topic Re: Not able to reach Lan interface of VSX in Firewall and Security Management

Not able to reach Lan interface of VSX

Captain_Igen — Tue, 22 Jun 2021 21:36:33 GMT

I have setup a Lab and not able to reach VSX Lan interface. Please find the attached Lab diagram

All traffic is allowed on VS and i am able to reach Win PC 172.16.1.100. However i am not able to reach 172.16.1.1 from win pc.

I am not able to find any solution for this. Please guide me to fix this.

Please find the TCPDUMP output . I am suspecting firewall is not replying to ARP.

_Val_ — Thu, 26 Nov 2020 14:44:33 GMT

I think it is normal. VS is most probably answering with its "funny IP", which break the ping. To check that, run FW monitor while pinging and see

_Val_ — Thu, 26 Nov 2020 14:47:15 GMT

On the second thought, please check here:

Captain_Igen — Thu, 26 Nov 2020 15:22:17 GMT

Hi Mate,

Thanks for reply. I installed policy on VS-2 however it is still showing default one.

I run fw unloadlocal and was able to ping VS-2 Lan IP that is 172.16.1.1, but i am not able to figure out why policy is not installing on VS-2.

JackPrendergast — Thu, 26 Nov 2020 15:31:06 GMT

Do you have any screenshots of the policy installation?

Captain_Igen — Thu, 26 Nov 2020 15:47:14 GMT

Hi Jack,

Please find snapshot.

JackPrendergast — Thu, 26 Nov 2020 19:38:55 GMT

And what errors do you get when you try install a policy? @Captain_Igen