Author |
Message |
|
|
Post subject: mikrotik mangle funguje no QT nie
Posted: 02.09.2008 - 23:41 #68092
|
|
Majster
Joined: Aug 31, 2005
Posts: 2295
Location: Hájske
|
|
nasatl mi na sieti nasledovny problem.
User c1 ma dva PC v mangle mu manglujem IP a oznackujem prevadzku v QT som mu pridelil ryclost doteraz to chodilo ako hodinky a aj chodi u ostatnych userkov v poriadku akurat u tohto jedneho to nejde jednoducho v mangle mu naskakuju data a aj pocet paketov no v QT sa nic nepohne takto obhcadza pravidlo na rychlost a vyhuluje 20hod denne linku. restart routeru a ani pravidiel nepomohol. pre nazornost vypis
Code: › 68 ;;; user1// Rabek Drahomir
chain=forward in-interface=ether1 src-address=192.168.5.18 p2p=!all-p2p connection-type=!ftp action=mark-packet
new-packet-mark=user1_up passthrough=no
69 chain=forward in-interface=ether1 src-address=192.168.5.18 action=mark-packet new-packet-mark=user1_up-p2p
passthrough=no
70 X chain=forward in-interface=wlan1 dst-address=192.168.5.18 p2p=!all-p2p dst-limit=0/5m,500,dst-address-and-port/1h
connection-type=!ftp action=mark-packet new-packet-mark=user1_down passthrough=no
71 chain=forward in-interface=wlan1 dst-address=192.168.5.18 action=mark-packet new-packet-mark=user1_down-p2p
passthrough=no
72 ;;; user1-1// Rabek Drahomir
chain=forward in-interface=ether1 src-address=192.168.5.19 p2p=!all-p2p connection-type=!ftp action=mark-packet
new-packet-mark=user1-1_up passthrough=no
73 chain=forward in-interface=ether1 src-address=192.168.5.19 action=mark-packet new-packet-mark=user1-1_up-p2p
passthrough=no
74 X chain=forward in-interface=wlan1 dst-address=192.168.5.19 p2p=!all-p2p dst-limit=0/5m,500,dst-address-and-port/1h
connection-type=!ftp action=mark-packet new-packet-mark=user1-1_down passthrough=no
75 chain=forward in-interface=wlan1 dst-address=192.168.5.19 action=mark-packet new-packet-mark=user1-1_down-p2p
passthrough=no
Code: ›
48 name="Dowland" parent=global-out packet-mark="" limit-at=3000000 queue=default priority=2 max-limit=5000000
burst-limit=0 burst-threshold=0 burst-time=0s
49 name="Dowland-HTTP-1:10" parent=Dowland packet-mark="" limit-at=2000000 queue=default priority=2 max-limit=3000000
burst-limit=0 burst-threshold=0 burst-time=0s
50 name="user1-Dowland-HTTP" parent=Dowland-HTTP-1:10 packet-mark=user1_down limit-at=50000 queue=default priority=8
max-limit=512000 burst-limit=0 burst-threshold=0 burst-time=0s
51 name="Download-P2P-1:10" parent=Dowland packet-mark="" limit-at=2000000 queue=default priority=2 max-limit=3000000
burst-limit=0 burst-threshold=0 burst-time=0s
52 name="User1-Dowland-P2P" parent=Download-P2P-1:10 packet-mark=user1_down-p2p limit-at=50000 queue=default priority=8
max-limit=500000 burst-limit=0 burst-threshold=0 burst-time=0s
53 name="Upload" parent=global-out packet-mark="" limit-at=900000 queue=default priority=2 max-limit=1024000
burst-limit=0 burst-threshold=0 burst-time=0s
54 name="Upload-HTTP-1:10" parent=Upload packet-mark="" limit-at=512000 queue=default priority=2 max-limit=768000
burst-limit=0 burst-threshold=0 burst-time=0s
55 name="User1-Upload-HTTP" parent=Upload-HTTP-1:10 packet-mark=user1_up limit-at=12000 queue=default priority=4
max-limit=96000 burst-limit=0 burst-threshold=0 burst-time=0s
56 name="Upload-P2P-1:10" parent=Upload packet-mark="" limit-at=386000 queue=default priority=5 max-limit=512000
burst-limit=0 burst-threshold=0 burst-time=0s
57 name="User1-Upload-P2P" parent=Upload-P2P-1:10 packet-mark=user1_up-p2p limit-at=12000 queue=default priority=8
max-limit=96000 burst-limit=0 burst-threshold=0 burst-time=0s
238 name="user1-1-Dowland-HTTP" parent=user1-Dowland-HTTP packet-mark=user1-1_down limit-at=0 queue=default priority=8
max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s
239 name="User1-1-Dowland-P2P" parent=User1-Dowland-P2P packet-mark=user1-1_down-p2p limit-at=0 queue=default priority=8
max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s
240 name="User1-1-Upload-HTTP" parent=User1-Upload-HTTP packet-mark=user1-1_up limit-at=0 queue=default priority=4
max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s
241 name="User1-1-Upload-P2P" parent=User1-Upload-P2P packet-mark=user1-1_up-p2p limit-at=0 queue=default priority=8
max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s
-- [Q quit|D dump|up]
skuste sa na to mrknut ale nemenil som v tom nic a islo to ok az tychto polednych 5 dni mim obchadza ten user QT pravidla pre pridelenie rychlosti a neviem ako to je mozne |
|
|
|
|
|
|
Post subject: RE: mikrotik mangle funguje no QT nie
Posted: 03.09.2008 - 07:32 #68095
|
|
Majster
Joined: Nov 10, 2005
Posts: 2014
|
|
ja som mal nieco podobne... vcera mi niekto hulil do internetu cez UDP 53 port (dns) s rychlostou 25-30mbit |
|
|
|
|
|
|
Post subject: RE: mikrotik mangle funguje no QT nie
Posted: 03.09.2008 - 22:19 #68108
|
|
Majster
Joined: Aug 31, 2005
Posts: 2295
Location: Hájske
|
|
Aman wrote: ›ja som mal nieco podobne... vcera mi niekto hulil do internetu cez UDP 53 port (dns) s rychlostou 25-30mbit
ja som hned zistil kto to je ale to sa da pri mojom pocte ludi a topologii siete lahko. nesledoval som cez co to islo ale nechapal som to lebo mangle omanglovalo ale QT uz nepracovalo vytiahol som kabel dnes som nebol vobec doma takze som nedoriesil nic ale idem mu napisat upomienku pre porusenie vseobecnych podmienok. a taktiez mu poslem k tomu hned aj nahradu skody trvalo to vo vecernych hodinach asi 5 dni. cez vikend mu pustim net a budem sediet nad routerom ze co ma. predpokladam ze to bude nejaky posrany torent alebo nejaka takato haved. |
|
|
|
|
|
|
Post subject: RE: mikrotik mangle funguje no QT nie
Posted: 04.09.2008 - 04:31 #68112
|
|
Ucen
Joined: Okt 21, 2004
Posts: 792
|
|
cobain wrote: ›
ja som hned zistil kto to je ale to sa da pri mojom pocte ludi a topologii siete lahko. nesledoval som cez co to islo ale nechapal som to lebo mangle omanglovalo ale QT uz nepracovalo vytiahol som kabel dnes som nebol vobec doma takze som nedoriesil nic ale idem mu napisat upomienku pre porusenie vseobecnych podmienok. a taktiez mu poslem k tomu hned aj nahradu skody trvalo to vo vecernych hodinach asi 5 dni. cez vikend mu pustim net a budem sediet nad routerom ze co ma. predpokladam ze to bude nejaky posrany torent alebo nejaka takato haved.
No na tvojom mieste by som sa ukludnil a nehadzal chybu mikrotiku na plecia klienta. Tiez som sa cudoval ked sa to objavilo a sposoboval to asi nejaky download manager lebo naozaj to co islo ku klientovy bol len trafic na 80 porte. Uz teraz ti viem povedat ze jedine risenie je namiesto QT pouzit SQ.
Okrem toho to manglovanie (ja sa Vam niekedy cudujem,neviem kde ste to vsetci obkukali) je povedal by som zle, nehovorim ze nefunguje ale po spravnosti sa ma najskor markovat konnektion a potom na zaklade toho markovat packet. Dovodom preco to tak je je preto ze packet pre toho isteho klienta moze mat na vstupe a vystupe z routra inu IP adresu, napr. na jednej je to verejna a na druhej lokalna IP
/ip firewall mangle add chain=forward src-address=192.168.0.10 action=mark-connection new-connection-mark=users-con
/ip firewall mangle add connection-mark=users-con action=mark-packet new-packet-mark=users chain=forward
V kazdom druhom pravidle mas p2p a !p2p kua nehovorim ked tam je par ludi tak sa to da ale ked tam budes mat zopar 100 alebo dokonca 1000 tak sa ti ten router z toho poserie a vsetci budeme kupovat core4. |
|
|
|
|
|
|
Post subject: RE: mikrotik mangle funguje no QT nie
Posted: 04.09.2008 - 08:10 #68117
|
|
Ucen
Joined: Júl 24, 2007
Posts: 715
|
|
Mam jednu otazocku, a to takuto (QT som este nerobil takze to tak berte):
v SQ nastavit pre kazdeho klienta rychlost a v QT urobit QoS ktore by bolo platne pre vsetkych, teda si to predstavujem tak ze trebars web stranky budu mat vyssiu prioritu ako rapid ....... ,
Je to mozne takto urobit, ci musim urobit pre kazdeho klienta pravidla v QT a mangle? |
|
|
|
|
|
|
Post subject: RE: mikrotik mangle funguje no QT nie
Posted: 09.09.2008 - 16:15 #68195
|
|
Majster
Joined: Okt 31, 2006
Posts: 2062
Location: TT
|
|
euro , da sa to aj takto , navod máš na webe mikrotiku |
|
|
|
|
|
|
Post subject: RE: mikrotik mangle funguje no QT nie
Posted: 10.09.2008 - 07:54 #68199
|
|
Ucen
Joined: Júl 24, 2007
Posts: 715
|
|
Thomas wrote: ›euro , da sa to aj takto , navod máš na webe mikrotiku
dakujem |
|
|
|
|
|
|
Post subject: RE: mikrotik mangle funguje no QT nie
Posted: 14.09.2008 - 11:17 #68225
|
|
Ucen
Joined: Okt 21, 2004
Posts: 792
|
|
|
|
|
|
Powered by PNphpBB2 © 2003-2005 The PNphpBB Group Credits |