This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Odd issue with internet access

alxl29 7 months ago

Hi,

I did several research and looked everywhere in the firewall, but I was not able to find an answer to my problem. Basically:

- I have an XGS126w with the latest OS

- The setup is fairly simple: 1 LAN on a private /24 subnet --> The Firewall --> Internet connection via the internet provider's gateway

- I set up a MASQ rule and ACL rule for the /24 subnet to access the internet, and but I still have no internet access

- However, as soon as I ping an internet target (like 8.8.8.8) from the firewall (Diagnostics -> Ping -> Ping 8.8.8.8 from my LAN interface), then the internet access starts working from my LAN.

- A few hours later, the LAN->internet access stops working again, and I have to ping an internet target from the firewall diagnostics tools again...

Did anyone see this issue before? I assume something happens when I ping 8.8.8 from the firewall, and I need to configure that thing in the firewall, but I can't figure out why... I'm happy to provide screenshots of my configuration if needed.

Many thanks for your help.

Alex

This thread was automatically locked due to age.

0 rfcat_vk 7 months ago

Hi,

did you create a firewall rule allowing traffic out?

Ian

XG115W - v20.0.1 MR-1 - Home

XG on VM 8 - v20 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 alxl29 7 months ago in reply to rfcat_vk

Hi,

I did yes, and also it does work for a few hours when I ping an internet target from the firewall. So I'm guessing the issue is not on the access rights.

thanks,
Alex
Cancel
Vote Up 0 Vote Down

Cancel
0 dirkkotte 7 months ago

Are additional devices connected directly to the ISP router?
(parallel to firewall)

There is no PPPoE in use on the firewall?

A constant ping from the LAN device to 8.8.8.8 changes the behavior?

Dirk

Systema Gesellschaft für angewandte Datentechnik mbH // Sophos Platinum Partner
Sophos Solution Partner since 2003
If a post solves your question, click the 'Verify Answer' link at this post.
Cancel
Vote Up 0 Vote Down

Cancel
0 alxl29 7 months ago in reply to dirkkotte

Hi Dirk,

It's the only connection we have to the ISP router, and there is no PPoE setup on the firewall.

The outside interface is a straightforward static IP with the ISP gateway.

Thanks,
Alex
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk 7 months ago in reply to alxl29

Sounds like your isp might be running a dhcp type function on your static address.

ian

XG115W - v20.0.1 MR-1 - Home

XG on VM 8 - v20 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Bharat J 7 months ago

Hi Alex

please post the firewall rule and Nat rules with gateway failover condition set along with current DDOS settings?

"Sophos Partner: Networkkings Pvt Ltd".

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 alxl29 7 months ago in reply to Bharat J

Sure - this is the firewall rule:

NAT Rule:

DoS settings:

And my gateway details:
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk 7 months ago in reply to alxl29

What are you pinging in your test?

Ian

XG115W - v20.0.1 MR-1 - Home

XG on VM 8 - v20 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 alxl29 7 months ago in reply to rfcat_vk

8.8.8.8
Cancel
Vote Up 0 Vote Down

Cancel
0 Bharat J 7 months ago in reply to alxl29

Add a new NAT rule and keep it on top for tshoot.

Regards

"Sophos Partner: Networkkings Pvt Ltd".

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel