#############Шейпер#############
#Режем входящую
NUMBERS_VLAN="vlan5 vlan6 vlan7"
for number_vl in `echo $NUMBERS_VLAN`
do
echo $number_vl

tc qdisc del dev $number_vl root
tc qdisc add dev $number_vl root handle 1: htb
tc class add dev $number_vl parent 1: classid 1:1 htb rate 100Mbit

tc class add dev $number_vl parent 1:1 classid 1:100 htb rate 100Mbit ceil 100Mbit burst 15k
tc class add dev $number_vl parent 1:1 classid 1:90 htb rate 2Mbit ceil 4Mbit burst 15k
tc class add dev $number_vl parent 1:1 classid 1:80 htb rate 6Mbit ceil 6Mbit burst 15k

tc qdisc add dev $number_vl parent 1:100 handle 100: sfq perturb 10
tc qdisc add dev $number_vl parent 1:90 handle 90: sfq perturb 10
tc qdisc add dev $number_vl parent 1:80 handle 80: sfq perturb 10

tc filter add dev $number_vl parent 1:0 protocol ip prio 7 handle 100 fw classid 1:100
tc filter add dev $number_vl parent 1:0 protocol ip prio 6 handle 90 fw classid 1:90
tc filter add dev $number_vl parent 1:0 protocol ip prio 5 handle 80 fw classid 1:80
done

#FORWARD CLIENT HOME
iptables -t mangle -A FORWARD -s 172.16.0.0/24 -o ppp999 -j MARK --set-mark 100
iptables -t mangle -A FORWARD -i ppp999 -d 172.16.0.0/24 -j MARK --set-mark 100
iptables -A FORWARD -s 172.16.0.0/24 -o ppp999 -j ACCEPT
iptables -A FORWARD -i ppp999 -d 172.16.0.0/24 -j ACCEPT

iptables -t mangle -A FORWARD -s 172.16.0.0/24 -o vlan5 -j MARK --set-mark 100
iptables -t mangle -A FORWARD -i vlan5 -d 172.16.0.0/24 -j MARK --set-mark 100
iptables -A FORWARD -s 172.16.0.0/24 -o vlan5 -j ACCEPT
iptables -A FORWARD -i vlan5 -d 172.16.0.0/24 -j ACCEPT

#FORWARD CLIENT WI-FI
iptables -t mangle -A FORWARD -s 172.19.0.0/24 -o ppp999 -j MARK --set-mark 90
iptables -t mangle -A FORWARD -i ppp999 -d 172.19.0.0/24 -j MARK --set-mark 90
iptables -A FORWARD -s 172.19.0.0/24 -o ppp999 -j ACCEPT
iptables -A FORWARD -i ppp999 -d 172.19.0.0/24 -j ACCEPT

iptables -t mangle -A FORWARD -s 192.168.1.0/24 -o ppp999 -j MARK --set-mark 90
iptables -t mangle -A FORWARD -i ppp999 -d 192.168.1.0/24 -j MARK --set-mark 90
iptables -A FORWARD -s 172.19.0.0/24 -o ppp999 -j ACCEPT
iptables -A FORWARD -i ppp999 -d 172.19.0.0/24 -j ACCEPT

#Режем исходящую
tc qdisc del dev ppp999 root
tc qdisc add dev ppp999 root handle 1: htb
tc class add dev ppp999 parent 1: classid 1:1 htb rate 100Mbit
tc class add dev ppp999 parent 1:1 classid 1:90 htb rate 2Mbit ceil 4Mbit burst 15k
tc class add dev ppp999 parent 1:1 classid 1:80 htb rate 6Mbit ceil 6Mbit burst 15k
tc qdisc add dev ppp999 parent 1:90 handle 90: sfq perturb 10
tc qdisc add dev ppp999 parent 1:80 handle 80: sfq perturb 10
tc filter add dev ppp999 parent 1:0 protocol ip prio 1 handle 90 fw classid 1:90
tc filter add dev ppp999 parent 1:0 protocol ip prio 1 handle 80 fw classid 1:80

auto vlan5
        iface vlan5 inet static
        address 10.213.1.xxx
        netmask 255.255.255.0
        vlan_raw_device eth0
    up route add -host 10.255.255.13 gw 10.213.1.254
    up route add -net 192.168.128.0/24 gw 10.213.1.254
    dns-nameservers 127.0.0.1

auto vlan6
        iface vlan6 inet static
        address 172.16.0.1
        netmask 255.255.255.0
        vlan_raw_device eth0

auto vlan7
        iface vlan7 inet static
        address 172.19.0.1
        netmask 255.255.255.0
        vlan_raw_device eth0

cat /etc/dhcp/dhcpd.conf 
authoritative;
allow booting;
allow bootp;

subnet 172.16.0.0 netmask 255.255.255.0 
{
interface vlan6;
range 172.16.0.25 172.16.0.100;
option broadcast-address 172.16.0.255;
option routers 172.16.0.1;
option domain-name-servers 172.16.0.1;
next-server 172.16.0.1;
filename "pxelinux.0";
}

host media {
    hardware ethernet e0:cb:4e:1f:73:b7;
    fixed-address 172.16.0.30;
    server-name "172.16.0.1";
        next-server 172.16.0.1;
    filename "media/pxelinux.0";

}

subnet 172.19.0.0 netmask 255.255.255.0
{
interface vlan7;
range 172.19.0.25 172.19.0.100;
option broadcast-address 172.19.0.255;
option routers 172.19.0.1;
option domain-name-servers 172.19.0.1;
next-server 172.19.0.1;
}