Hello,

I am using a RB493 with OS 5.21.

I have the router setup so that Ether1 is my WAN interface, Ether9 is my master-local, whith Ether2-Ether8 all set with Ether9 as the 'master-port'. I've enabled DHCP server on Ether9, and have also created a 'masquerade' rule in /ip firewall nat.

I can surf the internet, and everything appears to be working fine. I have a WAN connection at 1mbps/512kbps. When I have my laptop connected to the LAN side of the router and do speed tests at testmy.net, I am able to max out the connection almost everytime.

When I connect a second laptop to one of the other LAN ports, and run a speed test, I am only able to get 200-300kbps download.

Something about the router does not like having more than one device connected. I repeated this test with a slightly different network configuration: I connected an unmanaged 5-port desktop switch to one of the LAN ports, plugged both laptops into the switch, and was able to max out my connection again.

Anyone have any ideas? Thanks!

Sounds strange. If you post /export compact we can make sure your config is okay.

# mar/19/2013 16:20:40 by RouterOS 5.21
#
/interface ethernet
set 1 master-port=ether9
set 2 master-port=ether9
set 3 master-port=ether9
set 4 master-port=ether9
set 5 master-port=ether9
set 6 master-port=ether9
set 7 master-port=ether9
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=2m
/ip pool
add name=DHCP-pool1 ranges=10.3.3.100-10.3.3.240
/ip dhcp-server
add address-pool=DHCP-pool1 disabled=no interface=ether9 name=server1
/ip address
add address=66.207.52.xxx/29 comment=WAN interface=ether1
add address=10.3.3.1/24 comment=LAN interface=ether9
/ip dhcp-server lease
add address=10.3.3.250 client-id=1:0:90:c2:d6:85:f7 comment=Controller \
mac-address=00:90:C2:D6:85:F7 server=server1
add address=10.3.3.251 comment=PBX mac-address=E0:69:95:0D:9C:8B server=\
server1
/ip dhcp-server network
add address=10.3.3.0/24 dns-server=10.3.3.1,8.8.8.8,8.8.4.4 domain=\
VirginTech.com gateway=10.3.3.1 netmask=24 ntp-server=10.3.3.1
/ip dns
set allow-remote-requests=yes max-udp-packet-size=512 servers=8.8.8.8,8.8.4.4
/ip dns static
add address=10.3.3.1 name=router
/ip firewall address-list
add address=66.207.52.xxx list=WAN-IP
add address=10.0.0.0/8 list=Private-IPs
add address=172.16.0.0/12 list=Private-IPs
add address=192.168.0.0/16 list=Private-IPs
add address=10.3.3.0/24 list=LAN-IPs
/ip firewall filter
add chain=input comment="<< Allow mgmt from LAN >>" src-address-list=LAN-IPs
add chain=input comment="<< Allow mgmt from office >>" src-address=\
207.228.113.xxx
add chain=input comment="<< Allow input established connections >>" \
connection-state=established
add chain=input comment="<< Allow input related connections >>" \
connection-state=related
add chain=output comment="<< Allow all sourced from router >>"
add action=reject chain=forward comment="<< Block private outgoing IPs >>" \
dst-address-list=Private-IPs out-interface=ether1
add action=tarpit chain=forward comment="<< Tarpit P2P >>" p2p=all-p2p \
protocol=tcp
add chain=forward comment="<< Allow everything else, outgoing >>" \
src-address-list=LAN-IPs
add chain=forward comment="<< Allow outgoing established >>" \
connection-state=established src-address-list=LAN-IPs
add chain=forward comment="<< Allow outgoing related >>" connection-state=\
related src-address-list=LAN-IPs
add action=drop chain=input comment="<< Drop all others on input >>"
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1 src-address-list=\
LAN-IPs
add action=dst-nat chain=dstnat comment="Hyperlink controller forward" \
dst-address-list=WAN-IP dst-port=49737 protocol=tcp to-addresses=\
10.3.3.250 to-ports=49737
add action=dst-nat chain=dstnat comment="PBX forward" dst-address-list=WAN-IP \
dst-port=2222 protocol=tcp to-addresses=10.3.3.251 to-ports=2222
/ip proxy
set enabled=yes
/ip proxy access
add src-address=207.228.113.xxx
add action=deny
/ip route
add distance=1 gateway=66.207.52.xxx
/ip service
set telnet disabled=yes
set ftp disabled=yes
set ssh port=22222
/ip upnp
set allow-disable-external-interface=no enabled=yes
/ip upnp interfaces
add interface=ether1 type=external
add interface=ether9 type=internal
/system clock
set time-zone-name=America/Edmonton
/system ntp client
set enabled=yes mode=unicast primary-ntp=136.159.2.9 secondary-ntp=\
136.159.10.81

I have determined that my one laptop is negotiating at 10Mbps Half-Duplex, the rest of my devices are 100Mbps Full Duplex. Is there an issue with running a mixture on the same LAN segment?

Another test I did was to take Ether2 off the master-port Ether9, and create another instance of DHCP-Server on Ether2. Connecting the laptops into the separate LANs and the issue goes away.

Is there a way to get them to play a little nicer together?

Thanks!

Have you tried a different cable? Could the interface on your laptop be broken?

Yes we've tried new cables... it feels like we tried everything. The only thing that seems to work is put all the 10MB devices onto their own LAN segment, setting the interfaces tied to the segment to not be 100MB or Full-Duplex. This is really starting to look like an incompatibility between 100MB Full-Duplex, and 10MB Half-Duplex connecting to the same LAN.

Maybe someone else can test this and report their findings?