**UPDATE**
I reset the CRS back to factory defaults and configured QuickSet in ROUTER mode, using pretty much standard, out-of-box recommendations. I then:
1. Set a new password for admin access. (new user+password with admin disabled). Also only allow for MAC driven access - not internal IP.
2. Shutdown all external services that come enabled by default with the OOB config, including Telnet, WWW, SSH. Within the first 5 min of the being online, the device was flooded with "invalid login" attempts across a variety of standard usernames (admin, telecoadmin, root, etc.)
3. Set DNS resolution to my internal pi-hole which points to google and cloud flare upstream DNS servers.
4. Ran speedtest via Google. I immediately noticed 200-210Mbps download, almost doubling my hardwired speed. Much better. I was thinking I would be satisfied with this, but then I moved on to Mikrotik firewall recommended settings (help.mikrotik.com) and populated a recommended firewall ruleset, including FastTrack rules for established and related connections, giving me a total of 18 firewall rules.
Running speedtest now, I am getting above my subscribed rate (300/30), giving me 343Mbps down and 31Mbps up which is also beyond what is expected / published for the Mikrotik in router mode! I couldn't be happier and didn't need to purchase a new upstream router and revert the CRS to switch mode.
Thanks to everyone who steered me in the right direction!
I reset the CRS back to factory defaults and configured QuickSet in ROUTER mode, using pretty much standard, out-of-box recommendations. I then:
1. Set a new password for admin access. (new user+password with admin disabled). Also only allow for MAC driven access - not internal IP.
2. Shutdown all external services that come enabled by default with the OOB config, including Telnet, WWW, SSH. Within the first 5 min of the being online, the device was flooded with "invalid login" attempts across a variety of standard usernames (admin, telecoadmin, root, etc.)
3. Set DNS resolution to my internal pi-hole which points to google and cloud flare upstream DNS servers.
4. Ran speedtest via Google. I immediately noticed 200-210Mbps download, almost doubling my hardwired speed. Much better. I was thinking I would be satisfied with this, but then I moved on to Mikrotik firewall recommended settings (help.mikrotik.com) and populated a recommended firewall ruleset, including FastTrack rules for established and related connections, giving me a total of 18 firewall rules.
Running speedtest now, I am getting above my subscribed rate (300/30), giving me 343Mbps down and 31Mbps up which is also beyond what is expected / published for the Mikrotik in router mode! I couldn't be happier and didn't need to purchase a new upstream router and revert the CRS to switch mode.
Thanks to everyone who steered me in the right direction!
Statistics: Posted by misterdp — Sun Feb 25, 2024 7:41 pm