I would like to ask for hel with simple queue. I dont know why but simple queue doesnt whow any traffic. I tried several settings but with same result - any traffic.
I disabled fast track, fast path, but nothing help.
I want to setup traffic shaping for interface ether-6 with subnet 10.0.7.0/24 to internet - ether10 not to lan.
I tried setup also shaping for subnet 10.0.6.0/24 but there is any traffic. If i setup simple queue for. 0.0.0.0/24 then simple queue showing the traffic.
Here is my config. Could anybody help me please.
Thank you.
# aug/02/2019 07:19:12 by RouterOS 6.45.2
# software id = MMMT-1GM3
#
# model = RouterBOARD 3011UiAS
# serial number = 783D069591B8
/interface bridge
add admin-mac=6C:3B:6B:9C:D6:3B arp=proxy-arp auto-mac=no comment=defconf \
fast-forward=no name=bridge
add arp=proxy-arp comment=sused fast-forward=no name=sused
/interface ethernet
set [ find default-name=ether1 ] speed=100Mbps
set [ find default-name=ether2 ] name=ether2-master speed=100Mbps
set [ find default-name=ether3 ] speed=100Mbps
set [ find default-name=ether4 ] speed=100Mbps
set [ find default-name=ether5 ] speed=100Mbps
set [ find default-name=ether6 ] comment=sused name=ether6-master speed=100Mbps
set [ find default-name=ether7 ] speed=100Mbps
set [ find default-name=ether8 ] speed=100Mbps
set [ find default-name=ether9 ] speed=100Mbps
set [ find default-name=ether10 ] comment="WAN port" speed=100Mbps
set [ find default-name=sfp1 ] advertise=\
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
/interface list
add exclude=dynamic name=discover
add name=mactel
add name=mac-winbox
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip ipsec profile
add dh-group=modp1024 enc-algorithm=aes-256,3des hash-algorithm=sha256 name=\
profile_1
/ip ipsec peer
add name=peer1 passive=yes profile=profile_1 send-initial-contact=no
/ip ipsec proposal
add auth-algorithms=sha256 enc-algorithms=\
aes-256-cbc,aes-192-cbc,aes-128-cbc,3des name=L2TP pfs-group=modp4096
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
add name=DHCP-pool ranges=10.0.6.100-10.0.6.200
add name=L2TP-VPN-pool ranges=10.0.6.90-10.0.6.99
add name=sused ranges=10.0.7.50-10.0.7.70
/ip dhcp-server
add address-pool=default-dhcp authoritative=after-2sec-delay interface=bridge \
name=defconf
add address-pool=DHCP-pool authoritative=after-2sec-delay disabled=no \
interface=bridge lease-time=3d name=DHCP-home
add address-pool=sused disabled=no interface=sused lease-time=3d name=server1
/ppp profile
add change-tcp-mss=yes incoming-filter=rw-in local-address=10.0.6.1 name=L2TP \
only-one=no remote-address=L2TP-VPN-pool use-encryption=required use-upnp=\
no
add dns-server=8.8.8.8 incoming-filter=reie local-address=10.0.6.1 name=pptp \
remote-address=L2TP-VPN-pool
/queue simple
add disabled=yes dst=10.0.6.0/24 name=sused-local-unlimited target=10.0.7.0/24
/queue type
set 0 pfifo-limit=200
set 5 pcq-rate=5M
set 6 pcq-rate=8M
/queue simple
add limit-at=2M/2M max-limit=10M/10M name="sused 8mbps" packet-marks=shape \
queue=default/default target=10.0.6.0/24 total-queue=default
add disabled=yes name="graph- WAN" queue=default/default target="" total-queue=\
default
add disabled=yes name=graph-all queue=default/default target=bridge
/snmp community
set [ find default=yes ] addresses=0.0.0.0/0
/interface bridge port
add bridge=bridge comment=defconf interface=ether2-master
add bridge=sused comment=sused interface=ether6-master
add bridge=bridge comment=defconf hw=no interface=sfp1
add bridge=bridge interface=ether1
add bridge=bridge interface=ether3
add bridge=bridge interface=ether4
add bridge=bridge interface=ether5
add bridge=bridge interface=ether7
add bridge=bridge interface=ether8
add bridge=bridge interface=ether9
/interface bridge settings
set allow-fast-path=no use-ip-firewall=yes
/ip neighbor discovery-settings
set discover-interface-list=discover
/ip settings
set allow-fast-path=no
/interface l2tp-server server
set authentication=mschap2 default-profile=L2TP enabled=yes max-mru=1460 \
max-mtu=1460
/interface list member
add interface=ether2-master list=discover
add interface=ether3 list=discover
add interface=ether4 list=discover
add interface=ether5 list=discover
add interface=sfp1 list=discover
add interface=ether6-master list=discover
add interface=ether7 list=discover
add interface=ether8 list=discover
add interface=ether9 list=discover
add interface=ether10 list=discover
add interface=bridge list=discover
add interface=bridge list=mactel
add interface=bridge list=mac-winbox
/interface pptp-server server
set authentication=pap,chap,mschap1,mschap2 default-profile=pptp
/ip address
add address=192.168.88.1/24 comment=defconf disabled=yes interface=bridge \
network=192.168.88.0
add address=10.0.6.1/24 interface=bridge network=10.0.6.0
add address=10.10.10.9/24 interface=ether10 network=10.10.10.0
add address=10.0.7.1/24 interface=sused network=10.0.7.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid interface=ether1
/ip dhcp-server lease
add address=10.0.6.155 client-id=1:0:1b:a9:b1:2a:f9 mac-address=\
00:1B:A9:B1:2A:F9 server=DHCP-home
add address=10.0.6.109 comment=OwnCloud mac-address=08:00:27:71:D2:0D server=\
DHCP-home
add address=10.0.6.112 client-id=1:0:6:78:11:3d:bc comment=Marantz mac-address=\
00:06:78:11:3D:BC server=DHCP-home
add address=10.0.6.119 comment=OpenHAB disabled=yes mac-address=\
00:0C:29:2E:86:16 server=DHCP-home
add address=10.0.6.245 always-broadcast=yes comment=Hydrawise mac-address=\
00:1E:C0:40:3D:40 server=DHCP-home
add address=10.0.6.242 always-broadcast=yes comment="4CH Sonoff" mac-address=\
60:01:94:B2:D1:72 server=DHCP-home
add address=10.0.6.241 always-broadcast=yes comment=Filtracia mac-address=\
84:F3:EB:4B:78:20 server=DHCP-home
add address=10.0.6.114 always-broadcast=yes comment="Node MCU - bazen" \
mac-address=BC:DD:C2:FD:CD:D5 server=DHCP-home
add address=10.0.6.133 always-broadcast=yes client-id=1:64:d1:54:aa:80:7c \
comment="Mikrotik Domcek" mac-address=64:D1:54:AA:80:7C server=DHCP-home
add address=10.0.6.107 client-id=1:cc:2d:e0:b8:b8:a2 mac-address=\
CC:2D:E0:B8:B8:A2 server=DHCP-home
add address=10.0.6.240 comment="Sonoff kurenie" mac-address=60:01:94:B2:D9:B5 \
server=DHCP-home
add address=10.0.6.6 always-broadcast=yes comment=uctovnictvo mac-address=\
00:0C:29:D3:7E:B3 server=DHCP-home
add address=10.0.6.119 mac-address=00:0C:29:0A:73:9D server=DHCP-home
add address=10.0.6.243 mac-address=DC:4F:22:8F:E4:1B server=DHCP-home
add address=10.0.6.244 mac-address=DC:4F:22:90:F5:07 server=DHCP-home
add address=10.0.6.250 client-id=1:b8:27:eb:4e:39:b0 mac-address=\
B8:27:EB:4E:39:B0 server=DHCP-home
add address=10.0.6.246 mac-address=DC:4F:22:4B:D5:7F server=DHCP-home
add address=10.0.6.100 client-id=1:0:1d:ec:13:4d:3a mac-address=\
00:1D:EC:13:4D:3A server=DHCP-home
/ip dhcp-server network
add address=10.0.6.0/24 comment=home dns-server=\
10.0.6.1,193.93.72.10,193.93.72.1 gateway=10.0.6.1 netmask=24
add address=10.0.7.0/24 comment=sused dns-server=10.0.6.1 gateway=10.0.6.1
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes servers=193.93.72.10,193.93.72.1
/ip dns static
add address=10.0.6.1 name=router
add address=10.0.6.20 name=server
add address=10.0.6.109 name=owncloud
add address=10.0.6.119 name=openhab
/ip firewall filter
add action=accept chain=forward comment="webove rozhranie vu duo2" \
connection-nat-state="" disabled=yes dst-port=9033 in-interface=ether10 \
protocol=tcp
add action=accept chain=forward comment="SSH (ftp)" connection-nat-state="" \
dst-port=9034 in-interface=ether10 protocol=tcp
add action=accept chain=forward comment="stream pre vu duo2" disabled=yes \
dst-port=8001 in-interface=ether10 protocol=tcp
add action=accept chain=forward comment="ssl owncloud web" dst-address=\
93.174.177.211 dst-port=443 protocol=tcp
add action=accept chain=input comment=\
"L2TP Nepust dovnitr L2TP bez IPsec obalky" dst-port=1701 ipsec-policy=\
in,ipsec protocol=udp
add action=drop chain=input comment=L2TP dst-port=1701 protocol=udp
add action=accept chain=output comment=\
"L2TP Nepust ven L2TP odpoved serveru bez IPsec obalky" ipsec-policy=\
out,ipsec protocol=udp src-port=1701
add action=reject chain=output comment=L2TP protocol=udp reject-with=\
icmp-network-unreachable src-port=1701
add action=accept chain=input comment=\
"L2TP wan-in: IPsec, IKEv1, IPsec over UDP" connection-state=new protocol=\
ipsec-esp
add action=accept chain=input comment=L2TP connection-state=new dst-port=\
500,4500 protocol=udp
add action=jump chain=input comment="L2TP filtr na data od road-warriors" \
jump-target=ppp
add action=jump chain=forward comment=L2TP jump-target=ppp
add action=accept chain=rw-in comment=\
"L2TP === rw-in: co jde od road-warriors pres VPN povolit" \
connection-state=new
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept established,related" \
connection-state=established,related
add action=accept chain=input comment=PPTP disabled=yes dst-port=1723 protocol=\
tcp
add action=accept chain=input comment=PPTP disabled=yes in-interface=ether10 \
protocol=gre
add action=drop chain=input comment="defconf: drop all from WAN" in-interface=\
ether10
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related disabled=yes
add action=accept chain=forward comment="defconf: accept established,related" \
connection-state=established,related
add action=drop chain=forward comment="defconf: drop invalid" connection-state=\
invalid
add action=drop chain=forward comment=\
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new in-interface=ether10
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" out-interface=\
ether10
add action=masquerade chain=srcnat comment="Hairpin NAT owncloud" dst-address=\
10.0.6.109 dst-port=443 out-interface=bridge protocol=tcp src-address=\
10.0.6.0/24 to-addresses=31.24.180.43
add action=masquerade chain=srcnat comment="Hairpin NAT owncloud" disabled=yes \
dst-address=10.0.6.109 dst-port=80 out-interface=bridge protocol=tcp \
src-address=10.0.6.0/24
add action=dst-nat chain=dstnat comment="SSL web owncloud" dst-address=\
93.174.177.211 dst-port=443 protocol=tcp to-addresses=10.0.6.109 to-ports=\
443
add action=dst-nat chain=dstnat comment="web owncloud" disabled=yes \
dst-address=93.174.177.211 dst-port=80 protocol=tcp to-addresses=10.0.6.109 \
to-ports=80
add action=dst-nat chain=dstnat comment="SSL web owncloud" dst-port=443 \
in-interface=ether10 protocol=tcp to-addresses=10.0.6.109 to-ports=443
add action=dst-nat chain=dstnat comment="VU DUO2 web interface" dst-port=9033 \
log=yes protocol=tcp to-addresses=10.0.6.100 to-ports=80
add action=dst-nat chain=dstnat comment="VU DUO2 stream" dst-port=8001 \
in-interface=ether10 log=yes protocol=tcp to-addresses=10.0.6.100 to-ports=\
8001
add action=dst-nat chain=dstnat comment="Bitvise SSH" disabled=yes dst-port=\
9034 in-interface=ether10 protocol=tcp to-addresses=10.0.6.20 to-ports=22
add action=dst-nat chain=dstnat comment=Filezilla dst-port=9034 in-interface=\
ether10 protocol=tcp to-addresses=10.0.6.20 to-ports=21
add action=dst-nat chain=dstnat comment=Filezilla-50001-50007 dst-port=\
50001-50007 in-interface=ether10 protocol=tcp to-addresses=10.0.6.20
add action=dst-nat chain=dstnat comment=utorrent dst-port=44763 in-interface=\
ether10 protocol=tcp to-addresses=10.0.6.20 to-ports=44763
add action=dst-nat chain=dstnat comment=utorrent dst-port=44763 in-interface=\
ether10 protocol=udp to-addresses=10.0.6.20 to-ports=44763
/ip ipsec identity
add generate-policy=port-override peer=peer1 remote-id=ignore
/ip route
add distance=1 gateway=10.10.10.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
/ip ssh
set allow-none-crypto=yes forwarding-enabled=remote
/ip upnp
set enabled=yes show-dummy-rule=no
/ip upnp interfaces
add disabled=yes interface=ether2-master type=internal
add disabled=yes interface=ether4 type=internal
add interface=bridge type=internal
add disabled=yes interface=ether10 type=external
/ppp secret
add name=vajko profile=L2TP service=l2tp
add name=mirec profile=L2TP service=l2tp
add name=vajko-mobile profile=L2TP service=l2tp
add name=vajko-firemny profile=L2TP service=l2tp
add name=barbara profile=L2TP service=l2tp
add name=rado profile=L2TP service=l2tp
/system clock
set time-zone-name=Europe/Bratislava
/system routerboard settings
set silent-boot=yes
/tool graphing interface
add
/tool mac-server
set allowed-interface-list=mactel
/tool mac-server mac-winbox
set allowed-interface-list=mac-winbox