I've set up a transparent bridge of sorts on a CCR 1036.
THe 2 incoming interfaces are vlans, different tags of course. I add both these vlans to bridge
Bridge settings are set to use IP Firewall, and fast path off
I can block the traffic in ip firewall filter, and I can mark packets in ip firewall mangle successfully.
What I cant seem to do is set up simple queue to capture the traffic. I am using mangle to mark the packets I wanted limited and i've tried setting the target to the bridge interface and to either of the vlan interfaces (the bridge port members).
Code: Select all
/queue simple
add name=test packet-marks=TESTPACKET target=Bridge
Any thoughts? Does the traffic not actually hit that bridge interface? I thought by turning off fast path and turning on ip firewall it forces all traffic in to it, I can successfully see the traffic on mangle and filter just simple queue doesnt seem to want to help.