Hello all,
I have recently changed out a unmanaged switch for a mikrotik rb2011 in order to provide a bit more manageability. The office building pays individually for bandwidth but they also wanted to “share” bandwidth and still have minimum bandwidth for their individual offices. I set up the mikrotik to have a tagged data vlan going out to our network with a management vlan (internal ip) for us to log into the switch to work on it. After changing it out I have recieved complaints by a few that the internet is slower through the new mikrotik than it was through the old switch. The total bandwidth hasnt changed. Posting config here just if someone would see if i missed something? or perhaps a better way to give individual ports a commited rate and a max rate besides using queue limit-at/max-limit to do it. Only other option i thought of was a pcq limit on the uplink port and somehow only allowing 1 mac address per port so they only have 1 connection. The downside to that is that if one of the office wants to increase commited speed the pcq method wouldnt work.
Here is my config
# nov/06/2014 14:00:18 by RouterOS 6.20
# software id = xxxx=xxxx
#
/interface ethernet
set [ find default-name=ether1 ] advertise=100M-full auto-negotiation=no \
comment=Uplink name=ether1-uplink
set [ find default-name=ether2 ] comment="office 1"
set [ find default-name=ether3 ] comment="office 2"
set [ find default-name=ether4 ] auto-negotiation=no comment="office 3"
set [ find default-name=ether5 ] comment="office 4"
set [ find default-name=ether6 ] comment="office 5"
set [ find default-name=ether7 ] comment="office 6"
set [ find default-name=ether8 ] comment="office 7" \
disabled=yes
set [ find default-name=ether9 ] comment="office 8" disabled=\
yes
set [ find default-name=ether10 ] disabled=yes
/interface bridge
add mtu=1500 name=Data-Bridge
/ip neighbor discovery
set ether1-uplink comment=Uplink
set ether2 comment="office 1"
set ether3 comment="office 2"
set ether4 comment="office 3"
set ether5 comment="office 4"
set ether6 comment="office 5"
set ether7 comment="office 6"
set ether8 comment="office 7"
set ether9 comment="office 8"
/interface vlan
add interface=ether1-uplink l2mtu=1594 name=data vlan-id=111
add interface=ether1-uplink l2mtu=1594 name=management vlan-id=2
/queue simple
add limit-at=384k/1M max-limit=3M/6M name="office 1" target=\
ether2
add limit-at=384k/1M max-limit=3M/6M name="office 2" target=\
ether3
add limit-at=384k/1M max-limit=3M/6M name="office 3" \
target=ether4
add limit-at=384k/1M max-limit=3M/6M name="office 4" \
target=ether5
add limit-at=384k/1M max-limit=3M/6M name="office 5" target=\
ether6
add limit-at=384k/1M max-limit=3M/6M name="office 6" target=ether7
add limit-at=384k/1M max-limit=3M/6M name="office 7" \
target=ether8
add limit-at=384k/1M max-limit=3M/6M name="office 8" target=ether9
/system logging action
set 2 remember=yes
/interface bridge port
add bridge=Data-Bridge interface=data
add bridge=Data-Bridge interface=ether3
add bridge=Data-Bridge interface=ether2
add bridge=Data-Bridge interface=ether4
add bridge=Data-Bridge interface=ether5
add bridge=Data-Bridge interface=ether6
add bridge=Data-Bridge interface=ether7
add bridge=Data-Bridge interface=ether8
add bridge=Data-Bridge interface=ether9
add bridge=Data-Bridge interface=ether10
/interface bridge settings
set allow-fast-path=no use-ip-firewall=yes
/ip address
add address=172.25.46.10/24 interface=management network=172.25.46.0
/ip firewall filter
add chain=input protocol=icmp
add chain=input dst-port=8291 protocol=tcp src-address=2.4.96.128/26
add chain=input connection-state=established
add action=drop chain=input connection-state=new
/ip route
add distance=1 gateway=2.1.9.254
add distance=1 gateway=172.25.46.1 pref-src=172.25.46.10
/ip service
set telnet disabled=yes
set ftp disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ip upnp
set allow-disable-external-interface=no
/snmp
set trap-community=public
/system clock
set time-zone-name=America/Chicago
/system ntp client
set enabled=yes primary-ntp=6.7.9.254 secondary-ntp=6.7.9.254