I am using 192.168.1.1 as my main network. I have an ip camera system which uses 192.168.254.0/24. The addresses are given out by the nvr, not the router. I want to be able to ping the 192.168.254.x addresses to monitor them. Right now my firewall is blocking this. I know this because if I disable the firewall, it works. How can I enable 192.168.254.0/24 in my firewall so that it will allow me to ping?
Enabling firewall rule is with accept action, forward chain. Hard to say more as you haven’t disclosed the network topology.
So I would have to accept 192.168.254.0/24 and forward it?
Do you have an example of this?
Anyone have an example of this?
Just taking a stab in the dark that your filter rule(s) are the ones blocking this so here is a snippet that you would put in the /ip firewall filter table:
/ip firewall filter
add chain=forward disabled=no src-address=192.168.254.0/24
add chain=forward disabled=no dst-address=192.168.254.0/24
Somewhere before the filter rules that block it…
Without more information on your /ip firewall settings no one is going to be able to help much more than this…
Thom
My firewall is similar to the one by efaden in this post:
‘Similar to’ is not the same as ‘exactly like’. With that being said, post an export of your firewall settings and we’ll help. Without it, it’s a waste of time to try and guess exactly what you have there.
Thom