topic Re: LAN users cannot reach GP users in General Topics

LAN users cannot reach GP users

MohamedSharief — Sun, 14 May 2017 13:30:40 GMT

Hi All,

I've one inquiry where the client used to have an issue where the GP users can reach the LAN users but not vice versa.

Users in LAN and GP are on the same zone (Trust) but only GP can ping the LAN.

The tunnel of the GP doesn't have an IP address by default, I've tried to add an IP address for the tunnel but its still not working.

Nothing is denied in the traffic logs also and since they are on the same zone everything should be allowed.

The traffic logs showing the end reason as 'Aged-out'.

Anybody have an idea about this?

Regards,

Sharief

Re: LAN users cannot reach GP users

TranceforLife — Sun, 14 May 2017 14:04:56 GMT

Hi,

Ping always will show you "aged-out" as it doesn't use any port and it is not even TCP or UDP protocol.

Can you make sure that the host you are trying to ping is simply responding for ping requests as well as try to initiate any other traffic from LAN > GP (web, ssl etc).

Re: LAN users cannot reach GP users

MohamedSharief — Mon, 22 May 2017 10:01:34 GMT

Hi @TranceforLife,

I tried the same setup in my lab with disabling the windows firewalls and everything was pingable.

It might be some kind of antivirus on the client machine that is blocking the ping request.

Thanks for your help.

Regards,

Sharief

Re: LAN users cannot reach GP users

TranceforLife — Mon, 22 May 2017 10:43:50 GMT

Hence l did ask you to initiate any other traffic 😉