Using Fasttrack with Simple Queues

Hello,

I would like to use Fasttrack feature without affecting my simple queues on the router.

My scenario is like the following;

I have PPPoE customers that are being NAT’ed and their local IP pools is 172.16.25.0/24 and lets say public IP pool is 1.2.3.4/27

What I want to achieve is to keep simple queues up while all other traffic are being fasttracked including Public IPs.

I am trying the following;

Address list NAT_Blocks : 172.16.25.0/24

/ip firewall filter
add action=accept chain=forward connection-state=established,related dst-address-list=NAT_BLOCKS
add action=fasttrack-connection chain=forward connection-state=established,related
add action=accept chain=forward connection-state=established,related

But still when I enable the rules above, simple queue doesn’t work properly. I also tried to set in-interface=WAN for fasttrack but it also didnt work. Is there anything am I missing or anything I should add?

Thanks in advance.

I believe easiest way to think of this problem is to remember that firewall rules must be present that specifically enable fasttrack between designated pairs of interfaces. (Interface lists can muddle the underlying behavior, so pretend for the moment that they are not there to use.)

Ensure your configuration is designed such that the customers you wish to be queued are connected via one or more dedicated interfaces, which interfaces carry no other category of traffic that you would wish to have fasttracked, nor can they be bridged with other interfaces that do. (Even if you must share the same physical interface, e.g., a wireless AP, partition the traffic using a virtual AP.)

Then set up your fasttrack rules to include all interfaces that carry fasttrack traffic, but include none of the interfaces that carry queued customer traffic.

I am personally running this configuration on wireless towers with through-traffic to other towers, and it works perfectly.

Once you have it working, you can define interface lists to achieve the same effect with fewer firewall rules, if you think that will result in added efficiency; but beware of using any of the pre-existing lists that have dynamic membership, as it may easily produce inconsistent results.

Try this,
Put those rule before the fastback rule

/ip firewall filter
add action=accept chain=forward connection-state=established,related src-address=172.16.25.0/24
add action=accept chain=forward connection-state=established,related dst-address=172.16.25.0/24

It work for me…

Have a good day!
Pat

thank you Pat, it did the trick for me as well, allowed me to keep fastrack and use a simple queue for a specific subnet !