Hello!
There is an IKEv2 vpn server on Mikrotik. Certificate Authorization. Based on the remote certificate using ipsec identities in ipsec mode configs, either a pool of addresses from the 10.0.10.0/24 network or a single address from the same subnet is issued. Also, some clients are given addresses from the 192.168.254.0/24 network also based on certificates. Task: -limit the speed to clients of the vpn server at addresses 10.0.10.0/24 and do not touch clients in the pool 192.168.254.0/24. through simple queues when specifying target 10.0.10.0/24 does not work, as well as when specifying specific addresses from this pool, the speed is not limited. I tried to mark packets in the mangle on the condition of ip addresses in the pool 10.0.10.0 and already cut the speed by marking, the counter in the mangle runs, but the speed is not cut, probably due to inexperience. please help, can anyone come across such a case.
See this post from sindy:
https://forum.mikrotik.com/posting.php?mode=quote&p=801117