USG310 Policy Control not function sometimes

Man

Hello,

I had a policy control issue.
I change the printer subnet recently and some user report that they can't printing or wait for a long time.
after log check, i find the policy seems not function sometimes.

network setting:
PC subnet 192.168.1.0 /24 (Lan_Subnet_ge7), USG310 Ge7
Printer subnet 10.1.0.0/16 (Lan_Subnet_ge2) , USG310 Ge2


2 subnet connected to the same switch group (no managment, no vlan)
policy setting:


most users work fine, but some are not
e.g.1

e.g.2


can anyone help?
Thanks.

Zyxel_Stanley

Hi @Man

 This situation is happening when 2 ports are connecting to same switch.

The switch has learned wrong Mac address when forwarding the traffic, so it caused traffic is sent to wrong interface. Then shows traffic been blocked.

 You can enter this command on USG:

Router(config)# arp reply restricted

Router(config)# write

 

And make sure if the issue has improved or not.

Zyxel_Stanley

Hi @Man

 This situation is happening when 2 ports are connecting to same switch.

The switch has learned wrong Mac address when forwarding the traffic, so it caused traffic is sent to wrong interface. Then shows traffic been blocked.

 You can enter this command on USG:

Router(config)# arp reply restricted

Router(config)# write

 

And make sure if the issue has improved or not.

Man

It's works, thanks for your help.