Hello I have a ccr1016-12s-1s+ cloud core router. I am using it for L2TP with ipsec VPN GW with hapMini client for road warriors.
We are using FW ADDRESS LISTS in our rules.
Example:
We have 10 client address, in a list called A
1.1.1.1
1.1.1.2
1.1.1.3
1.1.1.4
1.1.1.5
....
1.1.1.10
We have another list called B for servers:
2.1.1.1
2.1.1.2
2.1.1.3
2.1.1.4
.........
2.1.1.10
We have some rules where we are using these address lists.
Forward - address list A -> address list B - accept.
Some of the address is working nice from B (replying to ping). BUT NOT ALL!
FW rule is top on the list to avoid problems.
GW and everything is same on every server.
So should ALL ADDRESS WORKS or NONE OF THEM!
I think MT routerboard can't handle properly the lists in FW rules. Am i right?
Did you meet some kind of problem?
So i think there is some problem with FW address lists. Am i right?