MikroTik

witblitz

I think you've got priorities scrambled:
1) priority 2
2) priority 4
3) priority 3
4) priority 1

lol. the girlfriend doesn't need to know what a mikrotik or queue is and I plan to keep it that way

witblitz

OK cool

Yes I've reserved IPs for all my devices in DHCP server config so they're essentially static

I will probably end up using mangles anyway when I need to split traffic coming from my PC (which has a lot going on). So this has been a productive exercise nonetheless.

Thanks again!

witblitz

Hey man VERY quick Q! If I were simply trying to prioritise traffic from different DEVICES on my network, would it not be more efficient to ditch all mangle rules and simply make simple queues for each device via its port on the mikrotik or its IP(s)? e.g. 1. Target=Ether4-VOIP Phone - Priority 1 2....

witblitz

You've helped many lights come on my man. I appreciate it

That dropdown filter looks handy but I've hardly got any rules at this stage lol.

I have many more questions given that I'm not a trained network guy, but I will reserve them for future.

Much respect sir

WB

witblitz

I think I may have solved my own problem... I had 0.0.0.0/0 for target in my queues. I have ports 3,4,5 bridged to port 2 (bridge-local). I set the target on my VOIP queue to bridge-local and both upload/download are showing traffic Does this make sense!? If so - awesome. All I need to do now is jus...

witblitz

Thanks bro :D I'm using simple queue's as you suggested (default-small). I have 2 - one for VOIP (top priority) and one for Other traffic (lower priority), Neither have any child queues: add limit-at=200k/200k max-limit=1M/1M name="VOIP Queue" packet-marks=voip_traffic \ priority=1/1 targe...

witblitz

OK thanks I've done that. Unfortunately 3 more issues I've noticed: 1.) the mark-connection rule for my.voip.phone.ip (in the classify chain) got a BIT of traffic at some stage but since then has had none. Bytes/packets reading in the mangle section both read 0 since i reset counters.. (even after m...

witblitz

OK so.......... Somehow, my old 2 mangle rules started working again. God knows how I then wanted to add them (vpn route-marked traffic) to the VOIP queue as well, as this pertains to my VOIP db and contacts list and may as well also have priority. I figured I'd give a connection mark of "voip_...

witblitz

Also maybe worth mentioning these are the existing 4 mangle rules (Default). Assuming these can stay at the TOP of the list: [admin@MikroTik] /ip firewall mangle> print Flags: X - disabled, I - invalid, D - dynamic 0 D chain=forward action=change-mss new-mss=1440 passthrough=yes tcp-flags=syn protoc...

witblitz

Once again, Thanks Zerobyte. You're the man !! I've got it working, however it has broken my other 2 mangle rules and I'm not sure where to put them in the current list. I really want to stop asking you so many questions but I'm so close! Here are my 2 existing mangle rules: 5 chain=prerouting actio...

witblitz

Thanks again man. I'll have to do some reading on chains, jump-rules etc as I'm not familiar with the terminology so not really grasping the exact process here. I do however understand what we're doing as a whole, but obviously I need to make myself understand this 100% for future. You said "On...

witblitz

Thanks again ZeroByte Luckily I'm already using mangling to route some traffic via a colleague's VPN for a SQL database so I get the basic idea of it. Current mangle rule is as follows: Chain: prerouting Dst Address: 123.123.123.123 (SQL server) Protocol:6 (TCP) Port: 1234 Action: Mark Routing New R...

witblitz

This is exactly what I'm after. Did you ever figure this out?

witblitz

Hi all, I've looked all over but still can't fully grasp what I need to do to have this work. I'm a bit of a n00b. Hope you can help... Here is my setup: ether1 - WAN (Dialing PPPoE from Mikrotik through ADSL modem in bridge mode) ether2 - PC ether3 - switch in my lounge (media center, Xbox etc) eth...

witblitz

Awesome. Thans for your help

witblitz

Hi guys, Bit of a n00b queue question for you... Here is my setup: ether1 - WAN (bridge mode to ADSL modem) ether2 - PC ether3 - switch in my lounge (media center, Xbox etc) ether4 - <empty> ether5 - VOIP Phone During the day I need my VOIP phone on ether5 to take priority at all times. I'm often do...

witblitz

Hey ZeroByte, You clearly know your stuff, so I hope you dont mind me taking advantage of you here :) Is that your entire FW rule list at home? So tidy! Im new to Mikrotiks and am trying to ensure mine is locked down. The only difference is that I'm dialling PPPoE from the mikrotik through an ADSL r...

witblitz

Hi all, I know there are tons of posts on this, but I'm finding so much conflicting advice. I have my Mikrotik (10.0.0.253/24) acting as a PPPoE client assigned to Ether1 ADSL router in bridge mode (192.168.2.1) bridge-local is Ether2+wlan1 ports 3-5 are slaves (default) All LAN traffic (10.0.0.0/24...

witblitz

The answer was to create a NAT rule (as I thought) action=masquerade chain=srcnat dst. address = 192.168.2.0/24 (subnet of my adsl router) out interface = Ether1 I changed my previous NAT masquerade rule so that everything went out over pppoe-out1 (it used to be Ether1-gateway). SO this makes sense ...

witblitz

but ether2 is bridged with my wlan. the bridge has the ip 10.0.0.253/24 your external router should always be on a different subnet than your LAN. The routes ive got set up should normally let me access the 192168.2.x subnet fine. It's only since I added the PPPoE interfact on Eth1 that I'm unable t...

witblitz

hey JB So I've got the mikrotik dialing out PPPoE and my ADSL router in bridge mode. Everything works, EXCEPT I can not ping or access the ADSL router (192.168.2.1) from my LAN since I made the change and put PPPoE on my Eth1-Gateway port I CAN however ping it from the mikrotik, so I know it's up (a...

witblitz

JB172 Thanks. It "works" but then I seem to be unable to access my adsl router's web interface (192.168.2.1) although I can ping it... weird Are you sure those NAT rules are accurate? Isn't this double NAT all over again? Also, I was told not to NAT bridge-local... Either way, should src a...

witblitz

thanks guys

no changes to my mikrotik setup other than that? i.e. routes or NAT ?

also, i've currently got my adsl router's internal IP (192.168.2.2) set up in IP > DNS section. Should I remove that?

Worth mentioning that my ISP gives me dynamic public IP and DNS servers, not static

witblitz

thanks man. I wonder if its necessary for a PARENT queue to be active in order for the children to work? i.e. I would just make my VOIP phone the parent so that it has full throughput, but if my phone is switched off (i.e. im not working) I wouldn't want my children queues to not work Suppose I can ...

witblitz

Hey guys So I have a pretty basic setup at the moment: Mikrotik bridge handling DHCP and wireless - 10.0.0.253/24 Mikrotik ether1 WAN used to talk to ADSL router - 192.168.2.2/24 ADSL router handling PPPoE only - 192.168.2.1/24 bridge-local is as per default - ether2 + wlan1 ports 3-5 are slaves of ...

witblitz

Thanks guys. All working perfectly.

You're awesome

witblitz

hey guys bit of a n00b so bare with me... Could somebody please explain the difference in these 2 settings on a Mikrotik queue? I've noticed the "priority" number on the Advanced tab is under a "Packet marks" dropdown - wondering if this setting even kicks in without marking. Als...

witblitz

Thanks JB172 when you say: "Put on ether1-wan the ip 192.168.2.2/24" do you mean go to the address list and assign this CIDR to ether1-wan ? if so, what should the "network" field be - 192.168.2.0 ? I was under the impression I had to add some routes for 0.0.0.0/0 as the "ds...

witblitz

OK guys need your help again :( So I took your advice and did the following: * Reset Mikrotik to default config * Set my ADSL router's IP to 192.168.2.1 | DHCP and WLAN are off * Set the Miktorik's IP > addresses to: - Address: 10.0.0.253/24 - Network: 10.0.0.0 - Interface: bridge-local * Set up DHC...

witblitz

Thanks Van At the moment I've got my adsl router on eth1 and it has an IP on the same subnet as everything else (there's only one subnet on this network atm) and everything works 100% I'm guessing this is because my routes arent set to "best practise" at the moment - I only have 2 routes c...

witblitz

Thanks guys. I think I am the one that made it more difficult than it needed to be. But I appreciate your help and I'm at least learning the a bit about RouterOS which is a good thing. YOu have therefore not wasted your time on me. I promise to leave you all alone after this... last question... My i...

witblitz

Just need to know what my route list should look like with gerakon's proposed config... currently I have 2 rules: Rule1. AS Dest address=0.0.0.0/0 Gateway=192.168.0.2 - reachable bridge-local Type=unicast Rule2. DAC Dst. Address=192.168.0.0./16 Gateway=bridge-local - reachable Type=unicast 192.168.0...

witblitz

ok thanks a lot man...

Will give it another crack

witblitz

rg2 -

my interfaces/ports have both the switch and master port fields under the GENERAL tab. If I choose a master port, it does nothing to change the value of the "switch" field

witblitz

Just to add to that -

When editing an interface, I am unable to edit the "switch" field. It's greyed out and is set to "switch1"

witblitz

I did as you said but couldnt figure out how to remove the switch / de-assign switch from ports 2-5 Once I'd done everything else, I lost internet access. Still cant figure out how to get rid of the switch. Have restored old config in the mean time Any ideas? Also, should I have any routes configure...

witblitz

Thanks a lot gerakon Apologies in advance for all the following questions. lol --- So I'll remove that switch altogether then? If I make ports 3-5 slaves to port 2, can I still use port 2 as normal? I assume so if it's bridged with wlan and DHCP is being pushed out via this bridge. Also, do I need t...

witblitz

Hey guys, Mirkotik newbie here.. I've recently installed a second hand routerboard 951-2n with latest OS with the help of a friend who has been using Mikrotiks for years. I have a moderate understanding of networking but some of the switching/bridging options are confusing me a bit. My set up is sim...

Search found 38 matches

Re: Basic Queue Tree Help

Re: Basic Queue Tree Help

Re: Basic Queue Tree Help

Re: Basic Queue Tree Help

Re: Basic Queue Tree Help

Re: Basic Queue Tree Help

Re: Basic Queue Tree Help

Re: Basic Queue Tree Help

Re: Basic Queue Tree Help

Re: Basic Queue Tree Help

Re: Basic Queue Tree Help

Re: Basic Queue Tree Help

Re: Prioritise a single host through PPPoE interface

Basic Queue Tree Help

Re: Firewall ICMP Rule

Basic Queue Config

Re: Firewall ICMP Rule

Firewall Best Practise

Re: How to Dial ADSL from my Mikrotik / avoid double NAT

Re: How to Dial ADSL from my Mikrotik / avoid double NAT

Re: How to Dial ADSL from my Mikrotik / avoid double NAT

Re: How to Dial ADSL from my Mikrotik / avoid double NAT

Re: How to Dial ADSL from my Mikrotik / avoid double NAT

Re: Queue # vs Queue priority

How to Dial ADSL from my Mikrotik / avoid double NAT

Re: New Mikrotik Config

Queue # vs Queue priority

Re: New Mikrotik Config

Re: New Mikrotik Config

Re: New Mikrotik Config

Re: New Mikrotik Config

Re: New Mikrotik Config

Re: New Mikrotik Config

Re: New Mikrotik Config

Re: New Mikrotik Config

Re: New Mikrotik Config

Re: New Mikrotik Config

New Mikrotik Config