Route problem on XGS116 firewall

Hi David Chour

Seems Asymmetric Routing, can you try the below steps :

console>show advanced-firewall

console>set advanced-firewall bypass-stateful-firewall-config add source_network [source network IP] source_netmask [source subnet mask] dest_network [destination network IP] dest_netmask [destination subnet mask]

Thanks and Regards

Hi David Chour

Seems Asymmetric Routing, can you try the below steps :

console>show advanced-firewall

console>set advanced-firewall bypass-stateful-firewall-config add source_network [source network IP] source_netmask [source subnet mask] dest_network [destination network IP] dest_netmask [destination subnet mask]

Thanks and Regards

Hello Bharat,

I would prefer to "optimize" David's network design instead of configuring a workaround on the XGS.

And I don't like the often heard argument "it worked before with the SG ..."

+1. The diagram shows an odd physical configuration that you can work around with the CLI but if there isn't a specific reason (or an error in the diagram) for this, they will eventually have other problems or inefficiencies.

Hello jprusch,

The workaround proposed by Bharat J works but I would not like to keep this solution for a long time.

As requested here is the routing table on the switch 192.168.0.254

Otherwise, do you think it would be better if the MPLS router was connected directly to the firewall ?