Hello everyone,
I am in the following configuration. I have 3 VLANs (which will grow in the future) which host servers offering services (1 per VLAN).
These Servers have configured a VIP One to One, and on the policy an IP Pool with the same IP as the VIP.
If I try to connect from the various servers in these VLANs to the servers' VIP, it does not work.
For example from Server 11 I try to connect to the VIP of Server 21 or 31, the connection does not work
How can I solve this? I attach for simplicity a diagram showing the current configuration.
These the policy configured for VLAN
config firewall vip
edit "VIP Libraesva XXXX"
set uuid b4f0161e-ea9b-51ee-e7ea-5c6c30663786
set extip X.X.X.103
set mappedip "10.X.21.X"
set extintf "any"
set color 8
next
end
config firewall ippool
edit "IP Pool Libraesva XXX"
set startip X.X.X.103
set endip X.X.X.103
next
end
config firewall policy
edit 44
set name "Internet to VIP XXXX Esva HTTPS"
set uuid 4e622af2-ecfa-51ee-d4d2-7074d2965dca
set srcintf "virtual-wan-link"
set dstintf "VLAN-54"
set action accept
set srcaddr "all"
set dstaddr "VIP Libraesva XXXX"
set schedule "always"
set service "HTTPS"
set utm-status enable
set ssl-ssh-profile "certificate-inspection"
set av-profile "g-default"
set webfilter-profile "g-default"
set ips-sensor "g-default"
set application-list "g-default"
set logtraffic all
next
end
config firewall policy
edit 35
set name "XXXX Esva to Internet"
set uuid 306ab010-ea9c-51ee-db4f-01ba73aaf031
set srcintf "VLAN-54"
set dstintf "virtual-wan-link"
set action accept
set srcaddr "VLAN 54 - XXXX Libraesva"
set dstaddr "all"
set schedule "always"
set service "ALL"
set utm-status enable
set ssl-ssh-profile "certificate-inspection"
set av-profile "g-default"
set webfilter-profile "g-default"
set ips-sensor "g-default"
set application-list "g-default"
set logtraffic all
set nat enable
set ippool enable
set poolname "IP Pool Libraesva XXXX"
next
end
Thanks
Regards
