XG 550 v18.0.1 MR-1-Build396

RE: XG 550 v18.0.1 MR-1-Build396

LuCar Toni — Tue, 13 Oct 2020 09:03:45 GMT

My guess is, the Bridge is not correct. Traffic is not routed correctly to the endpoints. A bridge has own Zones for each interface. Did you check, you zones are matching?

RE: XG 550 v18.0.1 MR-1-Build396

rfcat_vk — Tue, 13 Oct 2020 07:25:02 GMT

Hi Alexander,

I am little confused with your setup. CMTS provides a termination for a mobile calls and then sends traffic into the internet either Tunnel or direct connections, correct?
so what traffic will be incoming to the CMTS from the internet, ports, sources etc?

you advised the CMTS devices are failover and internet access for home users but that traffic would all be sent to the 8nternet with the CMTS as the source not destination.

ian

RE: XG 550 v18.0.1 MR-1-Build396

Alexander Vogel — Tue, 13 Oct 2020 06:50:38 GMT

Hi Ian,

there are two WAN links.

Also the CMTS devices handle the web traffic of several hundred home internet connections as this is the setup of a small internet provider. The CMTS device basically act as the standart gateway for all the customers routers. A WAF rule i think would only handle HTTP or HTTPS traffic. Since the CMTS devices neet to know the actual destination adress of the packages routed to them i also don´t think a NAT rule would be helpful.

RE: XG 550 v18.0.1 MR-1-Build396

rfcat_vk — Tue, 13 Oct 2020 06:37:44 GMT

Hi Alexander,

if there is only one source eg one WAN link you do not need routing but either a WAF rule or you existing rule with a NAT.

Ian

RE: XG 550 v18.0.1 MR-1-Build396

Alexander Vogel — Tue, 13 Oct 2020 06:35:30 GMT

Hello,

the devices are for external use only.

The devices are also configured to process traffic with any of the destination IP´s that are suppsed to get routed to them. Hence i believe no nat rule should be necessary.

RE: XG 550 v18.0.1 MR-1-Build396

rfcat_vk — Tue, 13 Oct 2020 06:27:26 GMT

Hi,

are these devices for use internally only or are there external users?

Further you do not appear to a have nat rule.

Ian