No internet on LAN2 - Zywall USG 20

cpg_juraj
cpg_juraj Posts: 16
First Comment First Anniversary
 Freshman Member
edited April 2021 in Security

Hello.

I am fairly new to zywall. I am trying to enable LAN2 interface on USG 20. LAN1 works great and it is on 192.168.51.x. My intention is to enable LAN2 and separate it from LAN1 as it is going to be a guest internet (wifi). I have enabled the interface, change the subnet to 192.168.2.x, assigned DNS and DHCP pool. While the DHCP does it's job and assignes IP addresses to clients, there is no Internet. Any help is appreciated. Thank you.

Comments

  • PeterUK
    PeterUK Posts: 1,439
    50 Answers 1000 Comments Friend Collector Fifth Anniversary
     Guru Member

    Do you have a firewall policy setup to allow LAN2 to WAN?

    In Network > Routing you may need to make a rule for LAN2 to SNAT to WAN.

    Incoming = Interface

    member = LAN2

    Next hop

    Type = Interface

    Interface = WAN

    Address Translation

    Source Network Address Translation = outgoing-interface

  • cpg_juraj
    cpg_juraj Posts: 16
    First Comment First Anniversary
     Freshman Member

    Hi. Thank you so much for your advice. Please see attached if I correctly created the rules.

  • PeterUK
    PeterUK Posts: 1,439
    50 Answers 1000 Comments Friend Collector Fifth Anniversary
     Guru Member

    Looks correct.

  • Zyxel_Stanley
    Zyxel_Stanley Posts: 1,177
    100 Answers 1000 Comments Friend Collector Fifth Anniversary
     Guru Member

    Hi @cpg_juraj  

    How about test result after added policy route rule?

    Do LAN2 clients are able access to internet?

  • cpg_juraj
    cpg_juraj Posts: 16
    First Comment First Anniversary
     Freshman Member

    Yes of course. That was my intention but I got to testing just last night. All worked great. Thank you PeterUK

  • Zyxel_Stanley
    Zyxel_Stanley Posts: 1,177
    100 Answers 1000 Comments Friend Collector Fifth Anniversary
     Guru Member

    Hi @cpg_juraj

    It's good to know your issue has resolved. 😃

Security Highlight