Hello, I am new to the world mikrotik and I'm slowly learning.
I'm stuck at one point.

I have configured two interfaces, one WAN and one LAN.
I created a pppoe server and its clients.
Everything works fine.
Now I want to set a bandwidth ADSL limit for each PPPoE clients.
I want every customer has a maximum download speed of 5M when the network is free and guaranteed a rate of 1M when the network is congested

in queue simple I can set the maximum limit of the bandwidth but I can not set the guaranteed bandwidth
Do you have any suggestions?
Thank you for your attention

edti:
I would also like a hand in exporting the log that is in "Firewall> connection" on a syslog server because Italian law requires you to keep track of the connections of customers.

I set the remote syslog server in "System> logging" but I only export the system log.

up.

Your Router doesn't know how much bandwidth u have so it can't decide when there is free or "unused" internet
U can do something like Max Limit 1 mbit and put Burst Limit 5 Mbit for 5 sec. by my view it will be more professional

on the second one Firewall Connections I m confused
italian law requires this or I misunderstand u

Thanks for your help

The Italian law wants to keep track of connections made by various customers for possible terrorism or pedophilia, in order to determine who has visited those sites.

The problem is that I can not store this information in my syslog server.

hi,

for log inform.

you should define the remote log server for syslog in mikrotik....system--logging---actions--remote.

remote:write there remote syslog server ip.(ex.dude in windows)
in logging--rules : you should add firewall to remote..(topics:firewall,action :remote)
in firewall filter:chain:forward,protocol:tcp,connection state:new,action:log

thats it....

Thanks for your help

The Italian law wants to keep track of connections made by various customers for possible terrorism or pedophilia, in order to determine who has visited those sites.

The problem is that I can not store this information in my syslog server.

or torrents
erasmo86 sorry its like a personal data about costumers

EU where's OUR freedom

or torrents
erasmo86 sorry its like a personal data about costumers

Unfortunately the Italian law requires this.
It's called the law Pisanu

hi,

for log inform.

you should define the remote log server for syslog in mikrotik....system--logging---actions--remote.

remote:write there remote syslog server ip.(ex.dude in windows)
in logging--rules : you should add firewall to remote..(topics:firewall,action :remote)
in firewall filter:chain:forward,protocol:tcp,connection state:new,action:log

thats it....

thank you very much for your help, it is just what I wanted.

If someone wants to help me solve this other problem would be very grateful.
my mikrotik configuration is:
ether2 wan 192.168.1.1/24
ether1 lan 10.0.0.1
pppoe server 172.16.0.1/24 with clients connected on port ether1.

All clients have a nanobridge m5 antenna that acts as a pppoe client.
I would like to create a location from administrator to access the graphical interface of the nanobridge (who 172.16.0.x ip) for any changes or improvements settings.

it is possible to do this?
is correct to have a configuration like this?
Thank you so much for the help and the time dedicated to me
Sorry for my english but my english is not very good

you mean , you want to reach nanobridge interface..

if you want this.

1. you can create vlan into mikrotik (which port is connected to nanobrdige) ..ether1=vlan id:3 (examp.)
2. also you can create same vlan in nanobridge like management vlan. it should be same vlan ıd.(3) with ether1
3.in mikrotik , you can add this vlan to your local port.

we are connect to our ap and client device(cpe) behind the pppoe server with this way...

Thank you very much, you are very competent.
Unfortunately I do not have advanced knowledge of mikrotik and I did not understand how to make it.

The administrator pc can connect it directly to mikrotik without pppoe if necessary.
From this computer I must have access to the nanobridge that are connected via pppoe

You say that the best way is the vlan?
clients remain isolated from each other?

thank you very much for the help

I solved the fact of the nanobridge, I still have to understand a little something for example

on ether1 with ip 10.0.0.1 are connected pppoe client with ip 172.16.0.x

From these clients, if I put in the address bar of any browser the ip 10.0.0.1, I access to the interface of mikrotik, how can I stop this so you do not have access to the interface?

I would also ask how to block peripheral devices to mac-address so that devices connected to mikrotik with a specific mac-address have only a certain ip.
hello and thank you

I found a problem that I thought I had solved, I have the mikrotik configured with a wan and a lan, ether 2 is wan and ether1 is lan.
the wan gives me 10mega actual, I want my three client lan have a maximum bandwidth of 7mega and a minimum of 3MEGA so that when one client is downloading may reach 7mega and when all three are downloading must have 3MEGA each and not one 5mega and another 1.5 megs.

help me please, I can not solve the problem