I'm trying to set some Queue on the network to prioritize two computers in the network to the WAN. To make it a little more complicated the network is dualstack and the IPv6 prefix is dynamic (thank you ISP). Since the IPv6 Prefix will change, I cannot use a simple queue and assign it to a network, I have to mark the packets in real time and combine it with a queue tree. The computers are both connected to the Mikrotik router directly. My idea was to use the connected ethernet port to identify the computer.
To test this I use a CRS328 (routerOS 7.8 ). Port one is WAN. Port 2-24 are in a bridge. Port 23 is connected to one pc and port 24 is connected to the 2nd pc.
Code: Select all
add action=mark-connection chain=forward comment="Mark new connection starting from inside network" connection-state=new new-connection-mark=\
All_Internet_Connection out-interface=ether1 passthrough=yes
add action=mark-packet chain=forward comment="Mark download packet Destiny" in-interface=ether1 new-packet-mark=Destiny_DL_Packets out-bridge-port=\
ether24 passthrough=yes
add action=mark-packet chain=forward comment="Mark upload packet Destiny" connection-mark=All_Internet_Connection in-bridge-port=ether24 \
new-packet-mark=Destiny_UL_Packets out-interface=ether1 passthrough=yesI'm really out of ideas right now and I could use some insight of someone else.
Here is the full configuration of the lab router
Code: Select all
/interface bridge
add admin-mac=18:FD:74:9B:85:D6 auto-mac=no comment=defconf ingress-filtering=no name=bridge vlan-filtering=yes
/interface lte apn
set [ find default=yes ] ip-type=ipv4 use-network-apn=no
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/port
set 0 name=serial0
/queue type
add kind=cake name=cake
/queue simple
add disabled=yes dst=ether1 max-limit=100M/100M name=MainQ queue=cake/cake target=192.168.88.0/24
/interface bridge port
add bridge=bridge comment=defconf ingress-filtering=no interface=ether2
add bridge=bridge comment=defconf ingress-filtering=no interface=ether3
add bridge=bridge comment=defconf ingress-filtering=no interface=ether4
add bridge=bridge comment=defconf ingress-filtering=no interface=ether5
add bridge=bridge comment=defconf ingress-filtering=no interface=ether6
add bridge=bridge comment=defconf ingress-filtering=no interface=ether7
add bridge=bridge comment=defconf ingress-filtering=no interface=ether8
add bridge=bridge comment=defconf ingress-filtering=no interface=ether9
add bridge=bridge comment=defconf ingress-filtering=no interface=ether10
add bridge=bridge comment=defconf ingress-filtering=no interface=ether11
add bridge=bridge comment=defconf ingress-filtering=no interface=ether12
add bridge=bridge comment=defconf ingress-filtering=no interface=ether13
add bridge=bridge comment=defconf ingress-filtering=no interface=ether14
add bridge=bridge comment=defconf ingress-filtering=no interface=ether15
add bridge=bridge comment=defconf ingress-filtering=no interface=ether16
add bridge=bridge comment=defconf ingress-filtering=no interface=ether17
add bridge=bridge comment=defconf ingress-filtering=no interface=ether18
add bridge=bridge comment=defconf ingress-filtering=no interface=ether19
add bridge=bridge comment=defconf ingress-filtering=no interface=ether20
add bridge=bridge comment=defconf ingress-filtering=no interface=ether21
add bridge=bridge comment=defconf ingress-filtering=no interface=ether22
add bridge=bridge comment=defconf ingress-filtering=no interface=ether23
add bridge=bridge comment=defconf ingress-filtering=no interface=ether24
add bridge=bridge comment=defconf ingress-filtering=no interface=sfp-sfpplus1
add bridge=bridge comment=defconf ingress-filtering=no interface=sfp-sfpplus2
add bridge=bridge comment=defconf ingress-filtering=no interface=sfp-sfpplus3
add bridge=bridge comment=defconf ingress-filtering=no interface=sfp-sfpplus4
/interface bridge settings
set use-ip-firewall=yes use-ip-firewall-for-vlan=yes
/ip settings
set max-neighbor-entries=8192
/interface detect-internet
set detect-interface-list=all
/interface ovpn-server server
set auth=sha1,md5
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0
/ip dhcp-client
add interface=ether1
/ip firewall filter
add action=fasttrack-connection chain=forward connection-nat-state="" connection-state=established,related disabled=yes hw-offload=yes
add action=accept chain=input in-interface=bridge
add action=drop chain=input
add action=accept chain=forward connection-state=established,related
add action=accept chain=forward in-interface=bridge out-interface=ether1
add action=drop chain=forward
/ip firewall mangle
add action=mark-connection chain=forward comment="Mark new connection starting from outside network" connection-state=new disabled=yes in-interface=\
ether1 new-connection-mark=All_Internet_Connection passthrough=yes
add action=mark-connection chain=forward comment="Mark new connection starting from inside network" connection-state=new new-connection-mark=\
All_Internet_Connection out-interface=ether1 passthrough=yes
add action=mark-packet chain=forward comment="Mark download packet Destiny" in-interface=ether1 new-packet-mark=Destiny_DL_Packets out-bridge-port=\
ether24 passthrough=yes
add action=mark-packet chain=forward comment="Mark upload packet Destiny" connection-mark=All_Internet_Connection in-bridge-port=ether24 \
new-packet-mark=Destiny_UL_Packets out-interface=ether1 passthrough=yes
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
/ipv6 route
add disabled=no dst-address=2000::/3 gateway=2001:470:1f14:127f::1
/system routerboard settings
set boot-os=router-os
