unlimit the ICMP traffic to the MikroTik

RouterOS General
1

i want all my local user when they ping the MikroTik allway have low time in ms what ever their traffic
i made these rules
the MikroTik and the Local User are in x.y.z.0/24 subnet

/ ip firewall mangle 
add chain=prerouting src-address=x.y.z.0/24 dst-address=x.y.z.0/24 \
    protocol=icmp action=mark-connection new-connection-mark=ICMP-Con \
    passthrough=yes comment="" disabled=no 
add chain=prerouting connection-mark=ICMP-Con action=mark-packet \
    new-packet-mark=ICMP-Packet passthrough=yes comment="" disabled=no

and

/ queue tree 
add name="ICMP no limit" parent=global-total packet-mark=ICMP-Packet \
    limit-at=0 queue=default priority=8 max-limit=0 burst-limit=0 \
    burst-threshold=0 burst-time=0s disabled=no

but the time still high and sometine timedout when high traffic from local users ! :frowning:

2

Is this a hotspot? Are you using simple queues? Please send your complete queue tree and mangle rules. Do you sit hit coutners on both of your existing mangle rules below and in the queue tree for those packets?

3

this the only queue tree that i am using the rest is basic simple queues based on src ip address
the mangle rule works and it counts also in queue trees it workd and counts but time get still get high when high traffic !!

4

didn’t get answer how can i unlimit ICMP packet .. should i add a rule in simple queue to ICMP packet and what is !!

5

You can’t unlimit anything. You can only limit things. The key, therefore, is to limit everything except ICMP.

Remember, from the queue documentation, that if traffic matches a simple queue, then that overrides any queue tree definitions, so if you have a simple queue matching IP address 1.2.3.4 and a queue tree rule matching ICMP traffic, any ICMP traffic from 1.2.3.4 will go through the simple queue and not the queue tree.

My understanding (thanks again Janis) is that you really shouldn’t be using simple queues for this kind of scenario.

Nick.