I wanna set some speed limit to user in pppoe server.
The upload rule is ok, but the download run do not work
I find the problem may be the parent setting in queue tree, so it will work only selecting the current pppoe user(),
but you know there will be more user later and i can’t select more than one.
following is my export compact, and thx 
[admin@MikroTik] > export compact \
# oct/26/2012 12:25:11 by RouterOS 5.21 \
# software id = BD0B-6TGV \
#
/interface bridge
add \
name=bridge-local \
admin-mac=D4:CA:6D:6E:96:0A \
auto-mac=no \
l2mtu=2290 \
protocol-mode=rstp
/interface wireless
set 0 \
band=2ghz-b/g/n \
channel-width=20/40mhz-ht-above \
country="hong kong" \
disabled=no \
distance=indoors \
ht-rxchains=0,1 \
ht-txchains=0,1 \
l2mtu=2290 \
mode=ap-bridge \
wireless-protocol=any
/interface ethernet
set 0 \
name=sfp1-gateway
set 1 \
name=ether1-gateway
set 4 \
name=ether4-lan
set 6 \
name=ether6-master-local
set 7 \
name=ether7-slave-local \
master-port=ether6-master-local
set 8 \
name=ether8-slave-local \
master-port=ether6-master-local
set 9 \
name=ether9-slave-local \
master-port=ether6-master-local
set 10 \
name=ether10-slave-local \
master-port=ether6-master-local
/interface pppoe-client
add \
name=pppoe-out1 \
add-default-route=yes \
disabled=no \
interface=ether1-gateway \
password=**** \
user=****
/interface wireless security-profiles
set [ find default=yes ] \
authentication-types=wpa2-psk \
mode=dynamic-keys \
wpa-pre-shared-key=**** \
wpa2-pre-shared-key=****
/ip hotspot user profile
set [ find default=yes ] \
idle-timeout=none \
keepalive-timeout=2m
/ip pool
add \
name=Pool_Tenant \
ranges=192.168.6.10-192.168.6.99
add \
name=Pool_Admin \
ranges=192.168.20.10-192.168.20.99
/ip dhcp-server
add \
name=DHCP_Admin \
address-pool=Pool_Admin \
disabled=no \
interface=bridge-local \
lease-time=1d
/ppp profile
set 1 \
idle-timeout=30m \
local-address=192.168.6.1 \
only-one=yes \
remote-address=Pool_Tenant
/queue type
add \
name=PCQ_Down \
kind=pcq \
pcq-classifier=dst-address \
pcq-dst-address6-mask=64 \
pcq-src-address6-mask=64 \
pcq-total-limit=2500
add \
name=PCQ_Up \
kind=pcq \
pcq-classifier=src-address \
pcq-dst-address6-mask=64 \
pcq-src-address6-mask=64 \
pcq-total-limit=2500
/queue tree
add \
name=Tree_Down \
limit-at=1M \
max-limit=1M \
packet-mark=Mark_Packet \
parent=global-in \
queue=PCQ_Down
add \
name=Tree_Up \
disabled=yes \
limit-at=1200k \
max-limit=1200k \
packet-mark=Mark_Packet \
parent=ether1-gateway \
queue=PCQ_Up
/interface bridge port
add \
bridge=bridge-local \
interface=ether2
add \
bridge=bridge-local \
interface=ether3
add \
bridge=bridge-local \
interface=ether4-lan
add \
bridge=bridge-local \
interface=ether5
add \
bridge=bridge-local \
interface=wlan1
/interface pppoe-server server
add \
authentication=pap,chap \
default-profile=default-encryption \
disabled=no \
interface=ether6-master-local \
one-session-per-host=yes \
service-name=PPPoE_Server
/ip address
add \
comment="default configuration" \
address=192.168.88.1/24 \
interface=wlan1
add \
address=192.168.1.1/24 \
interface=ether1-gateway
add \
address=192.168.6.1/24 \
interface=ether6-master-local
add \
address=192.168.20.1/24 \
interface=bridge-local
/ip dhcp-server network
add \
address=192.168.6.0/24 \
gateway=192.168.6.1 \
netmask=24
add \
address=192.168.20.0/24 \
gateway=192.168.20.1 \
netmask=24
/ip dns
set \
allow-remote-requests=yes \
servers=218.102.52.81,218.102.23.77,8.8.4.4,210.87.250.13
/ip dns static
add \
name=router \
address=192.168.88.1
/ip firewall address-list
add \
address=192.168.6.10-192.168.6.99 \
list=FirewallAddressList_Tenant
/ip firewall filter
add \
comment="default configuration" \
chain=input \
protocol=icmp
add \
comment="default configuration" \
chain=input \
connection-state=established
add \
comment="default configuration" \
chain=input \
connection-state=related
add \
comment="default configuration" \
action=drop \
chain=input \
in-interface=sfp1-gateway
add \
comment="default configuration" \
action=drop \
chain=input \
in-interface=ether1-gateway
/ip firewall mangle
add \
action=mark-connection \
chain=forward \
new-connection-mark=Mark_Connection \
src-address=192.168.6.10-192.168.6.99
add \
action=mark-packet \
chain=forward \
connection-mark=Mark_Connection \
new-packet-mark=Mark_Packet \
passthrough=no
/ip firewall nat
add \
action=masquerade \
chain=srcnat \
out-interface=pppoe-out1
/ip neighbor discovery
set sfp1-gateway \
disabled=yes
set ether1-gateway \
disabled=yes
set wlan1 \
disabled=yes
/ppp secret
add \
name=305 \
password=**** \
profile=default-encryption \
service=pppoe
/system clock
set \
time-zone-name=Asia/Hong_Kong
/system clock manual
set \
time-zone=+08:00
/system scheduler
add \
name=schedule1_DDNS \
interval=15m \
on-event="/tool dns-update name=connectto.myDDNS.com address=www.changeip.com key-name=alright2070 key=byst2070" \
policy=ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive,api \
start-time=startup
/tool mac-server
add \
disabled=no \
interface=ether2
add \
disabled=no \
interface=ether3
add \
disabled=no \
interface=ether4-lan
add \
disabled=no \
interface=ether5
add \
disabled=no \
interface=ether6-master-local
add \
disabled=no \
interface=ether7-slave-local
add \
disabled=no \
interface=ether8-slave-local
add \
disabled=no \
interface=ether9-slave-local
add \
disabled=no \
interface=wlan1
add \
disabled=no \
interface=bridge-local
/tool mac-server mac-winbox
set [ find default=yes ] \
disabled=yes
add \
interface=ether2
add \
interface=ether3
add \
interface=ether4-lan
add \
interface=ether5
add \
interface=ether6-master-local
add \
interface=ether7-slave-local
add \
interface=ether8-slave-local
add \
interface=ether9-slave-local
add \
interface=wlan1
add \
interface=bridge-local
[admin@MikroTik] >
echo: system,error,critical login failure for user zhi from 222.219.199.28 via ssh