So when you do browsing or downloading any data , there will be less bandwidth available for PING/ ICMP packets and ping form cleint to mikrotik will face ferquent timeout and high latency.
No need to worry about that , in fact the general ICMP/PING should be blocked on every network to avoid flooding and un wanted queries from the client end.
Or if you still want to allow icmp and risk the network security, then simply mark icmp packets and and create a queue that allows more bandwidth to icmp marked packets.
If you want to provide PING / ICMP high priority so you wont get any high delay in ping reply Use the following Code.
1
2
3
4
5
6
7
| /ip firewall mangle add chain=prerouting protocol=icmp action=mark-connection new-connection-mark=icmp-con passthrough=yes comment="" disabled=no add
chain=prerouting protocol=icmp connection-mark=icmp-con
action=mark-packet new-packet-mark=icmp-pkt passthrough=no comment=""
disabled=no /queue tree add
burst-limit=0 burst-threshold=0 burst-time=0s disabled=no
limit-at=1024k max-limit=2048k name=Hi-Prio-to-icmp-aacable
packet-mark=icmp-pkt parent=global-in priority=1 queue=default |
↓
↓
Naveed Ahmad
No comments:
Post a Comment