Internal to WAN interface dropping

iSpeed
iSpeed Posts: 110  Ally Member
First Anniversary First Comment
edited April 2021 in Security

I have a virtual server setup to provide external services. Everything works when outside the network, but from inside on my private network it goes out to WAN and then gets dropped. What am I missing to allow internal traffic to hit wan? USG60 same set doesn't seem to have a problem. Only ATP200

All Replies

  • iSpeed
    iSpeed Posts: 110  Ally Member
    First Anniversary First Comment

    I figured out a workaround. Created internal DNS A record to go direct to server private IP. Works great. No need to respond.

  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,446  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    edited August 2019

    Hi @iSpeed ,

    In this scenario, you need to enable NAT Loopback, it permits the access of a service via the public IP address from inside the local network.

     

    “Configuration > Network > NAT > Virtual Server profile”

    image.png


  • iSpeed
    iSpeed Posts: 110  Ally Member
    First Anniversary First Comment

    Thanks for the response Cooldia. I thought maybe that would do it, but getting an error when selecting. Certain restrictions when using loopback?

  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,446  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer

    Hi @iSpeed

    Yes, it have restriction on that. If the virtual server rule external IP is ANY, it’s unable to enable NAT loopback. Because It might cause the device unreachable. 

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）