RAV_ZYXEL  Freshman Member

Hi @WJS, when i meant the router's LAN, its not the eth0 port IP. But the LAN IP of the modem that we used to connect the router. If that is disabled, how do we access the modem? I have also requested the ISP to come over to verify the modem config as it seems weird. Will keep posted.

Hi @lan31, tried them and they were not reachable. I have requested the ISP to come over to verify the modem config as it seems weird. Will keep posted.

Hello @lan31, I followed your steps as mentioned for the topology 2 which best suites our connection. The ONT ISP Router LAN has a separate Subnet private IP. The ONT LAN port eth0 is connected to the WAN port of the USG Firewall which is assigned the Public Static IP Provided by the ISP. DHCP is enabled in the firewall…

Hello Lan31, I checked with the ISP. They said, when the router goes on to a bridged mode, the static IP should be configured in the Firewall and the router shall only be used to allow traffic through it. They also said internet would only be accessible via the firewall and no clients can be connected to the ONT Router…

Hi Jasailfan, The examples are not exactly similar. We have one static IP provided by our ISP (150.160.70.X) with a DG & DNS addresses. The ISP ONT Router is configured in bridged mode by the ISP. The Router LAN IP is 192.168.100.1 & the LAN port is connected to the USG20 Firewall WAN Port. The USG LAN is set to same…

Thanks, i will collect the logs and post them for debugging. Not using any IPSec or L2TP for now. SSL VPN is configured, but it gets dropped everytime when tried to connect. Hello again, i tried everything and the last resort was checking with the ISP. After so many followups and tiresome calls, it seems they have made…

Thanks, i will collect the logs and post them for debugging. Not using any IPSec or L2TP for now. SSL VPN is configured, but it gets dropped everytime when tried to connect.

Hi, i tried to recollect the last successful connection and attempted to restore to an earlier config to see if that works, but it didnt. I tried accessing from several devices, but it all gets dropped. Yes i am checking the logs as of now and using debugging tools to trace the packet loss. And also like you mentioned in…

We do have the default rule to block any source to the device, but then we also have other rules that override the deny rule to allow access to the device. I'm still looking at other rules as of now.

Yeah, i'm troubleshooting the rules & checking the logs. Will comment if something comes up.

The USG is connected to the internet directly through the WAN port & there is no CPE in front of it. This was working fine and just stopped working all of a sudden. 

The USG is connected to the internet directly through the WAN port & there is no CPE in front of it. This was working fine and just stopped working all of a sudden.