IKEv2 VPN behind XG unable to access to LAN

Hi Steven Zhou,

I noticed that you have NAT enabled on your VPN to LAN firewall rule, is there any reason for NAT configured on that firewall rule? If not, remove the NAT and try to access the LAN network.

Thanks,

Hi H_Patel

I have removed the NAT and the issue still persists. Please see the rule details below.

Packet capture

Thanks for your input.

S.

Hi Steven Zhou,

Can you please share interfaces configuration screenshot?

Thanks,

Here you are

Here is the forwarding rule details

Thanks

S.

Steven,

I think this rule is wrong. Could you check the traffic counter if it is 0 on this rule?

Put source as Any instead of WAN.

Hi Luk

I noticed that too but unfortunately changing it to LAN/WAN/ANY didn't make a difference.

S. 

Steven

I have sent you a PM. If you want we can check the configuration together.

Regards

Hi All

I made it work by bypassing traffic between both subnets through the stateful firewall under advanced firewall. 

I'm not sure if this is the best way but at least I have access to the network I need, for now. 

S.

Hi All

I made it work by bypassing traffic between both subnets through the stateful firewall under advanced firewall. 

I'm not sure if this is the best way but at least I have access to the network I need, for now. 

S.

Uhm, that traffic will not be inspected.

If it works, you have some asymmetric routing issue. To help you, please upload a network diagram.

Regards