WAN Sharing through SQM

Installing and Using OpenWrt
1

hi there, I am not sure if the title says it all. Anyway, first of all my use case:

I have a DSL connection of 50/25 and also use a WireGuard instance and PBR for some traffic. the internet is shared by 3 families and since I upgraded it to 50mbps recently, one of the family does not want to share the upgraded costs, therefore, I wanted to limit their network speeds to the old 20mbps max. In order to do that I have thought of the following methods to achieve this; however, I have listed their drawbacks below as well.

Approach 1: I will have to get a list of all their devices' mac-addresses and configure per-IP rate limiting with iptables / firewall. It is doable but requires some monitoring for new devices etc. and will also limit the local LAN sharing speeds.

Approach 2: Create a separate network in the router along with DHCP, etc. and configure 01 instance of SQM on that network (in addition to 01 instance already running on pppoe-wan. This will maybe achieve my end goal but also limit the within-network speed. Therefore, this is not my first choice again.

Approach 3: This approach, theoretically speaking, involves creating two WAN interfaces from existing pppoe-wan interface maybe using VLANs and after that create an additional network for the family including a separate Wi-Fi etc. and put SQM on that virtual WAN interface and voila everything works as expected and no limiting the local network speeds as well.

Current Setup: My current setup is that I have AVM FritzBox 7530 router with 256 MB of RAM (running OpenWrt v24.10.0), it is already routing the 50mbps DSL connection, along with DSL line so I don't think the hardware might be an issue. 02 other routers running OpenWrt as well are connected to LAN via Wi-Fi and LAN Cable and working as expected.

So, my question: Is the 3rd approach do-able? If Yes, then how can I create 02 interfaces from one pppoe-wan interface. I have tried searching and experimenting with VLANs but I have not found anything that works. I was not even able to create proper VLANs, and I am not even sure if VLANs can be created over pppoe-wan interface. (P.S. I am using dsl0.10 for internet and dsl0.20 for IPTV already.)

Thanks in advance for any kind of help.

2

Easiest would likely to be to supply this family with their own AP and connect all their devices (WiFi and wired) to that AP only, then you can either configure SQM on that AP or on a VLANed Port that connects to that AP. They still will be limited in their traffic with the rest of the lokal network though, unless you do some fancy PBR to only apply the shaping to their WAN traffic.

1 Like