Routing with Point to Point PPPoE WAN subnet

Mk88_it
Mk88_it Posts: 35  Freshman Member
First Comment Friend Collector Second Anniversary
in USG FLEX H Series

Hi Guys, i have the following situation and I don't figure out from a routing problem.

USG Flex 500 H

WAN1 P2 external zone wan vlan835 unassigned ip

PPPoE zone wan with fixed ip given from my isp only for PTP (no navigation) 172.31.x.x/32

Subnet for navigation x.x.23.128/30 , usable x.x.23.129 and .130

I created this Policy route for internet surfing from lan trough public ip .129

Incoming interface LAN - Destination any , next hop WAN PPP, SNAT ip object .129

Devices on this LAN navigate correctly with ip .129 but I tried to setup a connectivity check and it always fail

How I can tell to Zywall use ip .129 and/or .130 ?

Is it possibile by creating a Virtual ip on that interface?

Thank you

All Replies

  • Mk88_it
    Mk88_it Posts: 35  Freshman Member
    First Comment Friend Collector Second Anniversary

    Hey please, do you have any ideas for me?

  • Zyxel_Judy
    Zyxel_Judy Posts: 1,731  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula

    Hi @Mk88_it ,

    Could you please clarify whether the IP addresses .129 and .130 should be configured on the WAN or WAN_PPP interface?

    To help us better assist you, please provide:

    1. Screenshots of your current interface configuration
    2. Screenshots of your policy route settings

  • Mk88_it
    Mk88_it Posts: 35  Freshman Member
    First Comment Friend Collector Second Anniversary

    Hello Judy,

    Interface configuration

    image.png
    image.png
    image.png

    Policy route

    image.png
    image.png

    With this configuration, if I enable the connectivity check on the routing policy, it always fail

    I tried adding another policy for zywall routing with .129 but the ConnCheck always fail too

    image.png

    Thank you

  • Mk88_it
    Mk88_it Posts: 35  Freshman Member
    First Comment Friend Collector Second Anniversary

    Could be one solution add two virtual ip to FTTHoTA_PPP interface?

  • Mk88_it
    Mk88_it Posts: 35  Freshman Member
    First Comment Friend Collector Second Anniversary
    edited January 21

    Hello @Zyxel_Judy any suggestions?

  • Zyxel_Judy
    Zyxel_Judy Posts: 1,731  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula

    Hi @Mk88_it ,

    Thank you for sharing the detailed information. We are investigating this case and will update you when we have any findings.

    Thank you for your patience.

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）