This example shows how to equally share 10Mibps download and 2Mibps upload among active users in the network 192.168.0.0/24. If Host A is downloading 2 Mibps, Host B gets 8 Mibps and vice versa. There might be situations when both hosts want to use maximum bandwidth (10 Mibps), then they will receive 5 Mibps each, the same goes for upload. This setup is also valid for more than 2 users.
Interface public = 10.10.58.1
Interface local = 192.168.1.1/24
1. create ip NAT
| ip firewall nat add chain=srcnat src-address=192.168.0.0/24 to-addresses=10.10.58.1 to-ports=0-65535 |
2. mark all traffic, coming from local network 192.168.0.0/24 with a mark users:
| ip firewall nat add chain=srcnat src-address=192.168.0.0/24 to-addresses=10.10.58.1 to-ports=0-65535 /ip firewall mangle add chain=forward src-address=192.168.0.0/24 \ action=mark-connection new-connection-mark=users-con /ip firewall mangle add connection-mark=users-con action=mark-packet \ new-packet-mark=users chain=forward |
3.Now we will add 2 new PCQ types. The first, called pcq-download will group all traffic by destination address. As we will attach this queue type to the Local interface, it will create a dynamic queue for each destination address (user) which is downloading to the network 192.168.0.0/24. The second type, called pcq-upload will group the traffic by source address. We will attach this queue to the Public interface so it will make one dynamic queue for each user who is uploading to Internet from the local network 192.168.0.0/24.
| /queue type add name=pcq-download kind=pcq pcq-classifier=dst-address /queue type add name=pcq-upload kind=pcq pcq-classifier=src-address |
4. make a queue tree for download&upload traffic:
| /queue tree add name=Upload parent=Public max-limit=2048000 /queue tree add parent=Upload queue=pcq-upload packet-mark=users /queue tree add parent=Local queue=pcq-download packet-mark=users /queue tree add parent=Public queue=pcq-upload packet-mark=users |
