Title: General Ways to Locate the Network Issue of RG-WALL Z Series Products [Print this page] Author: zhangqiao@ruiji Time: 2024-7-11 14:08 Title: General Ways to Locate the Network Issue of RG-WALL Z Series Products If your downlink devices of RG-WALL can't access the externail network, you can use the following ways to locate the issues: 1. Check the Real-Time Session Info
You can filter the desired sessions by source address
Click View details to check the detailed session information Src. and Dest.: you can view the source IP address and port number of the session and the source IP address and port number before and after NAT. Based on this information, you can determine whether the NAT policy is correct or not. If the NAT policy is incorrect, the NAT policy configuration may be incorrect too. Inbound Interface: You can determine the source of traffic based on thisinformation. If you are clear the topology, you can determine the source of traffic based on this information to infer the network. Outbound Interface: You can check whether the outbound forwarding of traffic is correct or not. If uncorrect, the route, VPN policy, or PBR configurations may be incorrect. Forward Packets, Reverse Packets, Forward Bytes, Reverse Bytes：indicates the statistics of inbound and outbound traffic and packets. This information helps determine whether the network of the online firewall is faulty. Security Policy: indicates the security policy matched by the session. Check whether the matching of the security policy meets the expectations. If the matching does not meet the expectations, the security policy may be incorrectly configured. 2. Check with the Network Connectivity Diagnosis
Enter information which need to be analyzed, such as the source address and protocol type of the traffic, and click Diagnose (During the diagnosis process, the traffic to be analyzed must pass through the firewall). You can view the entire process of the traffic processing: 3. Capture the packet
Welcome to Ruijie Community (https://community.ruijienetworks.com/)
