I have a quite simple setup on a RB750GL: PPPoE internet on eth1, LAN subnet on eth4, LAN2 on eth5 and VoIP phones on eth2.
I would like to implement some sort of QoS to give VoIP phones on eth2 highest routing priority. So I started by marking Voip packets and then added a global queue.
Is that a correct approach?
Also by disabling fastrack-connection to take advantage of firewall mangle feature I had a massive drop in performance (throughput on SMB share falls from ~90MB/s to 20MB/s with 100% RB750GL cpu usage). Is that normal or am I missing something?
thanks
Code: Select all
# sep/18/2022 21:13:11 by RouterOS 6.49.6
/ip firewall filter
add action=fasttrack-connection chain=input connection-state=established,related disabled=yes
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=fasttrack-connection chain=forward connection-state=established,related disabled=yes
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=\
established,related,untracked
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new in-interface-list=WAN
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
/ip firewall mangle
add action=mark-connection chain=forward comment="VOIP Packets" \
in-interface="eth2 - VoIP 86.0" new-connection-mark=VoIP_connection passthrough=yes
add action=mark-packet chain=forward connection-mark=VoIP_connection new-packet-mark=VOIP_Packet passthrough=\
yes
add action=change-dscp chain=postrouting comment="DSCP Priority" disabled=yes new-dscp=46 packet-mark=\
VOIP_Packet passthrough=yes
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface=\
Eolo-pppoe
/queue
add name=Queue1 parent=global queue=default
add name=Priority1-VoIP packet-mark=VOIP_Packet parent=Queue1 priority=1 queue=default
add name=Priority7-Other packet-mark=no-mark parent=Queue1 priority=7