Interface Connectivity Check and Policy route Connectivity Check don't work together

Options
PeterUK
PeterUK Posts: 4,409 image  Guru Member
250 Answers 2500 Comments Friend Collector Eighth Anniversary
in USG FLEX H Series

USG FLEX 200H V1.37(ABWV.0)

I think I posted this bug for ZLD too so time ago...

so the FLEX200H is downstream of another USG that you block traffic of the Connectivity Check to cause this to happen.

So on a WAN interface of the Connectivity Check
Method ICMP
Period 5
Timeout 1
Attempt 2
and some IP

Then on a routing rule with Connectivity Check same as above

Important bit when you firewall fail the ICMP on the upstream router wait 20 seconds or longer.

Now unblock the ICMP and the Policy route Connectivity Check will still be in failed state.

All Replies

  • Zyxel_Melen
    Zyxel_Melen Posts: 4,531 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate

    Hi @PeterUK

    I can replicate the issue you mentioned. Although the log mentioned "Interface XXX alive, policy route rule X will be re-enabled.", the policy route rule doesn't activate after a while.

    Let me check with our team before updating you.

    Zyxel Melen


  • Zyxel_Melen
    Zyxel_Melen Posts: 4,531 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate

    Hi @PeterUK

    We have addressed this issue, and it will be fixed in the future firmware release. (About 2026 Q2.)

    Zyxel Melen


Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）