USG310 Policy Control not function sometimes

Man · August 2018

Hello,

I had a policy control issue.
I change the printer subnet recently and some user report that they can't printing or wait for a long time.
after log check, i find the policy seems not function sometimes.

network setting:
PC subnet 192.168.1.0 /24 (Lan_Subnet_ge7), USG310 Ge7
Printer subnet 10.1.0.0/16 (Lan_Subnet_ge2) , USG310 Ge2

Image: https://us.v-cdn.net/6029482/uploads/editor/k6/ud1qihdq5qm8.jpg

2 subnet connected to the same switch group (no managment, no vlan)
policy setting:

Image: https://us.v-cdn.net/6029482/uploads/editor/wu/bgxgnb3waogi.jpg

most users work fine, but some are not
e.g.1

Image: https://us.v-cdn.net/6029482/uploads/editor/l0/tufcinpbe0yu.jpg

e.g.2

Image: https://us.v-cdn.net/6029482/uploads/editor/bf/s9apx7n2gws3.jpg

can anyone help?
Thanks.

Zyxel_Stanley · August 2018

Hi @Man

This situation is happening when 2 ports are connecting to same switch.

The switch has learned wrong Mac address when forwarding the traffic, so it caused traffic is sent to wrong interface. Then shows traffic been blocked.

You can enter this command on USG:

Router(config)# arp reply restricted

Router(config)# write

And make sure if the issue has improved or not.

Zyxel_Stanley · August 2018

Hi @Man

This situation is happening when 2 ports are connecting to same switch.

The switch has learned wrong Mac address when forwarding the traffic, so it caused traffic is sent to wrong interface. Then shows traffic been blocked.

You can enter this command on USG:

Router(config)# arp reply restricted

Router(config)# write

And make sure if the issue has improved or not.

Man · August 2018

It's works, thanks for your help.

USG310 Policy Control not function sometimes

Accepted Solution

All Replies

Categories

Security Help Center