Bandwidth limiting accross VLAN

Hi all - I have an Nstreme Dual link between two buildings using two RB600’s. There is a bridge interface on each router that has the Nstreme Dual and Ether one as ports, so it is a simple bridge at the moment.

What I would like to do, is run two VLAN’s across the bridge for two different customers.

In other words - two layer2 bridged services.

How can I bandwidth limit the data on each VLAN without reference to any IP address(s) - How do I set layer2 bandwidth limiting.

I have tried several ways using Simple queue’s and specifying an interface instead of IP address - Does any one know how to configure this.

Any help would be greatly appreciated

you can try with In-Interface and Out-Interface for mangle both connection-mark and parket-mark.

That worked perfectly - I just tested it using a couple of spare routers here in the office - thanks for the advice - very much appreciated


I used the following mangle and simple queue rules

ip firewall mangle>
0 chain=prerouting action=mark-connection new-connection-mark=VLAN6-con passthrough=yes in-interface=vlan6
1 chain=postrouting action=mark-connection new-connection-mark=VLAN6-con passthrough=yes out-interface=vlan6
2 chain=prerouting action=mark-packet new-packet-mark=VLAN6-mark passthrough=yes connection-mark=VLAN6-con
3 chain=postrouting action=mark-packet new-packet-mark=VLAN6-mark passthrough=yes connection-mark=VLAN6-con

queue simple>
0 name=“VLAN69” dst-address=0.0.0.0/0 interface=vlan69 parent=none packet-marks=VLAN69-mark direction=both priority=8 queue=default/default limit-at=128000/128000 max-limit=128000/128000 total-queue=default-small

Would you mind posting your “simple bridge setup” config, my experiments with Nstream yield no packet loss but horrible thoughput while setup as bridge. Much appreciated! Cheers.

First I created an EoIP tunnel between the WLAN ip addresses of the two routers.

Then at each end, created a bridge interface, and added the EoIP and Ether1 interfaces to the bridge.

If however you are using Nstreme Dual, just add the Nstreme2 interface and the Ethernet ports to the bridge interface - this setup works particularly well