I have a great setup at the moment with PCQ where all bandwidth is shared equally from my 10M/10M connection. All is lovely. I have scoured the internet trying to find a solution to what I would like to achieve.
I am happy for bandwidth to be split equally across all devices needing access to the internet UNTIL ip address 192.168.104.114 wants access. I want this device to have 6M up and 6M down and then the remaining 4M up and 4M down to be SPLIT EQUALLY with the remaining devices.
If 192.168.104.114 is not using bandwidth or less than the 6M up and down then the OTHER devices can use all available bandwidth from the 10M up and down available.
Hoping someone can steer me in the right direction here.
Below is my current config.
Thanks!
# may/07/2020 21:02:47 by RouterOS 6.45.6
# software id = 8YEN-YW10
#
# model = RouterBOARD 941-2nD
# serial number = 947F081AE871
/interface bridge
add admin-mac=CC:2D:E0:F2:85:91 auto-mac=no comment=defconf name=bridge
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-Ce \
distance=indoors frequency=auto mode=ap-bridge ssid=Myles \
wireless-protocol=802.11
/interface ethernet
set [ find default-name=ether1 ] advertise=\
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
set [ find default-name=ether2 ] advertise=\
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
set [ find default-name=ether3 ] advertise=\
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
set [ find default-name=ether4 ] advertise=\
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
/interface l2tp-client
add allow-fast-path=yes connect-to=10.33.35.1 disabled=no name=l2tp-out1 \
password=eshowe user=***********
add comment="Backup Server" connect-to=10.1.248.30 disabled=no name=l2tp-out2 \
password=******* user=*********
add allow-fast-path=yes comment="Pick n Pay" connect-to=10.1.248.32 disabled=\
no name=l2tp-out3 password=******** user=*********
/interface pppoe-client
add disabled=no interface=ether1 name=pppoe-out1 password=****** user=\
"*******"
/interface vlan
add interface=ether2 name=Vlan20-Me vlan-id=20
add interface=ether2 name=Vlan30-Da vlan-id=30
add interface=ether2 name=Vlan40-Ra vlan-id=40
add interface=ether2 name=Vlan50-Guests vlan-id=1
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" mode=\
dynamic-keys supplicant-identity=MikroTik wpa2-pre-shared-key=********
/ip pool
add name=default-dhcp ranges=192.168.104.100-192.168.104.254
add name=dhcp_pool1 ranges=192.168.20.2-192.168.20.254
add name=dhcp_pool2 ranges=192.168.30.2-192.168.30.254
add name=dhcp_pool3 ranges=192.168.40.2-192.168.40.254
add name=dhcp_pool4 ranges=192.168.50.2-192.168.50.254
add name=dhcp_pool5 ranges=192.168.50.2-192.168.50.254
add name=dhcp_pool6 ranges=192.168.50.2-192.168.50.254
/ip dhcp-server
add address-pool=default-dhcp disabled=no interface=bridge lease-time=5m \
name=defconf
add address-pool=dhcp_pool1 disabled=no interface=Vlan20-Me lease-time=2d \
name=dhcp1
add address-pool=dhcp_pool2 disabled=no interface=Vlan30-Da lease-time=2d \
name=dhcp2
add address-pool=dhcp_pool3 disabled=no interface=Vlan40-Ra lease-time=2d \
name=dhcp3
add address-pool=dhcp_pool6 disabled=no interface=Vlan50-Guests name=dhcp4
/ppp profile
add name=4MeG rate-limit=4M/4M
/queue type
add kind=sfq name=sfq-default sfq-perturb=10
add kind=pcq name=PCQ_DOWNLOAD pcq-classifier=dst-address \
pcq-dst-address6-mask=64 pcq-rate=10M pcq-src-address6-mask=64
add kind=pcq name=PCQ_UPLOAD pcq-classifier=src-address \
pcq-dst-address6-mask=64 pcq-src-address6-mask=64
/queue tree
add name="queue1 PCQ_DOWNLOAD" packet-mark=CLIENT_DOWNLOAD parent=global \
queue=PCQ_DOWNLOAD
add name="queue2 PCQ_UPLOAD" packet-mark=CLIENT_UPLOAD parent=global queue=\
PCQ_UPLOAD
/user group
add name=sniffer policy="ssh,read,!local,!telnet,!ftp,!reboot,!write,!policy,!\
test,!winbox,!password,!web,!sniff,!sensitive,!api,!romon,!dude,!tikapp"
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=wlan1
/interface bridge settings
set use-ip-firewall=yes
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface detect-internet
set detect-interface-list=all
/interface l2tp-server server
set enabled=yes
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/ip accounting
set enabled=yes threshold=2560
/ip accounting web-access
set accessible-via-web=yes address=192.168.104.114/32
/ip address
add address=192.168.104.1/24 comment=defconf interface=bridge network=\
192.168.104.0
add address=10.90.0.104/24 interface=ether1 network=10.90.0.0
add address=192.168.20.1/24 interface=Vlan20-Me network=192.168.20.0
add address=192.168.30.1/24 interface=Vlan30-Da network=192.168.30.0
add address=192.168.40.1/24 interface=Vlan40-Ra network=192.168.40.0
add address=192.168.50.1/24 interface=Vlan50-Guests network=192.168.50.0
/ip dhcp-server lease
add address=192.168.104.117 client-id=1:0:4:4b:bb:f3:99 comment=\
"Nvidia Shield" mac-address=00:04:4B:BB:F3:99 server=defconf
add address=192.168.104.116 client-id=1:c:2c:54:21:33:5f comment=\
"Maxine Phone" mac-address=0C:2C:54:21:33:5F server=defconf
add address=192.168.104.115 client-id=1:0:24:a5:c8:59:bd comment=Buffalo \
mac-address=00:24:A5:C8:59:BD server=defconf
add address=192.168.104.114 client-id=1:4c:cc:6a:9:fa:40 comment=Beast \
mac-address=4C:CC:6A:09:FA:40 server=defconf
add address=192.168.104.111 comment="Efergy Hub" mac-address=\
00:1E:C0:A0:99:8D server=defconf
add address=192.168.104.3 comment=Hassio mac-address=B8:27:EB:EC:0D:ED \
server=defconf
add address=192.168.104.108 client-id=1:2c:54:91:53:40:37 comment="Xbox One" \
mac-address=2C:54:91:53:40:37 server=defconf
add address=192.168.104.107 client-id=1:ac:86:74:5d:2d:68 comment=OpenMesh \
mac-address=AC:86:74:5D:2D:68 server=defconf
add address=192.168.104.106 comment="Sonoff Pool" mac-address=\
80:7D:3A:31:E8:1C server=defconf
add address=192.168.104.102 client-id=1:2c:54:91:53:40:39 comment="Xbox One" \
mac-address=2C:54:91:53:40:39 server=defconf
add address=192.168.104.250 client-id=1:0:bb:c1:bc:cd:27 comment=\
"Canon Printer" mac-address=00:BB:C1:BC:CD:27 server=defconf
add address=192.168.104.105 client-id=1:64:0:6a:1d:55:76 comment=Unraid \
mac-address=64:00:6A:1D:55:76 server=defconf
add address=192.168.104.104 client-id=1:6c:c7:ec:10:dd:99 comment=\
"Myles phone" mac-address=6C:C7:EC:10:DD:99 server=defconf
add address=192.168.104.120 client-id=1:18:ee:69:e6:3f:47 mac-address=\
18:EE:69:E6:3F:47 server=defconf
add address=192.168.104.110 client-id=1:34:f6:4b:7:93:42 comment=\
"Myles Laptop" mac-address=34:F6:4B:07:93:42 server=defconf
/ip dhcp-server network
add address=192.168.20.0/24 dns-server=192.168.104.2,1.1.1.1 gateway=\
192.168.20.1
add address=192.168.30.0/24 dns-server=192.168.104.2,1.1.1.1 gateway=\
192.168.30.1
add address=192.168.40.0/24 dns-server=192.168.104.2,1.1.1.1 gateway=\
192.168.40.1
add address=192.168.50.0/24 dns-server=192.168.104.2,1.1.1.1 gateway=\
192.168.50.1
add address=192.168.104.0/24 comment=defconf dns-server=192.168.104.2,1.1.1.1 \
gateway=192.168.104.1
/ip dns
set allow-remote-requests=yes servers=1.1.1.1,8.8.8.8
/ip dns static
add address=192.168.88.1 name=router.lan
add address=52.85.184.245 name=upgrade.mikrotik.com
/ip firewall filter
add action=drop chain=input dst-port=53 in-interface=l2tp-out1 protocol=tcp
add action=drop chain=input dst-port=53 in-interface=l2tp-out1 protocol=udp
/ip firewall mangle
add action=mark-packet chain=prerouting comment=UPLOADS in-interface=bridge \
new-packet-mark=CLIENT_UPLOAD passthrough=yes
add action=mark-packet chain=prerouting comment=DOWNLOADS in-interface=\
l2tp-out1 new-packet-mark=CLIENT_DOWNLOAD passthrough=yes
/ip firewall nat
add action=masquerade chain=srcnat out-interface=l2tp-out1
add action=masquerade chain=srcnat out-interface=l2tp-out2
add action=masquerade chain=srcnat out-interface=pppoe-out1
/ip firewall service-port
set sip disabled=yes
/ip route
add distance=1 gateway=l2tp-out1
add distance=2 gateway=pppoe-out1
add distance=1 dst-address=10.0.0.0/8 gateway=10.90.0.1
add comment="L2TP Tunnel To Pick n Pay" distance=1 dst-address=192.168.0.0/24 \
gateway=192.135.135.1
add disabled=yes distance=1 dst-address=192.168.1.0/24 gateway=\
192.168.104.126
add distance=1 dst-address=192.168.88.246/32 gateway=l2tp-out2
add distance=1 dst-address=192.168.88.251/32 gateway=l2tp-out2
add distance=1 dst-address=192.168.88.253/32 gateway=l2tp-out2
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api-ssl disabled=yes
/ip ssh
set allow-none-crypto=yes forwarding-enabled=remote
/ip traffic-flow
set active-flow-timeout=1m cache-entries=64k enabled=yes
/ip traffic-flow target
add dst-address=192.168.104.131 v9-template-timeout=1m version=5
/ppp secret
add local-address=192.145.145.1 name="Back-Up Server" password=\
******** profile=4MeG remote-address=192.145.145.3 service=l2tp
add name="Pick n Pay" password=******** service=l2tp
/system clock
set time-zone-name=Africa/Johannesburg
/system identity
set name="********"
/system logging
add disabled=yes topics=l2tp
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
/tool romon
set enabled=yes