Limiting download/upload per Access Point

Hi, i have one main router and then i have a tp link TL-SG1008PE that has ethernet cables going to each access point.

I can access each access point by going to the IP
http://192.168.1.2
http://192.168.1.3
etc

Now i want to limit the maximum download and upload for each access point.

The way i am trying to do this
1)create queue type pcq rate 10 dsc address tick.
2)create queue type pcq rate 10 src address tick
3)create simple queue and on advanced set target download and target upload the on queue type i set the 1 and 2 i created above.

My plan was to do this to all 7 IP’s since i want to set difference speeds to each access point but i fail to do this.

Am i doing something wrong ? And what is the simpliest way to just limit the upload and download for each access point ?

Thank you so much
wtf1.png

Hello, just to be sure
Your APs are natting? If not, all devices are getting different IPs and the queue will not apply to this traffic (If I understand well)
Regards,
Damián

Hello excuse me but i am fairly new to this since i did not do the installation of those. I have full access to the interface at http://192.168.1.2 and i can check something if you wish.

How can i apply the queue to each IP ?

APs are Mikrotik?
In any case, try to identify if devices connected to APs are getting IP addresses in 192.168.1.0/24 (192.168.1.X), if not, the APs probably are natting.

Regards,
Damián

Yes all the access poinst are the same and they are micro tik. The ips are those:
http://192.168.1.2
http://192.168.1.3
http://192.168.1.4
http://192.168.1.5

i can access all of them. How can i limit the download/upload.

Sorry, maybe I did not explain it well
I asked for the IPs of devices connected to the APs, not about the AP addresses, I did read the first note.
For example, if you connect a computer with wireless to one of these APs, which IP address do you get in the computer?

Regards,
Damián

It’s my fault most likely for not understanding. I appreciate your help .

I connected to the wifi on one of the access points and went to check my IP, it’s .REMOVED which it seems like it’s the main routers IP ( i think)

Hmmmm,

It is weird to me that you have a public IP in your client devices.
I think I will need more information
Please try to give us an export of the router and an export of any AP

To upload the complete config, you could do the following:

  • Connect to the Mikrotik from Winbox (it can be downloaded from https://mikrotik.com/download)
  • Open a new terminal and write “export file=mikrotiksettings.rsc” without the quotes
  • Go to “Files” section (In winbox)
  • Search the file “mikrotiksettings.rsc”, and drag and drop this to any folder on your computer
  • Then you could open this file with any text editor app
  • Just hide sensitive information and copy the text here

https://wiki.mikrotik.com/wiki/Manual:Configuration_Management

Regard,
Damián

Thank you so much for your help. It’s not exactly clients. I just live in a building that has 7 apartments and 1 router so we installed 7 access points so each apartment has internet.

Here is the file

oct/18/2023 09:01:10 by RouterOS 6.49.10

software id = DGXE-PR7K

model = RouterBOARD cAP L-2nD

serial number = A6070A039D02

/interface bridge
add name=bridge1
/interface wireless
set [ find default-name=wlan1 ] antenna-gain=0 band=2ghz-b/g/n country=
no_country_set disabled=no frequency-mode=manual-txpower mode=ap-bridge
ssid=“5” station-roaming=enabled wireless-protocol=802.11
/interface ethernet
set [ find default-name=ether1 ] advertise=
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk mode=dynamic-keys
supplicant-identity=MikroTik wpa-pre-shared-key=WIFIPASS123@
wpa2-pre-shared-key=WIFIPASS123@
/queue type
add kind=pcq name="MaximumDownloadSpeed " pcq-classifier=src-address
pcq-rate=6M
add kind=pcq name="MaximumUploadSpeed " pcq-classifier=dst-address pcq-rate=
2M
/queue simple
add name=MaximumSpeedUser queue="MaximumUploadSpeed /MaximumDownloadSpeed "
/user group
set full policy=“local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,pas
sword,web,sniff,sensitive,api,romon,dude,tikapp”
/interface bridge port
add bridge=bridge1 interface=ether1
add bridge=bridge1 interface=wlan1
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/interface list member
add interface=ether1 list=WAN
add interface=wlan1 list=LAN
/ip address
add address=192.168.1.5/24 interface=wlan1 network=192.168.1.0
/ip dns
set servers=192.168.1.1
/ip route
add distance=1 gateway=192.168.1.1
/ip ssh
set allow-none-crypto=yes forwarding-enabled=remote
/system clock
set time-zone-name=Europe/Athens

Hello,

It seems you added the queues in the APs side, I allways add the queues in the router, I dont know this should work as IMHO your APs are like switches connecting together wired and wireless clients (When I say “client”, I mean workstations, mobile phones, tablets, etc)
The APs are not the default gateway of the clients
The problem is that your router probably does not know which client belong to which AP, as they are all together, I can not be sure because I did not see the router settings.
One option is to configure VLANs but maybe this will be difficult
Another way is to configure APs as routers itself and set the queues in the main router but also this is difficult to be done by someone new in this

Anyone knows if queues work on bridged APs?

Regards,
Damián

Given the context, this seems to be the best approach.
Separate all traffic per AP and then queue can be done without problems on the router.

I think it can also be done using queue on AP with interface as limiting factor (not subnet).
But VLANs are for me the correct way forward.

Yes i can see the access point is set up as bridge.

Can you explain how can i configure it as VLAN?
Untitled.png

Sorry, I missed the notification

It is not so easy, this could help to start:
https://help.mikrotik.com/docs/display/ROS/VLAN

You should do the following:

In the Router/Firewall:

  • Configure a VLAN for each AP, each one with different VLAN ID, each one in the interface where the AP is connected
  • Configure an IP for each VLAN
  • Configure a DHCP Server for each VLAN

In the APs:
If you have only wireless clients, you could just add the VLAN tag in the wireless settings
If you have wired and wireless clients, this will be more difficult.

After this, you could apply the queues in the router/firewall, for each VLAN as target

Other way, if you dont want to know hoy many clients has each AP, and if you dont need to have control over APs, you could configure each AP as Router, then you should apply the queues in the router for each AP IP address as target
https://help.mikrotik.com/docs/display/ROS/First+Time+Configuration

Regards,
Damián