No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


Package filtering not become effective

Publication Date:  2012-10-19 Views:  129 Downloads:  0

Issue Description

USG2100 networking in transparent mode, package filter does not take effect between individual domain, ethe1/0/0~1/0/3 is delimited in to trust domain, ethe1/0/4~1/0/7 is delimited into DMZ domain, ethe0/0/0 is delimited into untrust domain, works in transparent mode, it will take no effective when do package filtering between “trust – DMZ” domain.

Alarm Information


Handling Process

When networking should pay attention to avoid to use the same exchange board’s interface delimit to different safety area, exchange board’s interface should be delimited in the same area as far as possible, or use non-exchange board interface.

Root Cause

Such problems are relevant with the work characteristic of exchange board. Because trust domain and DMZ domain interface are belong to the same exchange board, message is forwarded directly in the board, hasn’t been sent to the third layer for processing, the third layer package filtering doesn't work.