PPP profiles / Rate limiting

In 2.8, I was able to set TX and RX rate limits per profile but in 2.9, that does not appear to be an option. Does this mean I will have to do my rate limiting on each individual user instead of just applying a “512k/256k profile” which already had the rate limits in it to the users?

You should use the rate-limit parameter in version 2.9. In Winbox, this is found in the “Limits” tab of the profile. I haven’t gotten it to work correctly, though, as it seems to apply the first rate that I specify to both TX and RX, even if I specify both of them…

Can anyone from MT confirm the use of this feature?

It’s now working properly. In fact, it was working properly before, the effects were just not apparent when using the built-in bandwidth test…

Can you not find the “Limits” tab of a profile in Winbox? Or can you not see “rate-limit” as an option when you type “ppp profile add ?”, or do you find it, but are not able to get it to work properly?

[admin@MikroTik] ppp profile> add 
creates new item with specified property values.

name -- Profile name
local-address -- Assigns an individual address to the PPP-server
remote-address -- Assigns an idividual address to the PPP
session-timeout -- The maximum time the connection can stay up
idle-timeout -- The time limit when the link will be terminated if there is no a
ctivity
use-compression -- Defines whether compress traffic or not
use-vj-compression -- Use Van Jacobson header compression
use-encryption -- Defines whether encrypt traffic or not
only-one -- Allow only one connection at a time
change-tcp-mss -- Change or not TCP protocol's Maximum Segment Size
rate-limit -- Data rate limitations for the client
incoming-filter -- Firewall chain name for incoming packets
outgoing-filter -- Firewall chain name for outgoing packets
dns-server -- DNS server address
wins-server -- Windows Internet Naming Service server
copy-from -- item number
comment -- short description of the item

Hitek

I see what you are talking about.. in 2.8, there was a TX bit rate setting and a seperate RX bit rate setting, you are saying to just combine both of those into the Rate Limit by doing 512000/256000?

It seems like it was much more explanatory in 2.8 as it actually says RX bitrate in bit/s. Now it just says “Data rate limitations for the client”. So is this bit/s?

2.8 PPP profile options:

name – Profile name
local-address – Assigns an individual address to the PPP-server
remote-address – Assigns an idividual address to the PPP
session-timeout – The maximum time the connection can stay up
idle-timeout – The time limit when the link will be terminated if there is no activity
use-compression – Defines whether compress traffic or not
use-vj-compression – Use Van Jacobson header compression
use-encryption – Defines whether encrypt traffic or not
only-one – Allow only one connection at a time
change-tcp-mss – Change or not TCP protocol’s Maximum Segment Size
incoming-filter – Firewall chain name for incoming packets
outgoing-filter – Firewall chain name for outgoing packets
dns-server – DNS server address
wins-server – Windows Internet Naming Service server
copy-from – Item number
comment – Set comment for items
require-encryption – Defines whether require encryption from the client or simply prefer it
rx-bit-rate – Receive birate in bit/s
tx-bit-rate – Transmit birate in bit/s

2.9 PPP profile options:

name – Profile name
local-address – Assigns an individual address to the PPP-server
remote-address – Assigns an idividual address to the PPP
session-timeout – The maximum time the connection can stay up
idle-timeout – The time limit when the link will be terminated if there is no
activity
use-compression – Defines whether compress traffic or not
use-vj-compression – Use Van Jacobson header compression
use-encryption – Defines whether encrypt traffic or not
only-one – Allow only one connection at a time
change-tcp-mss – Change or not TCP protocol’s Maximum Segment Size
rate-limit – Data rate limitations for the client
incoming-filter – Firewall chain name for incoming packets
outgoing-filter – Firewall chain name for outgoing packets
dns-server – DNS server address
wins-server – Windows Internet Naming Service server
copy-from – item number
comment – short description of the item

Yes, that is correct. Also, if you would be using RADIUS, you are supposed to be able to use “Rate-limit” to specify both data-rates as one parameter, or “Ascend-data-rate” and “Ascend-xmit-rate” to separately specify the receive and transmit data rates, old style… Many people(myself included) have not been able to get the “Rate-limit” parameter to work when using RADIUS, so we are using the Ascend set of parameters…

This may be of some help:
http://www.mikrotik.com/docs/ros/2.8/guide/aaa.content#13.4.16

Hitek