Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 4 replies
  • Subscribers 28 subscribers
  • Views 4127 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Multiple LAN firewall rule

Brandon91

I am trying to find a simple firewall rule where all LAN ports can see other LAN ports.  Each LAN port assign their own DHCP subnet mask

 

LAN1 - 192.168.1.0

LAN2 - 192.168.2.0

LAN3 - 192.168.3.0

LAN5 - 192.168.5.0

LAN7 - 192.168.8.0

 

I can make firewall rule LAN1/ANY/LAN2 then LAN2/ANY/LAN1 and goes on to LAN7 but it is silly to make 50 rules..  I even tried LAN1-7/ANY/LAN1-7 and it worked one way not other way...

I need to make sure any LAN can see any LAN



This thread was automatically locked due to age.
Parents Reply
  • +1 in reply to Brandon91

    Basically you can use LAN to LAN as a zone based rule. 

    If you want to be more specific, you need to go back to the whiteboard and think about the structure. 

    XG will drop if it does not find any matching rule and uses first match rules.

     

    So you can do following:

     

    LAN to LAN with LAN1 to LAN2 with ANY Services allow

    LAN to LAN with ANY to ANY with Service DNS allow

     

    So LAN1 to LAN2 can talk with any services. And All LANs can talk with DNS to each other. As a example. 

Children