Need Help!!!

RouterOS General
1

I want to know about my config that I used. If there’s something wrong please give me your suggestion…


ip firewall mangle> print
Flags: X - disabled, I - invalid, D - dynamic
0 src-address=10.10.88.2/32 action=passthrough mark-connection=con1

1 connection=con1 action=accept mark-flow=hm1

2 src-address=10.10.88.9/32 action=passthrough mark-connection=con2

3 connection=con2 action=accept mark-flow=hm2

4 src-address=10.10.88.4/32 action=passthrough mark-connection=con3

5 connection=con3 action=accept mark-flow=hm3

6 src-address=10.10.234.2/32 action=passthrough mark-connection=CON4

7 connection=CON4 action=accept mark-flow=hm4

8 src-address=10.10.99.2/32 action=passthrough
mark-connection=con5

9 connection=con5 action=accept mark-flow=hm5


queue tree>

44 name=“Up” parent=global-in flow=“” limit-at=94000
queue=red priority=8 max-limit=96000 burst-limit=0
burst-threshold=0 burst-time=0

45 name=“Dw” parent=global-out flow=“” limit-at=94000
queue=red priority=8 max-limit=96000 burst-limit=0
burst-threshold=0 burst-time=0

46 X name=“hm2-down” parent=Dw flow=hm2 limit-at=6000 queue=red
priority=7 max-limit=40000 burst-limit=0 burst-threshold=0
burst-time=0

47 X name=“hm2-up” parent=Up flow=hm2 limit-at=6000 queue=red
priority=7 max-limit=40000 burst-limit=0 burst-threshold=0
burst-time=0

48 name=“hm3-down” parent=Dw flow=hm3 limit-at=8000
queue=red priority=7 max-limit=16000 burst-limit=0
burst-threshold=0 burst-time=0

49 name=“hm3-up” parent=Up flow=hm3 limit-at=8000
queue=red priority=7 max-limit=16000 burst-limit=0
burst-threshold=0 burst-time=0

50 name=“hm-dw” parent=Dw flow=hm limit-at=6000 queue=red
priority=7 max-limit=16000 burst-limit=0 burst-threshold=0
burst-time=0

51 name=“hm-up” parent=Up flow=hm limit-at=6000 queue=red
priority=7 max-limit=16000 burst-limit=0 burst-threshold=0
burst-time=0

52 name=“hm4-Dw” parent=Dw flow=hm4 limit-at=6000 queue=red
priority=7 max-limit=20000 burst-limit=0 burst-threshold=0
burst-time=0
53 name=“hm4-Up” parent=Up flow=hm4 limit-at=6000 queue=red
priority=7 max-limit=20000 burst-limit=0 burst-threshold=0
burst-time=0

54 name=“hm5-DW” parent=Dw flow=hm5 limit-at=20000
queue=red priority=6 max-limit=40000 burst-limit=0
burst-threshold=0 burst-time=0

55 name=“hm5-Up” parent=Up flow=hm5 limit-at=20000
queue=red priority=6 max-limit=40000 burst-limit=0
burst-threshold=0 burst-time=0

How if I change hm,hm2…hm5 with max-limit=96000 so they can share the parent bandwidth(96000) and get their limit if all the clients use the bandwidth.

Helpp plzzz :cry: :cry: :cry:

2

sorry, but what is your problem? do you expect some, or just asking if this is the optimal configuration. in this case, please share some information about your scenario.

3

Hi Mag,

Would you give me your email so I can send you my config? I got problem with the mangle and queue tree.

I send email to mikrotik support and they said “You have market only upload traffic” :frowning:

my email : spersonal@hotmail.com

4

Hello... this is mangle, queue and rule config. Please someone help me to see my config and give me your suggestion.

I would like to share the parent (in queue tree) 128kbps to 5 clients, each client get limit 128/5=25.6kbps and max limit=128kbps. And if there are 2 clients connected or used the bandwidth, do they get 128/2=64kbps???

ip firewall> print

NAME POLICY

0 input accept
1 forward accept
2 output accept

ip firewall mangle> print
Flags: X - disabled, I - invalid, D - dynamic
0 src-address=10.10.88.2/32 action=passthrough mark-connection=con_hm
1 connection=con_hm action=accept mark-flow=hm
2 src-address=10.10.88.9/32 action=passthrough mark-connection=con_nb
3 connection=con_nb action=accept mark-flow=nb
4 src-address=10.10.88.4/32 action=passthrough mark-connection=con_hm2
5 connection=con_hm2 action=accept mark-flow=hm2
6 src-address=10.10.234.2/32 action=passthrough mark-connection=CON-hm3
7 connection=CON-hm3 action=accept mark-flow=hm3
8 src-address=10.10.99.2/32 action=passthrough mark-connection=con_hm5
9 connection=con_hm5 action=accept mark-flow=hm5

ip firewall rule input> print
Flags: X - disabled, I - invalid, D - dynamic
0 protocol=icmp action=accept
1 protocol=tcp action=accept
2 protocol=udp action=accept
3 action=drop log=yes

ip firewall rule forward> print
Flags: X - disabled, I - invalid, D - dynamic
0 src-address=:135-139 protocol=tcp action=drop
1 src-address=:135-139 protocol=udp action=drop
2 src-address=:445 protocol=tcp action=drop
3 src-address=:445 protocol=udp action=drop
4 dst-address=:445 protocol=tcp action=drop
5 dst-address=:135-139 protocol=tcp action=drop
6 dst-address=:445 protocol=udp action=drop
7 dst-address=:135-139 protocol=udp action=drop
8 src-address=10.10.234.2/32 in-interface=Local action=accept
9 src-address=10.10.123.2/32 in-interface=Wireless protocol=tcp action=accept
10 src-address=10.10.99.2/32 in-interface=Wireless protocol=tcp action=accept
11 src-address=10.10.88.2/32 in-interface=Local out-interface=Public protocol=tcp action=accept
12 src-address=10.10.88.4/32 in-interface=Local out-interface=Public protocol=tcp action=accept
13 src-address=203...*/28 in-interface=Public protocol=tcp action=accept

35 src-address=10.10.234.0/24 protocol=tcp action=drop
36 src-address=10.10.123.0/24 protocol=tcp action=drop
37 src-address=10.10.88.0/24 protocol=tcp action=drop
38 src-address=10.10.99.0/24 protocol=tcp action=drop
39 protocol=icmp action=accept
40 protocol=udp action=accept
41 protocol=tcp action=accept
42 action=drop log=yes

ip firewall rule output> print
Flags: X - disabled, I - invalid, D - dynamic
0 protocol=icmp action=accept
1 protocol=tcp action=accept
2 protocol=udp action=accept
3 action=drop log=yes

queue interface> print

INTERFACE QUEUE

0 Wireless red
1 Public ethernet-default
2 ether1 ethernet-default
3 Local red

queue tree> print
Flags: X - disabled, I - invalid, D - dynamic
44 name="Up" parent=global-in flow="" limit-at=94000
queue=red priority=8 max-limit=96000 burst-limit=0
burst-threshold=0 burst-time=0
45 name="Down" parent=global-out flow="" limit-at=94000
queue=red priority=8 max-limit=96000 burst-limit=0
burst-threshold=0 burst-time=0
48 name="hm2-down" parent=Dw flow=hm2 limit-at=8000
queue=red priority=7 max-limit=16000 burst-limit=0
burst-threshold=0 burst-time=0
49 name="hm2-up" parent=Up flow=hm2 limit-at=8000
queue=red priority=7 max-limit=16000 burst-limit=0
burst-threshold=0 burst-time=0
50 name="hm-down" parent=Dw flow=hm limit-at=6000 queue=red
priority=7 max-limit=16000 burst-limit=0 burst-threshold=0
burst-time=0
51 name="hm-up" parent=Up flow=hm limit-at=6000 queue=red
priority=7 max-limit=16000 burst-limit=0 burst-threshold=0
burst-time=0
52 name="hm3-down" parent=Dw flow=hm3 limit-at=6000 queue=red
priority=7 max-limit=20000 burst-limit=0 burst-threshold=0
burst-time=0
53 name="hm3-Up" parent=Up flow=hm3 limit-at=6000 queue=red
priority=7 max-limit=20000 burst-limit=0 burst-threshold=0
burst-time=0
54 name="hm5-Down" parent=Dw flow=hm5 limit-at=20000
queue=red priority=6 max-limit=40000 burst-limit=0
burst-threshold=0 burst-time=0
55 name="hm5-Up" parent=Up flow=hm5 limit-at=20000
queue=red priority=6 max-limit=40000 burst-limit=0
burst-threshold=0 burst-time=0

queue type> print
0 name="default" kind=pfifo bfifo-limit=15000 pfifo-limit=50 red-limit=60
red-min-threshold=10 red-max-threshold=50 red-burst=20 sfq-perturb=5
sfq-allot=1514 pcq-rate=0 pcq-limit=50 pcq-classifier=""
1 name="ethernet-default" kind=pfifo bfifo-limit=15000 pfifo-limit=10
red-limit=60 red-min-threshold=10 red-max-threshold=50 red-burst=20
sfq-perturb=5 sfq-allot=1514 pcq-rate=0 pcq-limit=50 pcq-classifier=""
2 name="wireless-default" kind=sfq bfifo-limit=15000 pfifo-limit=50
red-limit=60 red-min-threshold=10 red-max-threshold=50 red-burst=20
sfq-perturb=5 sfq-allot=1514 pcq-rate=0 pcq-limit=50 pcq-classifier=""
3 name="synchronous-default" kind=red bfifo-limit=15000 pfifo-limit=50
red-limit=60 red-min-threshold=10 red-max-threshold=50 red-burst=20
sfq-perturb=5 sfq-allot=1514 pcq-rate=0 pcq-limit=50 pcq-classifier=""
4 name="red" kind=red bfifo-limit=15000 pfifo-limit=50
red-limit=50 red-min-threshold=12 red-max-threshold=30 red-burst=20
sfq-perturb=5 sfq-allot=1514 pcq-rate=0 pcq-limit=50
pcq-classifier=src-address,dst-address

queue simple> print
Flags: X - disabled, I - invalid, D - dynamic
1 name="hm4" target-address=10.10.123.2/32 dst-address=0.0.0.0/0
interface=Wireless queue= red priority=6
limit-at=32000/32000 max-limit=32000/32000 burst-limit=33500/33500
burst-threshold=32000/32000 burst-time=240/240

5

hello,
i checked your config, but it is beyond my actual experience with MT, sorry. (perhaps in a few weeks… :wink:

but it should be possible to reduce your config to one client and then adding rule by rule, watching the traffic matching or unmatching.

(my e-mail address should be shown in the member list)