Monday, February 11, 2019

Ping not working as expected (Firewall rules and vlans)?

Iv been trying to solve an issue im having with an arduino, but in testing i found that im having some strange results when doing ping tests across my network.

Quick bit of network topology
USG, multiple vlans (split based on IP range, eg vlan 10 is 192.168.1.x, vlan 30 is 192.168.3.x)
firewall rule set to allow ICMP from any to any, with a allow established from any to any as well.

When pinging on the same vlan, pings work fine (as not going though router).
But when pinging across vlans, some work and some don't

So for example, i can ping from my desktop to all devices, but I cant ping from the arduino to the 40 vlan.
or I can ping vlans from my desktop, but can't ping my desktop from the vlans.

I have attached a spreadsheet with a breakdown of each test I did.
Where I say error 2001, thats in reference to my firewall logs.
For each ping that works. I can see rule 2001 (ICMP Allow all) being triggered, then rule 2000 (Allow Established) for each request after
The 2001 error means I can see on my firewall is the source triggering the 2001 rule, but no responses coming back from the destination.
The arduino to web error (No firewall) means I see no logs on the firewall, as if the arduino isnt sending the request.
When I know it is because all the other tests work fine.

Any ideas? or any other questions for me?

https://i.redd.it/4is6tg94k0g21.png



No comments:

Post a Comment