1. Issue Phenomenon
Downlink devices of RG-WALL- 1600-Z3200-S can’t access the external network

2. Possible Causes and Solution
2.1 Wrong Configuration of RG-WALL1600-Z3200-S
Please follow this guide the chapter “6 ConfigurationExamples for Typical Scenarios” on Cookbook Ruijie Networks | Network Devices and Solutions Provider to do the right configuration.
2.1.1 The physical interface is not added to the security zone, or the security zone configuration is incorrect.

>>> Locate the problem：

1. There is no session on firewall but can get the session message by capture the package.

2. The security policy of the session is uncorrect

>>> Solution

Add the physical interface to the security zone and set WAN port as “trust”and LAN port as “untrust”. If you have customized other security zone, pleasemake sure that the configurations of security zone of physical interface are rightand security zone is in the allowlist of security policies

2.1.2 Wrong Route Configuration

>>> Locate the problem：

Check whether the inbound interface is correct or not viathe session description. If the inbound interface is incorrect, please check whether the route or PBR is configured wrongly.

>>>Solution:

Check the route configurations in the “Routing” item

2.1.3 Wrong NAT Configuration

>>>Locate the problem

NAT transmission is uncorrected in the session description

>>>Solution:

Check the NAT Policies, including Address Range, Security Zone, Policies Order etc. are correct or not.

2.1.4 Security Policy is not in the allowlist

Security policy in the session description is uncorrect