What are the basic configs needed to get RUT241 to ping 8.8.8.8?

NETWORKING SOLUTIONS
1

What are the basic configs needed to get RUT241 to ping the internet?

2

Either insert a SIM card (will have to enter PIN if you have it) or connect WAN cable and you should be good to go, nothing more should be required.

3

Thank you but not quite. Access to the internet works, but pings do not. What FW and/or traffic rules are needed to make ping works?

4

Maybe you have IPv6 only address? So you are not able to ping IPv4?

5

Thanks pwsh. I have IPv4 addresses from my provider. What is the default behavior of the FW if there are no rules? Does the FW block everything by default or allow everything by default?

6

By default from your RUT device you can ping everything, you just can’t ping the RUT device itself from WAN. So what you are saying should be possible by default, I can ping 8.8.8.8 on my RUTX.

7

Thanks pwsh. You are correct. I can ping from the RUT. However, the RUT is not a device I am on all day. I need the ability to ping from any machine on the LAN to 8.8.8.8. These pings always fail. This, IMHO, point to some FW/traffic rules that are blogging such traffic. Hence my question earlier…What is the default behavior of the FW if there are no rules? Does the FW block everything by default or allow everything by default?

8

Did some looking up and decided to answer my own questions here…
RUT241 runs a version of LINUX. LINUX has a builtin firewall application called iptables. iptables can be configured to have a default behavior of rejecting all traffic and carving out what traffic comes in. The opposite can be done as well where the default behavior is to allow everything and block specific types of traffic.
The reason I could not ping from the host (sitting off the LAN port) was the firewall config. By adding appropriate traffic rules and NAT rules I now can ping from the host to 8.8.8.8. In LINUX iptables lingo, this is what it looks like:

2 0 0 ACCEPT icmp – * * 0.0.0.0/0 192.168.11.230 /* !fw3: Allow-Ping-2 /
3 0 0 ACCEPT icmp – * * 0.0.0.0/0 192.168.11.1 / !fw3: Allow-Ping-2 /
2 0 0 zone_wan_dest_ACCEPT icmp – * * 192.168.11.230 0.0.0.0/0 / !fw3: Allow-Ping-1 /
3 1 84 zone_wan_dest_ACCEPT icmp – * * 192.168.11.1 0.0.0.0/0 / !fw3: Allow-Ping-1 */

9

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.