Beginner Basics • Mangle for QoS, CAKE

# 2024-03-18 10:44:41 by RouterOS 7.14.1# model = C53UiG+5HPaxD2HPaxD/interface bridgeadd name=bridge1 vlan-filtering=yes/interface vlanadd interface=bridge1 name=vlan10 vlan-id=10add interface=bridge1 name=vlan20 vlan-id=20add interface=bridge1 name=vlan30 vlan-id=30add interface=bridge1 name=vlan40 vlan-id=40add interface=bridge1 name=vlan50 vlan-id=50/interface pppoe-clientadd add-default-route=yes default-route-distance=10 disabled=no interface=\    ether2 name=pppoe-out1/interface listadd comment="Internet connections" name=WANadd comment="Local wireless network" name=WLANadd comment="Local network" include=WLAN name=LAN/interface lte apnset [ find default=yes ] default-route-distance=20 ip-type=ipv4 \    use-network-apn=no use-peer-dns=no/ip pooladd name=pool10 ranges=10.10.0.100-10.10.0.200add name=pool20 ranges=10.20.0.100-10.20.0.200add name=pool30 ranges=10.30.0.100-10.30.0.200add name=pool40 ranges=10.40.0.100-10.40.0.200add name=pool50 ranges=10.50.0.100-10.50.0.200/ip dhcp-serveradd address-pool=pool10 interface=vlan10 name=server10add address-pool=pool20 interface=vlan20 name=server20add address-pool=pool30 interface=vlan30 name=server30add address-pool=pool40 interface=vlan40 name=server40add address-pool=pool50 interface=vlan50 name=server50/queue typeadd cake-diffserv=diffserv4 cake-flowmode=dual-dsthost cake-nat=yes \    cake-rtt-scheme=internet kind=cake name=cake-downloadadd cake-diffserv=diffserv4 cake-flowmode=dual-srchost cake-nat=yes \    cake-rtt-scheme=internet kind=cake name=cake-upload/queue treeadd max-limit=5M name=queue1 packet-mark=upload parent=global queue=\    cake-uploadadd max-limit=24M name=queue2 packet-mark=download parent=global queue=\    cake-download/interface bridge portadd bridge=bridge1 frame-types=admit-only-vlan-tagged interface=ether1add bridge=bridge1 frame-types=admit-only-untagged-and-priority-tagged \    interface=ether3 pvid=20add bridge=bridge1 frame-types=admit-only-untagged-and-priority-tagged \    interface=ether4 pvid=10add bridge=bridge1 frame-types=admit-only-untagged-and-priority-tagged \    interface=wifi1 pvid=30add bridge=bridge1 frame-types=admit-only-untagged-and-priority-tagged \    interface=wifi2 pvid=30add bridge=bridge1 frame-types=admit-only-untagged-and-priority-tagged \    interface=wifi3 pvid=40add bridge=bridge1 frame-types=admit-only-untagged-and-priority-tagged \    interface=wifi4 pvid=50/ipv6 settingsset disable-ipv6=yes/interface bridge vlanadd bridge=bridge1 tagged=bridge1,ether1 untagged=ether4 vlan-ids=10add bridge=bridge1 tagged=bridge1,ether1 untagged=ether3 vlan-ids=20add bridge=bridge1 tagged=bridge1,ether1 untagged=wifi1,wifi2 vlan-ids=30add bridge=bridge1 tagged=bridge1,ether1 untagged=wifi3 vlan-ids=40add bridge=bridge1 tagged=bridge1,ether1 untagged=wifi4 vlan-ids=50/interface list memberadd interface=vlan10 list=LANadd interface=vlan20 list=LANadd interface=vlan30 list=LANadd interface=vlan40 list=LANadd interface=vlan50 list=LANadd interface=pppoe-out1 list=WANadd interface=lte1 list=WANadd interface=ether2 list=WANadd interface=wifi1 list=WLANadd interface=wifi2 list=WLANadd interface=wifi3 list=WLANadd interface=wifi4 list=WLAN/ip addressadd address=10.10.0.1/24 interface=vlan10 network=10.10.0.0add address=10.20.0.1/24 interface=vlan20 network=10.20.0.0add address=10.30.0.1/24 interface=vlan30 network=10.30.0.0add address=10.40.0.1/24 interface=vlan40 network=10.40.0.0add address=10.50.0.1/24 interface=vlan50 network=10.50.0.0add address=192.168.1.2/30 interface=ether2 network=192.168.1.0/ip dhcp-server networkadd address=10.10.0.0/24 dns-server=10.20.0.10 gateway=10.10.0.1 ntp-server=\    10.10.0.1add address=10.20.0.0/24 dns-server=10.20.0.10 gateway=10.20.0.1 ntp-server=\    10.20.0.1add address=10.30.0.0/24 dns-server=10.20.0.10 gateway=10.30.0.1 ntp-server=\    10.30.0.1add address=10.40.0.0/24 dns-server=10.20.0.10 gateway=10.40.0.1 ntp-server=\    10.40.0.1add address=10.50.0.0/24 dns-server=10.20.0.10 gateway=10.50.0.1 ntp-server=\    10.50.0.1/ip dnsset servers=10.20.0.10/ip firewall filteradd action=accept chain=input connection-state=established,related,untrackedadd action=drop chain=input connection-state=invalidadd action=accept chain=input protocol=icmpadd action=accept chain=input dst-port=123 protocol=udpadd action=accept chain=input dst-address=127.0.0.1add action=accept chain=input in-interface=vlan10add action=accept chain=input in-interface=ether5add action=drop chain=inputadd action=accept chain=forward connection-state=\    established,related,untrackedadd action=drop chain=forward connection-state=invalidadd action=accept chain=forward dst-address=10.20.0.10 dst-port=53 \    in-interface-list=LAN protocol=tcpadd action=accept chain=forward dst-address=10.20.0.10 dst-port=53 \    in-interface-list=LAN protocol=udpadd action=accept chain=forward in-interface-list=LAN out-interface-list=WANadd action=accept chain=forward connection-nat-state=dstnatadd action=drop chain=forward disabled=yes/ip firewall mangleadd action=mark-packet chain=prerouting in-interface-list=WAN \    new-packet-mark=download passthrough=yesadd action=mark-packet chain=prerouting in-interface-list=LAN \    new-packet-mark=upload passthrough=yes/ip firewall natadd action=masquerade chain=srcnat out-interface-list=WAN