New VLAN unable to access internet

[mflammia]

Hi,

Have created a new VLAN. Internally this works, can ping the default gateway set on the firewall of 172.16.11.1. Devices get an IP address from DHCP running on the firewall. Have a rule that is fully open (any / any). Firewall log shows traffic being allowed, nothing blocking.

Assumed a routing / NAT'ing issue, although that seems to me to be configured OK?

Unable to see where I am going wrong, attached screenshots of the various configuration and logs.

https://drive.google.com/file/d/1uQvDNx2DgHTYDQPgurbf7nKqeK2fGxfy/view?usp=sharing
https://drive.google.com/file/d/12LZidB3ebAy2rJMgYUeVYy4oVC4BBLd4/view?usp=sharing
https://drive.google.com/file/d/1bX5JQprzcERiZhGOptB3VaNeT4dT3gCj/view?usp=sharing
https://drive.google.com/file/d/1Xesct-SFUqT9CdFwJaBuYF00YlMnM-0c/view?usp=sharing
https://drive.google.com/file/d/1Q0nI2jRZuJm5D4OFZBHlYf4R4ltvvhEl/view?usp=sharing

Many thanks in advance

[mflammia]

Figured the problem.

1st issue was that I had added a route for the subnet to the WAN gateway. This was a mistake, as any local subnets do not need this.

2nd issue was that I was configuring the VLAN for a guest captive portal. When I disabled the portal it started working.

Not sure if anyone will make same mistake, but hopefully useful if so.