Hi buddy…
i have a big challenge here, below is my pcq setup…
/ip firewall mangle add action=mark-packet chain=prerouting disabled=no in-interface=wlan1-LAN new-packet-mark=client_upload passthrough=yes
/ip firewall mangle add action=mark-packet chain=prerouting disabled=no in-interface=ether1-WAN new-packet-mark=client_download passthrough=yes
/queue type add kind=pcq name=PCQ_download pcq-burst-rate=0 pcq-burst-threshold=0 pcq-burst-time=10s pcq-classifier=dst-address pcq-dst-address-mask=32 pcq-dst-address6-mask=128 pcq-limit=50 pcq-rate=1M pcq-src-address-mask=32 pcq-src-address6-mask=128 pcq-total-limit=50000
/queue type add kind=pcq name=PCQ_upload pcq-burst-rate=0 pcq-burst-threshold=0 pcq-burst-time=10s pcq-classifier=src-address pcq-dst-address-mask=32 pcq-dst-address6-mask=128 pcq-limit=50 pcq-rate=1M pcq-src-address-mask=32 pcq-src-address6-mask=128 pcq-total-limit=50000
/queue simple add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both disabled=no interface=all limit-at=0/0 max-limit=0/0 name=“local download” packet-marks=“” parent=none priority=8 queue=PCQ_upload/PCQ_download target-addresses=0.0.0.0/0 total-queue=default-small
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=2M name=queue1 packet-mark=client_download parent=global-in priority=8 queue=PCQ_download
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=2M name=queue2 packet-mark=client_upload parent=global-out priority=8 queue=PCQ_upload
the gateway of the testing laptop is the 10.10.180.1 which also to get the login page as well…
but the issue is, when i turn on the ip-firewall-vpn, the routerboard will limited the http connection up to 6 to the gateway and become i not able to get the login page…
there is no ip firewall filter rule as i use it to make transparent bandwidth control, i just bridge 2 ethernet card only…
Dear Mikrotik, my ticket number is Ticket#2012061166000199, appreciate if you can get you feedback on this, will this is due to the mikrotik issue as i just enable the ip-firewall-vpn then this thing happened…
thanks…


