Re: How to *ENABLE* icmp redirect on windows xp workstation ?

On May 22, 1:57 pm, "Bill Grant" <not.available@online> wrote:
"Zealot" <Zealot0...@xxxxxxxxx> wrote in message

news:2f1daac0-621c-420f-8737-e0c7254fd2fd@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
On May 22, 9:54 am, "Ace Fekay [MVP]" <PleaseAs...@xxxxxxxxxxxxxx>
wrote:





Innews:7394304a-c24f-47c9-af41-98f63b72524c@xxxxxxxxxxxxxxxxxxxxxxxxxxxx,
Zealot <Zealot0...@xxxxxxxxx> typed:

Thanks for your reply.

I have tested on Windows XP SP2. It doesn't work. But on linux box, it
works

There are 2 gateways in my innernet. One for internet, the other for
innernet.
I'm using DHCP on the LAN and point default gateway to the internat
gateway,
and the internet gateway forward the packet to innernet gateway. but
there
are some application which requires low latency and high bindwidth
need to
access the service on the other LAN of innernet. It is very hard to
install
route entry on every mechine in the LAN.

I'm not completely following your explanation in relation to the need of
ICMP redirects. I'm trying to follow and understand the differences
between
"innernet" and "intranat" as you described it.

From the looks of things, it sounds like a static route configured in your
default gateway router pointing to the "innernet," which I assume you mean
that is a separate subnet on your INTRANET (inside private network) may
just
do the trick. If the app is on a server on that subnet, and the server is
defined in DNS or WINS with a private IP on that subnet, a static route
will
"redirect" (or simply send) the packet to that other router. Have you
tried
that?

Ace- Hide quoted text -

- Show quoted text -
Yes, I already set up a static routing entry on the default gateway
pointing to the innernet gateway, but it takes an unnecessary hop from
default gateway to innernet gateway. I want the packet go directly to
the innernet gateway or there will be bandwidth and latency problems.
Set up a static routing entry on every machine can solve this problem,
but as I mentioned, a lot of work will be taken to set up a static
routing entry on every machine in the LAN. So I'm considering ICMP
redirect as a simple solution.

    Ok. You have the static route in place and the traffic is being
redirected.
    You also have ICMPRedirect enabled on the workstation.
    Are you saying that the static route is not being added to the
workstation's routing         table?

    When the router redirects the packet, it will also send an ICMP redirect
message to the workstation. If EnableICMPRedirect is set the route should be
added to the routing table of the workstation, so that next time it needs to
access the intranet subnet it will have a route to access it by the
alternate gateway.

    Have you checked the routing table on the workstation soon after a
redirect to see if the route is there? The route is not persistent. It will
disappear after a while if it is not used (about ten minutes, i think).

    If you want a persistent route you will need to add it to each
workstation as a persistent static route.- Hide quoted text -

- Show quoted text -

Using tcpdump, I can figure out that the ICMP packet have send
properly from the gateway to the workstation, but the WinXP
workstation seems ignore it. I checked that there are no routing entry
set up on the workstation. And in the same LAN, when use Debian Linux
workstation, it works properly, as soon as it receive the ICMP
redirect packet, it send packet to innernet gateway directly.
.

Relevant Pages

  • Re: Socket Bind(Virtual IP) LocalEndPoint
    ... When Truck and Gateway ... each truck GPS position because every packet received from internet is ... Create Asynchronous Socket for Listening ...
    (microsoft.public.win32.programmer.networks)
  • Re: Socket Bind(Virtual IP) LocalEndPoint
    ... When Truck and Gateway ... each truck GPS position because every packet received from internet is ... Create Asynchronous Socket for Listening ...
    (microsoft.public.win32.programmer.networks)
  • Re: Unexpected traceroute output over VPN
    ... I am aware that the packet will go from the local machine, ... gateway, to the remote gateway and then to the destination IP. ... encapsulated/encrypted once it enters the inside interface of the local ... ie not while traversing the VPN. ...
    (comp.security.firewalls)
  • FW-1 gateway sends ICMP packets
    ... I have an issue with a FW-1 gateway sending ICMP 'TTL exceeded' ... the firewall gateway is not supposed to send or relay ICMP 'TTL ... consider forging the following packet from Internet: ...
    (comp.security.firewalls)
  • FW-1 gateway sends ICMP packets
    ... I have an issue with a FW-1 gateway sending ICMP 'TTL exceeded' ... the firewall gateway is not supposed to send or relay ICMP 'TTL ... consider forging the following packet from Internet: ...
    (comp.security.firewalls)