CRS317 - cannot get traffic to Queue

RouterOS Beginner Basics
1

Hi,

I have my first CRS317, running RouterOS.
I'm using it as a switch, with all ports in a bridge. I cannot get a queue to work on the Uplink interface (16).
Also, it appears that there is basically no traffic in the bridge, even when I see 5-6 Gbps in the uplink interface...

I'd like to limit the uplink interface (16) to 3 Gb/s. Up/Down.

What should I be looking for? This was EASY on smaller devices!

Diagram & config attached...

Thank You!

Dean

model = CRS317-1G-16S+

/interface bridge
add admin-mac=74:4D:28:E9:28:1F auto-mac=no name=bridge protocol-mode=none
/interface ethernet
set [ find default-name=sfp-sfpplus1 ] comment="Phone 1985"
set [ find default-name=sfp-sfpplus5 ] advertise=10M-half,10M-full,100M-half,100M-full speed=100Mbps
set [ find default-name=sfp-sfpplus9 ] comment=LACP-9-10-VEEAM
set [ find default-name=sfp-sfpplus10 ] comment=LACP-9-10-VEEAM mac-address=74:4D:28:E9:28:17
set [ find default-name=sfp-sfpplus11 ] comment=LACP-11-12-TAPE
set [ find default-name=sfp-sfpplus12 ] comment=LACP-11-12-TAPE mac-address=74:4D:28:E9:28:19
set [ find default-name=sfp-sfpplus13 ] comment=13-14-Server
set [ find default-name=sfp-sfpplus14 ] comment=13-14-Server mac-address=74:4D:28:E9:28:1B
/interface bonding
add mode=802.3ad name=LACP-9-10-VEEAM3 slaves=sfp-sfpplus9,sfp-sfpplus10
add mode=802.3ad name=LACP-11-12-TAPE slaves=sfp-sfpplus11,sfp-sfpplus12
add mode=802.3ad name=LACP-13-14-Server slaves=sfp-sfpplus13,sfp-sfpplus14
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/queue simple
add max-limit=2G/2G name=queue1 target=bridge
/interface bridge port
add bridge=bridge comment=defconf interface=ether1
add bridge=bridge comment=defconf interface=sfp-sfpplus1
add bridge=bridge comment=defconf interface=sfp-sfpplus2
add bridge=bridge comment=defconf interface=sfp-sfpplus3
add bridge=bridge comment=defconf interface=sfp-sfpplus4
add bridge=bridge comment=defconf interface=sfp-sfpplus5
add bridge=bridge comment=defconf interface=sfp-sfpplus6
add bridge=bridge comment=defconf interface=sfp-sfpplus7
add bridge=bridge comment=defconf interface=sfp-sfpplus8
add bridge=bridge comment=defconf interface=sfp-sfpplus15
add bridge=bridge comment=defconf interface=sfp-sfpplus16
add bridge=bridge interface=LACP-9-10-VEEAM3
add bridge=bridge interface=LACP-11-12-TAPE
add bridge=bridge interface=LACP-13-14-Server
/ip address
add address=172.20.8.2/24 comment=defconf interface=bridge network=172.20.8.0
/ip dns
set servers=172.22.0.13,172.22.0.1
/ip route
add distance=1 gateway=172.20.8.1
/snmp
set contact="NO AIF TAG" enabled=yes location="NO TAG" trap-version=2
/system clock
set time-zone-name=America/Los_Angeles
/system identity
set name=SSD-DR-VEEAM
/system logging
add topics=dude
add disabled=yes topics=snmp
/system ntp client
set enabled=yes primary-ntp=172.22.0.13 secondary-ntp=172.22.0.1
/system routerboard settings
set boot-os=router-os

VEEAM-Sunnyside-Connection.jpg
VEEAM-Sunnyside-Connection.jpg819×873 53.7 KB

2

For simple queues to work you have to disable HW offload on upstream interface (sfp-sfpplus16). But beware that this will severely load CRS’s main CPU and will limit max throughput via that interface possibly to less than 1Gbps depending on traffic patterns (check test results of your device, you’re looking at bridging instead of switching).

The other, better, way of doing it is to use switch QoS functionality instead. Check manual, something like

/interface ethernet switch port
set sfp-sfpplus16 ingress-rate=3G egress-rate=3G

and ditch the queue setup.

BTW, do you have to limit ingress (Rx) rate? Ideally the other end should be doing this part …

3

I am not getting great results with the ingress=rate setup .. the egress seems to work but if I want to gets lets say 150M on ingress I have to set it to like 700M. and I dont know.. something just doesnt make me trust that setup.. ive read that there are ACLs you can do to set that up, but I havent been able to find an example.. and im just locking myself out my switch over and over (Im using safe mode) but just can not get it to work at all.

Thank you