Queue example on page 393 in the 2.9 manual

RouterOS General
1

There is an example on page 393 in the 2.9 manual how to enforce that P2P traffic will get no more than 1Mbps of the total link capacity when the link is heavily used by other traffic otherwice expanding to the full link capacity. I’m trying to expand this to include a queue for VOIP to get the highest priority, but I have a problem with the last mangle rule i.e. “other”. I can only set one of the chains to not, p2p_conn or voip_conn. I would like to set both p2p_conn and voip_conn to not.

Here is the rules from the manual:

[admin@MikroTik] > /ip firewall mangle add chain=forward \
\... p2p=all-p2p action=mark-connection new-connection-mark=p2p_conn
[admin@MikroTik] > /ip firewall mangle add chain=forward \
\... connection-mark=p2p_conn action=mark-packet new-packet-mark=p2p
[admin@MikroTik] > /ip firewall mangle add chain=forward \
\... connection-mark=!p2p_conn action=mark-packet new-packet-mark=other

[admin@MikroTik] > /ip firewall mangle print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=forward p2p=all-p2p action=mark-connection new-connection-mark=p2p_conn
1 chain=forward connection-mark=p2p_conn action=mark-packet new-packet-mark=p2p
2 chain=forward packet-mark=!p2p_conn action=mark-packet new-packet-mark=other

I changed chain 2 so I could add voip_conn so it works, but if I want to add another chain? I’ve tried to add another, but it does not work because of that I can only add one chain “Connection Mark Not” with the character “!”.

Here is the changed chain:

2   chain=forward connection-mark=!voip_conn p2p=!all-p2p action=mark-packet new-packet-mark=other

As you can see, I could add not to the chain p2p. Is there any way to add multiple rules without the limitation I run into with the not character “!”?

Thanks in advance!

2

I think I solved the problem by a simple rule at the top in the queue thread. This means that every packets are marked in order starting from chain 0 and that makes sense for me. That also means that the example in the manual is not recomended if you have som plans to set up more queues than just limiting p2p traffic. Is this the correct configuration, or is there a better way to do it so the queues does not interfere with each other?

/ ip firewall mangle add chain=forward action=mark-packet new-packet-mark=other comment="" disabled=no



[admin@MikroTik] > ip firewall mangle print
Flags: X - disabled, I - invalid, D - dynamic

0 chain=forward action=mark-packet new-packet-mark=other