Hi,

I have asked this question before, got a few answers, but none that really helped Maybe I asked the question wrong, so I try again.

I have a MT with an ethernet in, and an OMNI attached to an Atheros card. The wireless interface is in ap-bridge mode and has a live internet IP 192.168.1.1/24. Each client connects and has a static IP. The ethernet IP also has a live IP (192.168.0.1).

Each client has been assigned a static IP, and when connected works fine. My mangle and queues all work when the client (192.168.1.x/24) accesses the internet via the ethernet port, however, here is my problem.

When a client (A) (192.168.1.2) sends data to another client (B) (192.168.1.3), this operates at full speed (uncontrolled), and the wireless performance on all other clients is degraded. Switching off default forward prevents the clients from seeing each other all together, and this is not desired either, they need to connect to each other, at a defined speed.

I switched all my Lucent / Orinoco AP's to MT, and the Orinoco AP's had a "limit by mac address" function, whereby the mac address had a maximum connection speed, even if the traffic was not been routed.

Each client has a live IP (192.168.1.x) with a netmask 255.255.255.0 and a gateway of 192.168.1.1.

All I want to do is limit the speed when 2 clients connected to the same wireless antenna transfer data to and from each other.

Any help will be much appreciated. At this point, setting up a PPPoE server is not an option.

Thanks in Advance

You ca use DHCP with bandwidth control...

I don't know the answer to this, but could you do it by setting the maximum link speed of the client wireless cards to something lower e.g. 6Mbps or so? This is a lot more 'brute force' than any rate-limiting options at router level but I wonder if it would work? Please speak up anyone if I have missed something fundamental. I can see one drawback with this in that you say access and speed etc from Client to AP is fine and probably you want that to work as fast as possible for direct internet access. If I understand correctly, it is just Client-Client that saturating the link?

one thing which might not be the best is to change ip netmask from 255.255.255.0 to 255.255.255.252 and assign ONE ip per user to your LAN port so they can only connect to you and if they one to connect to other people you can route for them through the gateway and limit the bandwitdh in there.

one thing that you must do is you definately need to enable WIRELESS ISOLATION that they cannot each other by changing netmask which I am not so sure how to do that with Mikrotik.

hope it helps

Switch off default-forwarding, assign /32 addresses to clients and configure routing and queues (or pppoe with limits)