Queue / Bandwidth Limitation depending upon subnet

RouterOS General
1

I have a building with a network security DVR in it. There are several private subnets within the building and one WAN (Comcast Cable) connection.

My question is…
How can I setup bandwidth limiting so that it only applies only people who access the DVR from the WAN. People accessing it from the LAN and other private subnets within the building should not be limited.

Right now I have:

add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s direction=both \
    disabled=no interface=all limit-at=0/0 max-limit=2M/2M name=DVR-WAN \
    packet-marks="" parent=none priority=8 queue=default-small/default-small \
    target-addresses=192.168.2.25/32 total-queue=default-small

Which takes care of the limitation, but it limits people accessing the DVR from other private subnets too.

2

flip it.

put in a queue targetting your local subnet with the bandwidth you will allow.

below that, add another targetting 0.0.0.0/0

the first queue will intercept local ip addresses and never match the second.