To have a better experience, please upgrade your IE browser.upgrade
Questo sito utilizza cookie di profilazione (propri e di terze parti) per ottimizzare la tua esperienza online e per inviarti pubblicità in linea con le tue preferenze. Continuando a utilizzare questo sito senza modificare le tue preferenze acconsenti all’uso dei cookie. Se vuoi saperne di più o negare il consenso a tutti o ad alcuni cookie clicca qui>
The website that you are visiting also provides Arabian language. Do you wish to switch language version?
يوفر موقع الويب الذي تزوره المحتوى باللغة العربية أيضًا. هل ترغب في تبديل إصدار اللغة؟
The website that you are visiting also provides Russia language Do you wish to switch language version?
Данный сайт есть в английской версии. Желаете ли Вы перейти на английскую версию?
Take in consideration below topology. On USG is running V5R1.
G0/0/0 is management interface. It is configured like below. Gateway is AR1.
ip binding vpn-instance YYY
ip address X.X.29.209 255.255.255.252
service-manage http permit
service-manage https permit
service-manage ping permit
service-manage ssh permit
service-manage snmp permit
service-manage telnet permit
service-manage netconf permit
As you know, after we use command gateway X.X.29.210 when parameter no-route is not specified (as in our example) a default route with its protocol as Gateway is generated. The next hop is the gateway address specified on the interface. The route configuration command (ip route-static) is not automatically generated when the device delivers route entries. You cannot use undo ip route-static command to delete the static route.
If we check the configuration, a default route has been generated with next hop gateway.
If we try to ping the USG from AR1 is working but if we try to ping the USG from Internet is not working. Ping from Internet to AR1 is working.
It seems that on V5R1 by default, G0/0/0 is bound to default vpn-instance.
The easy solution in this case is to remove the default configuration "ip binding vpn-instance YYY" under interface G0/0/0. After, the connection from Internet towards USG will work.