How i can set limit from vlan to Wan not limitting speed between vlans
Make sure that your queues require packet marks, and then make exceptions in your packet marking logic which either do not mark the packets, or else mark them with something the queues will not match - e.g.: unlimited.
I must put two queues?
Sent from my GT-S7562 using Tapatalk
Simple queue i cannot create queues?
Sent from my GT-S7562 using Tapatalk
I want set limit to vlan10 5mbs for internet
When i create simple queue ant put 5mbs limit it limit all connections, and internet speed and speed beetwen vlans
I want set limit seperated. Beetwen vlans unlimited, from vlan10 to WAN 5mbs
Sent from my GT-S7562 using Tapatalk
If you only create simple queues with IP-based targets, this will limit traffic, but it will always limit traffic, even for lan-to-lan communications, which you specified that you do not want to do.
Therefore, your queue needs something more than just the IP address to match against. This is where packet marks are required. You do packet marking in the firewall mangle table.
The simplest thing to do would be to set the simple queues to match mark=no-mark
Then in the mangle table, add one rule in the forward chain which says in-interface=!wan out-interface=!wan (ether1, pppoe1-out, etc - whatever your wan interface is) action=mark-packet new-packet-mark=vlan-traffic (the name is not important in your case)
The idea is that marked packets will not enter the queue. Unmarked packets will enter the queue.
Packets get marked when being forwarded and neither arrive on nor leave via the wan interface.
Thanks so much
Sent from my GT-S7562 using Tapatalk
Hello ser. I want ask how can i block online game, flash games in mikrotik?
Sent from my GT-S7562 using Tapatalk