Progress...
Ping Vigor to Vigor works

Ping from 2862 vigor LAN to 2860
ie. from 192.168.4.254 to 192.168.3.253
Does work !

But still can not ping PC to a PC on other vigor

So receiving vigor is not passing to local LAN,
Is this firewall issue ?

Link to pictures
https://postimg.cc/gallery/k8vdn2Y

Text o/p from the Telnet (or "Web Console") might have been better (and easier ) ... the image resolution is too small to read clearly

However ...

I wrote:
Have you defined a static route on each vigor? i.e 192.168.4.0/24 ==> 192.168.3.253 (and 192.168.3.0/24 ==> 192.168.4.253 at the other end)

I cannot see this is on the screen print of the Routing Tables. Is it present :?:

Mouserunner wrote:
but it occurs to me that the arp caches does not include either 192.168.3.253 or 192.168.4.253
Surely every vigor port connected should show its own MAC

I don't know if this is generally the case with other routers ... but it's not with my own Vigor 2860 (there are 5 active LANs, but the Router's own address/MAC on each LAN does not appear in the ARP cache)

Okay, try these bigger images







Click on image to see full size, then back <- in browser.

hornbyp wrote:

I wrote:
Have you defined a static route on each vigor? i.e 192.168.4.0/24 ==> 192.168.3.253 (and 192.168.3.0/24 ==> 192.168.4.253 at the other end)

I cannot see this is on the screen print of the Routing Tables. Is it present :?:

Ignore this - I was just seeing if anyone was paying attention Clearly not, since it's drivel :lol:

Those are the Route definitions you would need on LAN clients, but only if the Vigor wasn't their Default Gateway (which it seems to be in your case).

I think you might be right, in this being a Firewall Issue. I see from your 'Firewall Diagnosis' screen shot, that a Firewall Rule triggered - but it was only a test in one direction. If you try it again, you can enable "Packet 2" and set its direction to "B->A", as a more complete test. The Diagnostic screen should then show "INITIAL>>" and "<