Can you do a traceroute from computers on each network to an IP on the other network and see if they go through the router? Did you put in the static route on the other 2860?

You don't need filter rules to allow that traffic through - if you've allowed it in the inter-lan routing table then it'll be allowed through unless you've got filter rules in place to block traffic.

I have changed from 2x2860's and am now using a single 2925.

I can tracert from 192.168.100.x to 192.168.2.x, and this completed fine, even returning correct device names.

When I do the opposite, it bombs out after the first step to the 192.168.2.x router.

I currently have a support call open as having additional issues with lost packets are the router.

you don't need the load/route policy if your now using a single router - the routing table will be automatically built when you create the interfaces.

You just need to tick the relevant boxes in the inter vlan routing and it should work - No firewall wall rules are needed either.

I've set up my multiple VLANs, but when I tick the box to route between two of them, I end up with only unidirectional traffic, I'm able to get from LAN4 to LAN2, but not from LAN2 to LAN4. This occurs on both Ping and TraceRT.

I've just tested this on a clean setup, that only has the VLANs configured and no other Policies or Firewall settings, and I get the same result.

Is there something that I am missing?
Please see image of network and inter-VLAN tick boxes.

Hi All,

Thank you for your time, following a conversation with Draytek Support, there is actually a requirements for 'Load Balance/Route Policy' to be created for this to work. The route policies that I had created were very close to correct, they should actually look like this;



Pad

the 2860 I am using will route between LANs with out the policy - perhaps there is a firmware difference somewhere