p2p shaping on 2.9.10 using mangle/queues

RouterOS General
1

I hope this is a simple one for someone because I just can’t seem to make it work as well as it did on version 2.8.28. I am trying to limit EVERY connection to a maximum up/down rate of 40kbps. In other words, I have 300 users and I would like each users attempt at p2p to be limited to 40kbps…Here are the rules I am [trying] to use, but it seems to make p2p connections die, as well as I never see any traffic in the global-in queue when i do the command /queue tree pri byt int=1.

Can someone tell me what I am doing wrong??

ip firewall mangle add chain=forward p2p=all-p2p action=mark-connection new-connection-mark=p2p_conn;

ip firewall mangle add chain=forward connection-mark=p2p_conn action=mark-packet new-packet-mark=p2p;

queue tree add parent=global-in packet-mark=p2p limit-at=40000 max-limit=40000 priority=8;

queue tree add parent=global-out packet-mark=p2p limit-at=40000 max-limit=40000 priority=8

2

ok, I have just modified to the following…is this correct?

ip firewall mangle add chain=forward src-address=10.5.54.1/23 p2p=all-p2p action=mark-connection new-connection-mark=p2p_conn

ip firewall mangle add chain=forward connection-mark=p2p_conn action=mark-packet new-packet-mark=p2p

queue type add name=p2p-out kind=pcq pcq-rate=40000 pcq-classifier=dst-address

queue type add name=p2p-in kind=pcq pcq-rate=40000 pcq-classifier=src-address


queue tree add name=p2p-out parent=global-out queue=p2p-out packet-mark=p2p

queue tree add name=p2p-in parent=global-in queue=p2p-in packet-mark=p2p

3

global-in does not “see” the marks mange is putting in forward

4

thx, so are my second set of commands correct?