Multiple unknown clients via VPN listed inside another FW Clients list

Options
GiuseppeR
GiuseppeR Posts: 581 image  Master Member
Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Engineer Level 1 - Nebula First Comment Friend Collector
edited December 2025 in Nebula

Hello everyone,

I have an ORG with 3 sites:

siteA- x.x.1.x

siteB- x.x.2.x

siteC- x.x.3.x

I linked them via VPN Site-to-Site.

When I look into Clients of SiteB list I see this:

immagine.png

As you can see I have a huge list of MAC addresses (blu arrows) linked to that firewall via VTI interface (green arrow) having all of them the same IP (red arrow).

Same situation on SiteC:

immagine.png

Is this behaviour expected as properly listed?

As you can see both Clients list are showing IPs from SiteA DHCP list.

Seeing that list like this is not clear because I cannot trace all of those MAC addresses on original site neither on other sites.

Of course I have the evidence of that looking into widgets.

SiteB:

immagine.png

SiteC:

immagine.png

While SiteA is clean as expected:

immagine.png

All Replies

  • GiuseppeR
    GiuseppeR Posts: 581 image  Master Member
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Engineer Level 1 - Nebula First Comment Friend Collector

    Hello everyone,

    the situation is getting out of hand:

    SiteB

    immagine.png

    SiteC

    immagine.png
  • Zyxel_Tina
    Zyxel_Tina Posts: 529 image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 100 Answers 500 Comments

    Hi @GiuseppeR,

    Please allow me to clarify that the information shown on the Client page reflects traffic passing through the firewall.

    Regarding the issue, to confirm whether the behavior you're observing is normal, we need further verification. Please check your private messages we will follow up there.

    Zyxel Tina

Nebula Tips & Tricks