Hi @GRL 

Thanks for posting in our business forum.

GRL wrote

  @Clive_A 

 

I dont quite understand what you are asking apart for the last part

.9.254 and .9.253 are Switch SVIs routing the .8.0/23 network on its way to the gateway

My network has a LOT of inter vlan traffic so i switch route rather than gateway route.  Gateway only routes 0.0.0.0/0 and back .  Switches do the rest.

 

edit:

When the issue was happening, the entire internet - everything, was not able to be loaded in the browser.  No websites at all.  As soon as the policy route was changed (and then back again), problem resolved for the next random amount of time.

 

This issue has not hapenned again since changing the vlan to .20.0 /23 - and thats all i changed.  I didnt even delete and recreate it, just changed its IP range.

Is that possible to set up a HTTPS file server on your other network and port forward it? Input the WAN IP and port number when 192.168.8.0/23 does not work in this complex network, will you be able to access it?

Try this test?

  @Clive_A 

Do you mean...

change the vlan back to .8.0 /23

set up some kind of HTTPS server on an IP on it

Port forward on the 8411 tcp 443 to that IP

Wait for the network to die, then test to see if i can access it from outside ?

Hi @GRL 

GRL wrote

  @Clive_A 

 

Do you mean...

 

change the vlan back to .8.0 /23

set up some kind of HTTPS server on an IP on it

Port forward on the 8411 tcp 443 to that IP

 

Wait for the network to die, then test to see if i can access it from outside ?

Not from outside, from this 8.0/23, which is the one you described, it can make a connection to DNS and other types of connections but not load any pages.

Get a HTTPS server port forwarded somewhere else in your network. Another IP address.

Google IP is not accessible, so if you try a HTTPS service and try the IP:port, from this 8.0/23 network to another HTTPS server you created, will you make a connection?

That verifies if the routing and the access to the Internet are okay or not.

Is it the event tech VLAN interface that you changed to another ID and subnet?

When it was 8.0/23, you used VLAN 10, which shares the same PBR(WAN5). Does VLAN 10 work? I know you tried VLAN 6, but it's not using the WAN5. I suspect that VLAN 6 can load any pages?

  @Clive_A 

Event tech was changed from ID 8, .8.0 /23 to ID 20, .20.0/23

Always Policy routed to WAN 5

Everything else that i ever policy route to WAN 5 has zero issues, ever.  I can even move all the rest of the vlans to wan 5, and they all work fine permenantly (i have actually tested this!)

Im curretly working on updating my documentation for you, ill email that to you directly, as it will help with the static routing issue as well.

  Vincent

I have sent you all the necessary documentation to assist you, to the same email you requested i give you cloud access