Bridge filter marking

RouterOS General
1

I have 3 vlans I want to set a pcq upload/down queue on each so obviously I need to mark the traffic but I want asymmetrical upload/download.

Currently only way I have worked to do this is by having each vlan come into a different ethernet each like so

/interface bridge
add name=bridge1

/interface bridge port
add bridge=bridge1 interface=ether1 hw=yes pvid=21 frame-types=admit-only-untagged-and-priority-tagged
add bridge=bridge1 interface=ether2 hw=yes pvid=22 frame-types=admit-only-untagged-and-priority-tagged
add bridge=bridge1 interface=ether3 hw=yes pvid=23 frame-types=admit-only-untagged-and-priority-tagged
add bridge=bridge1 interface=ether4 hw=yes pvid=20 frame-types=admit-only-untagged-and-priority-tagged
add bridge=bridge1 interface=ether5 hw=yes pvid=20 frame-types=admit-all

/interface bridge vlan
add bridge=bridge1 tagged=ether5 untagged=ether1 vlan-ids=21
add bridge=bridge1 tagged=ether5 untagged=ether2 vlan-ids=22
add bridge=bridge1 tagged=ether5 untagged=ether3 vlan-ids=23

/interface bridge
set bridge1 vlan-filtering=yes pvid=20

/interface bridge filter
add chain=forward in-interface=ether1 out-interface=ether5 action=mark-packet new-packet-mark=vlan21_download
add chain=forward in-interface=ether5 out-interface=ether1 action=mark-packet new-packet-mark=vlan21_upload
add chain=forward in-interface=ether2 out-interface=ether5 action=mark-packet new-packet-mark=vlan22_download
add chain=forward in-interface=ether5 out-interface=ether2 action=mark-packet new-packet-mark=vlan22_upload
add chain=forward in-interface=ether3 out-interface=ether5 action=mark-packet new-packet-mark=vlan23_download
add chain=forward in-interface=ether5 out-interface=ether3 action=mark-packet new-packet-mark=vlan23_upload

.
.
Obviously it would be a lot easier if I could just trunk the VLAN in as one ethernet and mark traffic in each VLAN.
So the obvious question is there a better way to do this

2

Let me understand, you have configured the vlans only for mark packet?

Draw a schema, is too much vague, is like you do not use vlan at all on your network, just on that device for separate traffic for be marked…

3

It’s used on the LAN side of a ubiquiti dream machine as their rate limiting sucks.
There are 3 client networks and clients in those networks get different speeds.
So the above simply marks the traffic in the VLANS upload and download
The marks get sent to a stock standard pcq queue setup which limits each ip in the vlan speed

Here is that part of the config
It all works fine you get 2M/4M for any IP in VLAN21, 4M/8M for any IP in VLAN 22 and 4M/8M for any IP in vlan 23

/queue type add name="VLAN21_download" kind=pcq pcq-rate=4000000 pcq-classifier=dst-address pcq-src-address-mask=32 pcq-dst-address-mask=32
/queue type add name="VLAN21_upload" kind=pcq pcq-rate=2000000 pcq-classifier=src-address pcq-src-address-mask=32 pcq-dst-address-mask=32
/queue type add name="VLAN22_download" kind=pcq pcq-rate=8000000 pcq-classifier=dst-address pcq-src-address-mask=32 pcq-dst-address-mask=32
/queue type add name="VLAN22_upload" kind=pcq pcq-rate=4000000 pcq-classifier=src-address pcq-src-address-mask=32 pcq-dst-address-mask=32
/queue type add name="VLAN23_download" kind=pcq pcq-rate=8000000 pcq-classifier=dst-address pcq-src-address-mask=32 pcq-dst-address-mask=32
/queue type add name="VLAN23_upload" kind=pcq pcq-rate=4000000 pcq-classifier=src-address pcq-src-address-mask=32 pcq-dst-address-mask=32

/queue tree add parent=ether5 queue=VLAN21_download packet-mark=vlan21_download
/queue tree add parent=ether1 queue=VLAN21_upload packet-mark=vlan21_upload
/queue tree add parent=ether5 queue=VLAN22_download packet-mark=vlan22_download
/queue tree add parent=ether2 queue=VLAN22_upload packet-mark=vlan22_upload
/queue tree add parent=ether5 queue=VLAN23_download packet-mark=vlan23_download
/queue tree add parent=ether3 queue=VLAN23_upload packet-mark=vlan23_upload

.
.
The issue is I am having to use splay the VLANS out to individual ethernet ports just to get the direction upload/download
It works absolutely perfectly it’s just dam ugly with lots of patch cables dragging vlans between the two devices.
So the question is can the marking be done with all the vlans in a single ether trunk
.
So merge ether1,ether2,ether3 as a vlan trunk port and still mark them properly .. that is why the marking was only shown
Long as it marks properly the pcq will do it’s job.