safir
May 14, 2014, 7:20pm
1
Hi. Very new to Mikrotik & networking in general so some help would be appreciated.
I’m distributing some Internet bandwidth to some users with Simple Queues using their IPs. I’m running an FTP server which I want to bypass the Queues so users get maximum speed from it. Any idea how this can be done? Well, I found some help on the net. Would this work?
The IP range for my users: 192.168.1.0/24
My FTP server ip: 192.168.1.13
/ip firewall mangle
add action=mark-packet chain=prerouting dst-address=192.168.1.0/24 new-packet-mark=ftp-up src-address=192.168.1.13
add action=mark-packet chain=postrouting dst-address=192.168.1.13 new-packet-mark=ftp-down src-address=192.168.1.0/24
/queue tree
add limit-at=1000M max-limit=1000M name=ftp-up packet-mark=ftp-up parent=global queue=ftp-exempt
add limit-at=1000M max-limit=1000M name=ftp-down packet-mark=ftp-down parent=global queue=ftp-exempt
Please help…
safir
May 29, 2014, 6:57am
2
Guys, after searching the net I came up with the following “solution” to my problem.
My WAN port = Ether1
My LAN port = Ether4
My PC’s IP = 192.168.1.13
FTP Server IP = 192.168.1.9
/ip firewall mangle
add chain=prerouting action=mark-connection new-connection-mark=ALL-INCONN passthrough=yes in-interface=Ether1 disabled=no comment="Connection In"
add chain=prerouting action=mark-packet new-packet-mark=ALL-INPACKET passthrough=yes connection-mark=ALL-INCONN disabled=no comment="Upload"
add chain=forward action=mark-connection new-connection-mark=ALL-OUTCONN passthrough=yes out-interface=Ether4 disabled=no comment="Connection Out"
add chain=forward action=mark-packet new-packet-mark=ALL-OUTPACKET passthrough=yes connection-mark=ALL-OUTCONN disabled=no comment="Download"
add chain=forward action=mark-packet new-packet-mark=SJN-D passthrough=yes dst-address=192.168.1.13 packet-mark=ALL-OUTPACKET disabled=no comment="SJN Downstream"
add chain=forward action=mark-packet new-packet-mark=SJN-FTP-D passthrough=yes src-address=192.168.1.9 packet-mark=SJN-D disabled=no comment="SJN FTP Download"
add chain=prerouting action=mark-packet new-packet-mark=SJN-U passthrough=no src-address=192.168.1.13 packet-mark=ALL-INPACKET disabled=no comment="SJN Upstream"
add chain=prerouting action=mark-packet new-packet-mark=SJN-FTP-U passthrough=no dst-address=192.168.1.9 packet-mark=SJN-U disabled=no comment="SJN FTP Upload"
So I mark the up and down stream connections. Then I mark the packets that are coming to and from my PC. Then I mark those packets which are coming from the FTP server to my PC and vice versa. Then I do the Queue Tree…
/queue tree
add name="SJN-UPLOAD" parent=global packet-mark=SJN-U limit-at=0 queue=default priority=4 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s disabled=no
add name="SJN-DOWNLOAD" parent=global packet-mark=SJN-D limit-at=0 queue=default priority=4 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s disabled=no
add name="SJN-FTP-DL" parent=SJN-DOWNLOAD packet-mark=SJN-FTP-D limit-at=0 queue=default priority=4 max-limit=1000M burst-limit=0 burst-threshold=0 burst-time=0s disabled=no
add name="SJN-DL" parent=SJN-DOWNLOAD packet-mark=SJN-D limit-at=0 queue=default priority=4 max-limit=4M burst-limit=0 burst-threshold=0 burst-time=0s disabled=no
add name="SJN-UP" parent=SJN-UPLOAD packet-mark=SJN-U limit-at=0 queue=default priority=4 max-limit=4M burst-limit=0 burst-threshold=0 burst-time=0s disabled=no
add name="SJN-FTP-UP" parent=SJN-UPLOAD packet-mark=SJN-FTP-U limit-at=0 queue=default priority=4 max-limit=1000M burst-limit=0 burst-threshold=0 burst-time=0s disabled=no
The downstream/download section works but I’m not seeing that many packets being mangled in the upload/upstream section. Nor do I see any traffic in the Upload section in the queue tree.
Can anyone help? Please?