No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Package filtering not become effective

Publication Date:  2012-10-19 Views:  33 Downloads:  0
Issue Description
USG2100 networking in transparent mode, package filter does not take effect between individual domain, ethe1/0/0~1/0/3 is delimited in to trust domain, ethe1/0/4~1/0/7 is delimited into DMZ domain, ethe0/0/0 is delimited into untrust domain, works in transparent mode, it will take no effective when do package filtering between “trust – DMZ” domain.
Alarm Information
None.
Handling Process
When networking should pay attention to avoid to use the same exchange board’s interface delimit to different safety area, exchange board’s interface should be delimited in the same area as far as possible, or use non-exchange board interface.
Root Cause
Such problems are relevant with the work characteristic of exchange board. Because trust domain and DMZ domain interface are belong to the same exchange board, message is forwarded directly in the board, hasn’t been sent to the third layer for processing, the third layer package filtering doesn't work.
Suggestions
None.

END