EFW Support

Support => General Support => Topic started by: Wihan on Monday 23 July 2012, 09:13:56 pm



Title: Problem with Routing
Post by: Wihan on Monday 23 July 2012, 09:13:56 pm
Hi Everyone,

I have been pulling my hair out and finally have given up, please help..

I have a EFW sitting as my default gateway, and i have a Cisco sitting on the same subnet.
The Cisco is hosting a VPN to 10.0.0.0/24, my network is 192.168.1.0/24

I have added a route from (blank) to 10.0.0.0/24 via static gateway 192.168.1.10 (cisco) and i can ping and access devices on the 10.0.0.0/24 subnet just fine

The problem is comming back in from 10.0.0.0/24 to 192.168.1.0 is not working
From the 10.0.0.0/24 network i can ping 192.168.1.10 (cisco) 192.168.1.1 (EFW), but nothing else

If i go onto a machine on the 192.168.1.0/24 network and do a "ROUTE ADD 10.0.0.0 MASK 255.255.255.0 192.168.1.10"
All communication works fine and i can see everything, telling me the problem is that the endian doesn't route properly when the connection is being initiated from the outside, but I might have just slipped up, it's been a long day.

Any help appreciated,
THanks
WIhan


Title: Re: Problem with Routing
Post by: Wihan on Monday 23 July 2012, 10:08:18 pm
I have since found out that it seems i do have connectivity, it just won't ping, so there must be something in EFW blocking ICMP, however inter zone firewall and outgoing firewall have been turned off.


Title: Re: Problem with Routing
Post by: timupci on Wednesday 01 August 2012, 09:44:57 am
you have to open the ICMP port between the 2 subnets. Remember Endian is a ROUTING FIREWALL.


Title: Re: Problem with Routing
Post by: Wihan on Monday 06 August 2012, 04:57:19 pm
Hi, and thanks for your comment.

So do you mean I need to open the port in the interzone firewall, or the outgoing firewall?
I am not sure how Endian will see this as it is all considered to be in the green zone, even though it is on a different subnet.
If you can let me know where to allow the ICMP that would be great.
I have tried it in several places, which is why i resorted to turning all firewall's off, but i still can't get the response.

Cheers
Wihan