CRS112–8G-4S
Running 6.34.2
Network 192.168.0.0/24
Output Ether 1 to CheckPoint Firewall Gateway 192.168.0.1
Ether 2 connects one portion of network via radio 192.168.0.2
Ether 2 connects one portion of network via radio 192.168.0.5
I need to control the bandwidth TX/RX at 512kbps on Ether 2
Assume unit has to operate in bridge mode. Is it possible to control in this mode
Any help would be appreciated
Hello assyrian47,
I don’t know if i’m understanding correctly your goal.
I understand that you want to limit/queue/“traffic shape” ALL the bandwidth that pass through ether2. If that is the case, you can:
Mark packets that goes IN and Out for ether2,
chain=forward action=mark-packet new-packet-mark=in_data passthrough=yes in-interface=ether2 log=no log-prefix=""
chain=prerouting action=mark-packet new-packet-mark=out_data passthrough=yes out-interface=ether2 log=no log-prefix=""
Then, you can add Simple Queue, one for each mark:
name="queueforIN" target="" parent=none packet-marks=in_data priority=8/8 queue=default-small/default-small limit-at=0/0 max-limit=512k/512k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s bucket-size=0.1/0.1
name="queueforOUT" target="" parent=none packet-marks=out_data priority=8/8 queue=default-small/default-small limit-at=0/0 max-limit=512k/512k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s bucket-size=0.1/0.1
Please note that this is a VERY simple solution that could work on a simple/small network, you should post more detailed information of what you want to achieve, that way, we can help you to narrow a more eficient solution.
Thanks for the information. Can bandwidth control be controlled in router or bridge mode? If your commands con be applied to both modes of operation this point is mute. The network has a Check Point Firewall/Gateway that cannot provide the bandwidth control. All the remote radios and WAP devices are pointed to the 192.168.0.1 gateway. We have the MikroTik router that I would like to operate as a bridge so I can just stick it between the network and the CP firewall. without having to make any changes to the network equipment. I hope that this make some sense.
When I SSH into the device and enter the commands you provided, I get an error at the equal sign at the chain=forward command
The bandwidth control was finally achieved using “queues”. Queue1 target ether2,ether2, tx limit 512k, rx limit 512k.