IPSec dont let traffic through

For our projects on remote devices we use modules TRB246 and RUTM10. The modules are connected to a company network via IPsec on a Draytek Vigor 2927 router. The VPN settings are identical except for the IP which must be different for each device.
On TRB246 I can access VNC (port 5900) of connected devices on the remote network, but SSH access (port 22) does not let me through. On RUTM10 everything works without problems. On both devices we use the latest FW version. No firewall is in between.

A get TRB245 for testing. There was the same issue. Then I tried in CLI with commands:

/etc/init.d/firewall stop

The packets went through. Then I tried the same with TRB246 and I got an error at the end of the list whn command was ran

 * Running script '/usr/bin/attack_prevention'
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).

I assume there is something wrong defined in firmware defaults. I’ve checked the file /usr/bin/attack_prevention and there is a lot differences between TRB245 on TRB246.

This topic was automatically closed after 60 days. New replies are no longer allowed.

Hello,

Thank you for reaching out. I believe, to assist you effectively, we’ll need to continue this process privately. You should find a support request form in the inbox of the email address you used for your forum registration. Kindly fill out the form, and please reference Ticket ID: 13058 when submitting it. Once the form is completed, we’ll contact you directly via email to investigate the issue in detail and help work towards a solution.

Best regards,