Hello all,
Im hoping I can get some help regarding a very specific issue I’m encountering with a Wireless PTP link
Firstly the requirement:
To establish a PTP link, consisting of 3 VLANs that are prioritised according to the Traffic carried. (which is manually specified by the VLAN it is in) ie - Data = VLAN 100 , VoIP (SIP) = VLAN 105 and Management = VLAN72
the 802.1q priority would be optimal as you can assign this in post routing.
with the following priority of services.
Management (VL72) = 7
Voice (VL105) = 5
Data (VL100) = 2
In essance providing management with the highest priority of the link capacity at any given moment, followed by voice and then lastly data.
The equipment in use:
RouterBoard 800s (5.12)
Radio Cards : Ubiquiti SR71-15 Link
Dishes : 5GHz - Collared Parabolic Dish - 29 dBi - Dual Polarized, Wideband (4950-5850), 2ft - Link
Config:
/interface bridge
add admin-mac=00:00:00:00:00:00 ageing-time=5m arp=enabled auto-mac=yes
disabled=no forward-delay=15s l2mtu=1596 max-message-age=20s mtu=1500
name=bridge_VL100 priority=0x8000 protocol-mode=none transmit-hold-count=
6
add admin-mac=00:00:00:00:00:00 ageing-time=5m arp=enabled auto-mac=yes
disabled=no forward-delay=15s l2mtu=1596 max-message-age=20s mtu=1500
name=bridge_VL105 priority=0x8000 protocol-mode=none transmit-hold-count=
6
add admin-mac=00:00:00:00:00:00 ageing-time=5m arp=enabled auto-mac=yes
disabled=no forward-delay=15s l2mtu=1596 max-message-age=20s mtu=1500
name=bridge_VL72 priority=0x8000 protocol-mode=none transmit-hold-count=6
/interface ethernet
set 0 arp=enabled auto-negotiation=yes disabled=yes full-duplex=yes l2mtu=
1600 mac-address=00:0C:42:72:D1:D3 mtu=1500 name=ether2 speed=100Mbps
set 1 arp=enabled auto-negotiation=yes disabled=no full-duplex=yes l2mtu=1600
mac-address=00:0C:42:72:D1:D1 mtu=1500 name=ether1 speed=100Mbps
set 2 arp=enabled auto-negotiation=yes disabled=yes full-duplex=yes l2mtu=
1600 mac-address=00:0C:42:72:D1:D2 mtu=1500 name=ether3 speed=100Mbps
/interface vlan
add arp=enabled disabled=no interface=ether1 l2mtu=1596 mtu=1500 name=VL100
use-service-tag=no vlan-id=100
add arp=enabled disabled=no interface=ether1 l2mtu=1596 mtu=1500 name=VL105
use-service-tag=no vlan-id=105
add arp=enabled disabled=no interface=ether1 l2mtu=1596 mtu=1500 name=VL72
use-service-tag=no vlan-id=72
/interface bridge port
add bridge=bridge_VL100 disabled=no edge=auto external-fdb=auto horizon=none
interface=VL100 path-cost=10 point-to-point=auto priority=0x80
add bridge=bridge_VL105 disabled=no edge=auto external-fdb=auto horizon=none
interface=VL105 path-cost=10 point-to-point=auto priority=0x80
add bridge=bridge_VL72 disabled=no edge=auto external-fdb=auto horizon=none
interface=VL72 path-cost=10 point-to-point=auto priority=0x80
/interface bridge settings
set use-ip-firewall=yes use-ip-firewall-for-pppoe=no
use-ip-firewall-for-vlan=yes
/interface l2tp-server server
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods=“”
group-ciphers=aes-ccm group-key-update=5m interim-update=0s
management-protection=disabled management-protection-key=“” mode=
dynamic-keys name=default radius-eap-accounting=no radius-mac-accounting=
no radius-mac-authentication=no radius-mac-caching=disabled
radius-mac-format=XX:XX:XX:XX:XX:XX radius-mac-mode=as-username
static-algo-0=none static-algo-1=none static-algo-2=none static-algo-3=
none static-key-0=“” static-key-1=“” static-key-2=“” static-key-3=“”
static-sta-private-algo=none static-sta-private-key=“”
static-transmit-key=key-0 supplicant-identity=MikroTik tls-certificate=
none tls-mode=no-certificates unicast-ciphers=aes-ccm wpa-pre-shared-key=
“” wpa2-pre-shared-key=mytestconfig
/interface wireless
set 3 adaptive-noise-immunity=none allow-sharedkey=no antenna-gain=0 area=“”
arp=enabled band=5ghz-a/n basic-rates-a/g=6Mbps bridge-mode=enabled
channel-width=20mhz compression=no country=“south africa”
default-ap-tx-limit=0 default-authentication=yes default-client-tx-limit=
0 default-forwarding=yes dfs-mode=none disable-running-check=no disabled=
no disconnect-timeout=3s distance=dynamic frame-lifetime=0 frequency=5500
frequency-mode=manual-txpower frequency-offset=0 hide-ssid=no
ht-ampdu-priorities=0 ht-amsdu-limit=8192 ht-amsdu-threshold=8192
ht-basic-mcs=mcs-0,mcs-1,mcs-2,mcs-3,mcs-4,mcs-5,mcs-6,mcs-7
ht-guard-interval=any ht-rxchains=0,1 ht-supported-mcs=“mcs-0,mcs-1,mcs-2,
mcs-3,mcs-4,mcs-5,mcs-6,mcs-7,mcs-8,mcs-9,mcs-10,mcs-11,mcs-12,mcs-13,mcs-
14,mcs-15,mcs-16,mcs-17,mcs-18,mcs-19,mcs-20,mcs-21,mcs-22,mcs-23”
ht-txchains=0,1 hw-fragmentation-threshold=disabled hw-protection-mode=
none hw-protection-threshold=0 hw-retries=7 l2mtu=2290 mac-address=
00:15:6D:85:0F:73 max-station-count=2007 mode=bridge mtu=1500 name=wlan1
noise-floor-threshold=default nv2-cell-radius=30 nv2-noise-floor-offset=
default nv2-preshared-key=“” nv2-qos=default nv2-queue-count=2
nv2-security=disabled on-fail-retry-time=100ms periodic-calibration=
default periodic-calibration-interval=60 preamble-mode=both
proprietary-extensions=post-2.9.25 radio-name=00156D850F73
rate-selection=advanced rate-set=default scan-list=default
security-profile=default ssid=“” station-bridge-clone-mac=
00:00:00:00:00:00 supported-rates-a/g=
6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps tdma-period-size=2
tx-power-mode=default update-stats-interval=disabled wds-cost-range=
50-150 wds-default-bridge=none wds-default-cost=100 wds-ignore-ssid=no
wds-mode=disabled wireless-protocol=unspecified wmm-support=disabled
add area=“” arp=enabled bridge-mode=enabled default-ap-tx-limit=0
default-authentication=yes default-client-tx-limit=0 default-forwarding=
yes disable-running-check=no disabled=no hide-ssid=yes l2mtu=2290
mac-address=02:15:6D:85:0F:66 master-interface=wlan1 max-station-count=
2007 mtu=1500 name=VAP_VL100 proprietary-extensions=post-2.9.25
security-profile=default ssid=VAP100 update-stats-interval=disabled
wds-cost-range=0 wds-default-bridge=bridge_VL100 wds-default-cost=0
wds-ignore-ssid=no wds-mode=dynamic wmm-support=disabled
add area=“” arp=enabled bridge-mode=enabled default-ap-tx-limit=0
default-authentication=yes default-client-tx-limit=0 default-forwarding=
yes disable-running-check=no disabled=no hide-ssid=yes l2mtu=2290
mac-address=02:15:6D:85:0F:67 master-interface=wlan1 max-station-count=
2007 mtu=1500 name=VAP_VL105 proprietary-extensions=post-2.9.25
security-profile=default ssid=VAP105 update-stats-interval=disabled
wds-cost-range=0 wds-default-bridge=bridge_VL105 wds-default-cost=0
wds-ignore-ssid=no wds-mode=dynamic wmm-support=disabled
add area=“” arp=enabled bridge-mode=enabled default-ap-tx-limit=0
default-authentication=yes default-client-tx-limit=0 default-forwarding=
yes disable-running-check=no disabled=no hide-ssid=yes l2mtu=2290
mac-address=02:15:6D:85:0F:68 master-interface=wlan1 max-station-count=
2007 mtu=1500 name=VAP_VL72 proprietary-extensions=post-2.9.25
security-profile=default ssid=VAP72 update-stats-interval=disabled
wds-cost-range=0 wds-default-bridge=bridge_VL72 wds-default-cost=0
wds-ignore-ssid=no wds-mode=dynamic wmm-support=disabled
/queue tree
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0
max-limit=50M name=“All Traffic” packet-mark=“” parent=global-in
priority=1
/queue type
set 0 kind=pfifo name=default pfifo-limit=50
set 1 kind=pfifo name=ethernet-default pfifo-limit=50
set 2 kind=sfq name=wireless-default sfq-allot=1514 sfq-perturb=5
set 3 kind=red name=synchronous-default red-avg-packet=1000 red-burst=20
red-limit=60 red-max-threshold=50 red-min-threshold=10
set 4 kind=sfq name=hotspot-default sfq-allot=1514 sfq-perturb=5
set 5 kind=none name=only-hardware-queue
set 6 kind=mq-pfifo mq-pfifo-limit=50 name=multi-queue-ethernet-default
set 7 kind=pfifo name=default-small pfifo-limit=10
/queue tree
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0
max-limit=0 name=“VoIP Traffic” packet-mark=voice parent=“All Traffic”
priority=3 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0
max-limit=0 name=“Internet Traffic” packet-mark=internet parent=
“All Traffic” priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0
max-limit=0 name=“VCM Traffic” packet-mark=vcm parent=“All Traffic”
priority=1 queue=default
/ip firewall mangle
add action=mark-packet chain=prerouting comment=“Mark Internet Traffic”
disabled=no in-interface=bridge_VL100 new-packet-mark=internet
passthrough=yes
add action=mark-packet chain=prerouting comment=“Mark VoIP Traffic” disabled=
no in-interface=bridge_VL105 new-packet-mark=voice passthrough=yes
add action=mark-packet chain=prerouting comment=“Mark VCM Traffic” disabled=
no in-interface=bridge_VL72 new-packet-mark=vcm passthrough=yes
add action=set-priority chain=postrouting disabled=no new-priority=7
packet-mark=voice passthrough=yes
add action=set-priority chain=postrouting disabled=no new-priority=0
packet-mark=internet passthrough=yes
add action=set-priority chain=postrouting disabled=no new-priority=5
packet-mark=vcm passthrough=yes
/ip firewall service-port
set ftp disabled=no ports=21
set tftp disabled=no ports=69
set irc disabled=no ports=6667
set h323 disabled=no
set sip disabled=no ports=5060,5061 sip-direct-media=yes
set pptp disabled=no
/ip hotspot service-port
set ftp disabled=no ports=21
/ip neighbor discovery
set ether2 disabled=no
set ether1 disabled=no
set ether3 disabled=no
set VL100 disabled=yes
set VL105 disabled=yes
set VL72 disabled=yes
set bridge_VL100 disabled=no
set bridge_VL105 disabled=no
set bridge_VL72 disabled=no
set VAP_VL100 disabled=yes
set VAP_VL105 disabled=yes
set VAP_VL72 disabled=yes
set wlan1 disabled=yes
I tried following this guide to get started:
http://wiki.mikrotik.com/wiki/802.1q_Trunk_extension_over_Wireless_P2P_Link
The problem I am having is the following.
This wireless link is 8.5km long, with pretty much clear LOS.
When data is flowing from one side the priority works fine, but as soon as you send from both the link fails.
We are using VeEX data testers with the correct VLAN settings.
This setup works in the lab, but as it would seem fails in practise…
Can anyone please advise what I can check/change? I’m rather stumped, but perhaps this is more a wireless issue than a routing / que problem as this does work correctly in the lab.
I thank you all in advance for the assitance.
Matt
