09-24-2025 01:25 AM
Hi @459768405 ,
I haven't tested this but methinks you could use a loopback interface to prevent the loop from happening.
Create a Loopback Interface and assign the IP address from your public pool to this new Loopback interface.
Add a static route in your VR that points your public address pool to the Loopback interface as the next hop.
I believe that by doing this, when the ISP sends a packet to an IP in your public pool, the firewall receives it and correctly routes it to the loopback interface. This should prevents the routing loop because the firewall recognizes the traffic as belonging to itself.
Hope this helps,
-Kim.
