Why I cannot add Virtual Ethernet Interface to a Zone
Hello there.
ZYWALL 1100.
I have a zone WAN in which I have included an interface with MTS name. Then, I have created a virtual ethernet interface under MTS:1 name.
When I go to Configuration->Object->Zone screen, I cannot add the virtual interface to the WAN zone.
It could be OK.
But when I set up From to WAN in Policy Control, firewall drops packets coming to the virtual interface address.
That's strange.
Isn't it a bug? Or I did something wrong?
Thanks.
ZYWALL 1100.
I have a zone WAN in which I have included an interface with MTS name. Then, I have created a virtual ethernet interface under MTS:1 name.
When I go to Configuration->Object->Zone screen, I cannot add the virtual interface to the WAN zone.
It could be OK.
But when I set up From to WAN in Policy Control, firewall drops packets coming to the virtual interface address.
That's strange.
Isn't it a bug? Or I did something wrong?
Thanks.
0
All Replies
-
Hi @nbfund
Welcome to Zyxel community
All of the virtual interface will be the same zone as physical ether interface.
As your interface setting, MTS is belonging to WAN zone, then MTS:1 will be WAN zone.
According your traffic is blocked by firewall rule issue.
It is because you are configured wrong zone in the rule.
All of the interface IP address has configured on ZyWALL, then these IP addresses will belonging to “ZyWALL” zone.
So if you would like to access to your device by interface IP, then you should add the rule like:
From: any, To: ZyWALL, Source: any, Destination: InterfaceIP, Action: Allow.
0
Categories
- All Categories
- 415 Beta Program
- 2.3K Nebula
- 141 Nebula Ideas
- 94 Nebula Status and Incidents
- 5.5K Security
- 216 USG FLEX H Series
- 262 Security Ideas
- 1.4K Switch
- 71 Switch Ideas
- 1K Wireless
- 39 Wireless Ideas
- 6.3K Consumer Product
- 243 Service & License
- 382 News and Release
- 81 Security Advisories
- 27 Education Center
- 8 [Campaign] Zyxel Network Detective
- 3K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 83 About Community
- 71 Security Highlight