VPN300 V5.31(ABFC.0)ITS-22WK31-r104914 Was testing making a GRE tunnel and found this bug when an interface is set to General with getting an IP by DHCP when you make a tunnel GRE on that interface to connect to a remote gateway the interface blocks sending GRE until you change interface to external then it works.

Hi @PeterUK There is other interfaces configured as "external type" in your configuration. So the traffic should route to GRE remote gateway(94.173.27.164) was passed through by default route interface (exteral interfaces) but not your ge4. It is because ge4 interface is configured as "General type", so you have to add additional routing for GRE tunnel on ge4. You may have a try to add the policy route on your device and make sure if it helps in your case.

Ok I found another reason why its because I had SYSTEM_DEFAULT_WAN_TRUNK set which does not included ge4 so when I make my own trunk VLAN443 and ge4 the ping works without needed the routeing rule.

Interface General and GRE tunnel bug

Options

All Replies

Zyxel_Stanley Posts: 1,367 Zyxel Employee

September 2022
Options
Hi @PeterUK
The packet initialing by firewall itself, the traffic route will follow "default route". As your case, the traffic passed by other interface which type is external.
It is because general interface without additional IP routeing except IP segment configured on itself.

0

Security Highlight

FAQ
New & Release
Monthly Express
Threat Intelligence
Video Tutorials

Interface General and GRE tunnel bug

All Replies

Categories

Security Highlight

Security Help Center