FG60E allow traffic between interfaces

[bigalnz]

Hi Guys,

Need some help please as I have a networking issue and I think the problem is to do with my GF60E.

I have a a setup like this:

Interface LAN1+LAN2 (virtual switch)

Wired clients subnet 192.168.110.0/24

Interface LAN 3 (Ubiquiti Unifi AP)

Wireless clients subnet 192.168.200.0/24

To allow LAN traffic between wired clients (LAN1+2) and wireless clients (LAN 3) I have a policy that allows all traffic from Virtual Switch (Wired) <-> LAN 3 (Wireless).

I have not created any routing and ping between wired and wireless works (all windows hosts with windows firewall down for testing).

The issue is that I have a Wired Zabbix server (computer monitoring) which can not seem get data on port 10050-51 from the clients.

Now this could be a number of things but after some experimentation I have discovered the issue only exists for wireless clients trying to connect.

Ping works between all clients.

[Mrinmoy]

Please check the sniffer and flow trace to identify if traffic is hitting firewall

diagnose debug disable
diagnose debug reset

diagnose debug flow filter saddr xxx.xxx.xxx.xxx
diagnose debug flow filter daddr Zabbix_server_IP
diagnose debug flow filter port 10050
dia deb console timestamp enable
diagnose debug flow show function-name enable
diagnose debug flow show iprope enable
diagnose debug flow trace start 100
diagnose debug enable

diagnose sniffer packet any "host Zabbix_server_IP and port 10050" 4 0 l