XG routing not working a vlan interface

Hi Amr Kabary 

Please add back route on XG for VLAN 4 network and check the PING/trace route from VLAN 1 machine to VLAN 4 machine.

Backroute you need to add on your switch IP which is connected with XG LAN Port.

This may fix this issue.

thanks for the reply

but this is a router on a stick

in this model you dont create layer 3 interface on the switch
switch port facing xg is a trunk port 

Hi Amr Kabary 

can you generate the PING and check the packet request on XG ?

You may check the traffic or packet request via below CLI command:

console > tcpdump 'host X.X.X.X.

where X.X.X.X is the destination machine IP 

Please share the result here.

Also collect below command output.

console> sy dia utilities netconf route list

Hi,

 XG uses layer 3 VLANs and I am surprised that no-one has commented about using VLAN 1 which is not supported on XG.

Ian

vlan 1 here is a physical interface   not a vlan

pinging from my machine in vlan 1 to vlan 4 1092.168.4.102 which is pingable from xg

Hi 

Can you also share the below output which I requested in previous comment.

console> sy dia utilities netconf route list

or from advance shell.

#route -n

shared it the first time but the photo was corrupted

Hi Amr

Thanks for sharing it. 

If possible please delete VLAN interface on XG and re add it ( may be some problem with firewall table) and share the status.

the same 

and iam still getting routed to the outside wan interface  instead of inside on the vlan interface

the same 

and iam still getting routed to the outside wan interface  instead of inside on the vlan interface

Hi Amr,

Please raise a support case to have investigation on it.

OK
Thank you

Amr,

in addition: it seems you are using a very old firmware 17.1 MR4. I would suggest you to:

• delete all the routes and vlans
• upgrade to latest release
• add the new vlans and routes

From advanced shell, type "route" to print your XG's routing table.

Regards

lferrara ,

the same behavior is happening 

The routing table is correct. Are you sure everything is correct on Cisco side?

Thanks

After investigating directly with the user, the problem was the route precedence in XG. He had 2 policy routes so traffic was forwarded to WAN interface. By creating a static route and changing the route precedence to static policy vpn, everything worked as expected.

community.sophos.com/.../123610

Regards

the config was correct , but there was a policy route that bypasses the static route

making my traffic destined for vlan 4 goes through the AN interface

thanks , Luciano