Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 7 replies
  • Subscribers 29 subscribers
  • Views 1080 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Route problem on XGS116 firewall

David Chour

Hello,

I'm stuck on a LAN routing problem.

We changed our UTM firewall to XGS116, I recreated the rules and configuration on the new firewall, but I have a problem with the incoming traffic to the internal network.

We have several offices that are interconnected by MPLS.

From the other offices I can no longer reach the head office network, but I can reach the subnet

Here is a diagram and the static routes.

Can you please help me ^^



This thread was automatically locked due to age.

Top Replies

  • +1 verified

    Hi David Chour

    Seems Asymmetric Routing, can you try the below steps :

    console>show advanced-firewall


    console>set advanced-firewall bypass-stateful-firewall-config add source_network [source network IP] source_netmask [source subnet mask] dest_network [destination network IP] dest_netmask [destination subnet mask]

    Thanks and Regards

    Jump to answer
Parents
  • 0

    Can you show us the routing table of the switch with 192.168.0.254?

    Where is 192.168.61.0 /24 in your diagram?

    The route entry to 192.168.0.0 /24 is superfluous and not needed, because your firewall is directly connected to this network.

    Mit freundlichem Gruß, best regards from Germany,

    Philipp Rusch

    New Vision GmbH, Germany
    Sophos Silver-Partner

    If a post solves your question please use the 'Verify Answer' button.

Reply
  • 0

    Can you show us the routing table of the switch with 192.168.0.254?

    Where is 192.168.61.0 /24 in your diagram?

    The route entry to 192.168.0.0 /24 is superfluous and not needed, because your firewall is directly connected to this network.

    Mit freundlichem Gruß, best regards from Germany,

    Philipp Rusch

    New Vision GmbH, Germany
    Sophos Silver-Partner

    If a post solves your question please use the 'Verify Answer' button.

Children
No Data