Hi,

I have an infrastructure based on an OC400 controller and ER8411 routeur and then multiples switches and APs mainly Omada compatibles.

The configuration is pretty basic : one WAN and one LAN with few options enabled.
Things were working fine despite the ER8411 on firmware 1.3.6.

Then, we added a firewall between our 10Gb fiber termination and the ER8411 setted up with a double NAT.
Things seems to work fine but the firewall is reporting a lot of IP spoofing from the LAN side, which means the firewall is seeing LAN IP instead of seeing only the WAN IP interface of the ER8411.

In order to debug this, I removed a lot of not essentials features, but it continues. Everything indiactes that the ER8411 are not applying NAT rules on somes packets without apparent reason.