I have a CCR 1009 sitting at the core of our work network.
We have multiple VLANs, mgmt, client, Wifi, Voip, etc.
I've added a Fasttrack rule to the top of our forward chain with a standard accept related/est below it:
Code: Select all
5 ;;; FastTrackTest
chain=forward action=fasttrack-connection
connection-state=established,related log=no log-prefix=""
6 ;;; Forward established/related
chain=forward action=accept connection-state=established,related log=no
log-prefix=""
IP settings shows that Fasttrack is not active:
Code: Select all
ip settings print
ip-forward: yes
send-redirects: yes
accept-source-route: no
accept-redirects: no
secure-redirects: yes
rp-filter: no
tcp-syncookies: no
max-arp-entries: 8192
arp-timeout: 30s
icmp-rate-limit: 10
icmp-rate-mask: 0x1818
route-cache: yes
allow-fast-path: yes
ipv4-fast-path-active: no
ipv4-fast-path-packets: 0
ipv4-fast-path-bytes: 0
ipv4-fasttrack-active: no
ipv4-fasttrack-packets: 0
ipv4-fasttrack-bytes: 0
So my question is, am I missing something obvious?
Thanks