Interface Lan on Nebula Firewall can't ping to internet.

Bearle

Hi All,

I wonder that why on Nebula firewall , i can't ping/traceroute from lan interface to internet.

Example:

I config interface lan1 ip is: 192.168.13.1/24 and assign to port 3.

Using default policy.

I try ping from lan1 → 8.8.8.8 → Fail

I try ping from client(192.168.13.2/24 ) which connected to port 3 → 8.8.8.8 → Success.

I have checked log but nothing relate to traffic from lan1 → 8.8.8.8

Is this a feature of nebula?

Or my config is mismatch somewhere?

Zyxel_Emily

Hi @Bearle,

When you ping from lan1, you can only ping the IP addresses in lan1 or the remote site of site to site VPN.

Bearle

https://community.zyxel.com/en/discussion/comment/58438#Comment_58438

Dear Emily,

Do you have any document about this behavior? I would like to clear this :D

Due to some reason, i just only check connectivity by tool on Nebula gateway. But this behavior prevent me to do that.

Bearle