I’m getting ready to switch from single queuing on an RB750 to double queuing. I would like to do the following two things:
-
Queuing for bandwidth limiting for groups of users. (I’m doing that now with mangling in forward and in the queue tree using ether1-gateway and ether2-local-master for the parents).
-
Prioritizing of Skype above all other traffic in a second queue. Only prioritizing outbound (to the internet) traffic would be enough, but I’d like to do both directions if possible.
I’ve googled and searched the forum for information and examples. I found some good information in an old forum post from 2006. But I’m still a little unsure.
What I’d like to know is where should I mangle and what parents should I use for the corresponding mangle. Which queueing should I do in which type of queue and with which parent interface?
Can I do bi-directional queuing on global-in? My understanding from the 2006 thread is no, I would also have to use global-out.
Here is what I’m doing now (single queue, bandwidth management with no Skype prioritization):
apr/30/2012 07:02:20 by RouterOS 5.15
/ip firewall mangle
add action=mark-connection chain=forward comment=Guests disabled=no
new-connection-mark=guest passthrough=yes src-address-list=Them
add action=mark-connection chain=forward comment=Guests disabled=no
dst-address-list=Them new-connection-mark=guest passthrough=yes
add action=mark-packet chain=forward comment=Guests connection-mark=guest
disabled=no new-packet-mark=guest passthrough=no
add action=mark-connection chain=forward comment=Guards disabled=no
new-connection-mark=Guards passthrough=yes src-address-list=Guards
add action=mark-connection chain=forward comment=Guards disabled=no
dst-address-list=Guards new-connection-mark=Guards passthrough=yes
add action=mark-packet chain=forward comment=Guards connection-mark=Guards
disabled=no new-packet-mark=Guards passthrough=no
add action=mark-connection chain=forward comment=“Mark Me IGX” disabled=no
new-connection-mark=IGX passthrough=yes src-mac-address=00:25:00:49:E5:6B
add action=mark-connection chain=forward comment=“Mark Mike DMK” disabled=no
new-connection-mark=DMK passthrough=yes src-mac-address=D8:A2:5E:8D:FA:88
add action=mark-connection chain=forward comment=
“Mark Sharon’s iPod Touch DFS” disabled=no new-connection-mark=DFS
passthrough=yes src-mac-address=00:25:4B:EA:7A:11
add action=mark-connection chain=forward comment=“Mark Sandy JBS” disabled=no
new-connection-mark=JBS passthrough=yes src-mac-address=00:23:12:07:1C:47
add action=mark-connection chain=forward comment=“Mark Sharon DFS” disabled=
no new-connection-mark=DFS passthrough=yes src-mac-address=
00:19:E3:06:78:A0
add action=mark-connection chain=forward comment=“Mark Ricki-PS DGM”
disabled=no new-connection-mark=DGM passthrough=yes src-mac-address=
04:18:0F:79:21:1B
add action=mark-connection chain=forward comment=“Mark Ricki-iPod DGM”
disabled=no new-connection-mark=DGM passthrough=yes src-mac-address=
00:C6:10:C3:0D:BF
add action=mark-connection chain=forward comment=“Mar, Sharon-MarAir DFS”
disabled=no new-connection-mark=DFS passthrough=yes src-mac-address=
28:37:37:18:C7:72
add action=mark-connection chain=forward comment=“Mark Nikki DFS” disabled=no
new-connection-mark=DFS passthrough=yes src-mac-address=00:25:4B:93:9A:B5
add action=mark-connection chain=forward comment=“Mark Faithie DFS” disabled=
no new-connection-mark=DFS passthrough=yes src-mac-address=
00:1C:B3:B3:3C:C8
add action=mark-connection chain=forward comment=“Mark Millie DJM” disabled=
no new-connection-mark=DJM passthrough=yes src-mac-address=
10:40:F3:83:5D:0A
add action=mark-connection chain=forward comment=“Mark MikeMBP DMK” disabled=
no new-connection-mark=DMK passthrough=yes src-mac-address=
00:1C:B3:C0:81:DA
add action=mark-connection chain=forward comment=“Mark Mike’s iPod DMK”
disabled=no new-connection-mark=DMK passthrough=yes src-mac-address=
18:E7:F4:39:01:26
add action=mark-connection chain=forward comment=“Mark Gary DGM” disabled=no
new-connection-mark=DGM passthrough=yes src-mac-address=C8:BC:C8:D2:BA:2B
add action=mark-connection chain=forward comment=“Mark Gary’s iPad DGM”
disabled=no new-connection-mark=DGM passthrough=yes src-mac-address=
C8:BC:C8:58:1E:D1
add action=mark-connection chain=forward comment=“Mark Gary’s iPad DGM”
disabled=no new-connection-mark=DGM passthrough=yes src-mac-address=
C8:BC:C8:58:1E:D1
add action=mark-connection chain=forward comment=“Mark Mike’s something DMK”
disabled=no new-connection-mark=DMK passthrough=yes src-mac-address=
00:1B:63:24:77:9D
add action=mark-connection chain=forward comment=“Mark Marie DGM” disabled=no
new-connection-mark=DGM passthrough=yes src-mac-address=4C:0F:6E:91:A1:0C
add action=mark-connection chain=forward comment=“Mark Bobby’s iMac JBS”
disabled=no new-connection-mark=JBS passthrough=yes src-mac-address=
10:9A:DD:A2:F1:C7
add action=mark-connection chain=forward comment=“Mark Bobbys-Mac-Air JBS”
disabled=no new-connection-mark=JBS passthrough=yes src-mac-address=
10:93:E9:0C:5E:DE
add action=mark-connection chain=forward comment=“Mark Bobby-MacBookPro JBS”
disabled=no new-connection-mark=JBS passthrough=yes src-mac-address=
E4:CE:8F:45:E3:DC
add action=mark-connection chain=forward comment=“Mark Bobby-iPhone JBS”
disabled=no new-connection-mark=JBS passthrough=yes src-mac-address=
7C:C5:37:D1:9D:25
add action=mark-connection chain=forward comment=“Mark Joseph JBS” disabled=
no new-connection-mark=JBS passthrough=yes src-mac-address=
68:A3:C4:E0:E1:DA
add action=mark-connection chain=forward comment=“Mark Marvin DFS” disabled=
no new-connection-mark=DFS passthrough=yes src-mac-address=
68:A3:C4:90:6C:C2
add action=mark-connection chain=forward comment=“Mark JimPC DFS” disabled=no
new-connection-mark=DFS passthrough=yes src-mac-address=00:24:D6:05:ED:CC
add action=mark-connection chain=forward comment=“Mark Faithie’s iPod DFS”
disabled=no new-connection-mark=DFS passthrough=yes src-mac-address=
88:C6:63:95:F9:57
add action=mark-connection chain=forward comment=“Mark Mike’s Apple TV DMK”
disabled=no new-connection-mark=DMK passthrough=yes src-mac-address=
28:E7:CF:DE:0E:FE
add action=mark-connection chain=forward comment=“Mark Mike’ iPad 3g DMK”
disabled=no new-connection-mark=DMK passthrough=yes src-mac-address=
40:30:04:9D:09:AB
add action=mark-connection chain=forward comment=“Mark Keila’s WiFi DMK”
disabled=no new-connection-mark=DMK passthrough=yes src-mac-address=
28:6A:BA:84:83:50
add action=jump chain=forward comment=“Jump to accounting” disabled=no
jump-target=accounting
add action=mark-packet chain=accounting comment=“Mark Packets DFS”
connection-mark=DFS disabled=no new-packet-mark=DFS passthrough=no
add action=mark-packet chain=accounting comment=“Mark Packets JBS”
connection-mark=JBS disabled=no new-packet-mark=JBS passthrough=no
add action=mark-packet chain=accounting comment=“Mark Packets IGX”
connection-mark=IGX disabled=no new-packet-mark=IGX passthrough=no
add action=mark-packet chain=accounting comment=“Mark Packets DGM”
connection-mark=DGM disabled=no new-packet-mark=DGM passthrough=no
add action=mark-packet chain=accounting comment=“Mark Packets DMK”
connection-mark=DMK disabled=no new-packet-mark=DMK passthrough=no
add action=mark-packet chain=accounting comment=“Mark Packets DJM”
connection-mark=DJM disabled=no new-packet-mark=DJM passthrough=no
add action=return chain=accounting comment=Return disabled=no
add action=mark-connection chain=forward comment=
“Skype-to-skype Connection Mark” disabled=yes layer7-protocol=
skypetoskype new-connection-mark=skype passthrough=yes
add action=mark-connection chain=forward comment=“Skype Port Number”
disabled=yes dst-port=33447 new-connection-mark=skype passthrough=yes
protocol=tcp
add action=mark-connection chain=forward comment=“Skype Port Number”
disabled=yes dst-port=33447 new-connection-mark=skype passthrough=yes
protocol=udp
add action=mark-connection chain=forward comment=“Skype Port Number”
disabled=yes dst-port=“” new-connection-mark=skype passthrough=yes
protocol=tcp src-port=33447
add action=mark-connection chain=forward comment=“Skype Port Number”
disabled=yes new-connection-mark=skype passthrough=yes protocol=udp
src-port=33447
add action=mark-connection chain=forward comment=“SkypeOut Connection Mark”
disabled=yes layer7-protocol=skypeout new-connection-mark=skype
passthrough=yes
add action=mark-connection chain=forward comment=“SkypeOut Connection Mark”
disabled=yes layer7-protocol=“skypeout 3” new-connection-mark=skype
passthrough=yes
add action=mark-connection chain=forward comment=“SkypeOut Connection Mark”
disabled=yes layer7-protocol=“skypeout 2” new-connection-mark=skype
passthrough=yes
add action=change-dscp chain=forward comment=“Mark Skype TOS 46”
connection-mark=skype disabled=yes new-dscp=46 passthrough=yes
add action=mark-packet chain=forward comment=“Skype p1 with NO PASSTHROUGH”
connection-mark=skype disabled=yes new-packet-mark=p1 passthrough=no
src-address=192.168.7.0/24 src-address-list=“!US P2Pers”
add action=mark-packet chain=forward comment=“Skype p1 with NO PASSTHROUGH”
connection-mark=skype disabled=yes dst-address=192.168.7.0/24
dst-address-list=“!US P2Pers” new-packet-mark=p1 passthrough=no
\
apr/30/2012 07:02:04 by RouterOS 5.15
/queue tree
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0
max-limit=70k name=“Upload Queue” packet-mark=“” parent=ether1-gateway
priority=1
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0
max-limit=430k name=“Download Queue” packet-mark=“” parent=
ether2-local-master priority=1
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0
max-limit=5k name=“xGuest Up” packet-mark=guest parent=“Upload Queue”
priority=8 queue=“Upload Single Queue”
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0
max-limit=10k name=“xGuest Down” packet-mark=guest parent=
“Download Queue” priority=8 queue=“Download Single Queue”
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0
max-limit=30k name=xGuards packet-mark=Guards parent=“Download Queue”
priority=8 queue=“Download Single Queue”
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0
max-limit=10k name=xGuards_Up packet-mark=Guards parent=“Upload Queue”
priority=8 queue=“Upload Single Queue”
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=86k
max-limit=430k name=DMK packet-mark=DMK parent=“Download Queue” priority=
3 queue=Download
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=85k
max-limit=430k name=DGM packet-mark=DGM parent=“Download Queue” priority=
3 queue=Download
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=86k
max-limit=430k name=DFS packet-mark=DFS parent=“Download Queue” priority=
3 queue=Download
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=43k
max-limit=430k name=IGX packet-mark=IGX parent=“Download Queue” priority=
3 queue=Download
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=43k
max-limit=430k name=DJM packet-mark=DJM parent=“Download Queue” priority=
3 queue=Download
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=86k
max-limit=430k name=JBS packet-mark=JBS parent=“Download Queue” priority=
3 queue=Download
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=14k
max-limit=70k name=“DFS Up” packet-mark=DFS parent=“Upload Queue”
priority=3 queue=Upload
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=14k
max-limit=70k name=“DGM Up” packet-mark=DGM parent=“Upload Queue”
priority=3 queue=Upload
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=7k
max-limit=70k name=“DJM Up” packet-mark=DJM parent=“Upload Queue”
priority=3 queue=Upload
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=14k
max-limit=70k name=“DMK Up” packet-mark=DMK parent=“Upload Queue”
priority=3 queue=Upload
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=7k
max-limit=70k name=“IGX Up” packet-mark=IGX parent=“Upload Queue”
priority=3 queue=Upload
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=14k
max-limit=70k name=“JBS Up” packet-mark=JBS parent=“Upload Queue”
priority=3 queue=Upload