On the UAG4100 I created a VLAN 400, IP 220.127.116.11 with static ip I connected two DVRs that ping each other is ok, but they don't have internet access, I tried pinging the two DVRs directly from the UAG4100 and it doesn't go
Welcome to the Zyxel forum. I hope you feel ok with us.
As your two DVR are reachable from each other, it is a great step.
Please verify DVRs are on the same UAG4100 subnet (layer 3).
I suggest to configure a laptop on VLAN400 and verify if it can see Zyxel arp, if it does, the problem looks to a firewall configuration, if it does not ... maybe we need further information to hel you,
Keep in mind that the selected address (18.104.22.168/XX) is not a private network.
Current private network following RFC 1918 are:
Hi @Paestum ,
Welcome to Zyxel community. 😎
You can capture packets on VLAN400 interface, if there is no any DVRs packets/ARP coming up to VLAN400 interface.
You may check downlink switch VLAN configuration first.
Router# packet-trace interface VLAN 400 extension-filter -e –n
Router# show arp-table
30 packets captured
60 packets received by filter
0 packets dropped by kernel
I would suggest to use laptop troubleshooting first.
Put a laptop on vlan400, if the laptop also cannot get Internet access, try to ping UAG4100 vlan interface IP from laptop, if it is unable ping to UAG vlan400 interface IP, check this issue on lan side.
If it can ping to UAG vlan400 interface IP, check UAG4100 firewall rule, make sure it have security policy to allow traffic from vlan400 to wan.
Show ARP: diagnostic for layer 2 issue.
Disable firewall: By disable firewall, you can check if the issue is coming from security policy.
Router(config)# no firewall activate