Hey Guyz!
I have a small office network running on RB2011. I’m running 3 subnet in my local side. Everyone connects via Hotspot with their own bandwidth limitation. But the problem is I have a CentOS 7 File Server on the network (192.168.12.2).
Everyone should use the File Server without any bandwidth limitation, right? Users should get local file transfer speed like 10mbps. I don’t know how to do that.
Can anyone tell me how to exclude one or several IP addresses from limiting bandwidth???
192.168.10.0 > Hotspot with bandwidth limit
192.168.11.0 > PPPoE with bandwidth limit
192.168.12.0 > File Server Network (Static)
My Configuration is:
# aug/18/2015 20:54:34 by RouterOS 6.27
# software id = I0KX-8JXS
#
/interface bridge
add name=mplcbd-bridge
/interface ethernet
set [ find default-name=ether1 ] comment=WAN
set [ find default-name=ether2 ] comment="MPLCBD Network (Hotspot)"
set [ find default-name=ether3 ] master-port=ether2
set [ find default-name=ether4 ] master-port=ether2
set [ find default-name=ether5 ] master-port=ether2
set [ find default-name=ether6 ] comment="MPLCBD Network (PPPoE)"
set [ find default-name=ether7 ] master-port=ether6
set [ find default-name=ether8 ] master-port=ether6
set [ find default-name=ether9 ] master-port=ether6
set [ find default-name=ether10 ] comment="Data Connectivity"
set [ find default-name=sfp1 ] disabled=yes
/interface pppoe-client
add add-default-route=yes dial-on-demand=yes disabled=no interface=ether1 \
mrru=1600 name=SebaNet password=9030799 use-peer-dns=yes user=\
marketplace5.104
/interface wireless
set [ find default-name=wlan1 ] disabled=no l2mtu=2290 mode=ap-bridge \
wireless-protocol=802.11
/ip neighbor discovery
set ether1 comment=WAN
set ether2 comment="MPLCBD Network (Hotspot)"
set ether6 comment="MPLCBD Network (PPPoE)"
set ether10 comment="Data Connectivity"
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
add dns-name=mplcbd.network hotspot-address=192.168.10.1 login-by=http-chap \
name=hsprof1
/ip hotspot user profile
add idle-timeout=1h name=content-team open-status-page=http-login rate-limit=\
512K/512K shared-users=2 transparent-proxy=yes
add idle-timeout=1h name=mgmt-team open-status-page=http-login rate-limit=\
1024K/1024K transparent-proxy=yes
add name=special open-status-page=http-login transparent-proxy=yes
add idle-timeout=1h name=Guest open-status-page=http-login rate-limit=\
512K/512K shared-users=5 transparent-proxy=yes
add idle-timeout=1h name=General-User open-status-page=http-login rate-limit=\
256K/256K transparent-proxy=yes
/ip pool
add name=hs-pool-1 ranges=192.168.10.2-192.168.10.100
add name=ppp-pool ranges=192.168.11.2-192.168.11.100
add name=data-pool ranges=192.168.12.2-192.168.12.12
/ip dhcp-server
add address-pool=data-pool disabled=no interface=ether10 name=data-dhcp
add address-pool=hs-pool-1 disabled=no interface=mplcbd-bridge lease-time=1h \
name=dhcp1
/ip hotspot
add address-pool=hs-pool-1 disabled=no interface=mplcbd-bridge name=hotspot1 \
profile=hsprof1
/port
set 0 name=serial0
/tool user-manager customer
set admin access=\
own-routers,own-users,own-profiles,own-limits,config-payment-gw password=\
TGB5tgb
add access="own-routers,own-users,own-profiles,own-limits,config-payment-gw,pa\
rent-routers,parent-users,parent-profiles,parent-limits,parent-payment-gw" \
backup-allowed=no disabled=no login=superuser parent=admin password=\
TGB5tgb paypal-accept-pending=no paypal-allowed=no \
paypal-secure-response=no permissions=full signup-allowed=no time-zone=\
-00:00
/tool user-manager profile
add name=1m name-for-users=khprana override-shared-users=unlimited owner=\
admin price=0 starts-at=logon validity=0s
/tool user-manager profile limitation
add address-list="" download-limit=0B group-name="" ip-pool="" name=1M owner=\
admin rate-limit-min-rx=1048576B rate-limit-min-tx=1048576B \
rate-limit-priority=2 rate-limit-rx=1048576B rate-limit-tx=1048576B \
transfer-limit=0B upload-limit=0B uptime-limit=0s
add address-list="" download-limit=0B group-name="" ip-pool="" name=2M owner=\
admin rate-limit-min-rx=2097152B rate-limit-min-tx=2097152B \
rate-limit-priority=1 rate-limit-rx=2097152B rate-limit-tx=2097152B \
transfer-limit=0B upload-limit=0B uptime-limit=0s
add address-list="" download-limit=0B group-name="" ip-pool="" name=limit1 \
owner=admin rate-limit-min-rx=524288B rate-limit-min-tx=524288B \
rate-limit-priority=3 rate-limit-rx=524288B rate-limit-tx=524288B \
transfer-limit=0B upload-limit=0B uptime-limit=0s
/interface bridge port
add bridge=mplcbd-bridge interface=ether2
add bridge=mplcbd-bridge interface=wlan1
/ip address
add address=192.168.10.1/24 interface=ether2 network=192.168.10.0
add address=192.168.11.1/24 interface=ether6 network=192.168.11.0
add address=192.168.12.1/24 interface=ether10 network=192.168.12.0
/ip dhcp-server network
add address=192.168.10.0/24 comment="hotspot network" gateway=192.168.10.1
/ip dns
set allow-remote-requests=yes cache-size=10000KiB servers=8.8.8.8,8.8.4.4
/ip firewall address-list
add address=192.168.10.0/24 comment=MyServerSubnet list=safe
add address=192.168.11.0/24 comment=MyServerSubnet list=safe
add address=192.168.12.0/24 comment=MyServerSubnet list=safe
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=add-src-to-address-list chain=input protocol=tcp psd=21,3s,3,1
add action=add-src-to-address-list address-list=Block_port_Scanner chain=\
input protocol=tcp psd=21,3s,3,1
add chain=input comment="Allow connections from safe list" in-interface=\
ether1 src-address-list=safe
add action=drop chain=input comment="Drop Invalid Connections" \
connection-state=invalid
add action=drop chain=input comment="Drop External DNS requests" dst-port=\
53 in-interface=ether1 protocol=tcp
add action=drop chain=input comment="Drop External DNS requests" dst-port=\
53 in-interface=ether1 protocol=udp
add chain=input comment="Allow Established Connections" connection-state=\
established
add chain=input comment="Allow ICMP" protocol=icmp
add chain=input comment="Allow LAN Connections" in-interface=!ether1 \
src-address=192.168.10.0/24
add chain=input comment="Allow LAN Connections" in-interface=!ether1 \
src-address=192.168.11.0/24
add chain=input comment="Allow LAN Connections" in-interface=!ether1 \
src-address=192.168.12.0/24
add action=drop chain=input comment="Drop Everything Else"
add action=log chain=input comment="Log Any Other Inbound Traffic" \
log-prefix="Inbound Alert"
add action=drop chain=forward comment="Drop Invalid Connections" \
connection-state=invalid protocol=tcp
add chain=forward comment="Allow Already Established Connections" \
connection-state=established
add chain=forward comment="Allow Related Connections" connection-state=\
related
add chain=forward comment="Allow All New Outbound LAN Connections" \
connection-state=new out-interface=ether1
add action=drop chain=forward comment="Block Bogon IP Addresses" \
src-address=0.0.0.0/8
add action=drop chain=forward comment="Block Bogon IP Addresses" \
dst-address=0.0.0.0/8
add action=drop chain=forward comment="Block Bogon IP Addresses" \
src-address=127.0.0.0/8
add action=drop chain=forward comment="Block Bogon IP Addresses" \
dst-address=127.0.0.0/8
add action=drop chain=forward comment="Block Bogon IP Addresses" \
src-address=224.0.0.0/3
add action=drop chain=forward comment="Block Bogon IP Addresses" \
dst-address=224.0.0.0/3
add action=jump chain=forward comment="Make Jumps to New Chains" \
jump-target=tcp protocol=tcp
add action=jump chain=forward comment="Make Jumps to New Chains" \
jump-target=udp protocol=udp
add action=jump chain=forward comment="Make Jumps to New Chains" \
jump-target=icmp protocol=icmp
add action=drop chain=tcp comment="Deny TFTP" dst-port=69 protocol=tcp
add action=drop chain=tcp comment="Deny RPC Portmapper" dst-port=111 \
protocol=tcp
add action=drop chain=tcp comment="Deny RPC Portmapper" dst-port=135 \
protocol=tcp
add action=drop chain=tcp comment="Deny NBT" dst-port=137-139 protocol=tcp
add action=drop chain=tcp comment="Deny CIFS" dst-port=445 protocol=tcp
add action=drop chain=tcp comment="Deny NFS" dst-port=2049 protocol=tcp
add action=drop chain=tcp comment="Deny NetBus" dst-port=12345-12346 \
protocol=tcp
add action=drop chain=tcp comment="Deny NetBus" dst-port=20034 protocol=tcp
add action=drop chain=tcp comment="Deny BackOffice" dst-port=3133 protocol=\
tcp
add action=drop chain=tcp comment="Deny DHCP" dst-port=67-68 protocol=tcp
add action=drop chain=udp comment="Deny TFTP" dst-port=69 protocol=udp
add action=drop chain=udp comment="Deny PRC Portmapper" dst-port=111 \
protocol=udp
add action=drop chain=udp comment="Deny PRC Portmapper" dst-port=135 \
protocol=udp
add action=drop chain=udp comment="Deny NBT" dst-port=137-139 protocol=udp
add action=drop chain=udp comment="Deny NFS" dst-port=2049 protocol=udp
add action=drop chain=udp comment="Deny BackOffice" dst-port=3133 protocol=\
udp
add chain=icmp comment="Echo Reply" icmp-options=0:0 protocol=icmp
add chain=icmp comment="Net Unreachable" icmp-options=3:0 protocol=icmp
add chain=icmp comment="Host Unreachable" icmp-options=3:1 protocol=icmp
add chain=icmp comment="Host Unreachable Fragmentation Required" \
icmp-options=3:4 protocol=icmp
add chain=icmp comment="Allow Source Quench" icmp-options=4:0 protocol=icmp
add chain=icmp comment="Allow Echo Request" icmp-options=8:0 protocol=icmp
add chain=icmp comment="Allow Time Exceed" icmp-options=11:0 protocol=icmp
add chain=icmp comment="Allow Parameter Bad" icmp-options=12:0 protocol=\
icmp
add action=drop chain=icmp comment="Deny All Other Types"
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
src-address=192.168.10.0/24
add action=masquerade chain=srcnat src-address=192.168.11.0/24
add action=masquerade chain=srcnat src-address=192.168.12.0/24
add action=masquerade chain=srcnat
/ip firewall service-port
set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set sip disabled=yes
set pptp disabled=yes
/ip hotspot user
add name=guest password=guest123 profile=special
add name=humayun password=huma!@# profile=General-User
add email=mukti.bormon@marketplacebd.com name=mukti password=kti!@# profile=\
content-team
add name=kabir password=kabir profile=special
add name=liza password=liz123 profile=special
add name=sadi password=adi!@# profile=content-team
add name=sohel password=hel!@# profile=mgmt-team
/ip service
set www disabled=yes
set api disabled=yes
/ip socks
set enabled=yes
/ip socks access
add dst-port=21 src-address=192.168.10.20
add dst-port=1024-65535
add action=deny
/ip upnp
set enabled=yes
/ip upnp interfaces
add interface=ether1 type=external
add interface=ether2 type=internal
/system clock
set time-zone-name=Asia/Dhaka
/system identity
set name=MPLCBD
/tool user-manager database
set db-path=user-manager
/tool user-manager router
add coa-port=1700 customer=admin disabled=no ip-address=127.0.0.1 log=\
auth-fail name=MPLCBD shared-secret=TGB5tgb use-coa=no
/tool user-manager user
add customer=admin disabled=no name=khprana password=TGB5tgb shared-users=2 \
wireless-enc-algo=none wireless-enc-key="" wireless-psk=""
Any help is appreciated.
Thanks in advance. 