Firewall rules are not matching!

General questions
1

Hello ,

I’ve applied a firewall rule for some users and it worked and when I try to apply the same rules for other users it’s not working !!

I really need to know where to search ? what is the maximum number for rules ?

I really need your help ? !

Best Regards

2

set firewall name rule <1-999999>

Then you need to provide some more information. How are you applying rules to “users”?

Got an example of these firewall rules?

Got a sample of your config with sanitized IP addresses?

3

Thanks for the answer

here is the config

set firewall group address-group MGMT-LA address ‘192.168.40.55’
set firewall group address-group MGMT-LA_Dest address ‘192.168.20.13’
set firewall name INT-ACCESS rule 10 action ‘accept’
set firewall name INT-ACCESS rule 10 destination group address-group ‘MGMT-LA_Dest’
set firewall name INT-ACCESS rule 10 source group address-group ‘MGMT-LA’
set firewall name INT-ACCESS rule 11 action ‘drop’
set firewall name INT-ACCESS rule 11 source group address-group ‘MGMT-LA’
set interfaces openvpn vtun21 server client MGMT-LA ip ‘192.168.40.55’

I want to reach only 192.168.20.13 and nothing else is this config ok ?

Best Regards

4

That really doesn’t seem like enough context to determine the cause. Is INT-ACCESS being applied to the interface, any default actions, state enabled?

1 Like
5

the default action is accept