Matthias_AUT  Freshman Member

Hi Emily, Zywall can ping the PCs in VLAN587 Other PCs (e.g. VLAN883) can only ping the Gateway of VLAN587 but not the PCs PCs from VLAN587 can ping PCs in all VLANs and even remote connect to them but other direction does not work... Thanks for your help!Matthias

Yes, devices receive Gateway from the VLAN587 DHCP Server, 587 devices can connect to the internet and other VLANs, but devices from other VLANs cannot connect to VLAN587 devices.

I redid the configuration of the firewall from scratch, now almost everything is working as expected VLANs can communicate with lan1 and with each other with one exception: VLAN587 can ping and connect to all networks (outgoint) but no Network is able to connect into VLAN587; I tried both with security policy enabled and…

Hi Zyxel_Emily, Just to clarify, ZyWALL 110(P4)---(port 10)GS2210 has to be tagged, correct? I'm aware that the PCs can only receive untagged data and the corresponding Switch ports have to tag packets with the correct PVID. I'm in a campus environment, there are several switches between PC and the final layer 2 switch…

Hi Zyxel_Emily, are P4 and P3 in your topology different physical ports on the Zywall? My VLANs come all in as trunk on P4, can this be the problem? Do I have to configure virtual interfaces for the VLANs? I have no idea what could be wrong with the switch settings as all 3 VLANs successfully connect to the Internet, any…

PeterUK said: Dear Peter, could you please upload the conf file of your working Zywall 110 so I can check for differences to my config? Thanks a lot,Matthias

I made individual zones for each VLAN; like this? Tested with policy control off; I cannot ping between VLANs and neither to lan1 which works when all are in the same zone. I can (and always could) ping all the gateways, but not the machines connected to them. I tried both variants with policy control, all on zone LAN1…

Dear Peter, thanks for your help! 1) I tried without the static routes and policy control off which also did not change connectivity (can still connect from VLAN77 to lan1 and from VLAN587 to lan1 but not from VLAN77 to VLAN587 2) Yes exactly, VLAN77 can't connect to VLAN587 or VLAN883, same for the other VLANs, each can…

Forum did not like .conf, configuration file as .txt