Radius and queues

RouterOS General
1

I have MT as pppoe server with freeradius.

I want to limit internet speed, but also I want to DO NOT limit speed to few IP classes.

I do it with simple queues.

For each client IP I have simple queue (and mangle, to “separate” internet and “local IP classes”)

I have around 500 users connected and 3x254 simple queue rules, which I think, use CPU 100%.

Is this possible without simple queues?

Note: I have 3 types of internet speed.

2

Greetings!

Are your clients you wish to restrict on a wireless network or ethernet? There are some standard bandwidth limiters, but I have never tried them on an ethernet connection, just wireless.
WISPr-Bandwidth-Max-Up
WISPr-Bandwidth-Max-Down

I set them in the radgroupreply table and they are applied by user group. I use only two groups, “users” and “managers” (very creative names, don’t you agree?). managers get more bandwidth.

This is backwards from the bandwidth throttling done by the wireless interface. These are from the client point-of-view, rather than the AP. They are in bps, so 256K is 256000.

3

No, it is not wireless.

It is pppoe (lan).

4

simple queues set up using the RADIUS server will work on any PPoE connection it doesn’t matter what type of interface it is running over e.g. WLAN or Ethernet

5

How to set simple queue from radius?

6

Hi HarvSki.

Excuse my ignorance, but are those two WISPr commands considered “simple queues” to MT? If so, that is a very good thing for me.

7

Yes (I think), take a look at http://www.mikrotik.com/testdocs/ros/2.9/guide/aaa_radius.php

8

Thanks HarvSki.

To sojicmk:

I see most of MikroTik’s variables (including rate limiting) can be sent from your RADIUS database. See the link to the section of the docs that HarvSki posted. You must add the MikroTik dictionary to the radius dictionary to use any of them tho.

EDIT: That is what the docs say. I use FreeRADIUS, and I see that MikroTik has a dictionary of its most popular variables already added by default, including the rate limiting variables.

9

If I use rate limiting I will limit all the traffic.

I want 2 types of limits. It is not so simple just to use rate limiting.

10

not a problem, just put in some static simple queue at the top of the list for you special IPs, I do this for my mail server so people can send faster than their upload speed allows - queues are matched sequentially like the firewall.