Bridge & Mangle

RouterOS General
1

Hi,

I have this problem:

For VoIP priority reasons, I need to mark the packets that flow in a bridge.

In particular I have to mark the packets with a particular DSCP.

I’ve make this setup:

In the bridge:

use-ip-firewall = yes

In the ip firewall:

0 chain=forward action=mark-connection new-connection-mark=VoIP
passthrough=no dscp=40

1 chain=forward action=mark-packet new-packet-mark=VoIP pck passthrough=no
connection-mark=VoIP

But doesn’t function…

If I set the Bridge Filters like this:

0 chain=forward out-bridge=bridge2 action=mark-packet new-packet-mark=Users

I’m able to mark (with Users) the packet that flow the bridge, but I’m not able to use that for my purposes…

Please anyone can help me?

Thanks.

2

Do you want to mark packet that are coming with DSCP=40
or you want to assign DSCP=40 to specific packets ?


Your mangle rule is working for the first option, it’s marking packets on router, which enter with DSCP=40.
To set DSCP=40 use action=change-dscp new-dscp.

3

Hi Sergejs,

thanks for your replay.

I want mark packet that flow in the bridge with DSCP=40 to put their in a queue with high priority.

4

Do you have DSCP on this flow, before it’s entering the router ?

5

Yes,

but for verify the configuration I’ve tried also to mark all packet that flow the bridge (without DSCP=40) , but the problem is that the counter is always 0…is like the rule doesn’t see any packets flowing the bridge…but I’m sure to have traffic.

6

Please any suggestion? I need very much…thanks…

7

It’s impossible that nobody has tried to do shaping with bridge using DSCP…c’mon!!! :frowning:

8

Have you tried using prerouting chain ? Forward chain in firewall is habitualy used for routed packets.

9

For the bridge and firewall configuration,

set ‘interface bridge settings set use-ip-firewall=yes’.
to make sure that bridged packets are going through the firewall.