Measure current usage
We record traffic for a few days with Torch, Traffic Flow or NetFlow to see which users and services consume the link.
Network & Virtualization
Business Internet Bandwidth Management and Control
One large download or an automatic Windows update is enough to break up a video meeting and every VoIP call in the office. For bandwidth management we classify traffic, give business services priority and cap everything else. Usage reports then show where your internet capacity really goes.
Tools & technology
bandwidth-management
- MikroTik Queue Tree
- PCQ
- NetFlow
- ntopng
- pfSense
- FortiGate
- RADIUS
- PRTG
5work areas
4deliverables
4steps
What is Bandwidth Management?
Bandwidth management for business is the practice of classifying office internet traffic, giving business services priority and capping everything else, with usage reports that show where capacity goes. It helps companies whose connection is fine in the morning and crawls after lunch, whose video meetings break up, whose monthly quota runs out early, or who can't tell which machine uses the most. PikoSystem first records traffic for a few days with Torch, Traffic Flow or NetFlow, then builds QoS with mangle rules and queue trees on MikroTik so VoIP and meetings go first. Speed caps or quotas are set per user, group, VLAN and guest Wi-Fi, and per-user accounting can run through a hotspot or RADIUS. You receive a baseline usage report, a priority and limit table, a backed-up queue configuration and a usage dashboard.
When you need Bandwidth Management
- The internet is fine in the morning and crawls after lunch.
- Audio and video cut out in the middle of online meetings.
- Our monthly data quota runs out early.
- We can't tell which machine uses the most bandwidth.
What Bandwidth Management includes
QoS and priority policy
Traffic is classified with mangle rules and queue trees. VoIP, video meetings and business apps get high priority; downloads and updates get low priority.
Speed limits and quotas
Each user, group or VLAN gets a speed cap or monthly quota. Guest Wi-Fi has its own limit.
Accounting and authentication
Where needed, users sign in through a hotspot or RADIUS so usage is recorded per person.
Usage reporting
We set up a dashboard or scheduled usage reports by user and service with ntopng or PRTG.
What you get from Bandwidth Management
- Baseline usage report before changes
- Priority and speed limit table per group
- Final queue configuration and its backup
- Access to the usage dashboard
Bandwidth Management: a practical guide
MikroTik bandwidth control: simple queues or queue trees?
Simple queues are easy for a handful of users or subnets, but they are evaluated in order and CPU load climbs as the list grows. Queue trees work on packets marked by mangle rules and form a parent-child hierarchy, so you can cap the whole link and, beneath it, give VoIP priority 1 and downloads priority 8.
For fair sharing, a PCQ queue classified by dst-address for download and src-address for upload splits capacity evenly per IP without a rule per user. RouterOS 7 also adds cake and fq-codel queues, which reduce latency on a saturated link.
Common bandwidth management mistakes
The most common is setting max-limit at or above the link's real speed. The actual queue then forms in the ISP modem and router priorities do nothing. The cap should sit slightly below measured capacity.
Another is limiting only download. When a cloud backup or file upload fills the upstream, VoIP suffers and even downloads slow down. Classifying by port 443 no longer works either, since nearly everything is HTTPS, so address lists by destination are needed. And with FastTrack enabled, much of the traffic never reaches the queues at all.
Reporting internet usage per IP on MikroTik
RouterOS 7 dropped IP Accounting, so Traffic Flow is the main tool. It exports NetFlow v9 or IPFIX records to a collector such as ntopng. Torch shows only live traffic and is no use for a monthly report.
Per-IP reports make sense only when each machine has a fixed address or reserved DHCP lease. Reports by person require hotspot or RADIUS sign-in. Decide data retention up front and tell staff that usage is recorded.
Bandwidth software on each PC or control at the router?
Tools like NetLimiter run on individual Windows machines and control only that machine. Staff phones, guest laptops and cameras stay outside the policy, and anyone with admin rights can close the program.
Control at the network edge covers every device. FortiGate uses Application Control signatures to identify apps and apply traffic shaping per application. pfSense does similar work with limiters and ALTQ, and for most offices MikroTik mangle rules with queue trees are enough.
How Bandwidth Management works
-
01
Measure
We get router access and record traffic for a few days without changing anything.
-
02
Set the policy
We review the usage data with you and agree on priorities and limits.
-
03
Apply and fine-tune
Queues and limits go live, and we watch the network for a few days to adjust the numbers.
-
04
Handover
You receive the configuration, documentation and dashboard access.
Bandwidth Management: frequently asked questions
Won't limiting user speed annoy our staff?
When limits are based on real usage, most people notice no difference, and meetings and calls become more stable. We review the limits a few days after rollout and adjust them if needed.
Can we control bandwidth without MikroTik?
Yes. FortiGate, pfSense and most business firewalls support traffic shaping. We start with the equipment you already have and only suggest a replacement if it lacks the feature.
Can we get internet usage reports per user?
Yes. If users sign in with personal accounts, usage is recorded by name. Otherwise, reports are built per IP address or device.
Related searches
- network bandwidth control
- user internet usage control
- internet usage reporting
- internet accounting
- MikroTik hotspot
- limit user speed
- QoS
Related services
Quote
Tell us what you need, we'll come back with a plan and a price
A few lines on where things stand and what you want is enough. An engineer calls you back, not a sales rep.
- 01We read your request and call if anything is unclear.
- 02If needed, we do a quick remote review or a site visit.
- 03You get a written proposal with scope, timeline and cost.