I have found I cannot do the following using my Cisco ASA5505 and am wondering if this is possible using MikroTik Routers.
I have an adsl link (8mbit/512kbit) with several clients. My cisco 5505 is NAT-ing for the clients so they can use the internet.
I would like to set up traffic shaping in a way that I can allow certain stations “dedicated” bandwidth.
If that given station (matched by ip address / range or vlan) is communicating i have to provide a predefined amount of bandwidth from the globally available (say 2mbit/256kbit). If the reserved Bandwitdh is not used, other stations/communications should be able to use it.
Would the above be possible using a Mikrotik router? This is the only extra function I need.
Would I be able to use it in transparent mode i.e just configure and place between the clients and the cisco asa 5505?
Would any Mikrotik router be able to do the above e.g routerboard 750, 450, 450G or would I need a certain model?
Yes, RouterOS does this via queues (http://wiki.mikrotik.com/wiki/Queue). Yes, you can run it in transparent (bridging) mode. Any model can do 2 megs of traffic.
Just to have mentioned it - the ASA can dedicate bandwidth based on those criteria. You are no happy with that solution because it doesn’t return unused bandwidth for general availability?
Exactly, while the ASA can reserve bandwidth for an ip address / range etc, this then becomes unavailable to all others even not being used.
A little more detail on what I would like to do:
Range1: 192.168.210.1 - 192.168.210.10 = PC’s
Range2: 192.168.210.150 - 192.68.210.160 = Network Cameras
ADSL Link Max Download 20mbit Upload 2mbit
IPSEc VPN connection connection to headoffice
Currently Range2 (Network cameras) are constantly streaming to Headoffice and they use up all the available upload bandwidth, this is good as most of the time the PC’s do not need to use WAN.
However when a (Range 1) PC needs to send to use the WAN internet, I want to make sure that it is guaranteed bandwidth e.g 2Mbit download 256KB upload.
When the PC is finished then this bandwidth is once again made available to the network cameras which need as much as they can get (Range 2).
I have toyed with QOS on the ASA but while it allows for throttle, there does not seem to be a way to achieve the above, which is why I am looking at any alternative
Is the above easy to achive using a Mikrotik router?
Yes. Read the QoS link I posted and it outlines how to do queues. You basically want a parent queue for all the available bandwidth, with two children, one for each range. Range 1 from your example gets a higher priority so it gets filled first, range 2 gets whatever is left (up to all available bandwidth if range 1 isn’t passing traffic).
In ASA terms you basically prioritize traffic, but only up to a certain limit.
