Issue: GS1200-8HP v2 switch is not accessable by Web browser from other IP subnets.

Konstantins_Sterns

System configuration (but tested two ZyXel switches, the same model, the same cases).

<Picture is removed due to private information>

Serial number: <S/N is removed due to private information>

Meassures taken:

Browsers: MS Egde, Firefox (regular, incognito/inprivate modes), last updates.

Address – http://10.2.16.6 (HTTP protocol)

Test 1.

In Private/Incognito mode. Trying to open from other IP subnet.

In browser – opening status (running), no error (like connection time out).

Test 2.

Computer #1. In Private/Incognito mode. Opened from other IP subnet with success (staying open).

Computer #2. In Private/Incognito mode. Trying to open from other IP subnet (while opened from the same IP subnet).

Got message this message.

Could you please help me?

Zyxel_Kay

Hi @Konstantins_Sterns 

 

Attempts to access the web interface from multiple devices or tabs are not permitted. Therefore, you will receive a pop-up message as you show. Please close all the tab and wait for approximately 5 minutes before attempting to log in again.  

 

Due to the security concern, we will remove your screenshot which showing the S/N and MAC address of your device. 

 

Kay  

Konstantins_Sterns

The Test 2 was accomplished in addition to Test 1 just to show that telecommunication persists between network switch and computer (in the Test 1).
The main test is Test 1 - I am able to reach Web management of network switch from the same IP subnet but cannot to reach from other IP subnets.

mMontana

Gateway is configured into IP section of the switch?

Zyxel_Kay

Hi @Konstantins_Sterns  

 

If you would like to access your switch’s web GUI from a different subnet, you would like to allow the traffic between the certain subnets at your firewall/gateway. Could you please help us to check if your firewall/gateway allowing the traffic between different subnets?  

 

Kay 

Konstantins_Sterns

@mMontana Yes, default gateway had been configured. Snapshot of configuration has been deleted in the 1st post.

Konstantins_Sterns

@Zyxel_Kay Yes, traffic routing is allowed between these subnets and no limits about protocols. The network switch responds on ping requests as well. The 2nd Test indicates that HTTP protocol works as well once it can recognize that Web GUI already has been opened by 1st computer (Test 1).

Zyxel_Kay

Hi @Konstantins_Sterns

 

To clarify your problem, it would be grateful to have more details with your tests. Could you please provide your tests details, such as network topology (you mentioned you have two switches), the configuration of your PC’s IP during the test and also the steps? We would like to try reproducing your scenario. 

It's important to keep in mind that simultaneous logins on the web interface are not permitted. You would like to close all the tab and wait for 5 minutes before attempting another login. 

 

Kay  

Konstantins_Sterns

Zyxel_Kay said:

Hi @Konstantins_Sterns

 

To clarify your problem, it would be grateful to have more details with your tests. Could you please provide your tests details, such as network topology (you mentioned you have two switches), the configuration of your PC’s IP during the test and also the steps? We would like to try reproducing your scenario. 

It's important to keep in mind that simultaneous logins on the web interface are not permitted. You would like to close all the tab and wait for 5 minutes before attempting another login. 

 

Kay  

Hello @Zyxel_Kay

PC (192.168.88.242) <=cable=> (Router 192.168.88.1) <= I-net (VPN_1) => (Router 10.1.16.1) <=cable=> Zyxel switch (10.1.16.6)

PC (192.168.88.242) <=cable=> (Router 192.168.88.1) <= I-net (VPN_2) => (Router 10.2.16.1) <=cable=> Zyxel switch (10.2.16.6)

ping 10.1.16.6 (from 192.168.88.242)

Pinging 10.1.16.6 with 32 bytes of data:

Reply from 10.1.16.6: bytes=32 time=33ms TTL=62

Reply from 10.1.16.6: bytes=32 time=8ms TTL=62

Reply from 10.1.16.6: bytes=32 time=7ms TTL=62

Reply from 10.1.16.6: bytes=32 time=8ms TTL=62

Ping statistics for 10.1.16.6:

    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 7ms, Maximum = 33ms, Average = 14ms

ping 10.2.16.6 (from 192.168.88.242)

Pinging 10.2.16.6 with 32 bytes of data:

Reply from 10.2.16.6: bytes=32 time=96ms TTL=62

Reply from 10.2.16.6: bytes=32 time=37ms TTL=62

Reply from 10.2.16.6: bytes=32 time=37ms TTL=62

Reply from 10.2.16.6: bytes=32 time=39ms TTL=62

Ping statistics for 10.2.16.6:

    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 37ms, Maximum = 96ms, Average = 52ms

Zyxel_Kay

Hi @Konstantins_Sterns 

 

We have noticed that you have allowed the traffic between different subnet. It's important to be aware that access to the switch's web interface is restricted to a single login at a time. If you have logged in from another device/tab, please logout and wait for approximately 5 minutes before attempting another login. 

Could you please help us to check if you have terminated any other active sessions for the web interface?  

 

Kay 

Konstantins_Sterns

Zyxel_Kay said:

Hi @Konstantins_Sterns

 

We have noticed that you have allowed the traffic between different subnet. It's important to be aware that access to the switch's web interface is restricted to a single login at a time. If you have logged in from another device/tab, please logout and wait for approximately 5 minutes before attempting another login. 

Could you please help us to check if you have terminated any other active sessions for the web interface?  

 

Kay 

Hello @Zyxel_Kay
Yes, I have terminated any other active session.
The switches located in remote buildings that not commissioning yet (no local employees) and I am single network user who knows the IP addresses and uses these.