SRX5308 inter-VLAN issues

[Candide17]

Hello!

I have some issues with this routeur since a long time (relay DHCP not usuable, packet dropped, etc...) and each new firmware solve some problems, but not at all...

4 or 5 times by month, the DNS resolution on my subnet client won't reach the DNS server on a different subnet...

The problem spend 3 to 5 mn to solve itself (?) and, during this time,I can't ping my Server subnet.

I watch my DNS server log, but, no error noticed. On each client DNS, the event log said the serveur DNS is not reachable...

Have you some ideas to solve this problem?

Best regards.

Fabrice.

[DaneA]

Hi Candide17,

Welcome to the community! 🙂 

Here are my questions below:

a. How is everything connected?  Kindly post a diagram in .jpg or .png format of your detailed network setup.

b. What is the current firmware version of the SRX5308?

c. Is DNS Proxy enabled on the VLANs? 

d. Have you tried to uncheck Block TCP Flood and Block UDP Flood as shown below? 

Regards,

DaneA

NETGEAR Community Team

[DaneA]

@Candide17,

I just want to follow-up on this.  We’d greatly appreciate your feedback.

Regards,

DaneA

NETGEAR Community Team

[Candide17]

Hello DaneA,

I apologize for the delay. I must update my networks schematics for a proper aswer.

I'll be back soon.

Best regards.

Fabrice.

[Candide17]

Hi DaneA,

My aswers:

a. We have several VLANs managed by the SRX5308, all accross the LAN Port1. Routing inter-vlan is check for each one.

I used relay DHCP but some issues force me to use de DHCP service from the routeur.

b. The current firmware is 4.3.4-2.

c. DNS proxy disable on each VLANs.

d. Nothing is check.

Sorry for lack of detailed network setup. It's on my todo list...

Best regards,

Fabrice.

[DaneA]

@Candide17,

I just want to follow-up about the image or screenshot of your detailed network setup.  Kindly specify where the problem happens in the network diagram where the DNS resolution on the subnet client won't reach the DNS server on a different subnet.  

Regards,

DaneA

NETGEAR Community Team

[DaneA]

@Candide17,

I just want to follow-up again.  We’d greatly appreciate your feedback.

Regards,

DaneA

NETGEAR Community Team