How can I ping more than one WAN IP from LAN?

Nick · October 2020

I just followed this article up.(https://www.sonicwall.com/support/knowledge-base/?sol_id=170505874136212.)

It was not work well. I have to ping X1 WAN IP and X3 WAN IP.

The article is an example to allow any LAN device to ping the X1 WAN IP only.

But I want to allow any LAN device to ping all of WAN IP.

I have been selected management "ping" on interfaces.

I created a access rule

And a NAT policy

When I ping X1 and X3 from LAN, that all responds X3 WAN IP…

Did I have wrong setting?

Thanks

BWC · October 2020

Hi @Nick

you need a NAT rule LAN -> Original, X1 IP -> Original, Ping -> Original and an Access Rule which allows LAN -> WAN from LAN net to X1 IP and the important detail here is to mark this rule as Management Rule, without that check it'll not work.

Same goes for X3 as well.

--Michael@BWC

Nick · October 2020

The Firmware Version is 6.5.2.4-5n.

shiprasahu93 · October 2020

Hello @Nick,

I needed some more data from you. what do you mean by 'When I ping X1 and X3 from LAN, that all responds X3 WAN IP…'?

Also, are you trying to ping the IP addresses configured on X1 and X3 or some other usable IP from those subnets?

Can you perform a packet capture on the firewall, while you perform the ping tests? Are you seeing any drops while you do that?

https://www.sonicwall.com/support/knowledge-base/how-can-i-setup-and-utilize-the-packet-monitor-feature-for-troubleshooting/170513143911627/

Thanks!

Nick · October 2020

@shiprasahu93 Sorry, It was not clarity.

I meant ping X1 interface WAN IP (1.1.1.1) and X3 interface WAN IP (2.2.2.2) from X0 LAN PC (192.168.X.X). But all responds the X1 WAN IP (1.1.1.1).

shiprasahu93 · October 2020

So, when you ping 2.2.2.2 IP from LAN, there is no response? Or you see the response back from 1.1.1.1?

Which one of the two WANs is the primary WAN connection?

Thanks!

Nick · October 2020

@shiprasahu93

Yes, I ping 2.2.2.2 that response 1.1.1.1.

X1 WAN IP is the primary WAN connection.

Thank you.

shiprasahu93 · October 2020

@Nick,

Could you please share a screenshot of the same? As per the NAT that you have added X3 IP should be translated to X0 management IP, so that should not take place.

Also, do you see any other NAT policy created that translates X3 IP to X1 IP instead?

Thanks!