Bridge Firewall

Hello all! First time poster, long time reader here :slight_smile:

I’m testing out some R433 routers with ROS v.3.14 (lvl 4). I have a router set as an wds AP and a client in station-wds mode; they’re transparently bridged. Would it still be possible to use the firewall and queue functions in this configuration? i’m trying to have the AP limits HTTP traffic flow to and from the client.

To test the concept out with Iperf, i connected my laptop and computer to the ether1 port of my routers and configured the AP’s firewall to mark TCP packets and limit TCP flow with a queue. But when I passed TCP traffic the routers still get full throughput. The issue could be the router isn’t marking any of packets since ether1 is bridged to wlan1… so i tried using Bridge Filter. Needless to say that didn’t work.

I appreciate any help i can get with this problem!

Example of bridge filter config for bandwidth management will help too…any taker?

you can fully setup a transparent bridge to perform just about anything. the MT OS is the absolute most powerfull out there to do this hands down. I have used the magle rules along with all the firewall rules many times in a transparent bridged configuration many times. In most cases I find that I ahve something wrong with the interface or rules I am using. Try going through one by one and use the log feature to see where your rules are not processing correctly. For example try seeting a mangle rule that flags all pakets then try creating a firewall rule that creates a log entry for every magled packet. send a few pings through and see if you are getting the log. if so you know you have your rule created properly. Then move on to the Que and go from there.

I can say to awnser your question that YES you can use both the firwall and Que options of the MT even with a bridged configuration. I can say when using magle rules I find it works much better if I make one rule to identify the connectoin, then a second that flags each packet since the throttling looks to the packet flag not the connection..

Hope that helps