Wifi clients unable tp ping hard wired clients in bridge

Hi Alex 

Please check by creating firewall rule from LAN-WiFi and WiFi-LAN firewall rule and enable ping under Device access on lan and wifi zone

Regards

Hi Bharat,

Do you mean like this?:

I actually currently have both the Wifi and the Wired network grouped under the "LAN" zone, so I thought only a lan2lan would be needed:

I've also confirmed that pinging is enabled under devices access.

Unfortunately it is still not working.

Thanks,

Alex

Please check with tcpdump on SSH of Sophos XG with option 4 

console>tcpdump 'host 10.1.10.102 and proto ICMP 

console>tcpdump 'host 10.1.10.101 and proto ICMP  

Share the output 

Please go to MONITOR & ANALYZE-->Diagnostics-->Packet Capture Click on configure Enter BPF string host 10.1.10.101 and proto ICMP share the packet flow with a snapshot.

Thanks and Regards

in addition to this post, do the packet capture on diagnostic/packet capture on GUI. This shows if you may have IP Spoof blocks or something like that.

ip spoof may match in a bridge configuration when the same ip subnet is on the same VLAN on different interfaces and other circumstances. had this too in the past.

community.sophos.com/.../red60-vlan-bridged---blocked-because-of-invalid-traffic-ip-spoof

Alex Eritsland said:

I actually currently have both the Wifi and the Wired network grouped under the "LAN" zone, so I thought only a lan2lan would be needed:

Yes only LAN-LAN firewall required you can delete lan to wifi rules 

Regards

Hi Bharat,

Here are the results for 10.1.10.102:

Here are the results for 10.1.10.103(IP for wireless device changed to 103):

Nothing is showing up under the packet capture:

Click on Refresh button to get packet flow Regards

I did, still nothing.

Turn of packet capture turn it on again and click on refresh 

tick mark log traffic on firewall rule Lan to LAN 

make sure continuous ping from cmd 

Regards

Turn of packet capture turn it on again and click on refresh 

tick mark log traffic on firewall rule Lan to LAN 

make sure continuous ping from cmd 

Regards