global-in / global-out - mangle

macastefan · Mon Apr 09, 2012 10:44 pm

Hello!
Can you tell me which entries are correct? (limit-at and max-limit are not important)

1.
I think that is correct:

/ip firewall mangle
add chain=prerouting in-interface=LAN action=mark-packet new-packet-mark=upload
add chain=postrouting out-interface=LAN action=mark-packet new-packet-mark=download

/queue tree
add limit-at=10000000 max-limit=10000000 name=upload packet-mark=upload parent=global-in queue=upload-pcq
add limit-at=10000000 max-limit=10000000 name=download packet-mark=download parent=global-out queue=download-pcq

2.
I try mark and shape download and upload only in global-in

/ip firewall mangle
add chain=prerouting in-interface=LAN1 action=mark-packet new-packet-mark=upload
add chain=prerouting in-interface=WAN action=mark-packet new-packet-mark=download

/queue tree
add limit-at=10000000 max-limit=10000000 name=upload packet-mark=upload parent=global-in queue=upload-pcq
add limit-at=10000000 max-limit=10000000 name=download packet-mark=download parent=global-in queue=download-pcq

3.
I try mark and shape download and upload only in global-out.

/ip firewall mangle
add chain=postrouting out-interface=WAN action=mark-packet new-packet-mark=upload
add chain=postrouting out-interface=LAN1 action=mark-packet new-packet-mark=download

/queue tree
add limit-at=10000000 max-limit=10000000 name=upload packet-mark=upload parent=global-out queue=upload-pcq
add limit-at=10000000 max-limit=10000000 name=download packet-mark=download parent=global-out queue=download-pcq

jackman · Wed Apr 11, 2012 11:19 am

As long as you marking the packet based on the interface all is fine. I think you don't even need to mark the packet.

akosenko · Wed Apr 11, 2012 3:52 pm

All three examples are correct. All as according to the rules described here http://wiki.mikrotik.com/wiki/NetworkPr ... of_Service. And all 3 examples will be working correct with PCQ.

macastefan · Wed Apr 11, 2012 4:52 pm

thx! thx! thx!
Finally understood!

sankarklm · Wed Sep 25, 2013 2:10 pm

Hi

I was trying to free icmp from shaping, which was working on earlier versions, but on 6.XX i am find even though packet is getting marked, /queue tree is unable to capture it. especially on pre-routing.

[Mikrotik@MikroTik] /ip firewall mangle pr
Flags: X - disabled, I - invalid, D - dynamic
0 chain=prerouting action=mark-packet new-packet-mark=ICMP-IN passthrough=yes protocol=icmp

1 chain=postrouting action=mark-packet new-packet-mark=ICMP-OUT passthrough=yes protocol=icmp
[Mikrotik@MikroTik] > /queue tree print
Flags: X - disabled, I - invalid
0 name="ICMP-OUT" parent=global packet-mark=ICMP-OUT limit-at=0 queue=default priority=1 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s

1 name="ICMP-IN" parent=global packet-mark=ICMP-IN limit-at=0 queue=default priority=1 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s

gogo3alatool · Sat Feb 14, 2015 8:53 am

v6 CHANGES
global-in, global-out, global-total parent in /queue tree is replaced with global that is equivalent to global-total in v5;

global-in / global-out - mangle

global-in / global-out - mangle

Re: global-in / global-out - mangle

Re: global-in / global-out - mangle

Re: global-in / global-out - mangle

Re: global-in / global-out - mangle

Re: global-in / global-out - mangle

Who is online