Simple Queue ignored when packets marked for Bandwidth Ctrl

RouterOS Beginner Basics
1

Hi, I really hope someone can help me out as i have spent days getting my Queue Tree working only to find that when i had a pppoe user connect to the routerboard and a dynamic simple queue was created because the user has gone over there allowed download quota via radius and should be dialled back, it was ignored and the user had full speed.
So i have diabled everything in the Mangle rules and Queue trees and started again with the most basic of setups and the problem is still there and i am lost as i thought simple queues always was checked before queue trees.

The setup is this:
PPPoe Server on Mikrotik which uses radiusmanager server for Auth.
PPPoe user has run out of allowed quota and radius manager has changed to a reduced service that only allows 64k UL/DL
i have two mangle rules.

  1. prerouting that has src address list as the address list assigned in the pppoe profile, action is mark packet as traffic_up, no pass through
  2. postrouting that has dst address list as address list assigned in the pppoe profile, action is mark packet as traffic_dn, no pass through.

I then have a queue tree like this:

  1. queue named Global_Down, Parent Global-out no limits (i.e use all bandwidth you can)

  2. queue named pppoe_user_down, parent global_Down, packet marks = traffic_dn, no limits (i.e use all bandwidth you can)

  3. queue named Global_Up, Parent Global-in no limits (i.e use all bandwidth you can)

  4. queue named pppoe_user_up, parent global_Up, packet marks = traffic_up, no limits (i.e use all bandwidth you can)

now i can log in as the pppoe user and i see upload and download working great in the queue tree. If i put a max limit of say 128k on the ppp_user_down i see the user slow down when downloading from internet. If i put a max limit of 128k in the pppoe_user_up i can see a slow down in a file copy to a remote server from the user. So all looks great so far.

Now when radius manager decides that the user has used up there data quota and drops them into a reduce speed service, i see a dynamic simple queue created called pppoe-userxxx with a RX and TX max limit of 32k - so that is working cool.

However when the user starts to download from the internet the dynamic simple queue is ignored and the user gets full speed download or upload depeneding on what they are doing.

I can not strip back the config any simpler than the above.
Any ideas why this does not work and the dynamic simple queue is ignored, i am really pulling my hair out and maybe its something silly i am doing/not doing as i have spent days on this and cannot see straight anymore.

Anyones help would be very welcome
thanks
Jas

QUEUES while using NAT?
2

OK, i read that Quote"Queue trees attached to global-in and global-out always override simple queues" which i have proven to be correct.
If i set the up queue treee parent to the Internet uplink interface and the down queue parent to the bridge that the use resides on, then everything works as it should.
But my problem is that i want to have multiple queue trees for different bridges assigning different priority’s to traffic going into and out of those bridges and then finally all the queue trees rollup to a total upload and total download queues so i can limit everythign based on my internet speeds.
The only way i can see to do a Total up or Down is to use global-in and out as the parent which is fine but it then breaks the simple queues again so back to sqaure 1.

In short as i might not have made much sense (thinking aloud)
i want to have a user who connects via a bridge/subnet/vlan have there traffic set to a certain priority.
i then want to have another user who connects via another bridge/subnet/vlan have there traffic set to a lower priority.

then i want a dynamic simple queue created for any user when they have used up there data quota and then just that user gets limits set for UL/DL speeds till they buy somemore data quota.

To date i have the dynamic simple queue being created ok.
I can prioritise bandwidth using queue tree upload and download of a particular bridge/vlan/subnet.

but i cannot do both at the same time becuase of this global-in/out problem and when that is set on a queue tree it overrides a simple queue.
Anyone have ideas on what i can do. I have trawlled through everything i can find but nothing quite works the way i need it to. Either Queue Tree works Great or simple queues work great but not together.

3

got it sorted with the help of the Mikrotik team, great support by the way. We got around it by using address lists and set that from the radius server.