topic Re: Not able to reach the web UI of second gateway of different network. in Firewall and Security Management

Not able to reach the web UI of second gateway of different network.

RPawar — Thu, 04 May 2023 04:42:41 GMT

Hello,

I have set up a LAB environment on VMWARE and in my lab setup i am not able to reach the web UI of my second gateway for running initial wizard for further configuration and SIC integration with the manager.

My Manager, Client Machine (windows VM) and first Gateway all are in same network 192.68.0.1/24, however interface eth2 of GW-1 has 67.83.0.111/24 and my GW-2 management interface eth0 has 67.83.0.114/24 so both my GW-1 eth2 and GW-2 eth0 are in same network but still after multiple attempts i am not able to reach my web UI of GW-2.

I have allowed all the required traffic on my GW1-1.

I am getting destination host unreachable error on client machine and on GW-1 cli kindly help.

Re: Not able to reach the web UI of second gateway of different network.

PhoneBoy — Thu, 04 May 2023 19:09:34 GMT

What version was installed?
What do you see in the logs when you try to access GW-2?
Have you done any troubleshooting on the gateway itself (e.g. tcpdump) to see if the traffic is even reaching the gateway?

Re: Not able to reach the web UI of second gateway of different network.

Chris_Atkinson — Thu, 04 May 2023 23:37:18 GMT

Is GW-1 performing NAT?

What routes does GW-2 have?

Re: Not able to reach the web UI of second gateway of different network.

the_rock — Thu, 04 May 2023 23:43:26 GMT

I can tell you that 9 times out of 10, when you see the message destination host unreachable, it means proper route is missing.

Andy

Re: Not able to reach the web UI of second gateway of different network.

RPawar — Fri, 05 May 2023 03:41:13 GMT

Gateway -2 has a default route to route traffic towards network 67.83.0.0/24 via interface eth0 on which the IP configured is 67.83.0.114/24. also gateway -2 has no NAT on it.

Gateway -1 has a route for same destination via interface eth2 which has the IP configured as 67.83.0.111/24

Gateway -1 also has a default route which routes the traffic via 192.168.0.1/24 which is gateway of the management network configured in my topology.

Re: Not able to reach the web UI of second gateway of different network.

RPawar — Fri, 05 May 2023 03:44:07 GMT

The version installed on all the devices is R81.10

in the logs I can see that the traffic is showing accepted for the http connection that I initiate from my client machine, however i am not able to get any icmp logs which I initiate from client machine as well as from the Gateway-1 towards Gateway-2

Re: Not able to reach the web UI of second gateway of different network.

RPawar — Fri, 05 May 2023 03:45:34 GMT

Can you suggest what should be the proper routes in this topology scenario?

Re: Not able to reach the web UI of second gateway of different network.

Blason_R — Fri, 05 May 2023 03:57:34 GMT

Are those part of cluster or two gateways where traffic is passing through for another gateway through first?

I am still not getting your scenario? what is your source and destination IP then>?

Re: Not able to reach the web UI of second gateway of different network.

PhoneBoy — Fri, 05 May 2023 22:21:06 GMT

The routing tables should match on both cluster members.

Re: Not able to reach the web UI of second gateway of different network.

the_rock — Sat, 06 May 2023 00:27:07 GMT

As phoneboy said, routing has to match on both members for this to work right.