[USG FLEX 200] Device on LAN2 VLAN with its own zone can not ping/connect to network IP

Sam999

Firmware version: 5.38(ABUI.0)

Following this article:

https://mysupport.zyxel.com/hc/en-us/articles/360003862540--ZyWALL-USG-How-to-configure-VLANs-on-ZyWALL-USG-appliance

Result: device on LAN2 VLAN with its own zone can not ping/connect to network IP.

If the vlan interface is removed from its own zone and join LAN2 zone, then device can ping/connect to VLAN network IP.

This seems to be a bug.

PeterUK

Do you have a VLAN switch or a PC tag for the given VLAN?

Sam999

This case was resolved by the help from an engineer. Since VLAN default DNS-server is Zywall, policy control needs one extra policy to allow VLAN to Zywall traffic.

Zyxel_Kay

Hi @Sam999

It's great to hear that you have resolved your problem!

If you created and assigned a customized zone for the VLAN interface, you would need to add an extra security policy rule to allow traffic from this VLAN zone to the ZyWALL.

In light of this, we will enhance the FAQ article to provide clearer instructions for configuring a VLAN.

Thank you for bringing this to our attention.