Comments
-
Zyxel_Cooldia, thank you for your reply. That is what I thought.
-
Hello Zyxel_Cooldia, Thank you for your suggestion. I will try that next time. The problem on this one is that the customer rebooted it before calling us, so it reset whatever was occurring and cleared it before we got to look at it. Is there a way to run those commands and dump them to a file for long term storage for a…
-
Where is this fastforward feature located?
-
Zyxel_Jeff, Thank you for the data. I had the external (WAN) port in the security rule instead of the internal (LAN) port. I swap from firewall to firewall throughout the day and I sometimes forget which ones want the external port and which want the internal port in the access rules/security policies. Admittedly, it is a…
-
Thank you Zyxel_Jeff. I had the external (WAN) port on the security policy rather than the internal (LAN) port. I had been switching them back and forth during troubleshooting and left it like that the last time. I jump between firewalls all day and sometimes forget which ones want the internal port on what appears to be…
-
Hello mMontana and Zyxel_Jeff, Thank you for your respective replies. mMontana, it has been my experience that when a policy rule is missing, the log shows the following error: Match default rule, DROP Zyxel_Jeff, I sent you the two requested files.
-
Yeah, it used to work on this unit. Just today it started not working for us. Thanks for the clarification on the source vs external IP.
-
For further data, here is the configuration of the NAT rule with possibly sensitive data replaced with variables < >: Enable Rule: checked Rule Name: <name of SSH rule> Port Mapping Type, Classification: Virtual Server Incoming Interface: wan Source IP: any External IP: any Internal IP: <PBX card IP> Port Mapping Type:…
-
I have triple checked the NAT and security policy. It is the same as before with the original external port. All the log tells me - with logging enabled - is the following: "Match default rule, DNAT Packet, DROP" That indicates the NAT rule is dropping the packet for some reason. I have even removed and re-added the NAT…
-
Yesterday afternoon, the WISP technician came by and checked the equipment and it was only negotiating 10 Mbps for him as well. He started by replacing the cable and adding a Network Interface Device (NID)/lightning suppressor. Once he did that, it negotiated to 1000 Mbps/full duplex as it should. And, I did not change the…
-
Thank you mMontana. That does make sense and aligns with what I thought; just wanted to be sure I wasn't over thinking it. The WISP is coming back out to replace the shielded RG-?? cable between their POE and the radio on the tower. It was originally made on site by the installer. The patch cable between the POE and the…
-
Hello PeterUK, Thank you for the commands. Since we use UDP, this TCP command probably won't help much. What specifically does it do to control the ACK? Hello Zyxel_Jeff, Thank you for your response. That is what I thought.
-
Hello Zyxel_Jeff, Here are the answers to your questions. 1. No audio could be heard by either side. Our system sends comfort noise packets until it receives the first audio packet from the other side. If that never arrives, it never sends actual audio to the site. In essence the call never fully completes setup from an…
-
Thank you for that data. I will definitely do this if it occurs again.
-
Hello PeterUK, Thank you for that data. I found it and did a collection to familiarize myself with the process. Does this data collection interrupt services at all, or is it passive to normal operations of the unit? We have multiple customer sites to which we have been deploying these and I want to let my techs know…