QUOTE(boringz @ Jul 21 2025, 11:49 PM)
Are there some specific settings I should do to enable ipv6? Since I did not "Disable Ipv6" i just run it as it is.

This is what I see in Addresses in IPV6:

I am pointing it to 8.8.8.8 and 8.8.4.4, any pointers on how to point them to mikrotik? (i will search online in the meantime).
Your assumption is correct - and actually it is not a swap, it is a different site, but it is at the same area. The devices are essentially the same except the ISP is digi fiber.
Devices are connected via wifi, however me personally connecting via wired gives the same outcome.
Strangely: I have setup the SFP by @anime4000 today following his configurations, and using RB5009. Although I hit the speeds of 2gb dl and 1gb ul from speedtests, the outcome seem to be far worse than using the fiberhome + rb4011. Far worse meaning all attempts to try using fast.com usually fail, most attempts to open websites fail, and all forms of apps such as wechat, etc fail. funnily the speedtest I did lead me to attempt to do it with kuching isp, even though I am located in perak. But then again rb4011 and fiberhome also gives problems sporadically, during certain time/usage patterns. Even the RPKI website you shared cannot be loaded.
From remote monitoring into the routers I confirm: there is no overusage - the speeds are well below the 2gb/1gb provided. I don't think users ever get a chance to even surf the speeds.
To answer your questions:
1) they are the latest versions. 7.19.3 For the routers handling maxis fiber & digi fiber.
2) Yes they are swapped. As mentioned funnily fiberhome seem to work better. I have not swap the skyworth yet due to avoiding any disruption. But, testing anime4000's SFP ONU unit proves that either my RB5009 is giving problems, or that after a certain number of connections (as you mention about NAT limit), then maybe packets start to get lost.
3) Yes, if I disconnect and reconnect it usually gets fast again, but only for a short time during peak periods, as the connections quickly rush back in.
So you reckon the "NAT limit' is something imposed by digi fiber correct? And there's nothing I can do to bypass this limit or I can mitigate this by setting up queues/etc?
These are the number of connections i logged using digi fiber. For maxis fiber it is at least 5 times higher, and no issues.

Regarding the PON stick, it is best you test it independently like during afternoon when you normally don't face problem. It is hard to know if it is a PON stick problem or not when the failure mode is the same.
For now I will focus on your Layer 3 problem and not introduce too much variable.
That IPv6 setting is to enable / disable the IPv6 stack in RouterOS, it won't get you any IPv6 address.
Here is how to configure IPv6:
Go to IPv6 > DHCP Client.
Add new.
Interface: PPPOE-DIGI
Request: Select only Prefix
Pool name: You can put anything you want
Go to IPv6 > Address.
Add new.
Address: ::1/64
That's colon colon one slash sixty four
From pool: The name of the pool from previous step
Interface: bridge1
Go to IPv6 > ND.
Add new.
Interface: bridge1
MTU: 1480
DNS Server: 2001:4860:4860::8888
Go to IPv6 > Firewall
Check if there exist Action = fasttrack connection
If exist, skip.
If doesn't exist, add new.
Chain: Forward
Click Action.
Action: fasttrack connection
Move the fasttrack rule to the top! This is a must!
Verify IPv6 is working by visiting:
https://whatismyipaddress.com/https://rpkitest.nlnetlabs.net/Both should show IPv6 section.
If it doesn't work, you might need to disconnect / reconnect your WiFi / wired and wait like a minute for the RA to distribute the address.
After you verified IPv6 is working, setup IPv4 DNS resolution with Mikrotik
Go to IP > DNS
Servers: 2001:4860:4860::8888
Remove all IPv4 addresses here as you want DNS resolution to use IPv6 only to avoid using up NAT session.
Allow Remote Requests: Enabled
Go to IP > DHCP Server.
Click on the "Network" tab on top.
Click defconf.
DNS Server: 192.168.88.1
If you changed your Mikrotik IP address then adjust accordingly.
Once this is done, disconnect / reconnect your WiFi and verify your laptop is getting the correct DNS information for both IPv4 and IPv6.
Once they are correct, reboot all AP and switch to force reconnect all the client to use you newly configured settings.
Yes this limit is imposed by Digi. You can either request a public IP or ask them to raise the limit. I can already imagine what is in their mind when you talk about NAT session limit.
No amount of queue will fix this. It is not a bandwidth problem.
Anyway I check CelcomDigi website and they don't seems to have business plan. Is this a consumer plan?
This post has been edited by kwss: Jul 22 2025, 08:27 AM