Applying a simple queue to eth port on a bridge

I have a Mikrotik set up running a bridge containing three ethernet ports - two ports are connected to two different internet uplinks, and the third is an office firewall. I’d like to apply a simple queue to the firewall’s port to limit the bandwidth, but I can’t seem to get it to work for interfaces that are a member of the bridge, only the bridge itself.

This is what I have, where ether2 is the office firewall’s port:

add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both disabled=no interface=ether2 limit-at=5M/5M max-limit=5M/5M name=\
    queue1 parent=none priority=8 queue=default-small/default-small total-queue=default-small

Is there another way to accomplish this?

I would recommend to use,

  • interface=all
  • target-address=x.x.x.x/24, subnet IP address bridge is working on.

Thanks for the suggestion, I may end up having to limit by IP. The problem is that I don’t want to limit bandwidth on the entire subnet - I only want to limit that one port, and the firewall connected to this port has multiple IPs.

  1. It is possible to limit different IPs.

  2. Use mangle and mark packets going in/out on the specific bridge port.
    Add mangle mark to Queue Simple.