PCQ and how it works

RouterOS General
1

Based in my new config.
I’ve tweaked it a bit,. Not sure it it’ll sever the purpose Intended.
I have an event with @ 100 - 200 users at a hotspot on @ rb750g pointing to an external PCbox with Usermanager..
I’ve got a cable modem with @ 15/4.

Most will be paying customers which I’ll want to give @ 1.8 meg/512k.

A few will be static ip’s with dedicated 2 meg up being the priority for video uploads..
Only a few though.

I’m just not sure how the customers receive the needed 1700k/ 512k
If they’re entered manually into the “hotspot” would they be considered “authorized” and receive the proper “authorized” queue?

And the “un-authorized” which are entered manually and not receive an “address list” be dropped into the “un-authorized” queue?
Thanks

Additionally, can I delete the “default queue” (non-PCQ) types that are enterend when first setting up the hotspot. Or can they just be left alone?

[admin@MikroTik] /queue type> print
0 name=“default” kind=pfifo pfifo-limit=50

1 name=“ethernet-default” kind=pfifo pfifo-limit=50

2 name=“wireless-default” kind=sfq sfq-perturb=5 sfq-allot=1514

3 name=“synchronous-default” kind=red red-limit=60 red-min-threshold=10
red-max-threshold=50 red-burst=20 red-avg-packet=1000

4 name=“hotspot-default” kind=sfq sfq-perturb=5 sfq-allot=1514

5 name=“hs1-unauth-up” kind=pcq pcq-rate=64k pcq-limit=50 pcq-classifier=dst-address
pcq-total-limit=1000 pcq-burst-rate=0 pcq-burst-threshold=0 pcq-burst-time=10s
pcq-src-address-mask=32 pcq-dst-address-mask=32 pcq-src-address6-mask=128
pcq-dst-address6-mask=128

6 name=“hs1-unauth-down” kind=pcq pcq-rate=64k pcq-limit=50 pcq-classifier=src-address
pcq-total-limit=1000 pcq-burst-rate=0 pcq-burst-threshold=0 pcq-burst-time=10s
pcq-src-address-mask=32 pcq-dst-address-mask=32 pcq-src-address6-mask=128
pcq-dst-address6-mask=128

7 name=“hs1-p1-up” kind=pcq pcq-rate=512k pcq-limit=50 pcq-classifier=dst-address
pcq-total-limit=1000 pcq-burst-rate=800k pcq-burst-threshold=600k pcq-burst-time=10s
pcq-src-address-mask=32 pcq-dst-address-mask=32 pcq-src-address6-mask=128
pcq-dst-address6-mask=128

8 name=“hs1-p1-down” kind=pcq pcq-rate=1700k pcq-limit=50 pcq-classifier=src-address
pcq-total-limit=1000 pcq-burst-rate=2300k pcq-burst-threshold=1800k
pcq-burst-time=10s pcq-src-address-mask=32 pcq-dst-address-mask=32
pcq-src-address6-mask=128 pcq-dst-address6-mask=128

9 name=“hs1-p2-down” kind=pcq pcq-rate=3M pcq-limit=50 pcq-classifier=src-address
pcq-total-limit=1000 pcq-burst-rate=4M pcq-burst-threshold=3300k pcq-burst-time=10s
pcq-src-address-mask=32 pcq-dst-address-mask=32 pcq-src-address6-mask=128
pcq-dst-address6-mask=128

10 name=“hs1-p2-up” kind=pcq pcq-rate=756k pcq-limit=50 pcq-classifier=dst-address
pcq-total-limit=1000 pcq-burst-rate=900k pcq-burst-threshold=800k pcq-burst-time=10s
pcq-src-address-mask=32 pcq-dst-address-mask=32 pcq-src-address6-mask=128
pcq-dst-address6-mask=128

11 name=“default-small” kind=pfifo pfifo-limit=10

[admin@MikroTik] /queue tree> print
Flags: X - disabled, I - invalid
0 name=“hs1-p1-down” parent=global-out packet-mark=hs1-p1-down limit-at=0
queue=hs1-p1-down priority=5 max-limit=14M burst-limit=0 burst-threshold=0
burst-time=0s

1 name=“hs1-p1-up” parent=global-in packet-mark=hs1-p1-up limit-at=0 queue=hs1-p1-up
priority=5 max-limit=3M burst-limit=0 burst-threshold=0 burst-time=0s

2 name=“hs1-p2-down” parent=global-in packet-mark=hs1-p2-down limit-at=0
queue=hs1-p2-down priority=6 max-limit=14M burst-limit=0 burst-threshold=0
burst-time=0s

3 name=“hs1-p2-up” parent=global-in packet-mark=hs1-p2-up limit-at=0 queue=hs1-p2-up
priority=6 max-limit=3M burst-limit=0 burst-threshold=0 burst-time=0s

4 name=“hs1-unauth-down” parent=global-in packet-mark=hs1-unauth-down limit-at=0
queue=hs1-unauth-down priority=8 max-limit=15M burst-limit=0 burst-threshold=0
burst-time=0s

5 name=“hs1-unauth-up” parent=global-in packet-mark=hs1-unauth-up limit-at=0
queue=hs1-unauth-up priority=8 max-limit=3M burst-limit=0 burst-threshold=0
burst-time=0s

2

The answer to both questions depends on your mangle rules. Show 'em.

Please wrap them in

 tags to keep things readable.
3

[quote=“fewi”]The answer to both questions depends on your mangle rules. Show 'em.

Please wrap them in

 tags to keep things readable.[/quote]

Yep, sorry forgot to add mangle rules:

[code][admin@MikroTik] /ip firewall mangle> print
Flags: X - disabled, I - invalid, D - dynamic 
 0   chain=prerouting action=mark-packet new-packet-mark=hs1-p1-up passthrough=no src-address-type="" 
     src-address-list=hs1-p1 in-interface=ether2 

 1   chain=postrouting action=mark-packet new-packet-mark=hs1-p1-down passthrough=no 
     dst-address-list=hs1-p1 out-interface=ether2 

 2   chain=prerouting action=mark-packet new-packet-mark=hs1-p2-up passthrough=no 
     src-address-list=hs1-p2 in-interface=ether2 

 3   chain=postrouting action=mark-packet new-packet-mark=hs1-p2-down passthrough=no 
     dst-address-list=hs1-p2 out-interface=ether2 

 4   chain=prerouting action=mark-packet new-packet-mark=hs1-unauth-up passthrough=no hotspot=!auth 
     in-interface=ether2 

 5   chain=postrouting action=mark-packet new-packet-mark=hs1-unauth-down passthrough=no hotspot=!auth 
     out-interface=ether2
4

The unauthorized users will work with what. Whether the other ones do depends on whether User Manager is sending the Mikrotik-Group attribute set to the names of the address lists you’re checking.

Unfortunately I don’t use User Manager so I don’t know how to check for that, but I’m under the impression that it can do it somehow.

5

Thanks fewi,
I’m slowly getting a grasp on it.
But, in my Usermanager, I have a simple rate, burst etc. Which from my understanding comes down to a simple queue, correct?
And as people signup via paypal, they’ll get that managed rate.
Not a PCQ rule.
When I add users via Hotspot (not in UserManager) they’re managed in the hs1-p1 “profile” I’ve created in the Hotspot because that’s the profile they’re placed in..
Though it doesn’t have an “address pool”. So their not being assigned the usual “default-dhcp” ip’s from the hotspot.Yet, I can watch them being managed in the “queue tree”.
I’ve created one user profile the “hs1-p1” and am sharing the “hs1-p1” profile for like 20 users.
So, when I’m adding users they’re getting the PCQ rule management. Actually I’ve created a second “hs1-p2” profile for an “exclusive” few that will get the 7meg speeds. Anyway, something seems to be working right, not sure how but I’ll get it.

6

Ah, if you’re using local users they are tied to local user profiles. Those can refer to address lists, which is probably how the user’s IPs get on the address lists.

If you want post the output of “/ip hotspot export” - or even pare that down to just one user you know PCQ is working for as well as the user profile that account uses. I’ll gladly confirm from there.

7

Yes certainly, at the moment nobody has shown up. @ 1:00 P.m. (PST) I’ll start getting users and post an export then.
Thanks,

8

I mean the static configuration of your Hotspot. The user accounts and their profiles that people use to log in. Whether anyone is actually using the account wouldn’t matter.