Welcome Guest ( Log In | Register )

Bump Topic Add Reply RSS Feed
175 Pages « < 6 7 8 9 10 > » Bottom

Outline · [ Standard ] · Linear+

Enterprise Networking Mikrotik Routers (RouterBoard & RouterOS), User and owner discussion group

views
     
soonwai
post Feb 9 2012, 08:40 PM


********
All Stars
11,455 posts

Joined: Oct 2007
From: KL
Hi sifus,

What's the difference between Queue Trees and Simple Queues (from the context of traffic prioritization) ?

btw, I just found that there are a lot of tutorials for Mikrotik on 4shared.com. Just do a search for "Mikrotik". I think might be good for newbies like me. Most of them are in Bahasa Indonesia but not a prob for us.

Two more tools that I found during my Mikrotik R&D this week.

RouterOS monitoring tool in PHP: http://sourceforge.net/projects/rosinfo/
TikTool: iPhone app for monitoring RouterOS devices.

This post has been edited by soonwai: Feb 9 2012, 08:46 PM
asellus
post Feb 10 2012, 12:45 PM

#gompusas
Group Icon
Elite
4,541 posts

Joined: Jan 2003
From: BSRPPG51 Access Concentrator
Use simple queues to shape/limit/prioritize traffic, use queue trees to distribute bandwidth.
soonwai
post Feb 11 2012, 03:42 AM


********
All Stars
11,455 posts

Joined: Oct 2007
From: KL
I've enabled uPNP on the RB750GL and it's working. Is there anywhere in winbox where I can see the ports that were created by uPNP?

Added on February 11, 2012, 3:05 pm
QUOTE(asellus @ Feb 10 2012, 12:45 PM)
Use simple queues to shape/limit/prioritize traffic, use queue trees to distribute bandwidth.
*
asellus, thanks, I still don't quite understand in what situation we should use one or the either. I've tried both the examples given on klseet.com and they both achieve the same thing so I'm happy. Currently I'm using Simple Queues. I'm under the assumption that this is faster/less CPU intensive if I only have a few Mangle rules.

This post has been edited by soonwai: Feb 11 2012, 03:05 PM
weikee
post Feb 11 2012, 10:29 PM

10k Club
********
All Stars
12,019 posts

Joined: Jan 2003
QUOTE(soonwai @ Feb 11 2012, 03:42 AM)
I've enabled uPNP on the RB750GL and it's working. Is there anywhere in winbox where I can see the ports that were created by uPNP?

Added on February 11, 2012, 3:05 pm
asellus, thanks, I still don't quite understand in what situation we should use one or the either. I've tried both the examples given on klseet.com and they both achieve the same thing so I'm happy. Currently I'm using Simple Queues. I'm under the assumption that this is faster/less CPU intensive if I only have a few Mangle rules.
*
How many equipments you have that need QoS?
soonwai
post Feb 12 2012, 12:55 AM


********
All Stars
11,455 posts

Joined: Oct 2007
From: KL
QUOTE(weikee @ Feb 11 2012, 10:29 PM)
How many equipments you have that need QoS?
*
Currently where I'm experimenting, which is in the house, there are 2 iPhones, 2 iPads, 3 computers, 2 AppleTVs and 1 Wii. I think that's all the stuff that gets on the net. The bandwidth hogs would be the 2 of the 3 computers and the 2 AppleTVs when they are in use.

I've been playing around with setting up the email and scripting. Just want to share this little script which I modified based on an example from the Mikrotik wiki.

All it does is email me the IP address if it's changed (along with uptime, cpu load & free mem).
It assumes the interface for UniFi is named "unifi" and that email has been setup.
I have it schedule to run at 1 min intervals.

After this I plan to integrate one of the sample dyndns.com scripts into this so that it updates my dyndns as well.

This RB750GL is so much fun. Sure beats playing with the kids. :-)

CODE
:global ddnsip
:global ddnslastip
:global strdate [/system clock get date]
:global strtime [/system clock get time]
:global strsystemname [/system identity get name]
:global strsystemuptime [/system resource get uptime]
:global strsystemfreemem [/system resource get free-memory]
:global strsystemcpuload [/system resource get cpu-load]
:if ([ :typeof $ddnslastip ] = nil ) do={ :global ddnslastip "0" }
:global ddnssystem ("Version-" . [/system package get system version] )
:global ddnsip [ /ip address get [/ip address find interface=unifi ] address ]
:if ([ :typeof $ddnsip ] = nil ) do={
  :log info ("DDNS: No ip address present on Unifi interface, please check.")
} else={
 :if ($ddnsip != $ddnslastip) do={
   /tool e-mail send to=user@example.com subject="UniFi IP $strdate $strtime $strsystemname" body="$strsystemname $strdate $strtime \rUniFi IP: $ddnsip \rUptime: $strsystemuptime \rFree memory: $strsystemfreemem kb \rCPU Load: $strsystemcpuload %" tls=yes
   :log info "DDNS: Sending UPDATE!"
   :global ddnslastip "$ddnsip"
 } else={
#    :log info "DDNS: No update required."
   }
}


This post has been edited by soonwai: Feb 12 2012, 01:06 AM
weikee
post Feb 12 2012, 02:56 PM

10k Club
********
All Stars
12,019 posts

Joined: Jan 2003
i use Mikrotik for basic connection only. Mostly use cisco for setting. Lazy to relearn another language unless required.

You don't have much machine. If it hog up, maybe you have too many torrent or p2p connection.
JinXXX
post Feb 12 2012, 04:46 PM

Look at all my stars!!
*******
Senior Member
2,516 posts

Joined: Feb 2007
From: Uarla Umpur
QUOTE(weikee @ Feb 12 2012, 02:56 PM)
i use Mikrotik for basic connection only. Mostly use cisco for setting. Lazy to relearn another language unless required.

You don't have much machine. If it hog up, maybe you have too many torrent or p2p connection.
*
go to the ip>firewall > connection and see how many connection are there...

me 1 user can have about 300 max.. and on average 150 connections

@weikee , cisco IOS , can do scripting ?

This post has been edited by JinXXX: Feb 12 2012, 04:46 PM
soonwai
post Feb 12 2012, 04:53 PM


********
All Stars
11,455 posts

Joined: Oct 2007
From: KL
QUOTE(weikee @ Feb 12 2012, 02:56 PM)
i use Mikrotik for basic connection only. Mostly use cisco for setting. Lazy to relearn another language unless required.

You don't have much machine. If it hog up, maybe you have too many torrent or p2p connection.
*
I only have one Mac torrenting. Just want to learn more about QoS. Not really having a problem with bandwidth hogs.

Added on February 12, 2012, 4:55 pm
QUOTE(JinXXX @ Feb 12 2012, 04:46 PM)
go to the ip>firewall > connection and see how many connection are there...

me 1 user can have about 300 max.. and on average 150 connections

@weikee , cisco IOS , can do scripting ?
*
Currently, with 2 torrents downloading and 3 more seeding, I have 190 connections.

Sorry if sifus misunderstood me, I'm not having a prob with QoS but just trying to learn more about IP Mangles and when and where to use Simple Queues or Queue Trees.

This post has been edited by soonwai: Feb 12 2012, 04:57 PM
weikee
post Feb 12 2012, 05:02 PM

10k Club
********
All Stars
12,019 posts

Joined: Jan 2003
QUOTE(JinXXX @ Feb 12 2012, 04:46 PM)
go to the ip>firewall > connection and see how many connection are there...

me 1 user can have about 300 max.. and on average 150 connections

@weikee , cisco IOS , can do scripting ?
*
You can, but some don't need too, cause already build in the ios. Like the Dyndns. Scripting is another level of knowledge. I did once for ISP failover to secondary "ADSL" line.

Added on February 12, 2012, 5:03 pm
QUOTE(soonwai @ Feb 12 2012, 04:53 PM)
I only have one Mac torrenting. Just want to learn more about QoS. Not really having a problem with bandwidth hogs.

Added on February 12, 2012, 4:55 pm
Currently, with 2 torrents downloading and 3 more seeding, I have 190 connections.

Sorry if sifus misunderstood me, I'm not having a prob with QoS but just trying to learn more about IP Mangles and when and where to use Simple Queues or Queue Trees.
*
Using P2P or torrent will surely take up bandwidth may used up all your NAT translation table too. In Cisco it can limit it, but this will slow down your download. Think mikrotik can too.

This post has been edited by weikee: Feb 12 2012, 05:03 PM
soonwai
post Feb 12 2012, 05:08 PM


********
All Stars
11,455 posts

Joined: Oct 2007
From: KL
Sorry, I've got another question. I'm using the QoS rules (Simple Queues) example from klseet.com which I'm still trying to understand. It prioritizes web traffic (port 80) into q1 and everything unspecified incl encrypted bittorrent traffic gets dumped into q7. All this seems to work.

My question is how do I mark FTP data connection? Port 21 is marked for q2 which works but passive FTP uses a dynamic port for the actual data connection. At the moment this gets marked into q7.

Sorry I'm so blur when it comes to this.
weikee
post Feb 12 2012, 05:54 PM

10k Club
********
All Stars
12,019 posts

Joined: Jan 2003
FTP is using dynamic port so is not easy to identify. If you know specific FTP Server IP, you can than do QoS on destination IP.

BTW, putting port 80 as q1, if i use P2P HTTP tunneling it will go to your q1 smile.gif
soonwai
post Feb 12 2012, 07:45 PM


********
All Stars
11,455 posts

Joined: Oct 2007
From: KL
QUOTE(weikee @ Feb 12 2012, 05:54 PM)
FTP is using dynamic port so is not easy to identify.  If you know specific FTP Server IP, you can than do QoS on destination IP.

BTW, putting port 80 as q1, if i use P2P HTTP tunneling it will go to your q1 smile.gif
*
weikee, thanks, but my FTP server and BT client is on the same Mac, same IP. I suppose I could:
1. Set the FTP server to non-passive.
2. Limit the passive FTP port range on my FTP server and mark those ports on the router.

Will connection-type=ftp catch passive FTP ports?

Will try that later and see how it's go.

As for HTTP tunneling, it's ok lah. I'm not trying to block my p2p, just want to queue them up so that web browsing & FTP has priority. FTP is only used occasionally by my mum to transfer stuff from my house to hers.
weikee
post Feb 12 2012, 09:13 PM

10k Club
********
All Stars
12,019 posts

Joined: Jan 2003
Wow, your mom very "in" woh. Know how to use FTP.
soonwai
post Feb 13 2012, 01:19 AM


********
All Stars
11,455 posts

Joined: Oct 2007
From: KL
QUOTE(weikee @ Feb 12 2012, 09:13 PM)
Wow, your mom very "in" woh. Know how to use FTP.
*
Not really lah. Now got plenty of easy to use dragndrop ftp clients. She just use it to copy over the TVB shows I download for her. Since I started mucking around with the QoS on the RB750GL, she's complaining it's slower than before. Anyway temporarily I've got her to sftp in to my server. That works OK since it's on port 22 and that's marked properly. Problem now is she can see all the folders on my HD. Have to go and chroot her login.

Added on February 13, 2012, 3:05 am
QUOTE(soonwai @ Feb 12 2012, 07:45 PM)
Will connection-type=ftp catch passive FTP ports?

Will try that later and see how it's go.
*
Just tried it and it seems to work. FTP data transfer are now going into correct queue. Relevent parts of /IP Firewall Mangle below.

CODE

chain=prerouting action=mark-connection new-connection-mark=q2 passthrough=yes protocol=tcp in-interface=unifi port="" connection-type=ftp

chain=postrouting action=mark-connection new-connection-mark=q2 passthrough=yes protocol=tcp out-interface=unifi port="" connection-type=ftp

chain=prerouting action=mark-packet new-packet-mark=QoS_2 passthrough=no protocol=tcp in-interface=unifi connection-mark=q2

chain=postrouting action=mark-packet new-packet-mark=QoS_2 passthrough=no protocol=tcp out-interface=unifi connection-mark=q2

NB: You don't have to mark-connection and mark-packet. I was just doing that so I can see the results in my Connections table.

This post has been edited by soonwai: Feb 13 2012, 03:12 AM
akmis
post Feb 13 2012, 05:44 PM

Getting Started
**
Junior Member
158 posts

Joined: Jan 2003
Any one has experience setting up mikrotik for unifi biz with 5 fixed ip? how can i use the 5 ip?

Currently our RB750GL can only see 1 ip.
MX510
post Feb 13 2012, 06:35 PM

Love Me Sin Hate Me Sinner
*******
Senior Member
4,038 posts

Joined: Aug 2005
From: Earth
This is the code for ddns update

CODE
# Written by Sam Norris, ChangeIP.com:global ddnsuser "username"
:global ddnspass "password"
:global ddnshost "saddizdd7.PORTRELAY.COM"
:global ddnsinterface "pppoe-out1"
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# END OF USER DEFINED CONFIGURATION
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

:global ddnssystem ("mt-" . [/system package get [/system package find name=system] version] )
:global ddnsip [ /ip address get [/ip address find interface=$ddnsinterface] address ]
:global ddnslastip

:if ([:len [/interface find name=$ddnsinterface]] = 0 ) do={ :log info "DDNS: No interface named $ddnsinterface, please check configuration." }

:if ([ :typeof $ddnslastip ] = "nothing" ) do={ :global ddnslastip 0.0.0.0/0 }

:if ([ :typeof $ddnsip ] = "nothing" ) do={

:log info ("DDNS: No ip address present on " . $ddnsinterface . ", please check.")

} else={

 :if ($ddnsip != $ddnslastip) do={

   :log info "DDNS: Sending UPDATE!"
   :log info [ :put [/tool dns-update name=$ddnshost address=[:pick $ddnsip 0 [:find $ddnsip "/"] ] key-name=$ddnsuser key=$ddnspass ] ]
   :global ddnslastip $ddnsip

 } else={

   :log info "DDNS: No changes necessary."

 }

}
soonwai
post Feb 14 2012, 01:08 AM


********
All Stars
11,455 posts

Joined: Oct 2007
From: KL
QUOTE(MX510 @ Feb 13 2012, 06:35 PM)
This is the code for ddns update
Thanks, I don't have have my own BIND server. I'm using dyn.com for my dyndns. Luckily there're plenty of examples on the wiki.

Added on February 14, 2012, 1:44 am
QUOTE(akmis @ Feb 13 2012, 05:44 PM)
Any one has experience setting up mikrotik for unifi biz with 5 fixed ip? how can i use the 5 ip?

Currently our RB750GL can only see 1 ip.
*
This is next on my todo list. I"m using BiZ20 with 2 fixed IPs. At the moment just using one of them. Hope we can share and learn.

Currently, how is your RB750GL set up to connect to UniFi? I'm using the usual PPPOE client to "dial" UniFi and letting it assign my fixed IP. I've always wondered if there's another way to do it.

This post has been edited by soonwai: Feb 14 2012, 01:44 AM
akmis
post Feb 14 2012, 06:33 AM

Getting Started
**
Junior Member
158 posts

Joined: Jan 2003
I initially thought of bridging the LAN interface with vlan 500 of WAN Gateway, but this cause the internet uplink to fail.
JinXXX
post Feb 14 2012, 11:05 AM

Look at all my stars!!
*******
Senior Member
2,516 posts

Joined: Feb 2007
From: Uarla Umpur
QUOTE(akmis @ Feb 13 2012, 05:44 PM)
Any one has experience setting up mikrotik for unifi biz with 5 fixed ip? how can i use the 5 ip?

Currently our RB750GL can only see 1 ip.
*
QUOTE(soonwai @ Feb 14 2012, 01:08 AM)
Thanks, I don't have have my own BIND server. I'm using dyn.com for my dyndns. Luckily there're plenty of examples on the wiki.

Added on February 14, 2012, 1:44 am
This is next on my todo list. I"m using BiZ20 with 2 fixed IPs. At the moment just using one of them. Hope we can share and learn.

Currently, how is your RB750GL set up to connect to UniFi? I'm using the usual PPPOE client to "dial" UniFi and letting it assign my fixed IP. I've always wondered if there's another way to do it.
*
QUOTE(akmis @ Feb 14 2012, 06:33 AM)
I initially thought of bridging the LAN interface with vlan 500 of WAN Gateway, but this cause the internet uplink to fail.
*
if not mistaken you need to create a new network and have a route to route it in

as the ip assigned to the router will be the gateway...

you need to create another network with the proper subnet of the public ip i think its /26
weikee
post Feb 14 2012, 11:37 AM

10k Club
********
All Stars
12,019 posts

Joined: Jan 2003
QUOTE(soonwai @ Feb 14 2012, 01:08 AM)
Thanks, I don't have have my own BIND server. I'm using dyn.com for my dyndns. Luckily there're plenty of examples on the wiki.

Added on February 14, 2012, 1:44 am
This is next on my todo list. I"m using BiZ20 with 2 fixed IPs. At the moment just using one of them. Hope we can share and learn.

Currently, how is your RB750GL set up to connect to UniFi? I'm using the usual PPPOE client to "dial" UniFi and letting it assign my fixed IP. I've always wondered if there's another way to do it.
*
When you got the IP after successful dial in PPPoE, what subnet did you get? 255.255.255.252? or 255.255.255.255 (/32 or /30) ?

This post has been edited by weikee: Feb 14 2012, 11:37 AM
« Next Oldest · Networks and Broadband · Next Newest »
 

175 Pages « < 6 7 8 9 10 > » Top
Add ReplyOptions
 

Change to:
| Lo-Fi Version
 0.0248sec    0.41    6 queries    GZIP Disabled
Time is now: 28th November 2025 - 02:29 PM
All Rights Reserved © 2002- 2025 Vijandren Ramadass (~unite against racism~)
Removal Request
Powered by Invision Power Board © 2025  IPS, Inc.