Guest users are able to get the DHCP lease but not able to reach to gateway and Internet.

• Can't ping gateway
• No internet reachability

• Issue reported: no gateway nor internet reachability.
• Packet capture confirmed traffic was being received on the corresponding ingress interface.
• Traceoptions showed a log saying that traffic was being dropped due to: packet for self but not interested.
• This is referring to the zone configuration, indicating that the system service is not allowed under the host-inbound-traffic; and since the destination IP address was the interface IP (gateway), the packet is dropped.
• To resolve this, please add "set security zones security-zone <zone-name> host-inbound-traffic system-services <service name>".
• In addition, check that there is a security policy allowing the traffic.