A very newbie question:
What is a fasttrack connection I’ve seen on basic filter rule ?
How does it work ? What mechanism is involved ??
thank you
A very newbie question:
What is a fasttrack connection I’ve seen on basic filter rule ?
How does it work ? What mechanism is involved ??
thank you
Already read ![]()
Not so clear , why is a packet “fast-tracked” ?? who is fast-tracking it ?? what does it happen to a fasttracked packet ?
Some other source to learn from (or simply a brief explanation from one of you…)
![]()
A great video
Yes , it shows the benefits of fasttrack, but I still don’t understand how it works… ![]()
Imagine that it marks connection like mangle with do-not-process-by-firewall mark.
Ok, Thank you
so the packets will be forwarded faster and doesn´t go to the other rules. Its good to use between mikrotiks.
This is a very good video about Fasttrack and FastPath from the recent MUM Europe 2016. I’m a Mikrotik beginner and I understood most of it.
https://www.youtube.com/watch?v=8bl7V5iFVOc
It does not work between mikrotiks in any way. It works only inside the ros and is not relevant to whatever device you have around.
the interesting was before 6.35 version come out in my router fasttrack is sometimes work and sometimes not (most the time is not workin) but after i update it to 6.35 the fastrack feature is always work
![]()
I’d like to use fasttrack but it isn’t activated for some reason and I get about 330 mbps with 100% cpu usage on my hap ac
Any ideas what might be preventing fasttrack from working
vlan2 is the internet vlan
vlan10 is the management vlan
vlan5 is the lan vlan
EDIT: nevermind, … I just upgraded to 6.35 that claims to have fastpath vlan improvements and it works.
/ip firewall filter
add action=fasttrack-connection chain=forward comment="fasttrack and accept established/related forwarding traffic" connection-state=\
established,related
add chain=input comment="accept established,related" connection-state=established,related
add chain=input comment="defconf: accept ICMP" protocol=icmp
add chain=input comment="allow dhcp offers on port 68" dst-port=68 protocol=udp
add chain=input comment="track new connections from vlan5" connection-state=new in-interface=vlan5
add chain=input comment="track new connections from bridge" connection-state=new in-interface=bridge
add chain=output comment="track new connections from mikrotik" connection-state=new
add chain=forward connection-state=established,related
add action=drop chain=input comment="drop other input" log=yes log-prefix="drop and log wlan1"
add chain=forward connection-state=new in-interface=vlan5 out-interface=vlan2
add chain=forward connection-state=new in-interface=bridge out-interface=vlan2
add chain=forward connection-state=new in-interface=bridge out-interface=vlan5
add action=drop chain=forward comment="drop other forward traffic" log=yes log-prefix="drop forward"
/ip firewall nat
add action=masquerade chain=srcnat comment="masquerade output" out-interface=vlan2
add action=masquerade chain=srcnat out-interface=vlan5
/interface bridge
add admin-mac=..mac.. name=bridge protocol-mode=none
/interface wireless
set [ find default-name=wlan2 ] band=5ghz-a/n/ac bridge-mode=disabled channel-width=20/40/80mhz-Ceee country=ireland disabled=no frequency=5500 \
mode=ap-bridge ssid=mikrotik5 vlan-id=5 vlan-mode=use-tag wps-mode=disabled
/interface vlan
add interface=ether1 name=vlan2 vlan-id=2
add interface=bridge name=vlan5 vlan-id=5
/interface ethernet switch port
set 0 default-vlan-id=2 vlan-header=always-strip vlan-mode=secure
set 1 default-vlan-id=10 vlan-mode=secure
set 2 vlan-mode=secure
set 3 vlan-mode=secure
set 4 vlan-mode=secure
set 5 default-vlan-id=10 vlan-header=add-if-missing vlan-mode=secure
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk mode=dynamic-keys
/interface bridge port
add bridge=bridge interface=wlan2
add bridge=bridge interface=ether2
add bridge=bridge
/interface ethernet switch vlan
add independent-learning=yes ports=switch1-cpu,ether2 switch=switch1 vlan-id=10
add independent-learning=yes ports=switch1-cpu,ether2 switch=switch1 vlan-id=5
add independent-learning=yes ports=switch1-cpu,ether1 switch=switch1 vlan-id=2