Hello, just wanted to ask how could I setup simple queue for my Ubiquiti AC AP Lite that is on interface ether2? Because as of now I can only see upload traffic because it is bridged so I can’t find how to properly handle it. Tried it with mangle rules to no avail. I also have set DHCP range in the AP to be from x.x.x.101-150. AP receives x.x.x.100 if that helps.
[anon@MikroTik] > interface print
Flags: R - RUNNING; S - SLAVE
Columns: NAME, TYPE, ACTUAL-MTU, L2MTU, MAX-L2MTU, MAC-ADDRESS
# NAME TYPE ACTUAL-MTU L2MTU MAX-L2MTU MAC-ADDRESS
0 R ether1 ether 1500 1514 9796 C4:AD:34:CC:CD:EB
;;; Wifi / TV
1 RS ether2 ether 1500 1514 9796 04:F4:1C:20:74:B1
;;; MyPC
2 RS ether3 ether 1500 1514 9796 04:F4:1C:20:74:B2
;;; xPC
3 RS ether4 ether 1500 1514 9796 04:F4:1C:20:74:B3
;;; Raspi / Laptop
4 RS ether5 ether 1500 1514 9796 04:F4:1C:20:74:B4
;;; yyyy PC
5 RS ether6 ether 1500 1514 9796 04:F4:1C:20:74:B5
;;; Raspi
6 RS ether7 ether 1500 1514 9796 04:F4:1C:20:74:B6
7 S ether8 ether 1500 1514 9796 04:F4:1C:20:74:B7
8 S sfp-sfpplus1 ether 1500 1514 9796 04:F4:1C:20:74:B8
;;; defconf
9 R bridge bridge 1500 1514 C4:AD:34:CC:CD:EC
10 R lo loopback 65536 00:00:00:00:00:00
[anon@MikroTik] > interface bridge print
Flags: D - dynamic; X - disabled, R - running
0 R ;;; defconf
name="bridge" mtu=auto actual-mtu=1500 l2mtu=1514 arp=enabled arp-timeout=auto mac-address=C4:AD:34:CC:CD:EC protocol-mode=rstp fast-forward=no igmp-snooping=no auto-mac=no admin-mac=C4:AD:34:CC:CD:EC ageing-time=5m
priority=0x8000 max-message-age=20s forward-delay=15s transmit-hold-count=6 vlan-filtering=no dhcp-snooping=no port-cost-mode=long mvrp=no max-learned-entries=auto
[anon@MikroTik] > interface bridge settings print
use-ip-firewall: yes
use-ip-firewall-for-vlan: no
use-ip-firewall-for-pppoe: no
allow-fast-path: no
bridge-fast-path-active: no
bridge-fast-path-packets: 1896383
bridge-fast-path-bytes: 1169190827
bridge-fast-forward-packets: 0
bridge-fast-forward-bytes: 0
[anon@MikroTik] > ip firewall filter print
Flags: X - disabled, I - invalid; D - dynamic
0 ;;; Allow limited ICMP
chain=input action=accept protocol=icmp limit=10,5:packet
1 ;;; Drop excess ICMP
chain=input action=drop protocol=icmp
2 ;;; Drop excessive SYN connections
chain=input action=drop tcp-flags=syn connection-limit=30,32 protocol=tcp
3 ;;; Drop aggressive connection attempts
chain=input action=drop connection-limit=20,32 protocol=tcp
4 ;;; Detect port scanners
chain=input action=add-src-to-address-list protocol=tcp psd=18,3s,3,1 address-list=port_scanners address-list-timeout=1h in-interface-list=WAN log=yes log-prefix="SCAN-DETECTED:"
5 ;;; Drop port scanners
chain=input action=drop src-address-list=port_scanners in-interface-list=WAN log=no log-prefix=""
6 ;;; Accept limited new connections
chain=input action=accept connection-state=new limit=30,5:packet
7 ;;; Drop excess new connections
chain=input action=drop connection-state=new
8 ;;; defconf: accept established,related,untracked
chain=input action=accept connection-state=established,related,untracked
9 ;;; defconf: drop invalid
chain=input action=drop connection-state=invalid
10 ;;; defconf: accept ICMP
chain=input action=accept protocol=icmp
11 ;;; defconf: accept to local loopback (for CAPsMAN)
chain=input action=accept dst-address=127.0.0.1
12 ;;; defconf: drop all not coming from LAN
chain=input action=drop in-interface-list=!LAN
13 ;;; defconf: accept in ipsec policy
chain=forward action=accept ipsec-policy=in,ipsec
14 ;;; defconf: accept out ipsec policy
chain=forward action=accept ipsec-policy=out,ipsec
15 X ;;; defconf: fasttrack
chain=forward action=fasttrack-connection hw-offload=yes connection-state=established,related log=no log-prefix=""
16 ;;; defconf: accept established,related, untracked
chain=forward action=accept connection-state=established,related,untracked
17 ;;; defconf: drop invalid
chain=forward action=drop connection-state=invalid
18 ;;; defconf: drop all from WAN not DSTNATed
chain=forward action=drop connection-state=new connection-nat-state=!dstnat in-interface-list=WAN
[anon@MikroTik] > ip firewall mangle print
Flags: X - disabled, I - invalid; D - dynamic
0 ;;; Steam download
chain=forward action=mark-packet new-packet-mark=steam_download passthrough=yes layer7-protocol=steam-l7 log=no log-prefix=""
[anon@MikroTik] > queue simple print
Flags: X - disabled, I - invalid; D - dynamic
0 name="Steam" target=192.168.88.195/32 parent=MyPC packet-marks=steam_download priority=8/8 queue=cake-upload/cake-download limit-at=100M/100M max-limit=500M/500M burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
bucket-size=0.1/0.1
1 name="Steam1" target=192.168.88.194/32 parent=xPC packet-marks=steam_download priority=8/8 queue=cake-upload/cake-download limit-at=100M/100M max-limit=500M/500M burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
bucket-size=0.1/0.1
2 name="MyPC" target=192.168.88.195/32 parent=none packet-marks="" priority=1/1 queue=cake-upload/cake-download limit-at=100M/100M max-limit=800M/800M burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
bucket-size=0.1/0.1
3 name="TV" target=192.168.88.34/32 parent=none packet-marks="" priority=4/4 queue=cake-upload/cake-download limit-at=100M/100M max-limit=800M/800M burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s bucket-size=0.1/0.1
4 name="Raspi" target=192.168.88.65/32 parent=none packet-marks="" priority=8/8 queue=cake-upload/cake-download limit-at=100M/100M max-limit=800M/800M burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
bucket-size=0.1/0.1
5 name="Work" target=192.168.88.187/32 parent=none packet-marks="" priority=8/8 queue=cake-upload/cake-download limit-at=100M/100M max-limit=800M/800M burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
bucket-size=0.1/0.1
6 name="Wifi_Upload" target=ether2 parent=none packet-marks="" priority=5/5 queue=cake-upload/cake-download limit-at=100M/100M max-limit=800M/800M burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s bucket-size=0.1/0.1
7 name="xPC" target=192.168.88.194/32 parent=none packet-marks="" priority=2/2 queue=cake-upload/cake-download limit-at=100M/100M max-limit=800M/800M burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
bucket-size=0.1/0.1
8 name="yPC" target=192.168.88.41/32 parent=none packet-marks="" priority=3/3 queue=cake-upload/cake-download limit-at=100M/100M max-limit=800M/800M burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
bucket-size=0.1/0.1
9 name="Steam3" target=192.168.88.41/32 parent=yPC packet-marks=steam_download priority=8/8 queue=cake-upload/cake-download limit-at=100M/100M max-limit=500M/500M burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s
bucket-size=0.1/0.1
[anon@MikroTik] >
[anon@MikroTik] > system package print
Flags: X - DISABLED; A - AVAILABLE
Columns: NAME, VERSION, BUILD-TIME, SIZE
# NAME VERSION BUILD-TIME SIZE
0 routeros 7.20.4 2025-11-05 12:07:41 12.6MiB
1 XA calea 20.1KiB
2 XA container 208.1KiB
3 XA dude 1224.1KiB
4 XA extra-nic 2384.1KiB
5 XA gps 24.1KiB
6 XA iot 708.1KiB
7 XA iot-bt-extra 440.1KiB
8 XA openflow 80.1KiB
9 XA rose-storage 3140.1KiB
10 XA switch-marvell 8.8MiB
11 XA tr069-client 136.1KiB
12 XA ups 36.1KiB
13 XA user-manager 336.1KiB
14 XA wifi-qcom 10.2MiB
15 XA wireless 860.1KiB
16 XA zerotier 836.1KiB
[anon@MikroTik] > system routerboard print
routerboard: yes
model: RB5009UG+S+
serial-number: HJN0ATWQNR0
firmware-type: 70x0
factory-firmware: 7.16.2
current-firmware: 7.20.4
upgrade-firmware: 7.20.4
as a matter a fact I can’t even see traffic on other queues so I even set up that wrong:
[anon@MikroTik] > queue simple print statsFlags: X - disabled, I - invalid; D - dynamic0 name="Steam" target=192.168.88.195/32 rate=0bps/0bps total-rate=0bps packet-rate=0/0 total-packet-rate=0 queued-bytes=0/0 total-queued-bytes=0 queued-packets=0/0 total-queued-packets=0 bytes=0/0 total-bytes=0 packets=0/0total-packets=0 dropped=0/0 total-dropped=0
1 name="Steam1" target=192.168.88.194/32 rate=0bps/0bps total-rate=0bps packet-rate=0/0 total-packet-rate=0 queued-bytes=0/0 total-queued-bytes=0 queued-packets=0/0 total-queued-packets=0 bytes=0/0 total-bytes=0packets=0/0 total-packets=0 dropped=0/0 total-dropped=0
2 name="MyPC" target=192.168.88.195/32 rate=0bps/0bps total-rate=0bps packet-rate=0/0 total-packet-rate=0 queued-bytes=0/0 total-queued-bytes=0 queued-packets=0/0 total-queued-packets=0 bytes=0/0 total-bytes=0 packets=0/0total-packets=0 dropped=0/0 total-dropped=0
3 name="TV" target=192.168.88.34/32 rate=0bps/0bps total-rate=0bps packet-rate=0/0 total-packet-rate=0 queued-bytes=0/0 total-queued-bytes=0 queued-packets=0/0 total-queued-packets=0 bytes=0/0 total-bytes=0 packets=0/0total-packets=0 dropped=0/0 total-dropped=0
4 name="Raspi" target=192.168.88.65/32 rate=104bps/168bps total-rate=0bps packet-rate=0/0 total-packet-rate=0 queued-bytes=0/0 total-queued-bytes=0 queued-packets=0/0 total-queued-packets=0 bytes=52/86 total-bytes=0packets=1/1 total-packets=0 dropped=0/0 total-dropped=0
5 name="Work" target=192.168.88.187/32 rate=0bps/0bps total-rate=0bps packet-rate=0/0 total-packet-rate=0 queued-bytes=0/0 total-queued-bytes=0 queued-packets=0/0 total-queued-packets=0 bytes=0/0 total-bytes=0 packets=0/0total-packets=0 dropped=0/0 total-dropped=0
6 name="Wifi_Upload" target=ether2 rate=41.8kbps/0bps total-rate=0bps packet-rate=20/0 total-packet-rate=0 queued-bytes=0/0 total-queued-bytes=0 queued-packets=0/0 total-queued-packets=0 bytes=67848/0 total-bytes=0packets=211/0 total-packets=0 dropped=0/0 total-dropped=0
7 name="xPC" target=192.168.88.194/32 rate=0bps/0bps total-rate=0bps packet-rate=0/0 total-packet-rate=0 queued-bytes=0/0 total-queued-bytes=0 queued-packets=0/0 total-queued-packets=0 bytes=0/0 total-bytes=0packets=0/0 total-packets=0 dropped=0/0 total-dropped=0
8 name="yPC" target=192.168.88.41/32 rate=0bps/0bps total-rate=0bps packet-rate=0/0 total-packet-rate=0 queued-bytes=0/0 total-queued-bytes=0 queued-packets=0/0 total-queued-packets=0 bytes=0/0 total-bytes=0packets=0/0 total-packets=0 dropped=0/0 total-dropped=0
9 name="Steam3" target=192.168.88.41/32 rate=0bps/0bps total-rate=0bps packet-rate=0/0 total-packet-rate=0 queued-bytes=0/0 total-queued-bytes=0 queued-packets=0/0 total-queued-packets=0 bytes=0/0 total-bytes=0 packets=0/0total-packets=0 dropped=0/0 total-dropped=0
There should definitely be traffic on MyPC and xPC. Correction: Only steam traffic is shown.
[anon@MikroTik] > ip firewall layer7 printColumns: NAME, REGEXP
NAME REGEXP
0 steam-l7 steamcontent|steamcdn|steampowered|store.steampowered|edgecast|steamcdn-a