I think all you're after is just adding firewall mangle rules to mark your 4500/udp traffic and then add another child in the queue tree using that mark and priority 1.
Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Tue, Jan 14, 2014 at 1:20 PM, Jerry Roy <j...@ipass.com> wrote: > Hi All, > > I need some help here. I am using the example below from the wiki on > queuing but I want to give preference to certain ports and protocols. How > would I modify the following to do what I require? I see no way of > specifying udp 4500 which is an aruba doing ssl (which all voip phones are > connected to) that is hanging off our 750's. Am I barking up the wrong > tree? What would you recommend? > > /queue tree > add name="IN" parent=global-in priority=1 > add name="OUT" parent=global-out priority=1 > add name="SIP_IN" packet-mark=SIP_IN parent=IN priority=2 > add name="SIP_OUT" packet-mark=SIP_OUT parent=OUT priority=2 > add name="NAT-T_IN" packet-mark=NAT-T_IN parent=IN priority=3 > add name="NAT-T_OUT" packet-mark=NAT-T_OUT parent=OUT priority=3 > add name="ALL_ELSE_IN" packet-mark=ELSE_IN parent=IN priority=8 > add name="ALL_ELSE_OUT" packet-mark=ELSE_OUT parent=OUT priority=8 > > /ip firewall mangle > add action=mark-packet chain=prerouting comment="SIP Only" disabled=yes > in-interface=ether2-master-local\ > new-packet-mark=SIP_IN passthrough=no src-address=192.168.98.0/24 > add action=mark-packet chain=postrouting disabled=yes dst-address= > 192.168.98.0/24\ > new-packet-mark=SIP_OUT out-interface=ether2-master-local > passthrough=no > add action=mark-packet chain=prerouting comment="NAT-T" disabled=yes > in-interface=ether2-master-local\ > new-packet-mark=NAT-T_IN passthrough=no src-address=192.168.98.0/24 > add action=mark-packet chain=postrouting disabled=yes dst-address= > 192.168.98.0/24\ > new-packet-mark=NAT-T_OUT out-interface=ether2-master-local > passthrough=no > add action=mark-packet chain=prerouting comment="All Else" disabled=yes > in-interface=ether2-master-local\ > new-packet-mark=ELSE_IN passthrough=no src-address=!192.168.98.0/24 > add action=mark-packet chain=postrouting disabled=yes dst-address=! > 192.168.98.0/24\ > new-packet-mark=ELSE_OUT out-interface=ether2-master-local > passthrough=no > > > *Thanks,* > > *Jerry Roy* > -------------- next part -------------- > An HTML attachment was scrubbed... > URL: < > http://mail.butchevans.com/pipermail/mikrotik/attachments/20140114/ca65d4e6/attachment.html > > > _______________________________________________ > Mikrotik mailing list > Mikrotik@mail.butchevans.com > http://mail.butchevans.com/mailman/listinfo/mikrotik > > Visit http://blog.butchevans.com/ for tutorials related to Mikrotik > RouterOS > -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://mail.butchevans.com/pipermail/mikrotik/attachments/20140114/ece7de79/attachment.html> _______________________________________________ Mikrotik mailing list Mikrotik@mail.butchevans.com http://mail.butchevans.com/mailman/listinfo/mikrotik Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS
