Policy based routing disconnect rdp session but icmp is fine
-
I have a curious problem related to policy based routing.
This is roughly diagram.
and this is the related policy and static route
Static route (for routed VPN)
destination : PC segment
gateway : VTI1When both route status is normal, both traffic go through MPLS line and there is no icmp packet loss.
But rdp session( from PC segment to PC A) disconnect and up every 30 sec.
Rdp session (from PC A to PC segment) is fine.
I hope someone know how to fix this disconnection issue.
-
@tomatonoheta ah this helps explain your other thread with the A being blocked.
-
@johnpoz yes this is same env. And for both side, routing is same (use MPLS)
-
@tomatonoheta
I still not sure the root cause but after I changed the firewall rule option "state type" to sloppy, rdp session works well. no disconnection.
I could not find any asymmetric route by tracert command. however, there is certainly asymmetric route (why?)
I changed option for above 2 rules. -
@tomatonoheta said in Policy based routing disconnect rdp session but icmp is fine:
firewall rule option "state type" to sloppy,
Not a good fix, temp work around until you fix the asymmetrical
Your other thread blocked out the IPs.. Were those public? the private ones, which direction was that in - where is opt1 and lan in your drawing, etc. is FW another pfsense or something else? etc.
