hi, I`m really a beginner who just got to know how to just run internet service through this.

n i must say its the best thing i`ve seen.. it works gr8

but what makes me trouble is that the queues rule limits the user bandwidth/speed not only while accessing internet, but when they trying to access the local share portal in our LAN.. mean instead of getting 5-8 mb/s from local share portal, they are getting 512 k/s as per their queue rules defined..

please help me out ..

i`ll really really appreciate that..


thanks ...!!

Because you didn't tell it not to. Use packet marks and only mark WAN traffic. If you need more specific help post your configuration.

thanks fewi ...

yea i need more specific help as i told i`m totally a dumb in this..

will u tell me which configurations you want me to show... ????

Post the output of "/ip address print detail", "/ip route print detail", "/interface print", "/ip firewall export", "/queue export", and an accurate network diagram. And of course a detailed description of what you're trying to achieve.

1.)

/ip address print detail
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; added by setup
address=192.168.1.1/24 network=192.168.1.0 broadcast=192.168.1.255 interface=LAN
actual-interface=LAN

1 D address=192.168.100.2/24 network=192.168.100.0 broadcast=192.168.100.255 interface=WAN
actual-interface=WAN


2.)

/ip route print detail
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf
0 ADC dst-address=192.168.1.0/24 pref-src=192.168.1.1 interface=LAN scope=10 target-scope=0

1 ADC dst-address=192.168.100.0/24 pref-src=192.168.100.2 interface=WAN scope=10 target-scope=0

2 A S ;;; added by setup
dst-address=0.0.0.0/0 gateway=192.168.100.1 interface=WAN gateway-state=reachable
scope=255 target-scope=10

3 D dst-address=0.0.0.0/0 gateway=192.168.100.1 interface=WAN gateway-state=reachable distance=0
scope=30 target-scope=10


3.)

/interface print
Flags: X - disabled, D - dynamic, R - running
# NAME TYPE RX-RATE TX-RATE MTU
0 R LAN ether 0 0 1500
1 R WAN ether 0 0 1500


4.)

/ip firewall export
# jan/14/2011 15:18:08 by RouterOS 2.9.27
# software id = CG3G-KWT
#
/ ip firewall nat
add chain=srcnat out-interface=WAN action=masquerade comment="" disabled=no
add chain=srcnat src-address=192.168.1.0/24 action=masquerade comment="masquerade hotspot network" \
disabled=no
/ ip firewall connection tracking
set enabled=yes tcp-syn-sent-timeout=5s tcp-syn-received-timeout=5s tcp-established-timeout=1d \
tcp-fin-wait-timeout=10s tcp-close-wait-timeout=10s tcp-last-ack-timeout=10s \
tcp-time-wait-timeout=10s tcp-close-timeout=10s udp-timeout=10s udp-stream-timeout=3m \
icmp-timeout=10s generic-timeout=10m tcp-syncookie=no
/ ip firewall filter
/ ip firewall service-port
set ftp ports=21 disabled=no
set tftp ports=69 disabled=no
set irc ports=6667 disabled=no
set h323 disabled=yes
set quake3 disabled=no
set gre disabled=yes
set pptp disabled=yes


5.)

/queue export
# jan/14/2011 15:18:51 by RouterOS 2.9.27
# software id = CG3G-KWT
#
/ queue type
set default name="default" kind=pfifo pfifo-limit=50
set ethernet-default name="ethernet-default" kind=pfifo pfifo-limit=50
set wireless-default name="wireless-default" kind=sfq sfq-perturb=5 sfq-allot=1514
set synchronous-default name="synchronous-default" kind=red red-limit=60 red-min-threshold=10 \
red-max-threshold=50 red-burst=20 red-avg-packet=1000
set hotspot-default name="hotspot-default" kind=sfq sfq-perturb=5 sfq-allot=1514
add name="default-small" kind=pfifo pfifo-limit=10
/ queue simple
add name="Shahzaib-PC" target-addresses=192.168.1.13/32 dst-address=0.0.0.0/0 interface=all \
parent=none direction=both priority=8 queue=default-small/default-small limit-at=0/0 \
max-limit=512000/512000 total-queue=default-small disabled=no
add name="Wahab-PC" target-addresses=192.168.1.4/32 dst-address=0.0.0.0/0 interface=all \
parent=none direction=both priority=8 queue=default-small/default-small limit-at=0/0 \
max-limit=256000/768000 total-queue=default-small disabled=no



Now wat my problem is, we have a ftp share server on our lan with ip address 192.168.1.2, the server ID has unlimited bandwidth and has no speed limits, but when we try to download sumthing from that ftp server, it give us the speed define in queue list for our ip address (i.e. my ip is 192.168.1.3 and i`ve 512k bandwidth allowed in queue, then weather i download sumthing from internet site or from our local ftp server it gives me bandwidth of just 512k)

itz mean this queue rule limiting bandwidht on local transfters as well n thats what i don`t want it to do.

there should b unlimited bandwidth for us from local ftp server and queue rule should limits only on internet connections, not on local connections.

Hope i explained my issue clearly to you..

i`ll b waiting for your response mate..

n ya thanks so much for that much assisstance fewi ...

Based on just what you show that is impossible.

However, there is a reference to Hotspots in your NAT configuration. Are you using a Hotspot on the LAN interface? What is the physical layout? Are you attaching via wireless?

192.168.1.2 and 192.168.1.3 - on a normal, wired LAN - don't talk through the router, so the router cannot rate limit traffic between them.

thanks so much for your assisstance mate

actually i was out ov city thats why couldn`t be able to reply to your post....so sorry for that.


yea mate.. m using hotspot on LAN interface.....n i dun ve wireless network...

mate i tried a few thing and at last i deleted all my queues exept default queue... then i created queues from webbox interface... n now itz gud... itz working fine.. itz limiting only internet bandwidth of users ... not my ftp sharing bandwidth on LAN... I dunno what had happened because i just recreated the queue rules and recreated from webbox interface... n now its working gud!!

thanks so much!!

but fewi i just need your assistance on one more issue... the issue that makes switch to hotspot...

before hotspot, i was simply using the dhcp n allow users through their mac addresses for internet connection.. but the real problem in that was users those aren`t allowed by my dhcp can use intertent by just putting manually ip addresses and in dns my server address and server isn`t gonna restrict them from using internet...

and 2nd bug was that, those users that are allowed by dhcp and their bandwidth was limited on their ip... they just manually change their ip address to sum other ip and they get unlimited bandwith rather then the actual bandwidth allowed by me because bandwidth is limit on ip address and they change that address..!!


is there anything you can do for that.. ??


nyhow thanks sooooooooooooo much for your assistance bro

Take Care n b happy

mate, could you post the rules that you created please, i also need to test unlimited bandwidth from my ftp server.

this is my setup for limiting only Internet traffic and leaving LAN traffic unlimited:

first we need to mark all the packets that are going to the Internet... in my local network I am using addresses in the 192.168.0.0/18 range so in order to mark packets going to the Internet we need to mark all traffic that has the destination/source address different from the local subnet... we use two rules, one for upload, the other for download
After we have created these rules we are able to identify which packets are going to and from the Internet. Now we need to create simple queue rules for every subnet connected to the router. We need two rules for every subnet - upload and download. I have limited the subnets network1 to 4M/256k and network2 4M/128k.
If you have a server in your environment that you want to grant unlimited bandwith you can do it by adding additional rules to firewall mangle list to mark those packets.
And adding additional queue rules. But you need to make sure the rules that apply to the subnet the server is in are below the rules for a specific server. If this is not the case packets from the server will hit the subnet rule first and will be limited by that rule.
Of course you can do all this via winbox. And it's easier to arrange the rules in your desired order.

hello...newbie here...sorry for bringing up old thread..

i have applied Girith's setup exactly the same for limiting only Internet traffic and leaving LAN traffic unlimited. Now we can access our internal server faster...but the problem is why the TX value between Interface List and Queue List is so different? TX value of Interface List beyond Queue List, users claimed they download a lot faster too right after the setup. Is there something i missed?

Here's the screenshot (Interface List, Queue List and Torch of Ether6 (192.168.3.0/24)): Is it because users used download manager such as IDM so they can break through?

Thanks
*PS. sorry for my English...it's not my native

Dear Bro,
if you did it so can you please tell me how u did it?
i have also file sharing server behind the mikrokit, but my hotspot and pppoe users still getting assigned speed,
i want that my all Hotspot users can get full speed or my assigned speed.
Wan: 192.168.1.1/24
Lan: 172.168..1.1/24 configured Hotspot and PPPoe Server for my local network
Lan2: 182.168.0.1/24 DHCP Server Configured for only file Sharing Server

i configured from this script, but it is not working

/ip firewall mangle
add action=mark-packet chain=prerouting dst-address=182.168.0.0/24 new-packet-mark=ftp-up src-address=172.168.0.0/24
add action=mark-packet chain=postrouting dst-address=172.168.0.0/24 new-packet-mark=ftp-down src-address=182.168.0.0/24

/queue tree
add limit-at=100M max-limit=100M name=ftp-up packet-mark=ftp-up parent=global queue=ftp-exempt
add limit-at=100M max-limit=100M name=ftp-down packet-mark=ftp-down parent=global queue=ftp-exempt

please tell me how to assigned unlimited speed on file sharing server for mikrotik hotspot and ppoe users

Raheel

Dear,
i need to limit local LAN BW. could anyone please help me to do limit blan among a single subnet?

Is it possible to limit BW between local lan to lan user( not internet) from MIKROTIK ?If it's possible please help me.