Management traffic over bridge interface

Ilham_Syuhada — Tue, 06 Apr 2021 11:39:02 GMT

Hi Everyone,

I have deployment R80.20SP Security Group with two SGMs. The SG is running as bridge with some bridge interfaces and every bridge interfaces are consist of 2 VLAN Interfaces with no IP Address.

Traffic from SG's management interface to internet needs to pass SG bridge interface. The Anti-Virus & Anti-Bot are not able to update database and i found traffic dropped when coming in to bridge interface with following drop log "local interface spoofing" after running sk105899 & disable stateful inspection, no same drop message and appear the new log like this :

[1_02]@;1309518;[cpu_1];[fw4_5];fw_log_drop_ex: Packet proto=6 10.199.10.27:3461 1 -> 23.217.113.224:443 dropped by fw_handle_first_packet Reason: fwconn_key_ini t_links (INBOUND) failed;

Anyone have same experience or know the appropriate SK for this case ?

Thank you.

Re: Management traffic over bridge interface

_Val_ — Thu, 08 Apr 2021 12:17:28 GMT

Please open TAC request for this

topic Management traffic over bridge interface in Hyperscale Firewall (Maestro)

Management traffic over bridge interface

Re: Management traffic over bridge interface