QinQ VLAN's not touching Queue

Retral · Thu Mar 14, 2019 7:28 pm

Hey, I'm new here and trying to do the best that I know how with Mikrotik's Wiki and searching through Google and these forums. I cannot for the life of me figure out how to queue QinQ traffic. I see the traffic is not touching the bridge interface, which is why I'm assuming that why when I use a simple queue on the bridge or it's slave interfaces it see's 0 traffic. Also I'm not sure but I think because of the extra vlan tagging that the IP firewall see's virtually nothing when I push it through there. What I'm trying to do on a CCR1072 is bring in on sfp4 vlan 21 stacked on 20 with sfp4 in BR_Loop and with sfp5 in BR_Loop with vlan 21 stacked on 20 going out with those tags intact. I've tried multiple ways with and without filtering on the bridge, with and without service tags. Essentially all this is going to do is be a layer 2 transport that needs throttling.

Here is the config

/interface bridge
add fast-forward=no frame-types=admit-only-vlan-tagged ingress-filtering=yes \
    name=BR_Loop vlan-filtering=yes

/interface ethernet
set [ find default-name=sfp-sfpplus4 ] advertise=\
    10M-full,100M-full,1000M-full arp=disabled
set [ find default-name=sfp-sfpplus5 ] advertise=\
    10M-full,100M-full,1000M-full arp=disabled

/interface vlan
add disabled=yes interface=BR_Loop name=BRL_V20 vlan-id=20
add interface=BR_Loop name=BRL_V25 use-service-tag=yes vlan-id=25
add arp=disabled disabled=yes interface=sfp-sfpplus4 name=S4_V20 \
    use-service-tag=yes vlan-id=20
add arp=disabled disabled=yes interface=sfp-sfpplus5 name=S5_V20 \
    use-service-tag=yes vlan-id=20

/queue simple
add max-limit=50M/50M name=Vlan-Queue target=BR_Loop

/interface bridge port
add bridge=BR_Loop hw=no ingress-filtering=yes interface=sfp-sfpplus4 \
    tag-stacking=yes
add bridge=BR_Loop hw=no ingress-filtering=yes interface=sfp-sfpplus5 \
    tag-stacking=yes
add bridge=BR_Loop disabled=yes interface=S4_V20
add bridge=BR_Loop disabled=yes interface=S5_V20
/interface bridge settings
set allow-fast-path=no use-ip-firewall=yes use-ip-firewall-for-pppoe=yes \
    use-ip-firewall-for-vlan=yes
/interface bridge vlan
add bridge=BR_Loop disabled=yes tagged=sfp-sfpplus4,sfp-sfpplus5 vlan-ids=20,25

I'm not sure how I can get this or if I even can get the traffic flowing where I can queue it. I'm under the current impression that If I don't see it on the bridge I won't be able to queue it.
Any help would be greatly appreciated.

QinQ VLAN's not touching Queue

QinQ VLAN's not touching Queue

Who is online