hi
i find some solutions about my problem.
i have mt with 3 wan interface(load balancing) and 1 Lan, i want to limit a user bandwidth of specific wan
for example i allow user bandwidth 75Mbps of wan 1 and other 2 wan use without limit.
Hello Rajput88,
Do you have already created a load balancing? Can you attach the result of
/ip firewall mangle export
? (You can change any sensible information with generic values, as “WAN1_IP”)
To limit a bandwith you should use queues (I think this is the only way), maybe you shoud mark packets.
Regards
Damián
yes i know work is done by queues but how can . i already have loadbalancing queues if i mark all traffic other users are effected by queues of wan1
i want to mark traffic of wan1 for specific ip(user) .
mangle rule are here
/ip firewall mangle
add chain=input in-interface=WAN1 action=mark-connection new-connection-mark=WAN1_conn
add chain=input in-interface=WAN2 action=mark-connection new-connection-mark=WAN2_conn
add chain=output connection-mark=WAN1_conn action=mark-routing new-routing-mark=to_WAN1
add chain=output connection-mark=WAN2_conn action=mark-routing new-routing-mark=to_WAN2
add chain=prerouting dst-address=192.168.1.0/24 action=accept in-interface=Local
add chain=prerouting dst-address=192.168.2.0/24 action=accept in-interface=Local
add chain=prerouting dst-address-type=!local in-interface=Local per-connection-classifier=both-addresses-and-ports:2/0 action=mark-connection new-connection-mark=WAN1_conn passthrough=yes
add chain=prerouting dst-address-type=!local in-interface=Local per-connection-classifier=both-addresses-and-ports:2/1 action=mark-connection new-connection-mark=WAN2_conn passthrough=yes
add chain=prerouting connection-mark=WAN1_conn in-interface=Local action=mark-routing new-routing-mark=to_WAN1
add chain=prerouting connection-mark=WAN2_conn in-interface=Local action=mark-routing new-routing-mark=to_WAN2
Hello,
I will think this better when I return to my home.
So far, I think you only need to add a packet mark at the end, to all packet with “WAN1_conn” connection mark, matching the IP you want with src_address (src_address-list if there are many IPs)
You should reserve these IPs (Prevent computers to get different IPs)
Then you will need to create a queue for this new packet mark.
Regards,
Damián
Hello,
I think, that will be better to create 2 packet marks (at the end of the mangle rules)
- One with dst-interface = WAN1 (Upload)
- One with dst-interface = LAN (Download)
I think this should work although I cannot test at in my home and I never have enought time at my work office.
Also you should create 2 queues (If you chose simple queues)
This is considering all traffic originated by these IPs, if you have DST-NATs in “/ip firewall nat” for these IPs, you should also consider these IPs as dst-address in the mangle rules.
My english is not so good, please let me know if you dont understand anything.
I hope this helps you.
Regards,
Damián