Issue: GS1200-8HP v2 switch is not accessable by Web browser from other IP subnets.

Options
Konstantins_Sterns
edited February 2023 in Switch

System configuration (but tested two ZyXel switches, the same model, the same cases).

<Picture is removed due to private information>

Serial number: <S/N is removed due to private information>

Meassures taken:

Browsers: MS Egde, Firefox (regular, incognito/inprivate modes), last updates.

Address – http://10.2.16.6 (HTTP protocol)

Test 1.

In Private/Incognito mode. Trying to open from other IP subnet.

In browser – opening status (running), no error (like connection time out).

Test 2.

Computer #1. In Private/Incognito mode. Opened from other IP subnet with success (staying open).

Computer #2. In Private/Incognito mode. Trying to open from other IP subnet (while opened from the same IP subnet).

Got message this message.



Could you please help me?

«1

All Replies

  • Zyxel_Kay
    Zyxel_Kay Posts: 727  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Options

     

    Attempts to access the web interface from multiple devices or tabs are not permitted. Therefore, you will receive a pop-up message as you show. Please close all the tab and wait for approximately 5 minutes before attempting to log in again.  

     

    Due to the security concern, we will remove your screenshot which showing the S/N and MAC address of your device. 

     

    Kay  

    Share yours now! https://bit.ly/4aO0BMF

    Kay

  • The Test 2 was accomplished in addition to Test 1 just to show that telecommunication persists between network switch and computer (in the Test 1).
    The main test is Test 1 - I am able to reach Web management of network switch from the same IP subnet but cannot to reach from other IP subnets.
  • mMontana
    mMontana Posts: 1,351  Guru Member
    Community MVP First Anniversary 10 Comments Friend Collector
    Options
    Gateway is configured into IP section of the switch?
  • Zyxel_Kay
    Zyxel_Kay Posts: 727  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Options

     

    If you would like to access your switch’s web GUI from a different subnet, you would like to allow the traffic between the certain subnets at your firewall/gateway. Could you please help us to check if your firewall/gateway allowing the traffic between different subnets?  

     

    Kay 

    Share yours now! https://bit.ly/4aO0BMF

    Kay

  • @mMontana Yes, default gateway had been configured. Snapshot of configuration has been deleted in the 1st post.
  • @Zyxel_Kay Yes, traffic routing is allowed between these subnets and no limits about protocols. The network switch responds on ping requests as well. The 2nd Test indicates that HTTP protocol works as well once it can recognize that Web GUI already has been opened by 1st computer (Test 1).
  • Zyxel_Kay
    Zyxel_Kay Posts: 727  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Options

     

    To clarify your problem, it would be grateful to have more details with your tests. Could you please provide your tests details, such as network topology (you mentioned you have two switches), the configuration of your PC’s IP during the test and also the steps? We would like to try reproducing your scenario. 

    It's important to keep in mind that simultaneous logins on the web interface are not permitted. You would like to close all the tab and wait for 5 minutes before attempting another login. 

     

    Kay  

    Share yours now! https://bit.ly/4aO0BMF

    Kay

  • Zyxel_Kay said:

     

    To clarify your problem, it would be grateful to have more details with your tests. Could you please provide your tests details, such as network topology (you mentioned you have two switches), the configuration of your PC’s IP during the test and also the steps? We would like to try reproducing your scenario. 

    It's important to keep in mind that simultaneous logins on the web interface are not permitted. You would like to close all the tab and wait for 5 minutes before attempting another login. 

     

    Kay  

    Hello @Zyxel_Kay

    PC (192.168.88.242) <=cable=> (Router 192.168.88.1) <= I-net (VPN_1) => (Router 10.1.16.1) <=cable=> Zyxel switch (10.1.16.6)

    PC (192.168.88.242) <=cable=> (Router 192.168.88.1) <= I-net (VPN_2) => (Router 10.2.16.1) <=cable=> Zyxel switch (10.2.16.6)

    ping 10.1.16.6 (from 192.168.88.242)

    Pinging 10.1.16.6 with 32 bytes of data:
    Reply from 10.1.16.6: bytes=32 time=33ms TTL=62
    Reply from 10.1.16.6: bytes=32 time=8ms TTL=62
    Reply from 10.1.16.6: bytes=32 time=7ms TTL=62
    Reply from 10.1.16.6: bytes=32 time=8ms TTL=62

    Ping statistics for 10.1.16.6:
        Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
    Approximate round trip times in milli-seconds:
        Minimum = 7ms, Maximum = 33ms, Average = 14ms

    ping 10.2.16.6 (from 192.168.88.242)

    Pinging 10.2.16.6 with 32 bytes of data:
    Reply from 10.2.16.6: bytes=32 time=96ms TTL=62
    Reply from 10.2.16.6: bytes=32 time=37ms TTL=62
    Reply from 10.2.16.6: bytes=32 time=37ms TTL=62
    Reply from 10.2.16.6: bytes=32 time=39ms TTL=62

    Ping statistics for 10.2.16.6:
        Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
    Approximate round trip times in milli-seconds:
        Minimum = 37ms, Maximum = 96ms, Average = 52ms


  • Zyxel_Kay
    Zyxel_Kay Posts: 727  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Options

     

    We have noticed that you have allowed the traffic between different subnet. It's important to be aware that access to the switch's web interface is restricted to a single login at a time. If you have logged in from another device/tab, please logout and wait for approximately 5 minutes before attempting another login. 

    Could you please help us to check if you have terminated any other active sessions for the web interface?  

     

    Kay 

    Share yours now! https://bit.ly/4aO0BMF

    Kay

  • Zyxel_Kay said:

     

    We have noticed that you have allowed the traffic between different subnet. It's important to be aware that access to the switch's web interface is restricted to a single login at a time. If you have logged in from another device/tab, please logout and wait for approximately 5 minutes before attempting another login. 

    Could you please help us to check if you have terminated any other active sessions for the web interface?  

     

    Kay 

    Hello @Zyxel_Kay
    Yes, I have terminated any other active session.
    The switches located in remote buildings that not commissioning yet (no local employees) and I am single network user who knows the IP addresses and uses these.