Why cannot I access my switch’s web GUI via the IP address in a different VLAN?
![Zyxel_Melen](https://us.v-cdn.net/6029482/uploads/defaultavatar/nN4PAQRO7TCNP.jpg)
Zyxel_Melen
Posts: 2,059
Zyxel Employee
![](https://us.v-cdn.net/6029482/uploads/userpics/FN0BI9T10CTX/n6O940IZ5DEW6.png)
![250 Answers](https://us.v-cdn.net/6029482/uploads/badges/63VYT4PCRK6P.png)
![Zyxel Certified Network Engineer Level 1 - Switch](https://us.v-cdn.net/6029482/uploads/badges/TWJ2LCFV8769.png)
![Third Anniversary](https://us.v-cdn.net/6029482/uploads/badges/ZAPPM3HN1WUA.png)
![1000 Comments](https://us.v-cdn.net/6029482/uploads/badges/50AUPOMRSR6S.png)
in Other Topics
Scenario:
Each VLAN can assign an IP address for the user to access the Web GUI in different VLANs. However, you might encounter problems when accessing Web GUI via the IP address of another VLAN. Like the PC is in VLAN 1 but tries to access VLAN 10’s IP address.
This is because the PC’s default gateway is direct to the gateway/firewall. But the switch has both VLAN’s IP address and it knows the PC’s MAC address, it will reply to the HTTP/HTTPS(TCP) session to the PC directly. This is known as the asymmetrical route.
Asymmetrical route example:
Correct behavior:
To solve this problem, we have some options in below:
- Keep only one IP address for management usage.
This can prevent the switch from using an incorrect IP address to reply HTTP/HTTPS(TCP) session. - Set the SNAT rule on your gateway/firewall.
This makes the firewall use its IP address to route HTTP/HTTPS(TCP) session to the switch and ensure the switch won’t reply to the session to the PC directly.
0
Categories
- All Categories
- 414 Beta Program
- 2.2K Nebula
- 130 Nebula Ideas
- 88 Nebula Status and Incidents
- 5.4K Security
- 166 USG FLEX H Series
- 255 Security Ideas
- 1.4K Switch
- 71 Switch Ideas
- 999 Wireless
- 36 Wireless Ideas
- 6.2K Consumer Product
- 233 Service & License
- 370 News and Release
- 77 Security Advisories
- 24 Education Center
- 5 [Campaign] Zyxel Network Detective
- 2.9K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 80 About Community
- 69 Security Highlight