I need some suggestions as to the best method for per user bandwidth limiting and gateway shaping. Right now, I'm using simple queues to limit Bandwidth by source IP. However, I need to also perform some traffic prioritization as well as shaping on the gateway interface. I would also like to shape based on the ratio of bandwidth allotted per user (customer with a 1Mb download service would get more bandwidth that someone with a 512K download service). Thus, I need do to the following:
1. Limit bandwidth by IP per user
2. Prioritize all trafic from all users (ftp, http, VoIP).
3. Shape the gateway interface.
What is the best implementation to achieve this?
-
-
gustkiller
Member
- Posts: 419
- Joined:
- Location: Brazil
- Contact:
this weekend i tried a lot things, like multiple gateway persistant , that worked but i couldnt be able to make queue tree and mark packets for priority , coz the even and odd connection marks dont allow me to remark de packets, or i dunno how to do it. coz i would like to at least mark all junk traffic to 512k.
and tried to do a 2 gateway ( 1 dsl for junk traffic and 1 leased t1 with class c ips to non natted clients and http, pop , dns and stuff..)
it worked but i coulnd make the mikrotik to respond from the internet to him trought a valid static ip that i added to his interface. for exemplo
I just set a 2 gateways for my mt, the first one ( cheap dsl) for p2p and not mangle route marked http, pop, smtp, and ... to leased T1 line and make it my second gateway. but i cannot access any mikrotik service like winbox, ftp, httpserver (graphing) , the only thing the mt ip over the leased t1 gateway respond is ICMP (ping).
how can i redirect or make accessible those services to the second gateway ( t1 with public ips) from internet( outside local network)?
and tried to do a 2 gateway ( 1 dsl for junk traffic and 1 leased t1 with class c ips to non natted clients and http, pop , dns and stuff..)
it worked but i coulnd make the mikrotik to respond from the internet to him trought a valid static ip that i added to his interface. for exemplo
I just set a 2 gateways for my mt, the first one ( cheap dsl) for p2p and not mangle route marked http, pop, smtp, and ... to leased T1 line and make it my second gateway. but i cannot access any mikrotik service like winbox, ftp, httpserver (graphing) , the only thing the mt ip over the leased t1 gateway respond is ICMP (ping).
how can i redirect or make accessible those services to the second gateway ( t1 with public ips) from internet( outside local network)?
I have read quite a bit but am quite frustrated with the lack of clear documentation. So some more questions for anyone who would care to reply:
You can create PCQ and attach them to the public interface and use src address classifer. This suppose to create sub queues for each source address. How do you limit traffic for each source address if each has different bandwidth settings? Do you suppose to add additional PCQ queues as children of the main PCQ queue for each source address ? It appears you can only specifiy rate in one direction. I assume you need to attach a PCQ to both global-in and global-out?
Or, is this the wrong approach? Should you use simple queues for BW limiting, use another queue type for traffic prioritization (which type), and how do you shape the traffic of all users (This is what I what the PCQ type does well). This can't be this complicated but I can't get a straight answer out of anyone.
I'm mangling different traffic types: HTTP,FTP, PTP, etc. Which queue type should I set prority with. From my understanding, traffic prioritization will occur first before it enters the PCQ queues that I mentioned above?
You can create PCQ and attach them to the public interface and use src address classifer. This suppose to create sub queues for each source address. How do you limit traffic for each source address if each has different bandwidth settings? Do you suppose to add additional PCQ queues as children of the main PCQ queue for each source address ? It appears you can only specifiy rate in one direction. I assume you need to attach a PCQ to both global-in and global-out?
Or, is this the wrong approach? Should you use simple queues for BW limiting, use another queue type for traffic prioritization (which type), and how do you shape the traffic of all users (This is what I what the PCQ type does well). This can't be this complicated but I can't get a straight answer out of anyone.
I'm mangling different traffic types: HTTP,FTP, PTP, etc. Which queue type should I set prority with. From my understanding, traffic prioritization will occur first before it enters the PCQ queues that I mentioned above?