About _slv_

My GSM operator change my APN settings in phone and now I can connect by VPN to my PAN device. Problem with no traffc still exist. If someone has a idea how to solve it please drop a massage. With regards Slawek ... View more

Hi I have one information more ... The same android smartfon when is connected via WiFi can estabilish VPN connection without errors!!! but... there isn't any traffic on VPN tunnel ... View more

I cant (officially) upgrade to 4.1.x my smartfon I tryed to make some troubleshooting according to but without success. I need to try it but with WiFi connection (now I was using HSDPA/3G) I alredy read comments, so like other people I need to open case at support. Thank You for your help Regards SLawek ... View more

no ... I haven't any other android based phone. Could someone help me to diagnose this problem  on CLI level? ... View more

I have only one 0.0.0.0/0 ... View more

Try to setup it manually on both sides (1000Mb/fullduplex). In certain configuration it's helped me. Regards SLawek ... View more

I know ... but  I have PA200 and I have only one security zone free ... so I have to make configuration as good as possible in this situation. This 4 networks will have couple computers, but must be separataed. Regards Slawek ... View more

Finally I found my mistake ... After I add "/0" I can reach internet from every LAN (even CP is working too). So I have to isolate traffic of every network - please give me advice hot to do that. I wouldn't create a lot of policies like: 192.168.3.0/24 to 192.168.210.0/24 deny 192.168.3.0/24 to 192.168.230.0/24 deny 192.168.3.0/24 to 192.168.240.0/24 deny and again 192.168.210.0/24 to 192.168.30.0/24 deny . . . . . Is it possible to do it in other way? Regards Slawek ... View more

admin@PA-200> show routing route VIRTUAL ROUTER: rtr_ign (id 3)   ========== destination                                 nexthop                                 metric flags      age   interface          next-AS 0.0.0.0/0                                   XXX.XXX.XXX.XXX                           10     A S              ethernet1/1 [..........] 192.168.3.0/24                              192.168.3.1                             0      A C              ethernet1/3.250 192.168.3.1/32                              0.0.0.0                                 0      A H 192.168.210.0/24                            192.168.210.1                           0      A C              ethernet1/3.1 192.168.210.1/32                            0.0.0.0                                 0      A H 192.168.230.0/24                            192.168.230.1                           0      A C              ethernet1/3.2 192.168.230.1/32                            0.0.0.0                                 0      A H 192.168.240.0/24                            192.168.240.1                           0      A C              ethernet1/3.3 192.168.240.1/32                            0.0.0.0                                 0      A H >Can  try to include the Interface in the Source NAT rule instead of the translated address. I dont understnd correctly - I think I change to: But i still can't ping from 192.168.3.x to 8.8.8.8 ... View more

it's done today morning, now it's looks like: ... View more

I have another problems with computer in 192.168.3.x network. I can't see CaptivePortal, my browser isn't redirected (even when I add rule that allow traffic to it's IP (192.168.110.1) - rule "SCH-CP" - but I can ping it by IP address or name. I changed dns servers from google dns to my local dns serwers for every of my local network - just for unifications. so the problem is in NAT (I can't  see errors in configuration, picture from yesterday has polish name of Other_LAN - so it's confusing you) - configurations is similar to my others NAT. when I try ping google.pl I see traffic that passes rule "Other_LAN - DNS" but my computer dosn't resolve name to it's IP. I can't ping or browse internet on every LAN on Other_LAN security zone. I don't understand what is going here, I have 7 other LANs on my PAN device (every has their own security zone) and everyting is working as I expected. When I started to configure 4 LANs on one security zone something is going creazy ... Please explain me why I need to allow traffic from Other_LAN to Other_LAN to bo able to ping gateways when without such security rule I was able to get IP from DHCP server?? Help me please Regards Slawek ... View more

Yes - the traffic was blocked by deny-rest rule. I added policy from Other_LAN to Other_LAN and now I can ping gateway of network where is locted computer. BUT also I can ping other VLAN gateways!! - that's not good. Is it a solution for "clever" blocking traffic from ie. vlan250 to every other. At the moment I have 4 networks on Other_LAN interface so I had to 4^2 rules of blocking traffic - is it a solution to do it a bit smarter? Every of this subinterfaces/networks must be separated, and allow only traffic to the internet (exept for DHCP/DNS/CP). Sorry for my english ... I hope that you are understand what I want to achieve. Craymond - you are right, it was disbaled - it's my fault - thx Regards Slawek ... View more

Hello I stuck with configurations .... help me please. My config look like: Computer connected to VLAN 210 is able to get IP address from DHCP server (got 192.168.210.2) but is unable to ping gateway in this network (192.168.210.1). Of course it can't ping 8.8.8.8 too Why? It's doesnt matter that "any" or "unknown" is chooses in security policy "Other_LAN - internet"  - computer cant reach internet or gateway. User identyfiaction is enabled on "Other_LAN" because I have to do Captive Portal on 192.168.3.0 network (and only on this network) Computer connected to VLAN 210,230,240 getting IP from DHCP (can't ping gateway), but connected to vlan 250 doesn't even getting IP from DHCP server. Slawek ... View more

>can also use DNS name as destination so should I put there "gmail.com" ? I have very limited access to this device and I can't test this change... If in security policy is Aplication:dns Service:aplication-defaul with anty-spyware:strict - is it still possible to make a DNS Tunneling?? so it's a time to setup DNS proxy ... Regards Slawek ... View more