Quantcast
Channel: EdgeRouter topics
Viewing all articles
Browse latest Browse all 20028

ERPRO Adding ICMP Rate Limit caused WAN Load Balance to say failed over, however UI shows active.

$
0
0

I hacve a script to email me on failover, so I got the email, I run /usr/sbin/ubnt-add-connected.pl and it clearly shows it had failed over to the second wan that is for failover only

 

However, the UI shows the link still up and passing traffic

 

/usr/sbin/ubnt-add-connected.pl
Connected routes found = 7
Route tables found = 2
Adding routes to table 201
Adding routes to table 202

load-balance member [G-eth1]
status = failover
route table 202
default via <2nd WAN IP> dev eth1
blackhole default metric 256
10.255.255.0 dev l2tp0 scope link
<1st WAN IP>/24 dev eth0 scope link
<2nd WAN IP>.0/24 dev eth1 scope link
127.0.0.0/8 dev lo scope link
192.168.100.0/24 dev br0.20 scope link
192.168.200.10 dev l2tp0 scope link
192.168.218.0/23 dev br0 scope link

load-balance member [G-eth0]
status = inactive
route table 201
default via <1st WAN IP> dev eth0
blackhole default metric 256
10.255.255.0 dev l2tp0 scope link
<1st WAN IP>/24 dev eth0 scope link
<2nd WAN IP>/24 dev eth1 scope link
127.0.0.0/8 dev lo scope link
192.168.100.0/24 dev br0.20 scope link
192.168.200.10 dev l2tp0 scope link
192.168.218.0/23 dev br0 scope link

 

FailOver.png

 

I added ICMP rate limiting to WAN_LOCAL, so I moved that above the default Acceptafter removing everything went back to normal after a reboot. Might have after some time, but I did not want to wait to find out.

 

Here is what was above the default rule 10 in WAN_LOCAL

 

set firewall name WAN_LOCAL rule 80 description 'ICMP FOR MONITORING'
set firewall name WAN_LOCAL rule 80 icmp code 0
set firewall name WAN_LOCAL rule 80 icmp type 8
set firewall name WAN_LOCAL rule 80 limit burst 5
set firewall name WAN_LOCAL rule 80 limit rate 2/second
set firewall name WAN_LOCAL rule 80 log disable
set firewall name WAN_LOCAL rule 80 protocol icmp
set firewall name WAN_LOCAL rule 80 source group
set firewall name WAN_LOCAL rule 90 action drop
set firewall name WAN_LOCAL rule 90 description 'DROP ESTABLISHED ICMP'
set firewall name WAN_LOCAL rule 90 log disable
set firewall name WAN_LOCAL rule 90 protocol icmp

 

Any help would be appreciated


Viewing all articles
Browse latest Browse all 20028

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>