RB2011UiAS-2HnD LAN snelheid

[sddt]

Onlangs een RB gekocht en tot nog toe zeer tevreden van.
Het enige waar het schoentje bij mij wringt zijn de LAN prestaties.
Vroeger haalde ik makkelijk 900 Mb/s van mijn NAS naar mijn desktop, nu met het RB maar 200-230 Mb/s (alle kabels op Gigabit poorten en geen ander verkeer).
Aan de kabels is niets veranderd dus zij kunnen het zeker aan (cat 5e)!
Ik dacht dan dat het aan de settings lag die ik erin gestoken had. Dus terug een factory reset naar de default settings, maar geen verandering.

Zijn er settings/configuraties die ik moet aanpassen om toch Gigabit snelheden te halen op het RB of kan hij echt niet meer wat me zou verbazen gezien het enkel switchen is dat hij moet doen?

[krisken]

Kan je even de export posten van je configuratie?

[sddt]

Veel is er voorlopig niet gewijzigd bij de standaardconfiguratie

Code: Selecteer alles

# jan/02/1970 08:15:32 by RouterOS 6.19
# software id = HLQV-NTHM
#
/interface bridge
add admin-mac=4C:5E:0C:2C:44:96 auto-mac=no l2mtu=1598 name=bridge-local
/interface ethernet
set [ find default-name=ether1 ] name=ether1-gateway
set [ find default-name=ether6 ] name=ether6-master-local
set [ find default-name=ether7 ] master-port=ether6-master-local name=\
    ether7-slave-local
set [ find default-name=ether8 ] master-port=ether6-master-local name=\
    ether8-slave-local
set [ find default-name=ether9 ] master-port=ether6-master-local name=\
    ether9-slave-local
set [ find default-name=ether10 ] master-port=ether6-master-local name=\
    ether10-slave-local
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-ht-above \
    distance=indoors l2mtu=2290 mode=ap-bridge ssid=MikroTik-2C449F
/ip neighbor discovery
set ether1-gateway discover=no
/ip pool
add name=dhcp ranges=10.0.0.2-10.0.0.254
add name=VPN-Pool ranges=10.8.0.2-10.8.0.10
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge-local lease-time=10m name=\
    default
/port
set 0 name=serial0
/ppp profile
set 1 bridge=bridge-local local-address=VPN-Pool remote-address=VPN-Pool
/interface pppoe-client
add ac-name="" add-default-route=yes allow=pap,chap,mschap1,mschap2 \
    default-route-distance=1 dial-on-demand=no disabled=no interface=\
    ether1-gateway keepalive-timeout=60 max-mru=1480 max-mtu=1480 mrru=disabled \
    name=pppoe-out1 password=*********profile=default service-name="" \
    use-peer-dns=yes user=***********
/interface bridge port
add bridge=bridge-local interface=ether2
add bridge=bridge-local interface=ether3
add bridge=bridge-local interface=ether4
add bridge=bridge-local interface=ether5
add bridge=bridge-local interface=ether6-master-local
add bridge=bridge-local interface=sfp1
add bridge=bridge-local interface=wlan1
/interface pptp-server server
set authentication=mschap2 enabled=yes max-mru=1460 max-mtu=1460
/ip address
add address=10.0.0.1/24 comment="default configuration" interface=bridge-local \
    network=10.0.0.0
/ip dhcp-client
add comment="default configuration" dhcp-options=hostname,clientid interface=\
    ether1-gateway
/ip dhcp-server network
add address=10.0.0.0/24 comment="default configuration" dns-server=10.0.0.1 \
    gateway=10.0.0.1 netmask=24
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=10.0.0.1 name=router
/ip firewall filter
add chain=input comment="default configuration" protocol=icmp
add chain=input comment="default configuration" connection-state=established
add chain=input comment="default configuration" connection-state=related
add action=drop chain=input comment="default configuration" in-interface=\
    ether1-gateway
add chain=forward comment="default configuration" connection-state=established
add chain=forward comment="default configuration" connection-state=related
add action=drop chain=forward comment="default configuration" connection-state=\
    invalid
add chain=input comment="default configuration" protocol=icmp
add chain=input comment="default configuration" connection-state=established
add chain=input comment="default configuration" connection-state=related
add action=drop chain=input comment="default configuration" in-interface=\
    ether1-gateway
add chain=forward comment="default configuration" connection-state=established
add chain=forward comment="default configuration" connection-state=related
add action=drop chain=forward comment="default configuration" connection-state=\
    invalid
add chain=input comment="allow ICMP" protocol=icmp
add chain=input comment="allow winbox" dst-port=8291 protocol=tcp
add chain=input comment="allow api" dst-port=8728 protocol=tcp
add action=add-src-to-address-list address-list=trying_to_login \
    address-list-timeout=1d chain=input comment=\
    "list IP's who try remote login" dst-port=20-23 protocol=tcp
add action=drop chain=input comment="drop ssh brute forcers" dst-port=22 \
    protocol=tcp src-address-list=ssh_blacklist
add action=add-src-to-address-list address-list=ssh_blacklist \
    address-list-timeout=1w3d chain=input connection-state=new dst-port=22 \
    protocol=tcp src-address-list=ssh_stage3
add action=add-src-to-address-list address-list=ssh_stage3 \
    address-list-timeout=1h chain=input connection-state=new dst-port=22 \
    protocol=tcp src-address-list=ssh_stage2
add action=add-src-to-address-list address-list=ssh_stage2 \
    address-list-timeout=1h chain=input connection-state=new dst-port=22 \
    protocol=tcp src-address-list=ssh_stage1
add action=add-src-to-address-list address-list=ssh_stage1 \
    address-list-timeout=1h chain=input connection-state=new dst-port=22 \
    protocol=tcp
add chain=input comment="allow ssh" dst-port=22 protocol=tcp
add chain=input dst-port=1723 protocol=tcp
add chain=input comment="accept vpn" dst-port=1723 in-interface=ether1-gateway \
    protocol=tcp
add chain=input protocol=gre
add chain=input comment="accept vpn gre" in-interface=ether1-gateway protocol=\
    gre
add action=drop chain=input comment="drop ftp" dst-port=21 protocol=tcp
add action=drop chain=forward comment="drop invalid connections" \
    connection-state=invalid
add chain=forward comment="allow already established connections" \
    connection-state=established
add chain=forward comment="allow related connections" connection-state=related
add action=drop chain=input comment="drop Invalid connections" \
    connection-state=invalid
add chain=input comment="allow established connections" connection-state=\
    established
add chain=input comment="acccept lan" in-interface=!ether1-gateway src-address=\
    10.0.0.0/24
add action=drop chain=input comment="drop everything else"
/ip firewall nat
add action=masquerade chain=srcnat comment="default configuration" \
    out-interface=ether1-gateway
add action=masquerade chain=srcnat comment="default configuration" \
    out-interface=pppoe-out1
add action=dst-nat chain=dstnat comment=\
    "sample udp from port 5000 to 5000 (lan ip 192.168.1.254)" disabled=yes \
    dst-port=5000 protocol=udp to-addresses=10.0.0.254 to-ports=5000
add action=dst-nat chain=dstnat comment=\
    "sample tcp from port 5000 to 5000 (lan ip 192.168.1.254)" disabled=yes \
    dst-port=5000 protocol=tcp to-addresses=10.0.0.254 to-ports=5000
/ip ipsec policy
add template=yes
/ip upnp
set allow-disable-external-interface=no
/ppp secret
add name=******* password=******** profile=default-encryption service=pptp
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=ether2
add interface=ether3
add interface=ether4
add interface=ether5
add interface=ether6-master-local
add interface=ether7-slave-local
add interface=ether8-slave-local
add interface=ether9-slave-local
add interface=ether10-slave-local
add interface=sfp1
add interface=wlan1
add interface=bridge-local
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=ether2
add interface=ether3
add interface=ether4
add interface=ether5
add interface=ether6-master-local
add interface=ether7-slave-local
add interface=ether8-slave-local
add interface=ether9-slave-local
add interface=ether10-slave-local
add interface=sfp1
add interface=wlan1
add interface=bridge-local

[krisken]

En op welke poort is er wat aangesloten?

[sddt]

op ether1 wordt de sessie met Scarlet gemaakt via PPPOE
op ether2 hangt de desktop
op ether3 hangt de NAS (Synology DS713+)
op ether4 een andere desktop
op ether5 mijn AP
op ether6 een powerline (max 100Mbit)

Gezien de eerste 5 op dezelfde switch zitten zou deze toch zeker 1Gbit moeten kunnen geven?

[gm123]

Als ik het goed voor heb zitten je Gbit poorten in een bridge ipv in een switch waardoor alles via software geroute wordt ipv via de hardware switch chip. Je moet je gbit ethernet poorten een master poort geven om switching aan te zetten. Zie http://wiki.mikrotik.com/wiki/Manual:Sw ... p_Features

[sddt]

Ja klopt alles zit in die bridge.
Ik had al zo'n vermoeden maar wist niet wat het alternatief was
Zal eens proberen in switch mode te zetten en kijken of ik hogere snelheden haal. 'k hou jullie op de hoogte!

[sddt]

Zo eventjes de 3,4 en 5 uit de bridge gehaald en als masterport ether2 gegeven.
De snelheid is al ietsje beter rond de 430Mbit/s

configuratie:

Code: Selecteer alles

# jan/02/1970 09:09:19 by RouterOS 6.19
# software id = HLQV-NTHM
#
/interface bridge
add admin-mac=4C:5E:0C:2C:44:96 auto-mac=no l2mtu=1598 name=bridge-local
/interface ethernet
set [ find default-name=ether1 ] name=ether1-gateway
set [ find default-name=ether3 ] master-port=ether2
set [ find default-name=ether4 ] master-port=ether2
set [ find default-name=ether5 ] master-port=ether2
set [ find default-name=ether6 ] name=ether6-master-local
set [ find default-name=ether7 ] master-port=ether6-master-local name=\
    ether7-slave-local
set [ find default-name=ether8 ] master-port=ether6-master-local name=\
    ether8-slave-local
set [ find default-name=ether9 ] master-port=ether6-master-local name=\
    ether9-slave-local
set [ find default-name=ether10 ] master-port=ether6-master-local name=\
    ether10-slave-local
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-ht-above \
    distance=indoors l2mtu=2290 mode=ap-bridge ssid=MikroTik-2C449F
/ip neighbor discovery
set ether1-gateway discover=no
/ip pool
add name=dhcp ranges=10.0.0.2-10.0.0.254
add name=VPN-Pool ranges=10.8.0.2-10.8.0.10
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge-local lease-time=10m name=\
    default
/port
set 0 name=serial0
/ppp profile
set 1 bridge=bridge-local local-address=VPN-Pool remote-address=VPN-Pool
/interface pppoe-client
add ac-name="" add-default-route=yes allow=pap,chap,mschap1,mschap2 \
    default-route-distance=1 dial-on-demand=no disabled=no interface=\
    ether1-gateway keepalive-timeout=60 max-mru=1480 max-mtu=1480 mrru=disabled \
    name=pppoe-out1 password=************ profile=default service-name="" \
    use-peer-dns=yes user=**************
/interface bridge port
add bridge=bridge-local interface=ether2
add bridge=bridge-local interface=ether6-master-local
add bridge=bridge-local interface=sfp1
add bridge=bridge-local interface=wlan1
/interface pptp-server server
set authentication=mschap2 enabled=yes max-mru=1460 max-mtu=1460
/ip address
add address=10.0.0.1/24 comment="default configuration" interface=bridge-local \
    network=10.0.0.0
/ip dhcp-client
add comment="default configuration" dhcp-options=hostname,clientid interface=\
    ether1-gateway
/ip dhcp-server network
add address=10.0.0.0/24 comment="default configuration" dns-server=10.0.0.1 \
    gateway=10.0.0.1 netmask=24
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=10.0.0.1 name=router
/ip firewall filter
add chain=input comment="default configuration" protocol=icmp
add chain=input comment="default configuration" connection-state=established
add chain=input comment="default configuration" connection-state=related
add action=drop chain=input comment="default configuration" in-interface=\
    ether1-gateway
add chain=forward comment="default configuration" connection-state=established
add chain=forward comment="default configuration" connection-state=related
add action=drop chain=forward comment="default configuration" connection-state=\
    invalid
add chain=input comment="default configuration" protocol=icmp
add chain=input comment="default configuration" connection-state=established
add chain=input comment="default configuration" connection-state=related
add action=drop chain=input comment="default configuration" in-interface=\
    ether1-gateway
add chain=forward comment="default configuration" connection-state=established
add chain=forward comment="default configuration" connection-state=related
add action=drop chain=forward comment="default configuration" connection-state=\
    invalid
add chain=input comment="allow ICMP" protocol=icmp
add chain=input comment="allow winbox" dst-port=8291 protocol=tcp
add chain=input comment="allow api" dst-port=8728 protocol=tcp
add action=add-src-to-address-list address-list=trying_to_login \
    address-list-timeout=1d chain=input comment=\
    "list IP's who try remote login" dst-port=20-23 protocol=tcp
add action=drop chain=input comment="drop ssh brute forcers" dst-port=22 \
    protocol=tcp src-address-list=ssh_blacklist
add action=add-src-to-address-list address-list=ssh_blacklist \
    address-list-timeout=1w3d chain=input connection-state=new dst-port=22 \
    protocol=tcp src-address-list=ssh_stage3
add action=add-src-to-address-list address-list=ssh_stage3 \
    address-list-timeout=1h chain=input connection-state=new dst-port=22 \
    protocol=tcp src-address-list=ssh_stage2
add action=add-src-to-address-list address-list=ssh_stage2 \
    address-list-timeout=1h chain=input connection-state=new dst-port=22 \
    protocol=tcp src-address-list=ssh_stage1
add action=add-src-to-address-list address-list=ssh_stage1 \
    address-list-timeout=1h chain=input connection-state=new dst-port=22 \
    protocol=tcp
add chain=input comment="allow ssh" dst-port=22 protocol=tcp
add chain=input dst-port=1723 protocol=tcp
add chain=input comment="accept vpn" dst-port=1723 in-interface=ether1-gateway \
    protocol=tcp
add chain=input protocol=gre
add chain=input comment="accept vpn gre" in-interface=ether1-gateway protocol=\
    gre
add action=drop chain=input comment="drop ftp" dst-port=21 protocol=tcp
add action=drop chain=forward comment="drop invalid connections" \
    connection-state=invalid
add chain=forward comment="allow already established connections" \
    connection-state=established
add chain=forward comment="allow related connections" connection-state=related
add action=drop chain=input comment="drop Invalid connections" \
    connection-state=invalid
add chain=input comment="allow established connections" connection-state=\
    established
add chain=input comment="acccept lan" in-interface=!ether1-gateway src-address=\
    10.0.0.0/24
add action=drop chain=input comment="drop everything else"
/ip firewall nat
add action=masquerade chain=srcnat comment="default configuration" \
    out-interface=ether1-gateway
add action=masquerade chain=srcnat comment="default configuration" \
    out-interface=pppoe-out1
add action=dst-nat chain=dstnat comment=\
    "sample udp from port 5000 to 5000 (lan ip 192.168.1.254)" disabled=yes \
    dst-port=5000 protocol=udp to-addresses=10.0.0.254 to-ports=5000
add action=dst-nat chain=dstnat comment=\
    "sample tcp from port 5000 to 5000 (lan ip 192.168.1.254)" disabled=yes \
    dst-port=5000 protocol=tcp to-addresses=10.0.0.254 to-ports=5000
/ip ipsec policy
add template=yes
/ip upnp
set allow-disable-external-interface=no
/ppp secret
add name=******* password=******* profile=default-encryption service=pptp
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=ether2
add interface=ether3
add interface=ether4
add interface=ether5
add interface=ether6-master-local
add interface=ether7-slave-local
add interface=ether8-slave-local
add interface=ether9-slave-local
add interface=ether10-slave-local
add interface=sfp1
add interface=wlan1
add interface=bridge-local
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=ether2
add interface=ether3
add interface=ether4
add interface=ether5
add interface=ether6-master-local
add interface=ether7-slave-local
add interface=ether8-slave-local
add interface=ether9-slave-local
add interface=ether10-slave-local
add interface=sfp1
add interface=wlan1
add interface=bridge-local

Is dit het maximum haalbare? Haalt iemand meer dan deze snelheid op zijn LAN met een RB2011?

[ubremoved_539]

Als je puur de switch chip gebruikt moet je normaal wirespeed halen.

Belangrijk is dat je altijd het block diagram in gedachten neemt.

Handig is ook altijd het CPU gebruik bekijken... als dat enorm stijgt zit er iets fout in je configuratie (de switch chip gebruikt namelijk geen CPU).

[sddt]

Bedankt alvast voor de reacties die enorm geholpen hebben!
Gebruik nu zoals voorgesteld enkel de switch chip en haal mooie Gigibit snelheden
Nu was het enkel nog mijn laptop die wat traag was, maar ondertussen opgelost!

Nu kan ik verder knutselen aan mijn netwerk!