Reply
Member
Posts: 177
Registered: ‎12-06-2015
Kudos: 86
Solutions: 5

Re: L3 setup problem with a watchguard firewall

@awilliamssbsc

I think theres some confusion here.

Please answer the below:

1) Is this firewall on your local network?
2) The current server is on AWS right?
3) Have you opened the ports in the AWS security group for the EC2 instance?
Senior Member
Posts: 21,480
Registered: ‎08-04-2017
Kudos: 4050
Solutions: 1042

Re: L3 setup problem with a watchguard firewall

[ Edited ]

Hello @awilliamssbsc,

 

Where is your controller located?

Locally or external?

 

I think you want to swap the firewall rules around.

Any internal to any external or any to any.

 

 

Regards,

Glenn R.

Cloud Hosted Controllers | Glenn R. | UniFi Installation/Easy Update Scripts | UniFi-Video Installation Scripts | UniFi-VoIP Installation Scripts
USG-XG-8 • USG-4-PRO • USG
US-XG-16 • US-48-500W • US-24-POE-250W 2x • US-16-POE-150W 3x • US-24 • US-8-150W • US-8
UAP XG • UAP-SHD • UAP-HD • UAP-NanoHD 2x • UAP-AC-PRO 2x • UAP-AC-LITE • UAP-AC-IW • UAP-AC-M • UAP-AC-M-PRO 2x
UAS-XG • UCK-G2-PLUS • UCK-G2 • UCK
Emerging Member
Posts: 87
Registered: ‎03-11-2016
Kudos: 3

Re: L3 setup problem with a watchguard firewall

Amazed - check the logs? thanks for the location but don't know much how to do that / use your info : ) 

 

I followed a step by step doc on the UBNT site on setting up unifi on the instance.  that's about it for my linux experiences...

Emerging Member
Posts: 87
Registered: ‎03-11-2016
Kudos: 3

Re: L3 setup problem with a watchguard firewall


1) Is this firewall on your local network?  yes it's the router / gateway to the internet
2) The current server is on AWS right? yes... MAYBE when setting up the access point a while ago I did it by installing controller software on a local PC.  But I factory reset the access point so it's up for grabs?
3) Have you opened the ports in the AWS security group for the EC2 instance?  thre's about 8 sites already working fine with this AWS arrangement, so I would say yes.  those other locations / sites are using linksys / netgear low end routers.

 

 

Emerging Member
Posts: 87
Registered: ‎03-11-2016
Kudos: 3

Re: L3 setup problem with a watchguard firewall

I set the rule to any / any and still server reject message.

Senior Member
Posts: 21,480
Registered: ‎08-04-2017
Kudos: 4050
Solutions: 1042

Re: L3 setup problem with a watchguard firewall

Hello @awilliamssbsc,

 

You can follow this to view the logs.

 


Regards,

Glenn R.

Cloud Hosted Controllers | Glenn R. | UniFi Installation/Easy Update Scripts | UniFi-Video Installation Scripts | UniFi-VoIP Installation Scripts
USG-XG-8 • USG-4-PRO • USG
US-XG-16 • US-48-500W • US-24-POE-250W 2x • US-16-POE-150W 3x • US-24 • US-8-150W • US-8
UAP XG • UAP-SHD • UAP-HD • UAP-NanoHD 2x • UAP-AC-PRO 2x • UAP-AC-LITE • UAP-AC-IW • UAP-AC-M • UAP-AC-M-PRO 2x
UAS-XG • UCK-G2-PLUS • UCK-G2 • UCK
Member
Posts: 177
Registered: ‎12-06-2015
Kudos: 86
Solutions: 5

Re: L3 setup problem with a watchguard firewall

Ok great

 

Yes the old PC should be of no consequence to the AP after factory resetting.

 

Change your incoming unifi rule (TCP 8080) to Outgoing and see if that does it.

 

I am not familiar with WatchGuard equipment at all but maybe they have some strange requirements for allowing outgoing traffic.

 

Is it possible that port 8080 is still being reserved by the firewall?

Emerging Member
Posts: 87
Registered: ‎03-11-2016
Kudos: 3

Re: L3 setup problem with a watchguard firewall

i took another shot at this after deleting the unifi rule (so back to where we started with that default everything gets out rule).

 

and it;'s working.  Frustrating 'cause in the end we're back where we started (so why didn't it work the first time?) 

 

thanks for the the help and sorry for the bother!

Highlighted
Senior Member
Posts: 21,480
Registered: ‎08-04-2017
Kudos: 4050
Solutions: 1042

Re: L3 setup problem with a watchguard firewall

Hello @awilliamssbsc,

 

Strange... Glad its working again.

 

 

Regards,

Glenn R.

Cloud Hosted Controllers | Glenn R. | UniFi Installation/Easy Update Scripts | UniFi-Video Installation Scripts | UniFi-VoIP Installation Scripts
USG-XG-8 • USG-4-PRO • USG
US-XG-16 • US-48-500W • US-24-POE-250W 2x • US-16-POE-150W 3x • US-24 • US-8-150W • US-8
UAP XG • UAP-SHD • UAP-HD • UAP-NanoHD 2x • UAP-AC-PRO 2x • UAP-AC-LITE • UAP-AC-IW • UAP-AC-M • UAP-AC-M-PRO 2x
UAS-XG • UCK-G2-PLUS • UCK-G2 • UCK
Reply