Rate limit not applied to the hotspot

RouterOS Beginner Basics
1

Hi guys,

I’ve just configured the Hotspot using Mikrotik Hap ac2, but there is no way to limit the rate per user. For some reasons, the rate limit option doesn’t work in the User Profiles. In particular, I’ve set the value 20M/20M in the default “User Profile” and assigned this profile in the tab “Users”.

After that I go into the queue and see that for each connected user the values 100M / 100M are set.

Rate limit could only be set entirely to a point using “Server profiles”, however, it is necessary to set limits for each user.

I would appreciate your assistance!

2

From what your story, you set hotspot using Local User database (“Users” tab). Your goal is to limit user bandwith.
Have you try using simple queue on that particular queue target=user ip? When create the entry to make it work, drag the entry on top your dynamic queue created by the hotspot related to that user ip. Or simply drag it to first line just to make sure the entry should be run.
Example :
User A with IP 172.16.16.254, you want to limit at Download 2Mbps Upload 2Mbps
at terminal :
/queue simple add disabled=no max-limit=2M/2M name=A packet-marks=“” parent=none priority=8/8 queue=default-small/default-small target=172.16.16.254/32

If not work, please export your mikrotik config with hide your sensitive info like public ip,serial number, password,etc.

3

Good afternoon, hap ac 2 , 6.48.6 the problem is the same in the queues created by hotspot 200M/200M

/interface bridge
add arp=reply-only name=bridge-hotspot
/interface ethernet
set [ find default-name=ether1 ] disabled=yes
set [ find default-name=ether2 ] comment=WAN
set [ find default-name=ether4 ] disabled=yes
/interface wireless
set [ find default-name=wlan1 ] ssid=MikroTik
set [ find default-name=wlan2 ] ssid=MikroTik
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
add dns-name=xxxx.xxx hotspot-address=192.168.7.1 html-directory=
flash/hotspot login-by=http-chap,http-pap name=hsprof1
radius-interim-update=5m rate-limit=29M/29M use-radius=yes
/ip hotspot user profile
set [ find default=yes ] keepalive-timeout=2d mac-cookie-timeout=5d
rate-limit=5M/5M
/ip pool
add name=hs-pool-8 ranges=192.168.7.20-192.168.7.254
/ip dhcp-server
add add-arp=yes address-pool=hs-pool-8 disabled=no interface=bridge-hotspot
lease-time=2h name=dhcp1
/ip hotspot
add address-pool=hs-pool-8 disabled=no interface=bridge-hotspot name=hotspot1
profile=hsprof1
/queue type
set 9 kind=pcq
/interface bridge port
add bridge=bridge-hotspot interface=ether3
/interface bridge settings
set allow-fast-path=no
/ip neighbor discovery-settings
set discover-interface-list=LAN
/ip settings
set allow-fast-path=no
/interface list member
add interface=ether2 list=WAN

add address=192.168.7.1/24 interface=bridge-hotspot network=192.168.7.0
/ip dhcp-server network
add address=192.168.7.0/24 comment=“hotspot network” gateway=192.168.7.1
/ip dns
set servers=8.8.8.8,1.1.1.1

/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=
“place hotspot rules here” disabled=yes
add action=masquerade chain=srcnat comment=“masquerade hotspot network”
src-address=192.168.7.0/24
/ip hotspot service-port
set ftp disabled=yes
/ip hotspot user
add name=admin
/ip hotspot walled-garden
add dst-host=xxxxxxx.xxx server=hotspot1
/radius
add address=123.123.123.123 service=hotspot
add address=234.234.234.234 service=hotspot

4

Hi, in case you haven’t figured out the answer yet I believe I found the solution. I was lately playing with hotspot a bit
it seems that enabling “Add ARP for Leases” for hotspot DHCP pool is the key.

Also - you can nest rate-limit queues :

  • you need hotspot queue manually (instead one on server profile level) - it does not work on dynamically created ones
  • then on user profile queue you select the one created as parent queue
    result - dynamic queues are created per user and nested within main limiting queue

Confirmed working on ROS 7.1-7.11 (I’m testing on CHR virtual images). Still invalid ARP issue http://forum.mikrotik.com/t/invalid-arp-entries-in-7-4-version/159592/1 is showstopper for me, and I need to move back to ROS 6.x

5

And back to non-working state…
when I moved to real hardware it does not seem to work at all. Queue is created, see some traffic there, but like 1% of real traffic for this client.
Eg. doing speedtest I can see 200Mbit, but looking at queue live I can see around 200kbps traffic for this IP. What is going on ? And limits for user were specified like 20M/5M D/U

6

Turn off “Allow Fast Path” under IP → Settings