XG routing not working a vlan interface

Hi Amr Kabary 

Please add back route on XG for VLAN 4 network and check the PING/trace route from VLAN 1 machine to VLAN 4 machine.

Backroute you need to add on your switch IP which is connected with XG LAN Port.

This may fix this issue.

thanks for the reply

but this is a router on a stick

in this model you dont create layer 3 interface on the switch
switch port facing xg is a trunk port 

vlan 1 here is a physical interface   not a vlan

pinging from my machine in vlan 1 to vlan 4 1092.168.4.102 which is pingable from xg

Hi 

Can you also share the below output which I requested in previous comment.

console> sy dia utilities netconf route list

or from advance shell.

#route -n

shared it the first time but the photo was corrupted

Hi Amr

Thanks for sharing it. 

If possible please delete VLAN interface on XG and re add it ( may be some problem with firewall table) and share the status.

the same 

and iam still getting routed to the outside wan interface  instead of inside on the vlan interface

Hi Amr,

Please raise a support case to have investigation on it.

OK
Thank you

Amr,

in addition: it seems you are using a very old firmware 17.1 MR4. I would suggest you to:

• delete all the routes and vlans
• upgrade to latest release
• add the new vlans and routes

From advanced shell, type "route" to print your XG's routing table.

Regards

Amr,

in addition: it seems you are using a very old firmware 17.1 MR4. I would suggest you to:

• delete all the routes and vlans
• upgrade to latest release
• add the new vlans and routes

From advanced shell, type "route" to print your XG's routing table.

Regards

lferrara ,

the same behavior is happening 

The routing table is correct. Are you sure everything is correct on Cisco side?

Thanks

After investigating directly with the user, the problem was the route precedence in XG. He had 2 policy routes so traffic was forwarded to WAN interface. By creating a static route and changing the route precedence to static policy vpn, everything worked as expected.

community.sophos.com/.../123610

Regards

the config was correct , but there was a policy route that bypasses the static route

making my traffic destined for vlan 4 goes through the AN interface

thanks , Luciano