topic Hi, in Network Security

Firewall on 892 Router

tsipoulanis — Tue, 12 Mar 2019 08:01:24 GMT

Hello everone,

can someone help troubleshooting my new 892 router?

based on a basic configurations i have the Status below,

from the router,

1. ping internal, a host

2. ping internet IP

3. ping website(name)as

from host,

1. ping internal IP from the router

2. ping my public IP

i dont see any website from a browser.

i have configured also zones. (from both directions)

any help is wellcome,

best regards,

thomas

Hi,

johnd2310 — Fri, 15 Jul 2016 02:09:20 GMT

Hi,

Can you ping a website or external device from internal host? Have you checked DNS for internal hosts.

Thanks

John

It could be a million things.

Philip D'Ath — Fri, 15 Jul 2016 02:32:11 GMT

It could be a million things. You'll need to post your config.

You could also try my wizard for an 897 to get you 99% of a working configuration for an 892.

http://www.ifm.net.nz/cookbooks/890-isr-wizard.html

please see attachment, I will

tsipoulanis — Fri, 15 Jul 2016 07:09:21 GMT

please see attachment,
I will try also the link you gave me to see if i succed with the tool

thanks for the respond,
Thom

hi and thanks for the respond

tsipoulanis — Fri, 15 Jul 2016 07:12:22 GMT

hi and thanks for the respond,

from a host I ping only my gateway(the cisco router) and my pyblic IP(which is the external WAN IP from my cisco router).
no ping website, no ping 8.8.8.8 ,no ping an other Internet IP

best regards,

thomas

You only have "ip nat inside"

Philip D'Ath — Fri, 15 Jul 2016 07:13:58 GMT

You only have "ip nat inside" configured on vlan1, but vlan1 is not a member of any zone.

You only need zone-member on layer 3 interfaces (interfaces with IP addresses).

you make my day,:) thank you.

tsipoulanis — Fri, 15 Jul 2016 07:28:11 GMT

you make my day,
🙂 thank you.

how i forgot that ??? 🙂

best wishes,
TThomas

and now i can have no traffic

tsipoulanis — Fri, 15 Jul 2016 07:37:47 GMT

and now i can have no traffic between my networks from the vpn.
i see a zone on the tunnel,
then, i think i have to create a zone-pair. 😉 right?

Thom

i have also something else to

tsipoulanis — Fri, 15 Jul 2016 13:53:20 GMT

i have also something else to ask.
i have internet, the vpn is connected and
Router_A ping all the IPs from Router_B
Router_B ping all the IPs from Router_A
Host form A ping all the IPs from Router_B
Host from B ping all the IPs from Router_A

but is not possible to ping from Host_A to Host_B

it seems to be firewall issue.

The short answer is - yes.

Philip D'Ath — Sat, 16 Jul 2016 07:14:56 GMT

The short answer is - yes.

I am a little unclear if you are having an issue or not. Is everything now working?