mikrotik hotspot with queue tree bw management

Hotspot Menggunakan Manajemen Bandwidth Queue Tree

Simple vs Tree

Simple

● Aturan uruta sangat ketat. diproses dari teratas sampai terbawah.

● Mengatur aliran paket secara bidirectional (dua arah).

● Mampu membatasi trafik by IP.

● Satu antrian mampu membatasi trafik upld & dnld sekaligus

● Diproses lbh dulu jika ada simpl dan tree.

● Mendukung penggunaan PCQ ( bagi bw scr merata).

● Bisa menerapkan antrian yang by mangle.

● Mampu membagi bandwidth secara fixed.

● pengaturannya sangat sederhana dan cenderung statis,

● sangat cocok untuk admin yang tidak mau ribet dengan traffic control di /firewall mangle.

Tree

● Tidak memiliki urutan, setiap antrian diproses bersama-sama.

● Mengatur aliran paket secara directional (satu arah)

● Membutuhkan mangle untuk membatasi trafik per IP, dan membedakan trafik download upload.

● Dinomorduakan setelah Queue Simple.

● Mendukung penggunaan PCQ sehingga mampu membagi bandwidth secara adil dan merata.

● Pengaturan antrian murni melalui paket yang ditandai di /firewall mangle.

● Mampu membagi bandwidth secara fixed.

● Lebih fleksibel dan butuh pemahaman yang baik di /firewall mangle khususnya tentang traffic control.

Hotspot QOS

● Built-in limiter – menggunakan parameer rate-limit di server-profile

– otomatis dan mudah tetapi tidak memungkinkan implementasi HTB.

● Custom limitation – Memanfaatkan parameter Incoming-packet-mark

dan outgoing-packet-mark pada user-profile.

– bisa implementasi HTB dan melakukan limitasi berdasarkan kriteria koneksi yang lebih beragam

Jaringan Hotspot

● Asumsi– Ether1 / Wan = 192.168.88.5

– Ether2 / Lan = 192.168.90.9/29

– Jaringan lan 192.168.90.8/29 (6 host: 1 ap 5 client)

– Bandwidth = 512kbps

SETTING INTERFACE

● /interface ethernet● set 0 name=wan● set 1 name=lan

SETTING IP ADDRESS

● /ip address● add address=192.168.88.5/24 interface=wan● add address=192.168.90.9/29 interface=lan

SETTING GATEWAY

● /ip route● add distance=1 gateway=192.168.88.1

MASQUERADING

● /ip firewall nat● add action=masquerade chain=srcnat in-

interface=lan

SETUP DNS

● /ip dns● set allow-remote-requests=yes

servers=8.8.8.8,8.8.4.4

IIX Addresses

● /system script● add name=nice-import

policy=read,write,test,sniff source="/tool fetch address=ixp.mikrotik.co.id src-path=/download/nice.rsc mode=http"

● import nice.rsc

SETUP HOTSPOT

● ip hotspot setup

● hotspot interface: ether2

● local address of network: 192.168.90.9

● masquerade network: yes

● address pool of network: 192.168.90.10 – 192.168.10.14

● select certificate: none

● ip address of smtp server: 0.0.0.0

● dns servers: 8.8.8.8,8.8.4.4

● dns name:hotline

● Username: admin

● Password: admin

Hotspot User Profile

● /ip hotspot user profile● add address-pool=hs-pool-2 idle-timeout=none

incoming-packet-mark=group1-in keepalive-timeout=2m name=photline outgoing-packet-mark=group1-out

HOTSPOT USER

● /ip hotspot user● add name=amad password=amad

profile=photline● add name=eri password=eri profile=photline● add name=yasin password=yasin

profile=photline● add name=nugi password=nugraha

profile=photline

SETTING MANGLE

HOTSPOT JUMP

● /ip firewall mangle● add action=jump chain=prerouting

comment=jumping jump-target=hotspot● add action=jump chain=postrouting jump-

target=hotspot

HOTSPOT MARKING

● /ip firewal mangle

● add action=mark-connection chain=prerouting new-connection-mark=conn-group1 packet-mark=group1-in

● add action=mark-connection chain=postrouting new-connection-mark=conn-group1 packet-mark=group1-out

● add action=mark-packet chain=prerouting connection-mark=conn-group1 new-packet-mark=packet-group1 passthrough=no

● add action=mark-packet chain=postrouting connection-mark=conn-group1 new-packet-mark=packet-group1 passthrough=no

IIX & INT Marking

● /ip firewall mangle

● add action=mark-connection chain=prerouting comment="iix ix differ" dst-address-list=nice new-connection-mark=conn-group1-iix packet-mark=group1-in

● add action=mark-packet chain=prerouting connection-mark=conn-group1-iix new-packet-mark=packet-group1-in passthrough=no

● add action=mark-connection chain=prerouting dst-address-list=!nice new-connection-mark=conn-group1-int packet-mark=group1-in

● add action=mark-packet chain=prerouting connection-mark=conn-group1-int new-packet-mark=packet-group1-int passthrough=no

● add action=mark-packet chain=postrouting connection-mark=conn-group1-iix new-packet-mark=packet-group1-iix passthrough=no

● add action=mark-packet chain=postrouting connection-mark=conn-group1-int new-packet-mark=packet-group1-int passthrough=no

HOTSPOT UNAUTH MARKING

Unauth = have bypass access

● /ip firewall mangle

● add action=mark-connection chain=prerouting comment=hotspot-unauth hotspot=!auth in-interface=lan new-connection-mark=conn-unauth

● add action=mark-packet chain=prerouting connection-mark=conn-unauth new-packet-mark=packet-unauth passthrough=no

● add action=mark-packet chain=postrouting connection-mark=conn-unauth new-packet-mark=packet-unauth passthrough=no

Limitation Queue

Parent & Hotspot Group

● /queue tree

● add max-limit=512k name=0-Hotspot1-Total-Upload parent=wan

● add max-limit=512k name=0-Hotspot1-Total-Download parent=lan

● add limit-at=128k max-limit=256k name=Group1-Total-Upload packet-mark=packet-group1 parent=0-Hotspot1-Total-Upload

● add limit-at=128k max-limit=256k name=Group1-Total-download packet-mark=packet-group1 parent=0-Hotspot1-Total-Download

IIX & INT; Up & Down

● /queue tree

● add limit-at=64k max-limit=256k name=Group1-Total-IIX-Download packet-mark=packet-group1-iix parent=Group1-Total-download priority=4

● add limit-at=64k max-limit=256k name=Group1-Total-INT-Download packet-mark=packet-group1-int parent=Group1-Total-download priority=3

● add limit-at=64k max-limit=256k name=Group1-Total-IIX-Upload packet-mark=packet-group1-iix parent=Group1-Total-Upload priority=4

● add limit-at=64k max-limit=256k name=Group1-Total-INT-Upload packet-mark=packet-group1-int parent=Group1-Total-Upload priority=4

Hotspot unauth

● /queue tree● add limit-at=16k max-limit=64k

name=Hotspot1-Unauth-Download packet-mark=packet-unauth parent=0-Hotspot1-Total-Download

● add limit-at=8k max-limit=64k name=Hotspot1-Unauth-Upload packet-mark=packet-unauth parent=0-Hotspot1-Total-Upload

SCREEN SHOTS!

HOTSPOT USER PROFILE

MANGLE

QUEUE TREE

kAMSIa

Limitation Queue

● /queue tree

● add name="Hotspot-total-Up" parent=Wan packet-mark="" max-limit=512k

● add name="Hotspot-total-Down" parent=Lan packet-mark="" max-limit=512k

● add name=”Group-total-Download" parent=Hotspot-total-Down packet-mark=packet-down limit-at=256k max-limit512

● add name="Group-total-Upload" parent=Hotspot-total-Up packet-mark=packet-up limit-at=256k max-limit=512k

Gambar pendukung