Update: Resolved! RB951Ui-2HnD - Quick Set to HomeAP - Simple Queue not working for wireless clients?

RouterOS Beginner Basics
1

Default settings with HomeAP mode set. My goal is to throttle connections back to 256kbps and turn off internet on specific devices during the evenings. Simple Queue should take care of this but it isn’t working. Attached image simple queue is a device with a statically assigned IP in a queue rule.
Simple Queue.PNG
The attached byte graph is not showing all the bandwith going to the device, I am running speedtests from speedof.me and getting waay over the 256kbps (32KB) up and down.
byte graph.PNG
I have tried changing the queue type from default-small to wireless-default and that is not helping me achieve the desired effect. Reboots of the router have also been done after changes to have the clients re-associate.

My guess is the simple queue is not catching all the traffic the device is sending/receiving because it is only listening on the LAN interface, not the wlan1 interface…

Is this a known issue? Does anyone know why I can’t get the simple queue to work with the wireless clients? Any help appreciated.

Thanks!

2

Update: Simple Queue for wireless clients works fine when winbox running on my desktop. As soon as I quit winbox, the throttling is removed. I would like to not have to have winbox running for the throttling in simple queue to work, is there a known fix to this?

Thanks!

3

Is anyone familiar with this issue of needing winbox running on a PC in order for the simple queue to work?

4

Don’t you have safe mode on while making the config?

5

Safe mode not on in either web config or winbox.

Should I have safe mode on while creating simple queues, then after simple queues created get out of safe mode to apply config changes?

Why does the simple queue throttling work only when winbox application is running on PC? I am wanting a working simple queue with throttling without needing winbox app running on desktop.

Any other details or screenshots that I can provide to help with understanding/resolving this behavior?

6

Are you setting a destination address in the queue? 0.0.0.0/0?

I never use the web interface, only Winbox. When I set these up for clients just like you are doing it works just fine without winbox running…

7

The simple queues were originally setup through the web interface. I deleted them and recreated them using winbox and see no change. The destination address is not set. Should this be changed? Clients are connecting via the wlan.

8

Hoping with a post of the config someone may notice an issue that would cause the simple queue to not work.
It seems that only some of the traffic is being monitored when bringing up a client in the simple queues.
Thanks for proofing the config!

[admin@MikroTik] > /export 
# aug/14/2016 13:17:35 by RouterOS 6.36
# software id = T8VE-4ZQ5
#
/interface bridge
add admin-mac=4C:5E:0C:AA:22:FD auto-mac=no disabled=yes name=bridge-local
add name=bridge1
/interface ethernet
set [ find default-name=ether1 ] name=ether1-gateway
set [ find default-name=ether2 ] name=ether2-master-local
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n country="united states" disabled=no frequency=auto mode=ap-bridge ssid=Network wireless-protocol=802.11
/ip neighbor discovery
set ether1-gateway discover=no
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=dynamic-keys wpa-pre-shared-key=X_______ wpa2-pre-shared-key=X__________
add name=profile
/interface wireless
add mac-address=4E:5E:0C:AA:23:01 master-interface=wlan1 name=wlan2 security-profile=profile ssid=""
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=aes-128-cbc
/ip pool
add name=dhcp ranges=10.20.0.50-10.20.0.240
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge1 name=dhcp1
/queue simple
add max-limit=128k/128k name="Scotts IPod" target=10.20.0.50/32
add max-limit=768k/768k name=PS3 target=10.20.0.51/32
add burst-time=4s/4s max-limit=512k/512k name="Matts S7" target=10.20.0.52/32
add max-limit=512k/512k name=Desktop target=10.20.0.54/32
add max-limit=512k/512k name="Not Sure #1" target=10.20.0.55/32
add name="Xbox One" target=10.20.0.58/32
add max-limit=128k/128k name="Emmas Kindle" target=10.20.0.59/32
add name="Xbox 360" target=10.20.0.60/32
add name="Yamaha Receiver" target=10.20.0.61/32
add max-limit=256k/256k name="Jess Tablet" target=10.20.0.67/32
add name="Don Jon Xbox" target=10.20.1.73/32
add max-limit=10M/10M name=PS4 target=10.20.0.71/32
add max-limit=128k/128k name="Justice Phone" queue=wireless-default/wireless-default target=10.20.0.53/32
add max-limit=128k/128k name="Jocelyn S6" queue=wireless-default/wireless-default target=10.20.0.56/32 total-queue=wireless-default
add max-limit=256k/256k name="Jess S5" queue=wireless-default/wireless-default target=10.20.0.57/32 total-queue=wireless-default
add burst-time=40s/40s max-limit=128k/128k name="Kerrys MBP-2" queue=wireless-default/wireless-default target=10.20.0.70/32
add burst-time=1m/1m max-limit=128k/128k name="Kerrys Laptop" queue=wireless-default/wireless-default target=10.20.0.69/32
add max-limit=256k/256k name="Junes Phone" queue=wireless-default/wireless-default target=10.20.0.72/32
/interface bridge filter
# wlan2 not ready
# in/out-bridge-port matcher not possible when interface (wlan2) is not slave
add action=drop chain=forward in-interface=wlan2 log-prefix=""
# wlan2 not ready
# in/out-bridge-port matcher not possible when interface (wlan2) is not slave
add action=drop chain=forward log-prefix="" out-interface=wlan2
/interface bridge port
add bridge=bridge1 interface=ether2-master-local
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
add bridge=bridge1 interface=wlan1
add bridge=bridge1 interface=wlan2
/ip address
add address=10.20.0.1/24 interface=ether2-master-local network=10.20.0.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether1-gateway
/ip dhcp-server lease
add address=10.20.0.50 always-broadcast=yes client-id=1:88:1f:a1:e4:94:cc comment="Scott iPod" mac-address=88:1F:A1:E4:94:CC server=dhcp1
add address=10.20.0.51 client-id=1:0:24:8d:ff:1:db comment=PS3 mac-address=00:24:8D:FF:01:DB server=dhcp1
add address=10.20.0.52 client-id=1:60:f1:89:5d:18:d2 comment="Matt S7" mac-address=60:F1:89:5D:18:D2 server=dhcp1
add address=10.20.0.53 client-id=1:e8:99:c4:87:1b:8f comment="Justice Phone" mac-address=E8:99:C4:87:1B:8F server=dhcp1
add address=10.20.0.54 client-id=1:bc:ae:c5:45:d8:16 comment=Desktop mac-address=BC:AE:C5:45:D8:16 server=dhcp1
add address=10.20.0.55 client-id=1:b4:ce:f6:8f:14:92 comment="Not Sure #1" mac-address=B4:CE:F6:8F:14:92 server=dhcp1
add address=10.20.0.56 client-id=1:ec:1f:72:3b:c1:bc comment="Jocelyn S6" mac-address=EC:1F:72:3B:C1:BC server=dhcp1
add address=10.20.0.57 client-id=1:78:4b:87:85:7a:7d comment="Jess S5" mac-address=78:4B:87:85:7A:7D server=dhcp1
add address=10.20.0.58 client-id=1:28:18:78:e3:46:2b comment="Xbox One" mac-address=28:18:78:E3:46:2B server=dhcp1
add address=10.20.0.61 client-id=1:0:a0:de:a2:16:71 comment="Yamaha Receiver" mac-address=00:A0:DE:A2:16:71 server=dhcp1
add address=10.20.0.60 client-id=1:0:25:ae:75:4a:83 comment="Xbox 360 Black" mac-address=00:25:AE:75:4A:83 server=dhcp1
add address=10.20.0.59 comment=Kindle mac-address=00:BB:3A:BD:E5:4B server=dhcp1
add address=10.20.0.62 client-id=1:18:b4:30:0:85:e2 comment="Nest Thermostat" mac-address=18:B4:30:00:85:E2 server=dhcp1
add address=10.20.0.63 comment="Nest Protect Kitchen" mac-address=18:B4:30:30:A4:4A server=dhcp1
add address=10.20.0.64 comment="Nest Protect Basement" mac-address=18:B4:30:22:48:CB server=dhcp1
add address=10.20.0.65 comment="Nest Protect Upstairs" mac-address=18:B4:30:20:01:C6 server=dhcp1
add address=10.20.0.67 client-id=1:4c:34:88:15:c1:ab comment="Jess Dell Tablet" mac-address=4C:34:88:15:C1:AB server=dhcp1
add address=10.20.0.73 client-id=1:b4:ae:2b:b:ca:7e comment="Don Jon Xbox" mac-address=B4:AE:2B:0B:CA:7E server=dhcp1
add address=10.20.0.71 client-id=1:c:fe:45:7b:fe:1c comment=PS4 mac-address=0C:FE:45:7B:FE:1C server=dhcp1
add address=10.20.0.69 always-broadcast=yes client-id=1:80:ed:2c:4f:65:a5 comment="Kerry's Laptop" mac-address=80:ED:2C:4F:65:A5 server=dhcp1
add address=10.20.0.70 client-id=1:a4:5e:60:d6:8c:5d mac-address=A4:5E:60:D6:8C:5D server=dhcp1
add address=10.20.0.72 client-id=1:78:4b:87:85:3d:f comment="Junes Phone" mac-address=78:4B:87:85:3D:0F server=dhcp1
/ip dhcp-server network
add address=10.20.0.0/24 gateway=10.20.0.1 netmask=24
/ip dns
set allow-remote-requests=yes servers=10.61.X.X
/ip dns static
add address=10.20.0.1 name=router
/ip firewall filter
add action=accept chain=input comment="default configuration" log-prefix="" protocol=icmp
add action=accept chain=input comment="default configuration" connection-state=established,related log-prefix=""
add action=drop chain=input comment="default configuration" in-interface=ether1-gateway log-prefix=""
add action=fasttrack-connection chain=forward comment="default configuration" connection-state=established,related log-prefix=""
add action=accept chain=forward comment="default configuration" connection-state=established,related log-prefix=""
add action=drop chain=forward comment="default configuration" connection-state=invalid log-prefix=""
add action=drop chain=forward comment="default configuration" connection-nat-state=!dstnat connection-state=new in-interface=ether1-gateway log-prefix=""
/ip firewall nat
add action=masquerade chain=srcnat log-prefix="" out-interface=ether1-gateway
add action=masquerade chain=srcnat comment="default configuration" log-prefix="" out-interface=ether1-gateway
add action=redirect chain=dstnat dst-port=80 log-prefix="" protocol=tcp to-ports=8080
/ip proxy
set enabled=yes
/ip proxy access
add dst-host=ads.prod.wifog.com
add action=deny dst-host=ads.* redirect-to=0.0.0.0
add action=deny dst-host=*.mobfox.* redirect-to=0.0.0.0
add action=deny dst-host=*.cloudfront.* redirect-to=0.0.0.0
add action=deny dst-host=*.doubleclick.* redirect-to=0.0.0.0
add action=deny comment="Breaks Swedish Play Channel TV3 Viasat" dst-host=*.google-analytics.* redirect-to=0.0.0.0
add action=deny dst-host=*.scorecardresearch.com redirect-to=0.0.0.0
add action=deny dst-host=*.googlesyndication.* redirect-to=0.0.0.0
add action=deny dst-host=*.googletagmanager.* redirect-to=0.0.0.0
add action=deny dst-host=fusion.* redirect-to=0.0.0.0
add action=deny dst-host=*.research-int.se redirect-to=0.0.0.0
add action=deny dst-host=*.tailsweep* redirect-to=0.0.0.0
add action=deny dst-host=*.googletagservices.* redirect-to=0.0.0.0
add action=deny dst-host=adv.* redirect-to=0.0.0.0
add action=deny dst-host=*.adform* redirect-to=0.0.0.0
add action=deny dst-host=*.cxense.* redirect-to=0.0.0.0
add action=deny dst-host=*.googleads* redirect-to=0.0.0.0
add action=deny dst-host=cdn.optimizely.com redirect-to=0.0.0.0
add action=deny dst-host=*.burt.* redirect-to=0.0.0.0
add action=deny dst-host=m.burt.io redirect-to=0.0.0.0
add action=deny dst-host=*.inmobi.* redirect-to=0.0.0.0
add action=deny dst-host=sifomedia* redirect-to=0.0.0.0
add action=deny dst-host=nexus.ensighten.com redirect-to=0.0.0.0
add action=deny dst-host=s.skimresources.com redirect-to=0.0.0.0
add action=deny dst-host=s7.addthis.com redirect-to=0.0.0.0
add action=deny dst-host=tags.bkrtx.com redirect-to=0.0.0.0
add action=deny dst-host=*.xiti.* redirect-to=0.0.0.0
add action=deny dst-host=www.adobetag.com redirect-to=0.0.0.0
add action=deny dst-host=*.amazonaws.com redirect-to=0.0.0.0
add action=deny dst-host=adserver* redirect-to=0.0.0.0
add action=deny dst-host=*.tapsense.* redirect-to=0.0.0.0
add action=deny dst-host=ad2.* redirect-to=0.0.0.0
add action=deny dst-host=*.adnxs* redirect-to=0.0.0.0
add action=deny dst-host=*.flurry.* redirect-to=0.0.0.0
add action=deny dst-host=dev.visualwebsiteoptimizer.com redirect-to=0.0.0.0
add action=deny dst-host=distillery.wistia.com redirect-to=0.0.0.0
add action=deny dst-host=p.typekit.net redirect-to=0.0.0.0
add action=deny dst-host=*.advert* redirect-to=0.0.0.0
add action=deny dst-host=*.adzerk.net redirect-to=0.0.0.0
add action=deny dst-host=*.chartbeat.com redirect-to=0.0.0.0
add action=deny dst-host=*.imrworldwide.com redirect-to=0.0.0.0
add action=deny dst-host=*.quantserve.com redirect-to=0.0.0.0
add action=deny dst-host=b.aol.com redirect-to=0.0.0.0
add action=deny dst-host=c.betrad.com redirect-to=0.0.0.0
add action=deny dst-host=c.microsoft.com redirect-to=0.0.0.0
add action=deny dst-host=stats.wp.com redirect-to=0.0.0.0
add action=deny dst-host=*.cloudflare.* redirect-to=0.0.0.0
add action=deny dst-host=widgets.sprinkletxt.com redirect-to=0.0.0.0
add action=deny dst-host=a02.korrelate.net redirect-to=0.0.0.0
add action=deny dst-host=ox-d.majorgeeks.com redirect-to=0.0.0.0
add action=deny dst-host=referrer.disqus.com redirect-to=0.0.0.0
add action=deny dst-host=*.exponential.com redirect-to=0.0.0.0
add action=deny dst-host=js-agent.newrelic.com redirect-to=0.0.0.0
add action=deny dst-host=*.getclicky.com redirect-to=0.0.0.0
add action=deny dst-host=cdnftp.* redirect-to=0.0.0.0
add action=deny dst-host=ad.* redirect-to=0.0.0.0
add action=deny dst-host=*.adtech* redirect-to=0.0.0.0
add action=deny dst-host=*.2o7.* redirect-to=0.0.0.0
add action=deny dst-host=*.blogtoplist.se redirect-to=0.0.0.0
add action=deny dst-host=gostats.* redirect-to=0.0.0.0
add action=deny dst-host=clickcdn.xda-developers.com redirect-to=0.0.0.0
add action=deny dst-host=csi.gstatic.com redirect-to=0.0.0.0
add action=deny dst-host=dc.services.visualstudio.com redirect-to=0.0.0.0
add action=deny dst-host=nsclick.baidu.com redirect-to=0.0.0.0
add action=deny dst-host=metrics.expressen.se redirect-to=0.0.0.0
add action=deny dst-host=assets.pinterest.com redirect-to=0.0.0.0
add action=deny dst-host=*.sitestat.com redirect-to=0.0.0.0
add action=deny dst-host=events30.adcolony.com redirect-to=0.0.0.0
add action=deny dst-host=rum-static.pingdom.net redirect-to=0.0.0.0
add action=deny dst-host=api.kiip.* redirect-to=0.0.0.0
add action=deny dst-host=*.atwola.com redirect-to=0.0.0.0
add action=deny dst-host=*.bluekai.com redirect-to=0.0.0.0
add action=deny dst-host=*.kontera.com redirect-to=0.0.0.0
add action=deny dst-host=yui.yahooapis.com redirect-to=0.0.0.0
add action=deny dst-host=urls.api.twitter.com redirect-to=0.0.0.0
add action=deny dst-host=*.emediate.eu redirect-to=0.0.0.0
add action=deny dst-host=*.statcounter.com redirect-to=0.0.0.0
add action=deny dst-host=l.lp4.io redirect-to=0.0.0.0
add action=deny dst-host=cdn.mxpnl.com redirect-to=0.0.0.0
add action=deny dst-host=adadvisor.net redirect-to=0.0.0.0
add action=deny dst-host=a.collective-media.net redirect-to=0.0.0.0
add action=deny dst-host=*.applifier.* redirect-to=0.0.0.0
add action=deny dst-host=*.appbrain.* redirect-to=0.0.0.0
add action=deny dst-host=*.ads.* redirect-to=0.0.0.0
add action=deny dst-host=de17a.* redirect-to=0.0.0.0
add action=deny dst-host=*.sifomedia* redirect-to=0.0.0.0
add action=deny dst-host=*.clustrmaps.com redirect-to=0.0.0.0
add action=deny dst-host=*.moatads.com redirect-to=0.0.0.0
add action=deny dst-host=*.webtraffic.* redirect-to=0.0.0.0
add action=deny dst-host=badge.stumbleupon.com redirect-to=0.0.0.0
add action=deny dst-host=c.aol.com redirect-to=0.0.0.0
add action=deny dst-host=c.go-mpulse.net redirect-to=0.0.0.0
add action=deny dst-host=c1.microsoft.com redirect-to=0.0.0.0
add action=deny dst-host=ads* redirect-to=0.0.0.0
add action=deny dst-host=cdn.krxd.net redirect-to=0.0.0.0
add action=deny dst-host=cdn.taboola.com redirect-to=0.0.0.0
add action=deny dst-host=consent.truste.com redirect-to=0.0.0.0
add action=deny dst-host=d2wy8f7a9ursnm.cloudfront.net redirect-to=0.0.0.0
add action=deny dst-host=d3ezl4ajpp2zy8.cloudfront.net redirect-to=0.0.0.0
add action=deny dst-host=dnn506yrbagrg.cloudfront.net redirect-to=0.0.0.0
add action=deny dst-host=links.services.disqus.com redirect-to=0.0.0.0
add action=deny dst-host=stats.unity3d.com redirect-to=0.0.0.0
add action=deny dst-host=tags.tiqcdn.com redirect-to=0.0.0.0
add action=deny dst-host=*.chartboost.com redirect-to=0.0.0.0
add action=deny dst-host=widgets.digg.com redirect-to=0.0.0.0
add action=deny dst-host=8b3439.r.axf8.net redirect-to=0.0.0.0
add action=deny dst-host=cdn.segment.io redirect-to=0.0.0.0
add action=deny dst-host=nrk.tns-cs.net redirect-to=0.0.0.0
add action=deny dst-host=pixel.wp.com redirect-to=0.0.0.0
add action=deny dst-host=seb.d1.sc.omtrdc.net redirect-to=0.0.0.0
add action=deny dst-host=c.msn.com redirect-to=0.0.0.0
add action=deny dst-host=6677g.* redirect-to=0.0.0.0
add action=deny dst-host=*.6677g.* redirect-to=0.0.0.0
add action=deny dst-host=an.tacoda.net redirect-to=0.0.0.0
add action=deny dst-host=m.webtrends.com redirect-to=0.0.0.0
add action=deny dst-host=applift-a.apptornado.com redirect-to=0.0.0.0
add action=deny dst-host=*.histats.com redirect-to=0.0.0.0
add action=deny dst-host=*.stat24.com redirect-to=0.0.0.0
add action=deny dst-host=*.webtrendslive.com redirect-to=0.0.0.0
add action=deny dst-host=l.longtailvideo.com redirect-to=0.0.0.0
add action=deny dst-host=s05.flagcounter.com redirect-to=0.0.0.0
add action=deny dst-host=static.hupso.com redirect-to=0.0.0.0
add action=deny dst-host=rk.revolvermaps.com redirect-to=0.0.0.0
add action=deny dst-host=*.2mdn.net redirect-to=0.0.0.0
add action=deny dst-host=*.admob.com redirect-to=0.0.0.0
add action=deny dst-host=*.adsonar.com redirect-to=0.0.0.0
add action=deny dst-host=*.intellitxt.com redirect-to=0.0.0.0
add action=deny dst-host=*.iperceptions.com redirect-to=0.0.0.0
add action=deny dst-host=*.mixpanel.com redirect-to=0.0.0.0
add action=deny dst-host=*.netshelter.net redirect-to=0.0.0.0
add action=deny dst-host=*.onestat.com redirect-to=0.0.0.0
add action=deny dst-host=*.prchecker.info redirect-to=0.0.0.0
add action=deny dst-host=*.revsci.net redirect-to=0.0.0.0
add action=deny dst-host=*.sitemeter.com redirect-to=0.0.0.0
add action=deny dst-host=*.tradedoubler.com redirect-to=0.0.0.0
add action=deny dst-host=*.widespace.com redirect-to=0.0.0.0
add action=deny dst-host=aax-us-east.amazon-adsystem.com redirect-to=0.0.0.0
add action=deny dst-host=adm.fwmrm.net redirect-to=0.0.0.0
add action=deny dst-host=api.gameanalytics.com redirect-to=0.0.0.0
add action=deny dst-host=api.viglink.com redirect-to=0.0.0.0
add action=deny dst-host=api.vungle.com redirect-to=0.0.0.0
add action=deny dst-host=apps.outfit7.com redirect-to=0.0.0.0
add action=deny dst-host=assets.adobedtm.com redirect-to=0.0.0.0
add action=deny dst-host=b.grvcdn.com redirect-to=0.0.0.0
add action=deny dst-host=beacon.mtgx.tv redirect-to=0.0.0.0
add action=deny dst-host=cdn.viglink.com redirect-to=0.0.0.0
add action=deny dst-host=core.naturalmotion.com redirect-to=0.0.0.0
add action=deny dst-host=e2.emediate.se redirect-to=0.0.0.0
add action=deny dst-host=geoiplookup.wikimedia.org redirect-to=0.0.0.0
add action=deny dst-host=i.po.st redirect-to=0.0.0.0
add action=deny dst-host=m.servebom.com redirect-to=0.0.0.0
add action=deny dst-host=ml314.com redirect-to=0.0.0.0
add action=deny dst-host=o.sa.aol.com redirect-to=0.0.0.0
add action=deny dst-host=s.ndemiccreations.com redirect-to=0.0.0.0
add action=deny dst-host=s.ssacdn.com redirect-to=0.0.0.0
add action=deny dst-host=sdk-b.apptornado.com redirect-to=0.0.0.0
add action=deny dst-host=static.addtoany.com redirect-to=0.0.0.0
add action=deny dst-host=static.tellaparts.com redirect-to=0.0.0.0
add action=deny dst-host=widgets-cdn.rpxnow.com redirect-to=0.0.0.0
add action=deny dst-host=widgets.outbrain.com redirect-to=0.0.0.0
add action=deny dst-host=www.geoplugin.net redirect-to=0.0.0.0
add action=deny dst-host=www.startappexchange.com redirect-to=0.0.0.0
add action=deny dst-host=*.yahooapis.com redirect-to=0.0.0.0
add action=deny dst-host=z-na.amazon-adsystem.com redirect-to=0.0.0.0
add action=deny dst-host=79423.analytics.edgesuite.net redirect-to=0.0.0.0
add action=deny dst-host=bootstrap.livefyre.com redirect-to=0.0.0.0
add action=deny dst-host=measure.richmetrics.com redirect-to=0.0.0.0
add action=deny dst-host=ots.optimize.webtrends.com redirect-to=0.0.0.0
add action=deny dst-host=tag.perfectaudience.com redirect-to=0.0.0.0
add action=deny dst-host=wd-edge.sharethis.com redirect-to=0.0.0.0
add action=deny dst-host=*.lp4.*
add action=deny dst-host=*.io
/ip route
add disabled=yes distance=1 gateway=192.168.1.1
add disabled=yes distance=1 gateway=192.168.1.1
/system clock
set time-zone-name=America/XXXXX
/system leds
set 5 interface=wlan1
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=ether2-master-local
add interface=ether3
add interface=ether4
add interface=ether5
add interface=wlan1
add interface=wlan2
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=ether2-master-local
add interface=ether3
add interface=ether4
add interface=ether5
add interface=wlan1
add interface=wlan2
/tool romon port
add
[admin@MikroTik] >
9

Did you disable fastpath and fasttrack?

10

Thanks for the reply! No, I don’t believe fasttrack is disabled just by reading through the config.

add action=fasttrack-connection chain=forward comment="default configuration" connection-state=established,related log-prefix=""

If this could be causing my issue with the Simple queue not being enforced, what commands should I run to disable both?

Reading the http://wiki.mikrotik.com/wiki/Manual:Fast_Path it says that fastpath will be enabled if specific conditions are met, could fastpath nullify my simple queue rules?

IPv4 handler
IPv4 fast path is automatically used if following conditions are met:

firewall rules are not configured;
firewall address lists are not configured;
Traffic flow is disabled /ip traffic-flow enabled=no restriction removed in 6.33;
Simple and queue trees with parent=global are not configured;
no mesh, metarouter interface configuration;
sniffer, torch and traffic generator is not running;
connection tracking is not active;
ip accounting is disabled (/ip accounting enabled=no);
VRFs are not set (/ip route vrf is empty);
Hotspot is not used (/ip hostspot has no interfaces);
IpSec policies are not configured (ROS v6.8);
no active mac-ping, mac-telnet or mac-winbox sessions restriction removed in 6.33;
/tool mac-scan is not actively used;
/tool ip-scan is not actively used;
/ip firewall connection tracking set enabled parameter has new auto value Which means that connection tracking is disabled by default until firewall rules are added.




Bridge fast path is automatically used if following conditions are met:

no bridge firewall rules (/interface bridge filter, /interface bridge nat) are configured,
/interface bridge settings use-ip-firwall=no,
no mesh, metarouter interface configuration,
sniffer, torch and traffic generator is not running,
11

I disabled the second rule in the firewall pertaining to the fasttrack connection and the simple queues are being enforced.

Thanks for the solution. Is this a known issue that has been brought up in other threads? If so, please reply so others can learn about this configuration resolution.
Firewall fasttrack disabled.PNG