Queue Problems

RouterOS Beginner Basics
1

Dear Sirs,
I am new to Mikrotik. I have however managed to install it and i have setup the router and its interfaces.
I have the following on my network

  1. Satellite Modem----
  2. Switch
  3. D-Link Wireless Router

On my Mikrotik, i have three Ethernet interfaces and they will be connected to the equipment listed above. The questions i have are as follows

  1. How do i get the third interface to browse through the satellite modem?
  2. I want to allocate bandwidth on a per IP basis on the LAN network of 25 systems. I want to make sure that any IP’s not allocated bandwidth by me does not browse.
  3. Can i use the D-link wireless router as a hotspot? I need to set one up here so laptops can connect wirelessly.
    Please advise
    Thank you
2
  1. How do i get the third interface to browse through the satellite modem?

By third I take you to mean the D-link.
This is easy enough. You can go one of two ways.

  1. Route through the D-link (this requires more work if you want to do band width control per device)
  2. Use the D-link as an AP only.
    Which do you want?
  1. I want to allocate bandwidth on a per IP basis on the LAN network of 25 systems. I want to make sure that any IP’s not allocated bandwidth by me does not browse.

There are many ways to do this but I think an ACL (Access Control List) is the best way.
To do this:
Create an ACL in the firewall section that allows the hosts that you want get to the net.
Add a final line that denies all other traffic.

As for limiting traffic, I think that there are plenty of places on this site to help you with that.

3

Hi ;
would you mind to tell us how you will make the ACL in the firewall ?
i am using the ACL in the wireless interface , but how to use it in the firewall ?.
with best regards .

4

If you want to do it graphically:

Navigate to and click IP->Firewall
The Firewall child window appears

For each client by IP:

  1. In the firewall child window goto the tab
  2. click the “+” button
    A new firewall rule window appears
  3. Set the settings as follows:
    On the general tab:
    Chain: Forward
    Src Address: <client address eg 192.168.1.100>
    On the Action tab:
    Action: Accept

After you have a rule for each client add a rule with the following:
On the general tab:
Chain: Forward
Src Address:
On the Action tab:
Action: Deny

This is a simple approach it assumes that no traffic is routed through the RB that is not targeted at the internet.
You will have to alter the rules to suite your network.

Be careful to add at least the workstation you are on to the list before the deny as that will cut your connection to the internet.
The order that the rules are in is important the first rule that matches is used, so if you put the deny before a client IP then it will be blocked.

Also, note that if the IP addresses inside your network change (i.e. DHCP without reservations) your rules will have problems and your bandwidth limiting as well.

5

Hi ;
Thanks for your post .
what i am using with my MT , while i am using two internet modems to do load balance between them manually .
first i define lists for users like :
list 1
list 2
list 3
and so on
i mark the packet coming from these lists like :
modem 1
modem 2
then i mark the route for these packets with the same name .
then in the firewall nat i masqurade each traffic coming from local network having a route mark to one of the internet modems .
and in route tables i define for each internet modem a route rule which it should have a route mark to reach the internet .
so any user not added to one of the list will not reach the internet
and be change him from one list to another i could change the internet modem he will use to do static load balance .
i hope this clear to you and to others .
with best regards .