Firewall Log Confusion

Everything Else
1

My PepLink firewall is showing a denied connection to an IP address that is not on my local network but it is a private IP.

Firewall: Denied CONN=vlan MAC=a8:c0:ea:13:13:20:bc:83:85:72:34:cf:08:00 SRC=192.168.2.10 DST=192.168.1.63 LEN=460 TOS=0x00 PREC=0x00 TTL=127 ID=42259 PROTO=UDP SPT=500 DPT=500 LEN=440 MARK=0x2

I don’t use 192.168.1.x network so why would a pc on the 192.168.2.x network want to connect to an address that is not on the router?

2

Welcome to the Peplink community! With the information provided, it looks like the 192.168.2.10 PC is attempting to establish a VPN to a 192.168.1.63 server. Is it possible the PC has a VPN client configured?

1 Like
3

One question, in addition to that which @Ron_Case asked: Has the subject PS on the 192.168.2.0 network ever communicated with a printer installed via the OS and which was located at 192.168.1.63?

1 Like