Hi,
I have made a lot of changes in the core-agent-linux code in order to fix minor bugs which emerged during manual testing as well as improve the overall logic robustness.
Unfortunately, I am still having some troubles in debugging why the incoming packes in sys-net are not reaching the next hop (sys-firewall, 10.137.0.6). Tcpdump and nft trace monitor are totally silent in sys-firewall, which I guess confirms the 0 counter as shown in the "rules" screenshot (which is of sys-net). Tracing the packets seems to show a succesful opeartion:
1) The incoming packet is accepted
2) The packet is forwarded to the vif72.0 interface succesfully

The trace is the result of the "ssh test@192.168.137.128" command, which is the ip of ens6 in sys-net

I will continue to try to debug the problem tomorrow, but still I am not really sure what to check more...


Cheers
Giulio