Bandwidth limit to a group of IPs. Is it possible?

RouterOS General
1

i read this article (http://wiki.mikrotik.com/wiki/PCQ_Examples) and i have the following question:

is it possible to shape traffic like is shown in this image?

What i want to do is assign certain speed limits for specific computers (192.168.0.30, 192.168.0.31, 192.168.0.50) and then assign certain bandwidth to a group of computers… in the picture, share 512kbps upload/512kbps download between 192.168.0.33, 192.168.0.35 and 192.168.0.40.

2

yes you need to look into firewall → mangle rules with the action packet mark…then setup up a simple queue under “queues” to grab and shape the packets with the marking and criteria u set up in the mangle rules.

3

kolorasta,‘ip firewall address-list’ feature will help you to create user groups, and don’t apply mangle rule per each user fromthe same group.

4

I have different clients with different services…

i have ip/mac combinations (not ppoe or something like that)

i want to make for example:
List: ip

Residential: 172.16.0.31,172.16.0.35,172.16.0.54,172.16.0.40
Corporative: 172.16.030,172.16.0.100,172.16.0.60

then i want to apply different upload/download speed and QoS to these groups… I have several goups (6 or more) and some of these groups has 40 ips or more…

in list i couldn’t put ips in that way (asorted) only let me put range (172.16.0.30-172.16.0.40) or specifying subnet (172.16.0.1/21)

5

It can be done with mangle + address list + queue tree

That’s why I requested simple queue that can use “address-list” feature to
simplified this…
because with mangle only mark one way e.g. upstream or downstream, you need to mangle both ways

6

It is possible to use PCQ for that kind of setup, but to be more elegant solution, it would be good that /24 subnet to assign i order like:

Residential 172.16.0.1 → 172.16.0.30
Corporative 172.16.0.33 → 172.16.0.60 etc and so one

with this kind of address allocation you can mangle traffic based on range (subnet), for residential 172.16.0.0/27 for corporative 172.16.0.32/27 and so one, and than you can apply the mangle rules into a queuing rule in this case PCQ type, tree.

I will post you a configuration that works for me with no problem.

Regards

7

i think as in the manual example , you can use PCQ for upstream and downstream by assigning dst-port and src-port in the Q type , so u have to use mangle once , it will mangle both ways at the same time .

8

ok … thanks.. i wait for that configuration

9

OK, here we go :slight_smile:

This set-up works fine for me, with this configuration you can limit a p2p traffic to 56 Kbit for each IP of the subnet 172.16.0.0/27, and also the overall traffic will be limited to 128 UP and 256 DOWN and that per IP address of the above mentioned subnet. Here it is the configuration:


ip firewall mangle add chain=forward src-address=172.16.0.0/27 p2p=all-p2p action=mark-connection new-connection-mark=p2p_conn

ip firewall mangle add chain=forward src-address=172.16.0.0/27 connection-mark=p2p_conn action=mark-packet new-packet-mark=p2p

ip firewall mangle add chain=forward sr-address=172.16.0.0/27 connection-mark=!p2p_conn action=mark-packet new-packet-mark=other



queue type add name=p2p-Down kind=pcq pcq-rate=56000 pcq-limit=50 pcq-classifier=dst-address pcq-total-limit=2000

queue type add name=p2p-Up kind=pcq pcq-rate=56000 pcq-limit=50 pcq-classifier=src-address pcq-total-limit=2000

queue type add name=Down kind=pcq pcq-rate=262015 pcq-limit=50 pcq-classifier=dst-address pcq-total-limit=2000

queue type add name=Up kind=pcq pcq-rate=131072 pcq-limit=50 pcq-classifier=src-address pcq-total-limit=2000



queue tree add name=p2p-up parent=5.8Ghz packet-mark=p2p limit-at=0 queue=p2p-Up priority=8 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s

queue tree add name=p2p-Down parent=ether1 packet-mark=p2p limit-at=0 queue=p2p-Down priority=8 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s

queue tree add name=Upload parent=5.8Ghz packet-mark=other limit-at=0 queue=Up priority=1 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s

queue tree add name=Download parent=ether1 packet-mark=other limit-at=0 queue=Down priority=1 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0

Reagrads

Faton

10

i think you should use prerouting instead of using forward in the mangle

11

Guys,

I have list of IPs allocation for our country used by local ISP in local exchange (lets call IIX), then other IPs out of that list are overseas.
I want to know how to configure :

  • There are 2 group of users, 256K and 512K.
  • Per user (per IP) for 256K group have minimum 5 Kbps to overseas up/down, burstable to 32 Kbps up and burstable 256 Kbps down.
  • Per user (per IP) for 512K group have minimum 10 Kbps to overseas up/down, burstable to 32 Kbps up and burstable 512 Kbps down.
  • Per user (per IP) for both group have minimum 5 Kbps to IIX up/down, burstable to 512 Kbps up/down.

Somebody could help me, please ?
Thanks.

12

what did you use to draw that?

13

I think it is a microsoft office visio.

14

oh… $$$$$

15

is it possible to shape traffic like is shown in this image?

What i want to do is assign certain speed limits for a group of computers… in the picture

16

Is that bandwidth for the whole group, or it is for each host in that group.

Regards

Faton

17

There is example in the manual (just read it all).
packet mark → queue tree with pcq rate 0
or just simple queue with pcq rate 0

Its work, but the problem is that if full bandiwth is used, ping is jumping to around 100ms for all users. So its useless, and its better to avoid it.