{"id":3700,"date":"2012-04-14T23:27:53","date_gmt":"2012-04-15T05:27:53","guid":{"rendered":"http:\/\/gregsowell.com\/?p=3700"},"modified":"2012-04-14T23:37:29","modified_gmt":"2012-04-15T05:37:29","slug":"using-pcq-with-pppoe-mikrotik","status":"publish","type":"post","link":"https:\/\/gregsowell.com\/?p=3700","title":{"rendered":"Using PCQ With PPPoE – Mikrotik"},"content":{"rendered":"

I came up with a method about 2 years ago to use PCQs<\/a> with PPPoE instead of the traditional simple queue(SQ) method. As you guys know SQs are more resource intensive and as they grow they can delay packet delivery. Using PCQs can help the resources on heavily utilized routers.<\/p>\n

Quick video of configuring everything:<\/strong><\/p>\n

\n <\/embed><\/object>\n <\/div>\n

Diagram used in this example<\/strong>
\n\"\"<\/a><\/p>\n

Usermanager<\/h2>\n

One of the options in usermanager is address-list. If you add something to the address-list entry it will cause a user’s IP address to be added to said list on the PPPoE server when they authenticate.<\/p>\n

Usermanager router<\/strong>
\nFirst things first, we add the PPPoE server to the router list in user manager.<\/p>\n

\/tool user-manager router\r\nadd coa-port=1700 customer=admin disabled=no ip-address=192.168.0.1 log=\\\r\n    auth-fail name=test-pppoe shared-secret=test<\/code><\/pre>\n
Usermanager profile limit<\/strong>
\nThe limit allows you to specify different additional options.  We are adding a limit that dynamically adds a user’s IP address to an address-list upon authentication.  In the below example the limit is named 1 and the address-list is named 1.<\/p>\n
\/tool user-manager profile limitation\r\nadd address-list=1 download-limit=0B group-name="" ip-pool="" name=1 \\\r\n    transfer-limit=0B upload-limit=0B uptime-limit=0s<\/code><\/pre>\n
Usermanager profile<\/strong>
\nWe now create a profile for customers to use.  We then associate the above limit with this profile.<\/p>\n
\/tool user-manager profile\r\nadd name=1 name-for-users="" override-shared-users=off price=0 starts-at=\\\r\n    logon validity=0s\r\n\/tool user-manager profile profile-limitation\r\nadd from-time=0s limitation=1 profile=1 till-time=23h59m59s weekdays=\\\r\n    sunday,monday,tuesday,friday,saturday<\/code><\/pre>\n
Usermanager user<\/strong>
\nNow create a user that will reference the created profile.<\/p>\n
\/tool user-manager user\r\nadd customer=admin disabled=no name=1 password=test shared-users=1 \\\r\n    wireless-enc-algo=none wireless-enc-key="" wireless-psk=""<\/code><\/pre>\n
Router config<\/h2>\n
IP address<\/strong><\/p>\n
\/ip address\r\nadd address=192.168.0.1\/24 interface=ether5<\/code><\/pre>\n
IP pool for pppoe server<\/strong><\/p>\n
\/ip pool\r\nadd name=pool1 ranges=192.168.0.10-192.168.0.200<\/code><\/pre>\n
Setup ppp profile<\/strong><\/p>\n
\/ppp profile\r\nset 1 dns-server=8.8.8.8 local-address=192.168.0.1 remote-address=pool1<\/code><\/pre>\n
Configure pppoe server<\/strong><\/p>\n
\/interface pppoe-server server\r\nadd authentication=pap,chap default-profile=default-encryption disabled=no \\\r\n    interface=ether5 service-name=service1<\/code><\/pre>\n
Set pppoe to use radius<\/strong><\/p>\n
\/ppp aaa\r\nset use-radius=yes<\/code><\/pre>\n
Setup radius profile and enable incoming radius.<\/strong><\/p>\n
\/radius\r\nadd address=192.168.0.1 secret=test service=ppp\r\n\/radius incoming\r\nset accept=yes<\/code><\/pre>\n
Setup mangle rules to mark connections based on address-lists from usermanager.  Then packet mark based on connection marks.<\/strong><\/p>\n
\/ip firewall mangle\r\nadd action=mark-connection chain=prerouting new-connection-mark=1 \\\r\n    src-address-list=1\r\nadd action=mark-packet chain=prerouting connection-mark=1 in-interface=ether5 \\\r\n    new-packet-mark=1-download passthrough=no\r\nadd action=mark-packet chain=prerouting connection-mark=1 new-packet-mark=\\\r\n    1-upload passthrough=no<\/code><\/pre>\n
Create in and out PCQs<\/strong><\/p>\n
\/queue type\r\nadd kind=pcq name=1-down-pcq pcq-classifier=dst-address \\\r\n    pcq-dst-address6-mask=64 pcq-src-address6-mask=64\r\nadd kind=pcq name=1-up-pcq pcq-classifier=src-address pcq-dst-address6-mask=\\\r\n    64 pcq-src-address6-mask=64<\/code><\/pre>\n
Add the queues to the queue-tree structure<\/strong><\/p>\n
\/queue tree\r\nadd name=1-download packet-mark=1-download parent=global-in\r\nadd name=1-upload packet-mark=1-upload parent=global-in<\/code><\/pre>\n
As you can see, this isn’t a 100% complete config, but it does give you a good starting place.  I just can’t seem to come up with enough time to do anything these days \ud83d\ude41<\/p>\n","protected":false},"excerpt":{"rendered":"
I came up with a method about 2 years ago to use PCQs with PPPoE instead of the traditional simple queue(SQ) method. As you\u2026<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6,8],"tags":[],"class_list":["post-3700","post","type-post","status-publish","format-standard","hentry","category-mikrotik","category-networking"],"_links":{"self":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts\/3700","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3700"}],"version-history":[{"count":19,"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts\/3700\/revisions"}],"predecessor-version":[{"id":3721,"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts\/3700\/revisions\/3721"}],"wp:attachment":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3700"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3700"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3700"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}