MikroTik

Community discussions
https://forum.mikrotik.com/

Queue tree + pcq no working for me

https://forum.mikrotik.com/viewtopic.php?t=175206

Page 1 of 1

Queue tree + pcq no working for me

Posted: Wed May 12, 2021 4:51 pm
by jvzg545cr
Hello friends, what I will ask here is that it is duplicated in many forums but I cannot find something that can help me and I have configured it in the possible ways.

I have a mikrotik 4011 in production with 200 clients, I manage them by pppoe with plans of 5 and 15mb, configure queue tree + pcq and I notice that the clients pass their contracted limit on occasions and I have not been able to make it not go from there. I leave my export of the configuration.
Code: Select all
/ip firewall mangle
add action=mark-connection chain=forward connection-mark=no-mark disabled=yes \
    in-interface-list=LAN new-connection-mark=Plan15mb-conn passthrough=yes \
    src-address-list="HOME 15MB"
add action=mark-packet chain=forward connection-mark=Plan15mb-conn disabled=yes \
    in-interface-list=WAN new-packet-mark=P15mb-down-pacotes passthrough=no
add action=mark-packet chain=forward connection-mark=Plan15mb-conn disabled=yes \
    in-interface-list=LAN new-packet-mark=P15mb-up-pacotes passthrough=no
add action=mark-connection chain=forward connection-mark=no-mark disabled=yes \
    in-interface-list=LAN new-connection-mark=Plan10mb-conn passthrough=yes \
    src-address-list="HOME 10MB"
add action=mark-packet chain=forward connection-mark=Plan10mb-conn disabled=yes \
    in-interface-list=WAN new-packet-mark=P10mb-down-pacotes passthrough=no
add action=mark-packet chain=forward connection-mark=Plan10mb-conn disabled=yes \
    in-interface-list=LAN new-packet-mark=P10mb-up-pacotes passthrough=no
add action=mark-connection chain=forward connection-mark=no-mark disabled=yes \
    in-interface-list=LAN new-connection-mark=Plan5mb-conn passthrough=yes \
    src-address-list="HOME 5MB"
add action=mark-packet chain=forward connection-mark=Plan5mb-conn disabled=yes \
    in-interface-list=WAN new-packet-mark=P5mb-down-pacotes passthrough=no
add action=mark-packet chain=forward connection-mark=Plan5mb-conn disabled=yes \
    in-interface-list=LAN new-packet-mark=P5mb-up-pacotes passthrough=no
add action=mark-connection chain=forward connection-mark=no-mark disabled=yes \
    in-interface-list=LAN new-connection-mark=Plan2mb-conn passthrough=yes \
    src-address-list="HOME 2MB"
add action=mark-packet chain=forward connection-mark=Plan2mb-conn disabled=yes \
    in-interface-list=WAN new-packet-mark=P2mb-down-pacotes passthrough=no
add action=mark-packet chain=forward connection-mark=Plan2mb-conn disabled=yes \
    in-interface-list=LAN new-packet-mark=P2mb-up-pacotes passthrough=no
add action=mark-connection chain=forward connection-mark=no-mark disabled=yes \
    in-interface-list=LAN new-connection-mark=Plan1mb-conn passthrough=yes \
    src-address-list="HOME 1M"
add action=mark-packet chain=forward connection-mark=Plan1mb-conn disabled=yes \
    in-interface-list=WAN new-packet-mark=P1mb-down-pacotes passthrough=no
add action=mark-packet chain=forward connection-mark=Plan1mb-conn disabled=yes \
    in-interface-list=LAN new-packet-mark=P1mb-up-pacotes passthrough=no
add action=mark-connection chain=forward connection-mark=no-mark disabled=yes \
    in-interface-list=LAN new-connection-mark=Plan512k-conn passthrough=yes \
    src-address-list="HOME 512k"
add action=mark-packet chain=forward connection-mark=Plan512k-conn disabled=yes \
    in-interface-list=WAN new-packet-mark=P512k-down-pacotes passthrough=no
add action=mark-packet chain=forward connection-mark=Plan512k-conn disabled=yes \
    in-interface-list=LAN new-packet-mark=P512k-up-pacotes passthrough=no

Another way

add action=mark-packet chain=forward comment=New disabled=yes new-packet-mark=\
    P15mb-up-pacotes passthrough=yes src-address-list="HOME 15MB"
add action=mark-packet chain=forward disabled=yes dst-address-list="HOME 15MB" \
    new-packet-mark=P15mb-down-pacotes passthrough=yes
add action=mark-packet chain=forward disabled=yes new-packet-mark=P10mb-up-pacotes \
    passthrough=yes src-address-list="HOME 10MB"
add action=mark-packet chain=forward disabled=yes dst-address-list="HOME 10MB" \
    new-packet-mark=P10mb-down-pacotes passthrough=yes
add action=mark-packet chain=forward disabled=yes new-packet-mark=P5mb-up-pacotes \
    passthrough=yes src-address-list="HOME 5MB"
add action=mark-packet chain=forward disabled=yes dst-address-list="HOME 5MB" \
    new-packet-mark=P5mb-down-pacotes passthrough=yes
add action=mark-packet chain=forward disabled=yes new-packet-mark=P2mb-up-pacotes \
    passthrough=yes src-address-list="HOME 2MB"
add action=mark-packet chain=forward disabled=yes dst-address-list="HOME 2MB" \
    new-packet-mark=P2mb-down-pacotes passthrough=yes
add action=mark-packet chain=forward disabled=yes new-packet-mark=P1mb-up-pacotes \
    passthrough=yes src-address-list="HOME 1M"
add action=mark-packet chain=forward disabled=yes dst-address-list="HOME 1M" \
    new-packet-mark=P1mb-down-pacotes passthrough=yes
add action=mark-packet chain=forward disabled=yes new-packet-mark=P512k-up-pacotes \
    passthrough=yes src-address-list="HOME 512k"
add action=mark-packet chain=forward disabled=yes dst-address-list="HOME 512k" \
    new-packet-mark=P512k-down-pacotes passthrough=yes

/queue type
add kind=pcq name=PCQ_Plan_512k_down pcq-classifier=dst-address pcq-rate=512k
add kind=pcq name=PCQ_Plan_2M_down pcq-burst-time=50s pcq-classifier=dst-address pcq-rate=2M
add kind=pcq name=PCQ_Plan_1M_down pcq-classifier=dst-address pcq-rate=1M
add kind=pcq name=PCQ_Plan_5M_down pcq-burst-time=50s pcq-classifier=dst-address pcq-rate=5M
add kind=pcq name=PCQ_Plan_6M_down pcq-classifier=dst-address pcq-rate=6M
add kind=pcq name=PCQ_Plan_8M_down pcq-burst-time=1m4s pcq-classifier=dst-address pcq-rate=8M
add kind=pcq name=PCQ_Plan_15M_down pcq-classifier=dst-address pcq-rate=15M
add kind=pcq name=PCQ_Plan_512k_up pcq-classifier=src-address pcq-rate=512k
add kind=pcq name=PCQ_Plan_1M_up pcq-classifier=src-address pcq-rate=1M
add kind=pcq name=PCQ_Plan_5M_up pcq-burst-time=50s pcq-classifier=src-address pcq-rate=5M
add kind=pcq name=PCQ_Plan_6M_up pcq-classifier=src-address pcq-rate=2M
add kind=pcq name=PCQ_Plan_8M_up pcq-classifier=src-address pcq-rate=4M
add kind=pcq name=PCQ_Plan_2M_up pcq-burst-time=50s pcq-classifier=src-address pcq-rate=2M
add kind=pcq name=PCQ_Plan_15M_up pcq-classifier=src-address pcq-rate=15M

/queue tree
add disabled=yes limit-at=215M max-limit=215M name=DW parent="Bridge DHCP"
add disabled=yes limit-at=230M max-limit=230M name=UP parent=ether2-GW
add disabled=yes limit-at=1M max-limit=215M name=H-1MB packet-mark=P1mb-down-pacotes parent=DW queue=PCQ_Plan_1M_down
add disabled=yes limit-at=5M max-limit=215M name=H-5MB packet-mark=P5mb-down-pacotes parent=DW priority=2 queue=PCQ_Plan_5M_down
add disabled=yes limit-at=5M max-limit=215M name=H-10MB packet-mark=P10mb-down-pacotes parent=DW queue=PCQ_Plan_8M_down
add disabled=yes limit-at=183M max-limit=183M name=H-15MB packet-mark=P15mb-down-pacotes parent=DW queue=PCQ_Plan_15M_down
add disabled=yes name=H-1MB-UP packet-mark=P1mb-up-pacotes parent=UP queue=PCQ_Plan_1M_up
add disabled=yes name=H-2MB-UP packet-mark=P2mb-up-pacotes parent=UP queue=PCQ_Plan_2M_up
add disabled=yes name=H-5MB-UP packet-mark=P5mb-up-pacotes parent=UP queue=PCQ_Plan_5M_up
add disabled=yes name=H-10MB-UP packet-mark=P10mb-up-pacotes parent=UP queue=PCQ_Plan_8M_up
add disabled=yes name=H-15MB-UP packet-mark=P15mb-up-pacotes parent=UP queue=PCQ_Plan_15M_up
add disabled=yes limit-at=10M max-limit=215M name=H-2MB packet-mark=P2mb-down-pacotes parent=DW priority=1 queue=PCQ_Plan_2M_down
add disabled=yes limit-at=512k max-limit=215M name=H-512k packet-mark=P512k-down-pacotes parent=DW queue=PCQ_Plan_512k_down

/ppp profile
add address-list="HOME 1M" bridge="Bridge DHCP" interface-list=LAN local-address=10.1.0.1 name="PPPoE_Plan 1M" remote-address="Plan 1MB" use-encryption=yes
add address-list="HOME 2MB" bridge="Bridge DHCP" interface-list=LAN local-address=10.1.0.1 name="PPPoE_Plan 2MB" remote-address="Plan 1.5MB" use-encryption=yes
add address-list="HOME 5MB" bridge="Bridge DHCP" interface-list=LAN local-address=10.1.0.1 name="PPPoE_Plan 5M" remote-address="Plan 5MB"
add address-list="HOME 10MB" bridge="Bridge DHCP" dns-server=1.1.1.1,1.0.0.1 interface-list=LAN local-address=10.1.0.1 name="PPPoE_Plan 10M" remote-address="Plan 10MB" use-encryption=yes
add address-list="HOME 512k" bridge="Bridge DHCP" interface-list=LAN local-address=10.1.0.1 name="PPPoE_Plan 512k" use-encryption=yes
add address-list="HOME 15MB" bridge="Bridge DHCP" dns-server=1.1.1.1,1.0.0.1 interface-list=LAN local-address=10.1.0.1 name=PPPoE_Plan_15MB remote-address="Plan 15MB" use-encryption=yes
add address-list="HOME 8MB" bridge="Bridge DHCP" interface-list=LAN local-address=10.1.0.1 name="PPPoE_PLan 8MB" remote-address="Plan 8MB"

Re: Queue tree + pcq no working for me

Posted: Thu May 13, 2021 10:42 am
by lightmanster
just to be sure.
Fasttrack should be disabled for those connections. Fasttrack and queuing doesn't work together.

Kind regards

Re: Queue tree + pcq no working for me

Posted: Fri May 14, 2021 5:25 pm
by jvzg545cr
just to be sure.
Fasttrack should be disabled for those connections. Fasttrack and queuing doesn't work together.

Kind regards
I have no rules with fasttrack, the truth is I don't know what to do anymore, I don't know if it's server failure.

Re: Queue tree + pcq no working for me

Posted: Fri May 14, 2021 5:35 pm
by rextended
Enable IP firewall on bridge / settings

Re: Queue tree + pcq no working for me

Posted: Fri May 14, 2021 6:34 pm
by CZFan
Hello friends, what I will ask here is that it is duplicated in many forums but I cannot find something that can help me and I have configured it in the possible ways.

I have a mikrotik 4011 in production with 200 clients, I manage them by pppoe with plans of 5 and 15mb, configure queue tree + pcq and I notice that the clients pass their contracted limit on occasions and I have not been able to make it not go from there. I leave my export of the configuration.
...
The marking of conn/pkt is not correct, you are only marking certain packets instead of all the connection packets, remove the "in-interface-list" property from conn & pkt marking rules.

Re: Queue tree + pcq no working for me

Posted: Tue May 18, 2021 6:41 pm
by jvzg545cr
Hello friends, what I will ask here is that it is duplicated in many forums but I cannot find something that can help me and I have configured it in the possible ways.

I have a mikrotik 4011 in production with 200 clients, I manage them by pppoe with plans of 5 and 15mb, configure queue tree + pcq and I notice that the clients pass their contracted limit on occasions and I have not been able to make it not go from there. I leave my export of the configuration.
...
The marking of conn/pkt is not correct, you are only marking certain packets instead of all the connection packets, remove the "in-interface-list" property from conn & pkt marking rules.
I'm not sure, I can't mark the connection correctly as you tell me
Code: Select all
/ip firewall mangle
add action=mark-connection chain=forward connection-mark=no-mark \
    new-connection-mark=Plan15mb-conn passthrough=yes src-address-list=\
    "HOME 15MB"
add action=mark-packet chain=forward connection-mark=Plan15mb-conn \
    new-packet-mark=P15mb-down-pacotes passthrough=no
add action=mark-packet chain=forward connection-mark=Plan15mb-conn \
    new-packet-mark=P15mb-up-pacotes passthrough=no

Re: Queue tree + pcq no working for me

Posted: Tue May 18, 2021 6:44 pm
by jvzg545cr
Enable IP firewall on bridge / settings
I'm not sure what you mean

Re: Queue tree + pcq no working for me

Posted: Tue May 18, 2021 8:56 pm
by rextended
Enable IP firewall on bridge / settings
I'm not sure what you mean
On Winbox click on bridge on the left, click on settings button on the new window opened,
select "use IP firewall" then click on "OK"

Re: Queue tree + pcq no working for me

Posted: Wed May 19, 2021 12:08 am
by jvzg545cr
Enable IP firewall on bridge / settings
I'm not sure what you mean
On Winbox click on bridge on the left, click on settings button on the new window opened,
select "use IP firewall" then click on "OK"
No, it can't be, I'm doing something wrong ... they keep going beyond the capacity supported by the pcq configured in the queue tree

Re: Queue tree + pcq no working for me

Posted: Wed May 19, 2021 12:09 am
by jvzg545cr
I just tried this setup and nothing
Code: Select all
/ip firewall mangle
add action=mark-connection chain=forward connection-mark=no-mark new-connection-mark=15mb_conn passthrough=yes src-address-list=HOGAR15MB
add action=mark-packet chain=forward connection-mark=15mb_conn in-interface=ether2-GW new-packet-mark=D15mb_pacotes passthrough=no
add action=mark-packet chain=forward connection-mark=15mb_conn in-interface=all-ppp new-packet-mark=U15mb_pacotes passthrough=no
add action=mark-connection chain=forward connection-mark=no-mark new-connection-mark=10mb_conn passthrough=yes src-address-list="HOGAR 10MB"
add action=mark-packet chain=forward connection-mark=10mb_conn in-interface=ether2-GW new-packet-mark=D10mb_pacotes passthrough=no
add action=mark-packet chain=forward connection-mark=10mb_conn in-interface=all-ppp new-packet-mark=U10mb_pacotes passthrough=no
add action=mark-connection chain=forward connection-mark=no-mark new-connection-mark=8mb_conn passthrough=yes src-address-list="HOME 8MB"
add action=mark-packet chain=forward connection-mark=8mb_conn in-interface=ether2-GW new-packet-mark=D8mb_pacotes passthrough=no
add action=mark-packet chain=forward connection-mark=8mb_conn in-interface=all-ppp new-packet-mark=U8mb_pacotes passthrough=no
add action=mark-connection chain=forward connection-mark=no-mark new-connection-mark=5mb_conn passthrough=yes src-address-list="HOGAR 5MB"
add action=mark-packet chain=forward connection-mark=5mb_conn in-interface=ether2-GW new-packet-mark=D5mb_pacotes passthrough=no
add action=mark-packet chain=forward connection-mark=5mb_conn in-interface=all-ppp new-packet-mark=U5mb_pacotes passthrough=no
add action=mark-connection chain=forward connection-mark=no-mark new-connection-mark=2mb_conn passthrough=yes src-address-list="HOGAR 2MB"
add action=mark-packet chain=forward connection-mark=2mb_conn in-interface=ether2-GW new-packet-mark=D2mb_pacotes passthrough=yes
add action=mark-packet chain=forward connection-mark=2mb_conn in-interface=all-ppp new-packet-mark=U2mb_pacotes passthrough=no
add action=mark-connection chain=forward connection-mark=no-mark new-connection-mark=1mb_conn passthrough=yes src-address-list="HOGAR 1M"
add action=mark-packet chain=forward connection-mark=1mb_conn in-interface=ether2-GW new-packet-mark=D1mb_pacotes passthrough=no
add action=mark-packet chain=forward connection-mark=1mb_conn in-interface=all-ppp new-packet-mark=U1mb_pacotes passthrough=no
this is a 5mb client
Client.PNG

Re: Queue tree + pcq no working for me

Posted: Wed May 26, 2021 3:28 pm
by RnaPtk
I just tried this setup and nothing
Code: Select all
/ip firewall mangle
add action=mark-connection chain=forward connection-mark=no-mark new-connection-mark=15mb_conn passthrough=yes src-address-list=HOGAR15MB
add action=mark-packet chain=forward connection-mark=15mb_conn in-interface=ether2-GW new-packet-mark=D15mb_pacotes passthrough=no
add action=mark-packet chain=forward connection-mark=15mb_conn in-interface=all-ppp new-packet-mark=U15mb_pacotes passthrough=no
add action=mark-connection chain=forward connection-mark=no-mark new-connection-mark=10mb_conn passthrough=yes src-address-list="HOGAR 10MB"
add action=mark-packet chain=forward connection-mark=10mb_conn in-interface=ether2-GW new-packet-mark=D10mb_pacotes passthrough=no
add action=mark-packet chain=forward connection-mark=10mb_conn in-interface=all-ppp new-packet-mark=U10mb_pacotes passthrough=no
add action=mark-connection chain=forward connection-mark=no-mark new-connection-mark=8mb_conn passthrough=yes src-address-list="HOME 8MB"
add action=mark-packet chain=forward connection-mark=8mb_conn in-interface=ether2-GW new-packet-mark=D8mb_pacotes passthrough=no
add action=mark-packet chain=forward connection-mark=8mb_conn in-interface=all-ppp new-packet-mark=U8mb_pacotes passthrough=no
add action=mark-connection chain=forward connection-mark=no-mark new-connection-mark=5mb_conn passthrough=yes src-address-list="HOGAR 5MB"
add action=mark-packet chain=forward connection-mark=5mb_conn in-interface=ether2-GW new-packet-mark=D5mb_pacotes passthrough=no
add action=mark-packet chain=forward connection-mark=5mb_conn in-interface=all-ppp new-packet-mark=U5mb_pacotes passthrough=no
add action=mark-connection chain=forward connection-mark=no-mark new-connection-mark=2mb_conn passthrough=yes src-address-list="HOGAR 2MB"
add action=mark-packet chain=forward connection-mark=2mb_conn in-interface=ether2-GW new-packet-mark=D2mb_pacotes passthrough=yes
add action=mark-packet chain=forward connection-mark=2mb_conn in-interface=all-ppp new-packet-mark=U2mb_pacotes passthrough=no
add action=mark-connection chain=forward connection-mark=no-mark new-connection-mark=1mb_conn passthrough=yes src-address-list="HOGAR 1M"
add action=mark-packet chain=forward connection-mark=1mb_conn in-interface=ether2-GW new-packet-mark=D1mb_pacotes passthrough=no
add action=mark-packet chain=forward connection-mark=1mb_conn in-interface=all-ppp new-packet-mark=U1mb_pacotes passthrough=no
this is a 5mb client

Client.PNG
tried this setup
Code: Select all
/ip firewall mangle
chain=forward action=mark-packet new-packet-mark=P15mb-down-pacotes passthrough=no dst-address-list=HOGAR15MB log=no log-prefix="" 
chain=forward action=mark-packet new-packet-mark=P15mb-up-pacotes passthrough=no src-address-list=HOGAR15MB log=no log-prefix=""
/queue tree
add disabled=yes limit-at=215M max-limit=215M name=DW parent="Bridge DHCP"
add disabled=yes limit-at=230M max-limit=230M name=UP parent=ether2-GW
add disabled=yes limit-at=183M max-limit=183M name=H-15MB packet-mark=P15mb-down-pacotes parent=DW queue=PCQ_Plan_15M_down
add disabled=yes name=H-15MB-UP packet-mark=P15mb-up-pacotes parent=UP queue=PCQ_Plan_15M_up
All times are UTC+02:00
Page 1 of 1
Powered by phpBB® Forum Software © phpBB Limited
https://www.phpbb.com/