MELIMIT DOWNLOAD PER IP CLIENT

Ekstensi file yang dilimit antara lain .exe, .iso, .flv, .mp3, .mp4, . zip, .rar, .avi. Untuk
limit download per IP client, ekstensi tersebut akan dibuat dua group saja yaitu penting dan
tidak penting. Yang tidak penting termasuk : .iso, .flv, .mp3, .mp4, .avi, .exe yang penting :
.zip & .rar selain itu dianggap browsing. Jadi nantinya per IP ada 3 queue. BW yang
disediakan 512k. Ada 4 IP client misalnya 192.168.200.101, 192.168.200.103,
192.168.200.105, 192.168. 10.0/24.
1. Buat di layer 7 nya dahulu
/ip firewall layer7-protocol
add name=pentingL7 regexp="\\.(zip|rar)"
add name=gapentingL7 regexp="\\.(iso|flv|mp3|mp4|avi|exe)"

2. Buat mangle untuk tiap IP client

/ip firewall mangle
add action=mark-connection chain=forward new-connection-mark=pc1_cm srcaddress=192.168.200.101
add action=mark-packet chain=forward connection-mark=pc1_cm layer7protocol=pentingL7 new-packet-mark=pc1_pentingL7_pm passthrough=no
add action=mark-packet chain=forward connection-mark=pc1_cm layer7protocol=gapentingL7 new-packet-mark=pc1_gapentingL7_pm passthrough=no
add action=mark-packet chain=forward connection-mark=pc1_cm new-packetmark=pc1_browsing_pm passthrough=no

add action=mark-connection chain=forward new-connection-mark=pc2_cm srcaddress=192.168.200.103

add action=mark-packet chain=forward connection-mark=pc2_cm layer7protocol=pentingL7 new-packet-mark=pc2_pentingL7_pm passthrough=no
add action=mark-packet chain=forward connection-mark=pc2_cm layer7protocol=gapentingL7 new-packet-mark=pc2_gapentingL7_pm passthrough=no
add action=mark-packet chain=forward connection-mark=pc2_cm new-packetmark=pc2_browsing_pm passthrough=no

add action=mark-connection chain=forward new-connection-mark=pc3_cm src-

address=192.168.200.105
add action=mark-packet chain=forward connection-mark=pc3_cm layer7protocol=pentingL7 new-packet-mark=pc3_pentingL7_pm passthrough=no
add action=mark-packet chain=forward connection-mark=pc3_cm layer7protocol=gapentingL7 new-packet-mark=pc3_gapentingL7_pm passthrough=no
add action=mark-packet chain=forward connection-mark=pc3_cm new-packetmark=pc3_browsing_pm passthrough=no

add action=mark-connection chain=forward new-connection-mark=pc4_cm srcaddress=192.168.10.0/24

add action=mark-packet chain=forward connection-mark=pc4_cm layer7protocol=pentingL7 new-packet-mark=pc4_pentingL7_pm passthrough=no
add action=mark-packet chain=forward connection-mark=pc4_cm layer7protocol=gapentingL7 new-packet-mark=pc4_gapentingL7_pm passthrough=no
add action=mark-packet chain=forward connection-mark=pc4_cm new-packetmark=pc4_browsing_pm passthrough=no

3. Buat Queue tree setiap IP client

/queue tree
add name=QueueUtama parent=global-out queue=default
add name=PC1 parent=QueueUtama queue=default
add name=1.1.queue-penting packet-mark=pc1_pentingL7_pm parent=PC1
queue=default
add name=1.2.queue-tidak-penting packet-mark=pc1_gapentingL7_pm parent=PC1
queue=default
add name=1.3.queue-browsing packet-mark=pc1_browsing_pm parent=PC1
queue=default
add name=PC2 parent=QueueUtama queue=default
add name=2.1.queue-penting packet-mark=pc2_pentingL7_pm parent=PC2
queue=default
add name=2.2.queue-tidak-penting packet-mark=pc2_gapentingL7_pm parent=PC2
queue=default
add name=2.3.queue-browsing packet-mark=pc2_browsing_pm parent=PC2
queue=default

add name=PC3 parent=QueueUtama queue=default

add name=3.1.queue-penting packet-mark=pc3_pentingL7_pm parent=PC3
queue=default
add name=3.2.queue-tidak-penting packet-mark=pc3_gapentingL7_pm parent=PC3
queue=default
add name=3.3.queue-browsing packet-mark=pc3_browsing_pm parent=PC3
queue=default
add name=PC4 parent=QueueUtama queue=default
add name=4.1.queue-penting packet-mark=pc4_pentingL7_pm parent=PC4
queue=default
add name=4.2.queue-tidak-penting packet-mark=pc4_gapentingL7_pm parent=PC4
queue=default
add name=4.3.queue-browsing packet-mark=pc4_browsing_pm parent=PC4
queue=default