Page 1 of 1

[SOLVED] How to passthought over filters between two ifaces

Posted: Wed Mar 26, 2014 3:18 pm
by Yamash
Hello,

I've bought a RB 2011UAS-2HnD-IN to change a gigabit switch in a friends office, this network before has a modem adsl2+ (pppoe and dhcp) and this switch, I've changed this switch and now the routerboard do pppoe connections and dhcp, wireless, etc.

In ether2 he have a small ubuntu server, where is the fileserver, website and mysql, everything is there, before.

I want to know how to exclude any firewall filter, mangle to this and from this server.
I've already set the filters to only pppoe in but when they transfer big files to server the routerboard reach 100% with 100Mbps througput, and if I disable queues, filters, mangle, queue tree, it reache big transfer rates.

Or this, or any can give me an idea?

Re: How to passthought over filters between two interfaces

Posted: Wed Mar 26, 2014 5:19 pm
by rahulmkhj
Can't get your question, can you please elaborate ?

Re: How to passthought over filters between two interfaces

Posted: Thu Mar 27, 2014 4:11 am
by Yamash
Sorry for my bad explanation.

Ok, After the change I checked that unfortunally with queues, firewall filters, queue tree and mangle, the thoughput between machines and the "server" become low.

I want to know, if is possible to bypass everything mentioned above inside a bridge.

Another way I can say that is, I want just to use filters, mangle, queues, etc for the WAN connection.

Re: How to passthought over filters between two interfaces

Posted: Thu Mar 27, 2014 8:43 am
by rahulmkhj
Sorry for my bad explanation.

Ok, After the change I checked that unfortunally with queues, firewall filters, queue tree and mangle, the thoughput between machines and the "server" become low.

I want to know, if is possible to bypass everything mentioned above inside a bridge.

Another way I can say that is, I want just to use filters, mangle, queues, etc for the WAN connection.
Yes it is possible, You can simply add out-interface=<wan> to all of the firewall/mangle rules mentioned above.

Re: How to passthought over filters between two interfaces

Posted: Fri Mar 28, 2014 10:35 pm
by Yamash
I already did that, but I realized what I was doing wrong.

I disabled Bridge > Settings > Use Ip firewall and now I can reach 500 mbits nothing more yet... but I will keep trying to reach more performance.

Thank for your help and wasted time :)

Re: How to passthought over filters between two interfaces

Posted: Fri Mar 28, 2014 11:52 pm
by jarda
You can get more. Use switching instead bridging.

Sent from Android by Tapatalk.

Re: How to passthought over filters between two interfaces

Posted: Sat Mar 29, 2014 5:08 am
by rahulmkhj
I already did that, but I realized what I was doing wrong.

I disabled Bridge > Settings > Use Ip firewall and now I can reach 500 mbits nothing more yet... but I will keep trying to reach more performance.

Thank for your help and wasted time :)

The better WaY of thanks is giving karma.. ;)

Re: How to passthought over filters between two interfaces

Posted: Wed Apr 09, 2014 4:48 am
by Yamash
You can get more. Use switching instead bridging.

Sent from Android by Tapatalk.
Hello, How can I do with switching instead bridging? can you provide me some links with information?

Re: How to passthought over filters between two interfaces

Posted: Wed Apr 09, 2014 9:49 am
by jarda
You can get more. Use switching instead bridging.

Sent from Android by Tapatalk.
Hello, How can I do with switching instead bridging? can you provide me some links with information?
You have RB2011 equiped with two manageable switches. Imagine you have ether1 as wan, then ether2-ether10 in bridge1 as lan. You want to maximize throughput between ports ether2-ether5 (between all gigabits) without applying any software rules/controls on the communication between them. You can do it easily:

In Winbox:
1) go to bridge, tab ports. Remove (or disable) all ports ether3-ether5. Leave ether2 as bridge member.
2) go to interfaces, double-click on ether3, tab General. Set the master port "ether2" instead "none" value. Press OK.
3) do the step 2 for ports ehter4 and ether5 the same.

Now check your throughput between ports ehter2-ether5. It will be pure gigabit, hardwire switched.

If you would like to hardwire switch also with ports ether6-ether10, do the same (master ether6 in bridge1).

If you would like to hardwire switch also between the two switches, remove ether6 from the bridge1 and put short wire from ether5 to ether6. Then only ether2 will be the only ethernet port in bridge1. It is not possible to make wire connection between those two swithes inside the RB2011, so you loose in this case two ports effectively, but you will not utilize CPU for communication between switches.

Hope it is helpful for you.

Re: How to passthought over filters between two interfaces

Posted: Thu Apr 24, 2014 2:46 pm
by Yamash
Thanks very much, it works like a charm.

I did some tests with iperf udp and reached 1 Gbit between the computers and the ubuntu.

Thanks again.

Re: [SOLVED] How to passthought over filters between two ifa

Posted: Thu Apr 24, 2014 6:01 pm
by jarda
Glad to help you.