Actually, it would.

If you set "speed", it means you disable the autonegotiation, and in that case, if you leave one side with autonegotiation enabled, it will take the correct speed, but for 10 and 100Mb/s, it will default to half-duplex causing a duplex mismatch, which in turns will have lots and lots of collisions, meaning the BW will be abysmally bad.

A better approach is to limit the autonegotiation to whatever speed you want, with for example,

/interface/ethernet/set [find name=etherN] advertise=100M-baseT-full,1G-baseT-full

Can you post a less redacted version of the configuration?

godzone · Mon May 20, 2024 11:04 pm

I am confused. If I look at the config of ethernet 2 in WebFig, it shows

AutoNegotiation: ticked
Tx Flow Control: Off
Rx Flow Control: Off
Advertise: All ticked except 10G full, 2.5G full and 5G full.

Terminal

 1  S name="ether2-HV Wired" default-name="ether2" mtu=1500 l2mtu=1598 mac-address=08:55:31:55:5F:0B orig-mac-address=08:55:31:55:5F:0B arp=enabled arp-timeout=auto loop-protect=default loop-protect-status=off loop-protect-send-interval=5s 
      loop-protect-disable-time=5m auto-negotiation=yes advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full full-duplex=yes tx-flow-control=off rx-flow-control=off speed=100Mbps bandwidth=unlimited/unlimited switch=switch1

4 RS name="ether5-ORBI" default-name="ether5" mtu=1500 l2mtu=1598 mac-address=08:55:31:55:5F:0E orig-mac-address=08:55:31:55:5F:0E arp=enabled arp-timeout=auto loop-protect=default loop-protect-status=off loop-protect-send-interval=5s 
      loop-protect-disable-time=5m auto-negotiation=yes advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full full-duplex=yes tx-flow-control=off rx-flow-control=off speed=100Mbps bandwidth=unlimited/unlimited switch=switch1 
      poe-out=off poe-priority=10 power-cycle-ping-enabled=no power-cycle-interval=none

Yet if I export the config it shows

# may/21/2024 08:03:13 by RouterOS 6.49.7
# software id = 3PW9-X6WZ
#
# model = RB962UiGS-5HacT2HnT
# serial number = CC510D260766
/interface ethernet
set [ find default-name=ether1 ] name=ether1-UFB speed=100Mbps
set [ find default-name=ether2 ] name="ether2-HV Wired" speed=100Mbps
set [ find default-name=ether3 ] name=ether3-Trunk2Garage speed=100Mbps
set [ find default-name=ether4 ] auto-negotiation=no name="ether4-HV AV" speed=100Mbps
set [ find default-name=ether5 ] name=ether5-ORBI poe-out=off speed=100Mbps
set [ find default-name=sfp1 ] disabled=yes name=sfp1-unused

godzone · Mon May 20, 2024 11:13 pm

Just found another article where some one is confused viewtopic.php?t=100057

But I will set them all to 1G. With autonegotiation on, it shouldn't have any effect.

[hvadmin@Router-1] /interface ethernet> set [ find default-name=ether5] speed=1Gbps 
[hvadmin@Router-1] /interface ethernet> export 
# may/21/2024 08:12:29 by RouterOS 6.49.7
# software id = 3PW9-X6WZ
#
# model = RB962UiGS-5HacT2HnT
# serial number = CC510D260766
/interface ethernet
set [ find default-name=ether1 ] name=ether1-UFB
set [ find default-name=ether2 ] name="ether2-HV Wired"
set [ find default-name=ether3 ] name=ether3-Trunk2Garage
set [ find default-name=ether4 ] auto-negotiation=no name="ether4-HV AV"
set [ find default-name=ether5 ] name=ether5-ORBI poe-out=off
set [ find default-name=sfp1 ] disabled=yes name=sfp1-unused

I am unable to test remotely. But visibly it has made no difference to the config via webfig.

vingjfg · Tue May 21, 2024 7:42 am

Yeah, it looks like I got bitten by some poor choice of terminology here. Can you post the output of

/interface/ethernet/monitor ether2 once
/interface/ethernet/monitor ether5 once

That will give the error counters (among others)

In your configuration, I see two bridges, any reason not to stay on one single bridge?

You use VLAN but not vlan-filtering. It means that the bridges themselves will not process or interpret the 802.1q header so all ports members of a bridge may receive tagged and untagged traffic, and more importantly, forward all tagged and untagged traffic. Looking back, this may be why you use 2 bridges instead of 1 with VLANs. Correct?

The firewall rules are a bit messed up - for example there is no longer the one to permit established,related traffic in the input chain. You are also missing final denies for the input and forward chains, especially from your WAN. Coupled with the dst-nat rules, this means you are exposing a lot to the Internet.

godzone · Tue May 21, 2024 10:47 pm

The 2nd bridge was added to keep the hotspot isolated from the other networks.

I can fix up the firewall rules but I dont see how they are relevant to throughput between a laptop connected to ether 2 and the WAN.

So, yes, the security on the router can be better but nothing we have found so far explains the huge difference in throughput.

[hvadmin@Router-1] > /interface ethernet monitor ether2 once
             name: ether2-HV Wired
             status: no-link
             auto-negotiation: done
             advertising: 10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
             link-partner-advertising: 

[hvadmin@Router-1] > /interface ethernet monitor ether5 once
             name: ether5-ORBI
             status: link-ok
             auto-negotiation: done
             rate: 1Gbps
             full-duplex: yes
             tx-flow-control: no
             rx-flow-control: no
             advertising: 10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
             link-partner-advertising: 10M-half,10M-full,100M-half,100M-full,1000M-full

[hvadmin@Router-1] >

I think what I need to show is /interface ethernet stats. But with nothing connected to ethernet 2 the counters are all zero. I might need to run some more tests this weekend.

millenium7 · Wed May 22, 2024 1:27 am

Ah, you set the speed on ether2. It means you end up as 100Mb/s half-duplex.

Can you remove the speed setting on ether2?

This isn't correct. RouterOS frustratingly puts this line into the config by default but it doesn't mean anything. It's essentially saying "if you untick auto negotiation, then i'm going to choose 100mbit by default" but whilst auto negotiation is enabled, the speed= parameter does absolutely nothing

Aside from extremely confusing interface naming - it's best to use the format of '[interface].[vlan] - name' i.e. "ether3.21 - HV Hotspot VLAN" as you then don't need to reference back n forth in the config - I don't see an actual problem

That router doesn't need fasttrack to easily exceed 100mbit/s so that wouldn't have anything to do with it either, infact i'd disable it for now as it might be hiding log messages which might indicate a problem
Otherwise its really a case of trying to simplify as much as possible, unplug everything and just connect your laptop to ether2 and your internet connection. Still getting 5mbit/s? Well its most likely some weird driver issue. I know in my case if I connect to an RB5009 (and possibly some other models but I know this one in particular is a culprit) with a realtek USB ethernet adapter, then 'everything' runs slower. Literally to the point where the mouse cursor freezes intermittently. I have absolutely no idea why but it just does. Connect to anything else like a HEX or even put a dumb switch in between and its fine

CGGXANNX · Wed May 22, 2024 7:24 am

Under /interface bridge port your config is currently explicitly turning off hardware offloading for ether2 (and only that port). Is there a reason for that? If not, try to re-enable hardware offloading.

ether2-hw.png

vingjfg · Wed May 22, 2024 7:28 am

The 2nd bridge was added to keep the hotspot isolated from the other networks.

I can fix up the firewall rules but I dont see how they are relevant to throughput between a laptop connected to ether 2 and the WAN.

So, yes, the security on the router can be better but nothing we have found so far explains the huge difference in throughput.
...

I gathered that much for the two bridges.

Correct, I used the wrong command -

/interface/ethernet/print stats where name=ether2
/interface/ethernet/print stats where name=ether5

On the laptop, if you are using MS Windows, netstat -e should display the interface statistics to see if the errors are on that side.

For good measure, can you also check the following? That will show whether hardware switching is done.

/interface/bridge/port/print

The firewall rules won't explain the slowness, or they would have to be really messed up to do so. I pointed at them as something I noted when I read the configuration. I don't think the 2 bridge setup explains it either.

millenium7 suggested a possible driver issue, worth exploring. If you have a different laptop, or the same laptop with a different OS, that would be something to test. I would also suggest to update it to the latest version in the 6.49 train, though I didn't see anything in the release notes that look even remotely close to this issue being fixed.

This isn't correct. RouterOS frustratingly puts this line into the config by default but it doesn't mean anything. It's essentially saying "if you untick auto negotiation, then i'm going to choose 100mbit by default" but whilst auto negotiation is enabled, the speed= parameter does absolutely nothing

Yes, already pointed out. As I said, I got bitten by a poor choice of terminology.

That router doesn't need fasttrack to easily exceed 100mbit/s so that wouldn't have anything to do with it either, infact i'd disable it for now as it might be hiding log messages which might indicate a problem

Fasttrack is still there. What I was referring to is that the configuration doesn't show the usual, default rules for the input chain. Not going to cause that issue either but might come back later to bite the OP.

LdB · Wed May 22, 2024 5:56 pm

You have profiles such as "Hope Vineyard Music" but your config doesn't include the profiles. Those profiles can have rate limits and we need to see them.

godzone · Fri May 24, 2024 12:50 am

The hw=no on ether2 isn't something I had spotted (so thank you, extra eyes always help) but is now on and I am hoping was the culprit. It wasn't off intentionally and I am not sure how it got turned off. I will try things again on Sunday. Hopefully this is the fix.

godzone · Sun May 26, 2024 1:17 am

Well, from bad to worse.
Changing the hw-offload apparently made no difference, 80M upload, 5M download. Comparing this to 160M up, 280M down on wireless.
On the assumption that maybe the setting requires a reboot, I upgraded to the latest OS and rebooted.
Now I have no connectivity on that port at all. The router says no link, yet it was there minutes before. I have tried disabling and re-enabling the interface but that hasn’t helped.
This is starting to look like a hardware fault.
On the off chance we have had rats or similar in the walls, I’ll test the cables in a couple of days.

godzone · Sun May 26, 2024 6:41 am

More fiddling around and another reboot and everything now seems to be operating as it is supposed to. No idea why the port went down completely after the first reboot but so long as everything keeps working, I don’t really care.

Thanks for the comments and assistance.

Ethernet through put VERY slow

Ethernet through put VERY slow

Re: Ethernet through put VERY slow

Re: Ethernet through put VERY slow

Re: Ethernet through put VERY slow

Re: Ethernet through put VERY slow

Re: Ethernet through put VERY slow

Re: Ethernet through put VERY slow

Re: Ethernet through put VERY slow

Re: Ethernet through put VERY slow

Re: Ethernet through put VERY slow

Re: Ethernet through put VERY slow

Re: Ethernet through put VERY slow

Re: Ethernet through put VERY slow

Re: Ethernet through put VERY slow

Re: Ethernet through put VERY slow

Re: Ethernet through put VERY slow

Re: Ethernet through put VERY slow

Re: Ethernet through put VERY slow

Re: Ethernet through put VERY slow

Who is online