Hi,
I read several posts but nothing helped in my case.
I have CRS328 as a router and 2x RBD52G-5HacD2HnD-TC + 2x RBwAPG-5HacT2HnD.
The APs and the tiny Routers are connected to the CRS328.
I have 3 VLANs aka VLAN10, VLAN30, VLAN40. The VLANs are trunked from each AP/tiny router to the CRS328.
Ingress filtering and VLAN filtering are activated.
As you can see the ICMP is blocked somewhere. How can I make ICMP passed between each device within VLAN10?
;;; Allow Estab & Related
chain=input action=accept connection-state=established,related
chain=input action=accept connection-state="" protocol=icmp log=no
log-prefix=""
;;; Allow VLAN MAIN
chain=input action=accept in-interface=VL10MAIN log=no log-prefix=""
;;; Allow VLAN HA
chain=input action=accept in-interface=VL30HA log=no log-prefix=""
;;; Allow VLAN GUEST
chain=input action=accept in-interface=VL40GA log=no log-prefix=""
;;; Allow Base_Vlan Full Access
chain=input action=accept in-interface=VL99BASE
chain=input action=drop log=no log-prefix=""
;;; Allow Estab & Related
chain=forward action=fasttrack-connection connection-state=established,related log=no log-prefix=""
;;; Allow Estab & Related
chain=forward action=accept connection-state=established,related log=no log-prefix=""
chain=forward action=accept in-interface=VL10MAIN out-interface=VL30HA log=no log-prefix=""
chain=forward action=accept in-interface=VL10MAIN out-interface=VL99BASE log=no log-prefix=""
chain=forward action=accept connection-state=new in-interface=VL10MAIN out-interface-list=WAN log=no log-prefix=""
chain=forward action=accept connection-state=new dst-address-list=!Cams in-interface=VL30HA out-interface-list=WAN log=no log-prefix=""
chain=forward action=accept connection-state=new in-interface=VL99BASE out-interface-list=WAN log=no log-prefix=""
;;; Guest VLAN to Internet
chain=forward action=accept connection-state=new in-interface=VL40GA out-interface-list=WAN log=no log-prefix=""
chain=forward action=drop log=no log-prefix=""