Community discussions

MikroTik App
 
Yamash
just joined
Topic Author
Posts: 15
Joined: Sun Apr 22, 2012 1:29 am
Location: Brazil

[SOLVED] How to passthought over filters between two ifaces

Wed Mar 26, 2014 3:18 pm

Hello,

I've bought a RB 2011UAS-2HnD-IN to change a gigabit switch in a friends office, this network before has a modem adsl2+ (pppoe and dhcp) and this switch, I've changed this switch and now the routerboard do pppoe connections and dhcp, wireless, etc.

In ether2 he have a small ubuntu server, where is the fileserver, website and mysql, everything is there, before.

I want to know how to exclude any firewall filter, mangle to this and from this server.
I've already set the filters to only pppoe in but when they transfer big files to server the routerboard reach 100% with 100Mbps througput, and if I disable queues, filters, mangle, queue tree, it reache big transfer rates.

Or this, or any can give me an idea?
Last edited by Yamash on Thu Apr 24, 2014 2:47 pm, edited 1 time in total.
 
User avatar
rahulmkhj
Member Candidate
Member Candidate
Posts: 135
Joined: Wed Mar 09, 2011 10:54 am

Re: How to passthought over filters between two interfaces

Wed Mar 26, 2014 5:19 pm

Can't get your question, can you please elaborate ?
 
Yamash
just joined
Topic Author
Posts: 15
Joined: Sun Apr 22, 2012 1:29 am
Location: Brazil

Re: How to passthought over filters between two interfaces

Thu Mar 27, 2014 4:11 am

Sorry for my bad explanation.

Ok, After the change I checked that unfortunally with queues, firewall filters, queue tree and mangle, the thoughput between machines and the "server" become low.

I want to know, if is possible to bypass everything mentioned above inside a bridge.

Another way I can say that is, I want just to use filters, mangle, queues, etc for the WAN connection.
 
User avatar
rahulmkhj
Member Candidate
Member Candidate
Posts: 135
Joined: Wed Mar 09, 2011 10:54 am

Re: How to passthought over filters between two interfaces

Thu Mar 27, 2014 8:43 am

Sorry for my bad explanation.

Ok, After the change I checked that unfortunally with queues, firewall filters, queue tree and mangle, the thoughput between machines and the "server" become low.

I want to know, if is possible to bypass everything mentioned above inside a bridge.

Another way I can say that is, I want just to use filters, mangle, queues, etc for the WAN connection.
Yes it is possible, You can simply add out-interface=<wan> to all of the firewall/mangle rules mentioned above.
 
Yamash
just joined
Topic Author
Posts: 15
Joined: Sun Apr 22, 2012 1:29 am
Location: Brazil

Re: How to passthought over filters between two interfaces

Fri Mar 28, 2014 10:35 pm

I already did that, but I realized what I was doing wrong.

I disabled Bridge > Settings > Use Ip firewall and now I can reach 500 mbits nothing more yet... but I will keep trying to reach more performance.

Thank for your help and wasted time :)
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Re: How to passthought over filters between two interfaces

Fri Mar 28, 2014 11:52 pm

You can get more. Use switching instead bridging.

Sent from Android by Tapatalk.
 
User avatar
rahulmkhj
Member Candidate
Member Candidate
Posts: 135
Joined: Wed Mar 09, 2011 10:54 am

Re: How to passthought over filters between two interfaces

Sat Mar 29, 2014 5:08 am

I already did that, but I realized what I was doing wrong.

I disabled Bridge > Settings > Use Ip firewall and now I can reach 500 mbits nothing more yet... but I will keep trying to reach more performance.

Thank for your help and wasted time :)

The better WaY of thanks is giving karma.. ;)
 
Yamash
just joined
Topic Author
Posts: 15
Joined: Sun Apr 22, 2012 1:29 am
Location: Brazil

Re: How to passthought over filters between two interfaces

Wed Apr 09, 2014 4:48 am

You can get more. Use switching instead bridging.

Sent from Android by Tapatalk.
Hello, How can I do with switching instead bridging? can you provide me some links with information?
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Re: How to passthought over filters between two interfaces

Wed Apr 09, 2014 9:49 am

You can get more. Use switching instead bridging.

Sent from Android by Tapatalk.
Hello, How can I do with switching instead bridging? can you provide me some links with information?
You have RB2011 equiped with two manageable switches. Imagine you have ether1 as wan, then ether2-ether10 in bridge1 as lan. You want to maximize throughput between ports ether2-ether5 (between all gigabits) without applying any software rules/controls on the communication between them. You can do it easily:

In Winbox:
1) go to bridge, tab ports. Remove (or disable) all ports ether3-ether5. Leave ether2 as bridge member.
2) go to interfaces, double-click on ether3, tab General. Set the master port "ether2" instead "none" value. Press OK.
3) do the step 2 for ports ehter4 and ether5 the same.

Now check your throughput between ports ehter2-ether5. It will be pure gigabit, hardwire switched.

If you would like to hardwire switch also with ports ether6-ether10, do the same (master ether6 in bridge1).

If you would like to hardwire switch also between the two switches, remove ether6 from the bridge1 and put short wire from ether5 to ether6. Then only ether2 will be the only ethernet port in bridge1. It is not possible to make wire connection between those two swithes inside the RB2011, so you loose in this case two ports effectively, but you will not utilize CPU for communication between switches.

Hope it is helpful for you.
 
Yamash
just joined
Topic Author
Posts: 15
Joined: Sun Apr 22, 2012 1:29 am
Location: Brazil

Re: How to passthought over filters between two interfaces

Thu Apr 24, 2014 2:46 pm

Thanks very much, it works like a charm.

I did some tests with iperf udp and reached 1 Gbit between the computers and the ubuntu.

Thanks again.
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Re: [SOLVED] How to passthought over filters between two ifa

Thu Apr 24, 2014 6:01 pm

Glad to help you.