Hi everyone. My network layout is:
Internet
|
Router A (gw for A) - Mikrotik 3011UiAS - OS 6.33.5
|
Network A - Linux servers
|
Router B (gw for B)
|
Network B - PCs
Mikrotik is default gateway for network A and it has static route to network B via router B.
No static routes are defined on network A Linux servers (and will not be), Mikrotik as gateway has all routes. There is no NAT between networks A and B.
When accesing Linux servers on network A from PC on network B, ICMP redirect tells Linux servers where to send traffic. It works for a while as it should (send-redirects are ON by default), but suddenly it stops working without apparent reason, PC from network B sends packet to Linux server on network A, but recieves no reply. I suspect there is a problem with ICMP redirects from Mikrotik - looks like those redirects just stop.
I checked all routing parameters on Linux boxes, inspected cache, everything is OK. ICMP redirects from Mikrotik are not blocked by firewall rules.
I would like to tune ICMP redirect parameters on Mikrotik so that there is no limit, to make it work always, regardless of number of requests or any other scenario.
On Wiki http://wiki.mikrotik.com/wiki/Manual:IP/Settings there are some parameters but not all are explained, for example icmp-rate-limit, if applicable to this situation.
What can I do to make ICMP redirect on Mikrotik work always and without any limits?
Thanks, regards
Ivica