Hi,

I have following network scenario.

LAN PC's =======Mikrotik-RB450G======Squid Proxy=====Internet

I want to do bandwidth management per ip/mac basic along with i want to block torrent /p2p download to some ip's how can i achieve the same and what configuration needs to be done, as per my knowledge i guess i need following configuration correct me if i am wrong.

I need to configure mikrotik bridge on 2 ports to pass all traffic through mikrotik then i have to apply bridge filters rules to block the torrents, but can i manage per ip/mac bandwidth in bridge filters ? please help and provide sample config if possible.

Why bridge?

Why not have your Mikrotik device act as a router? That way you can firewall based on ip/mac.

I would like to see what others think because I don't think you can perform advance filtering (i.e. beyond mac filter) if your Mikrotik device is only bridging...

You can do detailed firewall on bridge but it is very resource consuming. Do it on the router as it will be more efficient. Use bridge firewall only when it should restrict traffic between bridge members.

You can do detailed firewall on bridge but it is very resource consuming. Do it on the router as it will be more efficient. Use bridge firewall only when it should restrict traffic between bridge members.

Hi,

Thanks for the reply i understand that if i use it as a router i will get more features, but as our internet connection is divided into various departments and i am administrator of only 1 department and i want to restrict only my department as central Proxy server is maintained by any other person i don't want to interfere with them and also don't want to put my client behind NAT so please suggest accordingly.

Then use firewall on bridge.

Pl suggest sample script to block torrents and management bandwidth per ip/mac

Blocking torrents? Search the forum, there are tons of discussions about it, sometimes you can find good ideas how to do it.
For traffic shaping use queues. You can use them also when in bridge mode. Read the manual first.

Remember, there is no simple guide how to do such complex things as they have to reflect your special situation and environment. Frankly speaking, you have to read others experience here on the forum, you have to read manual, you have to implement what you need into your environment by trying and learning.

Last time I see many questions (almost orders) of type "Give me the code!" more often. Of course there are many experienced people expressed what they have learnt somewhere in the forum, but none of them is happy to response the same questions again and again.

Every one should use the search functionality of this forum and read the threads related to his interests. In case of any question, it is better to ask in the thread where the topic is already discussed than ask separately thinking that this is some kind of support forum where support stuff works for you. This is not how it works here.

Make your homework first. Study and try. Then think again, study and try. And again. And after that, if you will have some particular problem (as vast majority of your setting will be working), then come back, share with others what have you learnt, done and what problem are you facing. In this case you will get some helpful hints, and what is more, you will understand them.

For other open questions like are you asking there is manual you should read and search function of the forum you should use.

Some maybe useful links where you can start:
http://wiki.mikrotik.com/wiki/Enable_and_Disable_P2P
http://wiki.mikrotik.com/wiki/Manual:Queue
http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter
http://wiki.mikrotik.com/wiki/Manual:In ... e_Firewall

You can do detailed firewall on bridge but it is very resource consuming. Do it on the router as it will be more efficient. Use bridge firewall only when it should restrict traffic between bridge members.

Are you sure about that? From the specs sheet from routerboard.com on the RB951G-2HnD seems to be able to handle bridge rules faster than ip firewall rules. Obviously Ip rules offer so much more and I certainly prefer them since they work on L3. On bridge rules based on mac there will be more maintenance since they are subject to change when replacing network cards or entire pc's.

RB951G-2HnD specs sheet. http://routerboard.com/RB951G-2HnD * See at the bottom of the page.