Hi guys,
Could somebody please help me with this issue? I’ve been searching around but can’t find a solution that works…
I have a RB2011UAS-RM here, Port 6 is my WAN port (uplink), port 1 goes to office1, port 2 goes to office 2, port 3 goes to office 3, port 4 is for all kind of devices (eg printers etc).
Port 1, 2, 3, 4, 5 are in a bridge called “office”. So anyone can connect to anyone using gigabit and everyone can use the printers, NAS etc at full speed.
I’ve enabled DHCP server on bridge “office” with ip’s in the range 10.0.0.0/24 (10.0.0.1 = routerboard)
Our uplink is a 100Mbit (up/down) fiber line. Now i want to limit the speed from and to the internet to 5Mbit for every device. So i don’t want to limit it to 5Mbit for all devices together but really 5Mbit per IP address (on port 1, 2, 3, 4 and 5 or bridge “office”). All together there are between 15 and 35 devices connected to the mikrotik.
I’ve already seen some how-to’s but they don’t do limiting by ip but on the whole bridge.
Oh, please do explain step by step if possible. I’m just a new one using Mikrotik 
PCQ queuing can do what you want.
I have a similar case in my network.
Internal network: 10.182.0.0/16 ( distributed over multiple locations ) without limits
For external traffic we have:
5M Down / 384k UP ( per IP )
additionally
Also a 10M/786k limit for all client behind 1 rounter/ap
how we configured it:
the queues:
/queue> export
# dec/07/2013 16:51:21 by RouterOS 6.4
# software id = 9XE8-ITT8
#
/queue type
add kind=pcq name=pcq-down-5M pcq-burst-rate=7M pcq-burst-threshold=3M pcq-classifier=\
dst-address pcq-dst-address6-mask=64 pcq-limit=10 pcq-rate=5M pcq-src-address-mask=0 \
pcq-src-address6-mask=64
add kind=pcq name=pqc-up-384k pcq-burst-rate=512k pcq-burst-threshold=256k pcq-classifier=\
src-address pcq-dst-address-mask=0 pcq-dst-address6-mask=64 pcq-limit=10 pcq-rate=384k \
pcq-src-address6-mask=64
/queue tree
add max-limit=10M name=ape-down-limit packet-mark=ape-down-traffic parent=global queue=\
pcq-down-5M
add max-limit=768k name=ape-up-limit packet-mark=ape-up-traffic parent=global queue=\
pqc-up-384k
ip firewall rules to mark traffic
/ip firewall mangle> export
# dec/07/2013 16:55:43 by RouterOS 6.4
# software id = 9XE8-ITT8
#
/ip firewall mangle
add action=mark-packet chain=prerouting dst-address=!10.182.0.0/16 in-interface=w1vape \
new-packet-mark=ape-up-traffic
add action=mark-packet chain=postrouting new-packet-mark=ape-down-traffic out-interface=\
w1vape src-address=!10.182.0.0/16
you need to adapt it a bit for your case but it should show how you can use pcq only on specific traffic.
and under http://wiki.mikrotik.com/wiki/Manual:Queues_-_PCQ you can find a lot helpful information.
i also recommend to remove the bridge and use master/slave functionality instead.
like:
Port 1 Master with slaves 2-5
Port 6 Master without slaves
in this configuration (internal)traffic between ports 1-5 is completely handled by the switchchip and not processed by the cpu.