Overview
We have several VLANS on our network, for which our MT is the gateway on each. Most VLANS access files / printers on a general shared VLAN (VLAN ID 1 by default). All port 80 traffic is marked via the transparent Web Proxy, and is routed via a bonded ADSL server. All other internet traffic is passed to a leased line.
Intention
We now want to be able to bandwidth shape or queue the traffic coming from the VLANS to the internet, with each VLAN being assigned a separate bandwidth declaration.
The problem
The queues I have created work successfully, however they are also limiting the bandwidth between the VLANS, which in turn makes file server and print transfers to / from the VLAN ID 1 network exteremly slow! Below is an example of one simple queue:
What you can do is that mark the traffic that you do not want to limit, and than mark the rest of traffic and lastly add that packet mark to the simple queue, or create new simple queue rules where you will limit traffic between VLANs at 100 Mbit/s and put these rules before the rules that limit traffic towards internet.
Any idea how to do this easily? I can imagine how I would want it to work, but how do you include ALL internet traffic in one mark, and ALL internal LAN traffic in another?
and setting the parent queue to packet mark ‘Mark LAN Traffic’, and the individual queues to ‘Mark I-Net Traffic’? Or am I being completely stupid here?!
Ok, the above is processing many packets, but the queues are not doing anything, ie. no packets are being identified by them. Here is an example of two of the queues, the parent and a child:
have you try to put on top of all queue rules, the rule with 100 Mbit/s target address=192.168.0.0/24 dst-address=192.168.0.0/16, put this rule should be number “0” no rules before.
