ฝัง
- เผยแพร่เมื่อ 5 ส.ค. 2024
- Learn MikroTik RouterOs Tutorial Series (english)
In this tutorial, I will show you how to use Mangle rules to mark packets that are passing through the router. I will be marking browsing, P2P and other packets. These marking will be used to create a queue tree (QOS).
You will need any one of these Mikrotik routerboard router for this tutorial:
Mikrotik RouterBoard RB951Ui-2nD hAP
Mikrotik RB3011UIAS-RM
Mikrotik Routerboard RB2011UiAS-2HnD-IN
Mikrotik RB750Gr2
Mikrotik hEX RB750Gr3
MikroTik RB2011iLS-IN
MikroTik Cloud Router CRS109-8G-1S-2HnD-IN
hAP lite
hAP
hAP ac lite tower
hAP ac
mAP lite
mAP
wAP
RB951Ui-2HnD
RB951G-2HnD
RB2011UiAS-2HnD-IN
Mikrotik RB941-2nD-TC - วิทยาศาสตร์และเทคโนโลยี
Just a note for others:
If you have fasttrack enabled, (which is a default quickset), your mangle rules will be largely bypassed .. so if you are only seeing a few bytes or kilobytes when you should be seeing megs and gigs .. switch to Firewall Rules tab and change the "FastTrack" action on the forward chain to "accept"
Thanks, You can also disable fasttrack th-cam.com/video/UgPa4Q0ygUU/w-d-xo.html
hey your comment gave some idea but in the later version i see that there is no fasttrack rule but still the problem is there, that is the traffic is still limited to kbs
@@imaualsikh7019 Above was old version info. Now you have to go into IP -> Settings and disable fast track ... Then reboot.
@@DanielWardH please make some video tutorials to for making mangle and Queue tree..
Hi! Thanks for your videos, they've been very educational, Is there a particular reason to use forward over postrouting and prerouting?
dude thx, i enjoy all your tutorial videos
DUDE YOUR AWESOME, NICE TRAINING, HELP A LOT... GOD BLESS U
Thanks for your tutorials
Excellent work.
Hi TKSJa, can you explain more details when to used forward and prerouting rules. Thanks for your video its very helpful...
Can you explain why you use Forward for download and Prerouting for upload?
Hi friend .. Your videos are the best ... In this case for example if I have my balancer and I want to apply those rules as I would, I would have to create two? One for my WAN1 and the other for my WAN2 ...
hello sir and thanks for your time to make these videos. in the case that we have multiple wan we just copy the same mangle rules for each WAN?
Hi TKSJa, these tutorials are really helpful as I'm getting up to speed on Mikrotik routers after years of Cisco and Juniper. Now for the more important question - who is playing that awesome Hammond B3 in the background music? :)
Thanks so much 😘👍
Hello, how can I set a queue to limit each user separately. So for example if user one connects, the router will limit his download to 1Mbps and if user two will start to download at the same time. The router will limit his download speed independently. Thank you
Appreciate u so much
you are the best
whether this setting can be applied in hotspot network and lan different ethernet port and ip and subnet? Thank you very much
Hi sir you specifically said for "DHCP Clients" does this works on PPOE Clients?
sir can i ask how to see the p2p option when creating a mangle rule? i followed your tutorial but theres no p2p option below any port?
I have a question sir, why in upload the in interface being used is bridge 1? if my bridge1 is allocated for LAN and the I have bridge2 which is allocated for hotspot and bridge 3 is for PPPOE , still do i need to use bridge 1 as the Upload in interface? thank you.
Sir how to specify a range of IP Address to be covered by the mangle rule?
Sir i learned a lot from this series.Can you kindly explain the chains like prerouting, forward and passthrough.Thank you
Will upload soon
Thank you for the excellent tutorials! I have a question however... Why are your client-up-con and client-up-pk in the prerouting chain when everything else is in the forward chain?
Because upload --> prerouting chain & download -->forward chain
nice video
Hi, your tutorial is amazing of all. i started to download all your video. And i searching all your video but i never found how to boost online game. Maybe can make video for it. like how to boost dota 2 connection. Thank you so much for all the video you upload. :)
Just upload this th-cam.com/video/yhFc4zBn8GA/w-d-xo.html
Hey I'm really enjoying the series!
One question on this one: why do we first mark the connections, and then mark the packets instead of just marking all the packets on the interfaces?
Thanks again! keep it up!
Everytime that you connect to different website a new connection (port) is opened on the client device. By marking that connection the packet marking will mark every packet that flows through that connection. Example: Pipe (connection) + water (packets) + meter (marking) = bill (measurement)
Ok thanks! So you can't mark packets if the connection isn't marked first.
+max97527 Yes you can, it depends on the situation.
Hi, I'm enjoying this series but realized while working that version 6.40 router OS does not have P2P shaping rules. Please how can we shape p2p traffic.
Its long time ago but MikroTik removed P2P matcher from mangle rule, so now you have to use L7 analyze to mangle this traffic.
Hi, very nice videos
Can you explain why you unselect passthrough in the last 2 rules for http traffic, while the others are have this option checked ?
The answer is in timestamp 4:50
Plz add the video tutorial about Data quota limit for month
Sir how to configure Separate gaming & browsing hap mini
Hi how about using dual wan configuration in mangle? do you have it? thanks
Hi sir, can you make a tutorial on how to prioritize online games. specially dota 2. thanks you.
Just a note here. Isn't the `other-dw-pk` and the `other-up-pk` actually useless because these are packets belonging in the exactly same stream of packets as the `client-dw-pk` and the `client-up-pk` correspondingly ? It seems as if we are marking those packets firstly with the `client-....` mark and then with the `other-....` mark. Even though I might agree that it helps with clarify, isn't this using `other-` a bit redundant from a practical point of view ? Many thanks
p2p is in the mangle rules of the new version from winbox and RouterOS v6.46.2 not more available can you make a update to there
Ty bro!
You are welcome
Sir, the other traffic counts also for gaming? is it okay to put in packet mark = nomark? this is new to me.. since other tutorial used prerouting.
Hi, not sure if you will get this or not but could you maybe do an update on this as the p2p option is no longer available in the mangle rules? I am very new to all of this and your videos is my only saving grace at the moment. Regards
Try this MikroTik Tutorial 34 - How to Identify Users Running BitTorrent (Layer 7) th-cam.com/video/RUGzdxBSmTU/w-d-xo.html
HELLO TKsJa, what version is this? on prerouting, on "in interface", theres no "bridge" to select. i am stuck i guess!! am on latest v6.48.3 hex RB750br3. ideas??? pratically stopped right here. cant follow without it fixed. anybody? TKs?
or considering this was way back 2017, maybe you can update this video to reflect the current OS and what shd be the proper way.
and are all mark packets and conn mark use both passthrough=yes?
this mangle rule for hostpot server?
There is no P2P box below the Any. Port box on my settings
It doesnt work for multiple dhcp servers. I want full bandwidth management on each dhcp's. I already have mangle rules that has address list to capture each ip (ie.192.168.xx.xx) so i can control bandwidth for each. Now i want to create http queue in Queue tree for each. Im really confused right now. Cant explain properly.
When I enable these mangle rules, my internet goes down completely :-0
Hi, I noticed something weird when you mark the packets with "client-up-pk" in the prerouting chain, does it make sense that in the Bytes field it outputs more than it does in the "client-up-conn" marking rule?
Check the rules above this rule if passthrough is ticked and untick them except the mark connection rules.
hard work thanks :)
+Abo Odai Thank you
plz make video explain the chain (input-output-forward..etc ) with examples and thank u :)
Noted
thanks :)
Could you put down in your list for future topics the action "jump" and it's use? Thanks
Noted.
hi bro, thx for yr videos......i would like to know if i can apply these rules to vlans???? each vlan with connection mark and market packet rules for up and down.....
You should be able to, give a try.
Hello, at 2:30 in the video. The In.Interface : bridge 1 is from what port? Is the Modem cable to port1 or Lan cable from switch to port2 on the Mikrotik?
Thanks!
The bridge that has all the ethernet ports in it. If you go to ---> Bridge -->ports and you will see the ports that are in the bridge.
i have the same question. it means this bridge is going to the clients side?
eu nao consegui fazer o UP ... | dont know to do the UPStream? How Can I do this?
hallo I don't have the p2p option on the general tab
how can i had users to my Mikrotik router and allocate bandwidth?
Hi, great videos. I have a question. Would it be more efficient to do this:
1. Mark Connection: other-dw-con (with passthrough enabled)
2. Mark Packet: other-dw-pk (with passthrough enabled)
3. Mark Packet: http-dw-pk (with no passthrough)
4. Mark Packet: p2p-dw-pk (with no passthrough)
I am trying to understand Queues. Wouldn't this effectively mark anything as "other" first then if it matched one of the other rules, remark the packet and stop going through the rules because of the no passthrough?
Let me know your thoughts. Thanks for the great videos!!!!
No, it would not be more efficient because majority of traffic that passes through the router is http/s traffic and what you are doing is to mark every packet as other, then mark http after. This would use a lot more resource to process. What I always do is to mark known majority traffic first then everything else after. The first mangle must always be true most of the time in order to prevent the router from processing the same traffic twice. I hope this helps.
hey there, p2p option not available in v6.48, any new methods to block p2p traffic?
at 3:60 you marked P2P but that is appears to no longer be a option. I do not have P2P under Any Ports on version 6.45.7
Sir can you explain the different types of chain like forward prerouting etc.
Will do in an upcoming video
Hi, i would like to ask you why are you marking the connection? You can mark the packets without marking the connection! I have tried it and it works. I am looking forward for your answer.
It's is more efficient and uses less cpu resources
Thanks a lot TKJa, But can you add tutorials for Online-game priority?
Queue game is the most requested and it is the most difficult to do, because game don't normally use standard ports. I will see what I can do.
How to mark https traffic? like facebook and youtube?
Hello do may I ask a copy of your config script?thanks in advance
Why the upload packet marks are using forward instead of prerouting? Nice videos by the way. Keep up the good work!
It is actually prerouting --> uploads & forward --> downloads. Look back at the video again, you may have missed that part.
Hi, I'm refering to ex. http upload at 5:05 which is forward but using the packet mark created from prerouting. Can you please clarify why? Sorry I'm a newbie in this.
I will be doing a video to explain chains (input, preroute, forward etc) soon.
TKSJa thats good news. keep up the good work!
I was wondering the same thing but after analyzing it seems like the "http-up-pk" rule 'forwards' to the parent rule "client-up-pk" and the "client-up-pk" is under prerouting and handles it.
Sir can you explain when to use forward or prerouting. Thank you
Sure I will in upcoming videos
what version are you using for packages and routerboard? I don't have that P2P option on my mikrotik. using stable version 6.48.8
Mikrotik removed it
just wondering where is the part 2 of this tutorial and part1 of Mikrotik Tutorial 14?
Tutorial 13 is part 1 and 14 is part 2
Hello I wont to know all bandwidth in queue is speed upload +download or speed download only, and i wont to know how to queue from group ip from my bridge my bridge is set ether 2 and 3
Try using simple queue. th-cam.com/video/xO1WHU3DuDw/w-d-xo.html
TKSJa thanks.
In my router I don't see P2P option, it's model is RB951G-2HnD. How can I create rules for P2P traffic?
The feature was remover from routeros since version 6.39. Watch th-cam.com/video/B_Jig1RNY40/w-d-xo.html and select the layer 7 option instead.
Same with my RB941. Have you found the fix for this issue?
i have a difference between client-dw-con and client-dw-pk why?
i mean in the bytes column
I don't have P2P on my new Mangle rule.Please help Am running on the current version 6.41.3
Check this th-cam.com/video/B_Jig1RNY40/w-d-xo.html
mine have no P2P option in the new mangle rule window.
th-cam.com/video/RUGzdxBSmTU/w-d-xo.html
Is this the solution to maintain a stable ping in my gaming lounge?
Nope
Hey man, am on mikrotik 7.1.1 and there is no p2p option at 5:50, what do i do?
Did u find the answer
Hello TKSJa,
I have followed all your steps, but my client-dw-con does not seem to be working. The only explanation would be the In. Interface, but I have changed that and nothing happens.
I have an antenna with built-in modem(connected to the mikrotik router on the ethernet 1 slot of the router), a mikrotik router (connected to a switch from the ethernet 2 slot); From the switch, I have AP's.
Make sure that the interface which is connected to the internet is added as the in-interface in the mangle rule for client-dw-con.
I have done it. It's the Ether 1, but nothing seems to happen. Could it be any filter rule blocking it?
Email screenshots of the rule to theknowledgesourceja@gmail.com
I've got the same issue. Although my client-dw-conn and client-dw-pk is showing traffic nothing is going through the http-dw-pk or other-dw-pk. I've got an ADSL router connected in Bridge mode to Ether 1 which has a pppoe interface making the dial up to the internet. Was wondering if this is maybe the cause of the issue?
hi, can i email the screenshot of
my mangle rule?
hello brother, help me i can't find p2p menu on mangle. thanks
That option has been removed, thy this:MikroTik Tutorial 34 - How to Identify Users Running BitTorrent (Layer 7) th-cam.com/video/RUGzdxBSmTU/w-d-xo.html
Hi. Just watching the whole series, but you've lost me here, as you didn't explain the goal of what you are doing here, and I have never come across Mangle in any other fw before.... Can you clarify please? (I'm worried that this needs to be understood in order to go further in the series)
Tutorials 48 - 55 should be enough for you to get an good understanding
I don't have the option for p2p how am i going to add that on my router RB941?
This video will show you how to fix it th-cam.com/video/B_Jig1RNY40/w-d-xo.html
Just watch the video thanks..
Hi. how can I block all p2p in the new version 6.42, thanks ..Hola. como puedo bloquear todo p2p en la nueva version 6.42, gracias
Will be doing a new version soon.
how can I mange bandwidth by quota like 5G Per user
You would have to configure a hotspot and set the limit on the user's account.
Why don't I have P2P option in New Mangle Rule -> General?
Mikrotik removed it, you have to use layer7 to identify bitTorrent traffic. Take a look at this: th-cam.com/video/RUGzdxBSmTU/w-d-xo.html
Thanks. Great series of videos btw, very useful.
what is Forward and prerouting ? may explain pls......#TKSja
how can i do packet for mail? just port 25,or?
Thanks
Make a copy of the http rules and change the port to 25.
forward for both, or forward for dw , prerouting for up?
Fuck yeah smoking a joint and doing my home networking, setting up some mango rules and shit
why my mikrotik is no p2p same in you
+anne salonga P2P feature was removed since 6.39, here is a fix th-cam.com/video/B_Jig1RNY40/w-d-xo.html
Hi, I need some help with my mikrotik configuration, can I ask you for an e-mail address?