riro
October 25, 2011, 6:19am
1
Dear Admin,
At first take my greetings.
I would like to inform you that here we are using Mikrotik Router Board Level 4 for our ISP(Internet Service Provider) user Bandwidth controlling purpose.
This software was running perfectly. But recently i faced a serious problem with the software that is, when i add a new user in queues i can add the host and assign the Bandwidth but not able to monitor to observe the client uses. It show’s nothing. But some users i can monitor that how much Bandwidth they are using(green, Yellow and Red color) Some times the user is bypassing the committed Bandwidth what i assigned. that’s why we are in serious problem. I’ve added only 69 users in my Bandwidth controller. I also upgraded the software but no positive result found.
What service do you use for your client? PPoE Server , PPTP , Hotspot?
riro
October 25, 2011, 6:32am
3
I use it normally.
from winbox Add user at queues and assign bandwidth and allow that static ip in firewall and from arp i bind the MAC address.
riro
October 25, 2011, 6:34am
4
I use it normally.
from winbox Add user from queues and assign bandwidth and allow that static ip in firewall and from arp i bind the MAC address.
OK. Now, It is usual that user use a bit more than max limit but how much your users go above the limit?
riro
October 25, 2011, 6:55am
6
I’ve assign one of the user for 256/256kbps but i’m not able to see his uses from queues list and he is using 512kbps bandwidth i checked it from using torch.
Are you sure about IP and mac in arp?
riro
October 25, 2011, 10:25am
8
Yes. IP and MAC in arp. without entry at arp, how could he access internet.
So. . . Is it happens to just one user or more?
riro
October 25, 2011, 10:50am
10
It’s happens not only for a single user. Now i’ve 69 user’s added in my queues. If i add one more user i mean, 70 no. user then i faced this problem. i’m not able to include new users after 69. When i add, new users(after 69 also some user IP like,19, 36, 60 this IP) doesn’t shown any uses in my Mikrotik queues list. also several times new user(after 69 also some user IP like,19, 36, 60 this IP) bypassing my committed Bandwidth.
Feklar
October 25, 2011, 1:46pm
11
You aren’t giving enough information for people to really be of help here. Based off of the screenshot you are using simple queues. Those are processed in order just like firewall rules, if a more general one matches it further above, it will never reach the one further down. Provide an export of your queue rules and we can take a look at them.
riro
October 26, 2011, 4:38am
12
Feklar:
You aren’t giving enough information for people to really be of help here. Based off of the screenshot you are using simple queues. Those are processed in order just like firewall rules, if a more general one matches it further above, it will never reach the one further down. Provide an export of your queue rules and we can take a look at them.
Dear Feklar,
This Client I’m not able to Monitor his BW:
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
Firewalls Rules:
add action=accept chain=forward disabled=no src-address=10.10.10.19
riro
October 26, 2011, 11:49am
14
bambangs2komputer:
riro:
Feklar:
You aren’t giving enough information for people to really be of help here. Based off of the screenshot you are using simple queues. Those are processed in order just like firewall rules, if a more general one matches it further above, it will never reach the one further down. Provide an export of your queue rules and we can take a look at them.
Dear Feklar,
This Client I’m not able to Monitor his BW:
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both
Firewalls Rules:
add action=accept chain=forward disabled=no src-address=10.10.10.19
Cek
ip firewall nat
don’t user ip firewall nat like 10.10.10.0/24 user 10.10.10.2-10.10.10.100 (or up to you)
cek wiki: http://wiki.mikrotik.com/wiki/Manual:Queues_-_Burst
Thanks for your reply. Could you please explain me more. please post an example rules for NAT. I’m not clear..
Feklar
October 26, 2011, 1:24pm
15
When I said provide your simple queues, I mean provide ALL of them, go to the /queue menue and run export and paste the results here. Just picking two queues doesn’t give enough information at all for anyone to really help, we need to see your entire setup and understand your network. Otherwise at best we are just stabbing in the dark, we can’t read minds.
riro
October 27, 2011, 4:56am
16
Feklar:
When I said provide your simple queues, I mean provide ALL of them, go to the /queue menue and run export and paste the results here. Just picking two queues doesn’t give enough information at all for anyone to really help, we need to see your entire setup and understand your network. Otherwise at best we are just stabbing in the dark, we can’t read minds.
/queue simple
Hi.
The screen grab you have put up only shows us that it’s not working, and we kind of know that from your post.
If I were you, I’d throw a simple queue in right at the bottom that has an unlimited (999M/999M) limit that is a ‘catch all’ on your network(s). This will help you identify one of three issues;
Firstly, if you don’t see any traffic on that when Mr. Suhan is accessing bandwidth, and you don’t see it on Mr. Suhan’s individual queue then you know that a rule further up the chain is catching that IP and giving it a free pass through. I’ve had a quick look at your setup and I can’t see an obvious place where this is happening.
Secondly, if you DO see traffic on the catch all (assuming that ALL other users in that network are all queued appropriately) that when Mr. Suhan is accessing bandwidth then Mr. Suhan and his IP don’t match up. I.e. you have one ip in the queue and a different one on the NIC.
Thirdly, assuming you don’t want anyone accessing your bandwidth without being queued it’ll give you a warning that someone is accessing your bandwidth freely. (An alternative is to set this ‘catch all’ queue to 1k/1k limit and that way it’ll stop people getting access to your bandwidth UNLESS they are in a queue above).
I wrote a wiki on this kind of thing, lan2lan.
http://wiki.mikrotik.com/wiki/Lan2lan
JJOliver998.
If that helps, don’t forget to give karma!
riro
October 30, 2011, 10:31am
18
JJOliver998:
Hi.
The screen grab you have put up only shows us that it’s not working, and we kind of know that from your post.
If I were you, I’d throw a simple queue in right at the bottom that has an unlimited (999M/999M) limit that is a ‘catch all’ on your network(s). This will help you identify one of three issues;
Firstly, if you don’t see any traffic on that when Mr. Suhan is accessing bandwidth, and you don’t see it on Mr. Suhan’s individual queue then you know that a rule further up the chain is catching that IP and giving it a free pass through. I’ve had a quick look at your setup and I can’t see an obvious place where this is happening.
Secondly, if you DO see traffic on the catch all (assuming that ALL other users in that network are all queued appropriately) that when Mr. Suhan is accessing bandwidth then Mr. Suhan and his IP don’t match up. I.e. you have one ip in the queue and a different one on the NIC.
Thirdly, assuming you don’t want anyone accessing your bandwidth without being queued it’ll give you a warning that someone is accessing your bandwidth freely. (An alternative is to set this ‘catch all’ queue to 1k/1k limit and that way it’ll stop people getting access to your bandwidth UNLESS they are in a queue above).
I wrote a wiki on this kind of thing, lan2lan.
http://wiki.mikrotik.com/wiki/Lan2lan
JJOliver998.
If that helps, don’t forget to give karma!
Not Solved. Tried your instruction.
Can you please explain what happened when you tried my suggestion, simply saying it did not work is insufficient to allow me to help.
JJOliver998
dunga
November 1, 2011, 8:41am
20
hello,
I want to find out, how do i block other ip addresses in the network that are not being shaped not to access the internet, cus there is one user who is always changing his assigned ip address to another one that is free, so that he can browse unshaped.
As you can see, there are other ips that are not shaped, how do i restrict them from accessing the internet.
See the screenshot below
