SDWAN active -> no acces to the router gateway on ETH WAN 1 and 2

SH3108
SH3108
in Firebox - Networking, Multi-Wan, VLAN, NAT, SD-WAN

Hello
I have a T35 with 2 WAN connections
ETH0 WAN 1 (192.168.0.2) -> Router 192.168.0.254
ETH1 LAN1 (192.168.8.1)
ETH2 WAN2 (192.168.2.2) -> Router 192.168.2.1

When I activate the SDWAN, I can't get access to my router which is on one or the other WAN interface. If I deactivate the SDWAN I can get access again.
Is this a normal operation of the SDWAN?
Thanks a lot
Stef

Comments

  • Bruce_Briggs
    Bruce_Briggs

    Access, such as web access to the router?
    I would not expect this.
    What Fireware version is on your T35?

    Make sure that you do not have any SD-WAN actions enabled on incoming policies.

  • Bruce_Briggs
    Bruce_Briggs

    Also, did you apply a SD-WAN action on a policy, such as outgoing HTTP/S which would affect access to one or the other router for mgt?

  • SH3108
    SH3108

    Hello Bruce
    Thanks you

    T35 -> V 12.5.4

    Yes it's HTTPS

    I have only for the moment 1 principal rule on outgoing with SDWAN (no security on this firewall)

    I have no access on 2 router with http or https, and I have an outgoing rule from Trusted to any

    Thanks

  • Bruce_Briggs
    Bruce_Briggs
    edited March 2021

    Add a HTTPS packet filter policy From: Any-trusted To: the IP addr of your 2nd router with no SD-WAN setting.
    Make sure that this policy is above the Outgoing policy.

  • SH3108
    SH3108

    Hello Bruce
    Ok I will do it and come back when it's checked
    Tx

  • SH3108
    SH3108

    Hello Bruce
    It's ok with new rule from LAN (or Alias) to the router
    Thanks you

Categories