Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - gbds

#1
18.7 Legacy Series / Re: Cannot ping firewall from LAN
January 17, 2019, 05:55:00 PM
Setting the Gateway to "default" vs "WAN_GROUP" doesn't seem to make any difference.
#2
18.7 Legacy Series / Re: Cannot ping firewall from LAN
January 16, 2019, 06:10:49 PM
IPS is currently off. We intend to turn it back on soon, but having it on currently maxes out the CPU usage (this is a separate problem).

As far as why we want to ping the firewall, it is certainly not mission critical, but it can be helpful when connection goes down. Mostly I just found it odd that it has always been able to ping before, and then suddenly stopped working.

I have not tried to unplug the firewall and plug it back in yet, will try that and report back. LAN firewall rules are attached:



#3
18.7 Legacy Series / Re: Cannot ping firewall from LAN
January 14, 2019, 07:51:51 PM
Yes, I can ping my laptop and other LAN clients from the firewall with no packet loss. Just not the other way around.
#4
18.7 Legacy Series / Re: Cannot ping firewall from LAN
January 14, 2019, 07:44:41 PM
Hmmm... I ran a packet capture on LAN interface and it does indeed see the ICMP echo request from my laptop. So it's just not responding for some reason. LAN clients (172.20.1.x) and the firewall (172.20.1.1) are on the same subnet, we only have one LAN net.
#5
18.7 Legacy Series / Re: Cannot ping firewall from LAN
January 14, 2019, 06:36:29 PM
I have a LAN Net to This Firewall as well as a LAN Net to LAN Net ICMP pass rule, neither one seems to make a difference. It also doesn't seem to matter which LAN client I try from. I've tried to ping from a Windows 7 laptop as well as a Macbook running Mojave, I get a timeout either way.

Where would I find anti-spoof settings? Should I check the "bypass firewall rules for traffic on the same interface" box?
#6
18.7 Legacy Series / Re: Cannot ping firewall from LAN
January 11, 2019, 09:44:37 PM
I have added an ICMP pass rule from LAN Net to LAN Net, and double-checked that my "Default allow LAN to any" rule is Enabled. Still getting "Request timed out" when trying to ping the firewall.
#7
18.7 Legacy Series / Cannot ping firewall from LAN
January 10, 2019, 10:27:05 PM
Hello all, just updated to 18.7.10 and can no longer ping the firewall from my LAN. I can access the web GUI and get online, just cannot ping. Pings from cmd return "Request timed out". Wireshark says "No response seen to ICMP request". From the Web GUI > Interfaces>Diagnostics>Ping, I can ping the firewall itself as well as my laptop, but cannot ping from my laptop to the firewall. I can ping other clients on the LAN just fine.

I even created an ICMP pass rule as follows, but no luck:
Action: Pass
Interface: LAN
TCP/IP Version: IPv4
Protocol: ICMP
ICMP Type: any
Source: LAN net
Destination: This Firewall

Still I get "request timed out" when I ping the firewall's IP from my laptop. Any thoughts?