Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

NAT Port Forwarding not working on XGS210 SFOS 20.0.2 MR-2-Build378

This was working a month or so ago, but the vendor has just now tried it again and it isn't working.  The error is Violation Local_ACL.



Added TAGs
[edited by: Erick Jan at 12:35 PM (GMT -7) on 26 Aug 2024]
Parents
  • Hi Mark,

    It's possible that another firewall rule is catching the traffic. Is there another DNAT rule above this existing one in the Firewall and NAT rules?

    You can also try deleting the existing rules and creating a new one using the Server access assistant (DNAT).

    You can also check through the Advance shell and conntrack, here is the command: conntrack -E | grep {source IP address} | grep {port number}

    here is an example, take note of the fwid and natid if it is hitting the correct rules.

Reply
  • Hi Mark,

    It's possible that another firewall rule is catching the traffic. Is there another DNAT rule above this existing one in the Firewall and NAT rules?

    You can also try deleting the existing rules and creating a new one using the Server access assistant (DNAT).

    You can also check through the Advance shell and conntrack, here is the command: conntrack -E | grep {source IP address} | grep {port number}

    here is an example, take note of the fwid and natid if it is hitting the correct rules.

Children
No Data