vLan talk to lan

Hi.

do you have a firewall rule in place to allow internal traffic?

ian

jupp

Hi,

what does the logviewer show for traffic between lans?
ian

This firewall is not correct. XG uses the #Port Interfaces as the "IP Objects of the Interface". So #Port1 = 192.168.1.1 for example. 

You can select "ANY" in Destination network, if you specify "LAN". This will catch every IP in all Interfaces. 

i don´t understand your post.

i´ll give you an overview about my network config

WAN --> Sophos XG153 ---> Unify Switch 2xUS-48-500W/2xUS-24-250W/1xUS-16-150W with 1 LAN 192.168.115.x and vlan 3000 192.168.112.xxx 

DHCP Scope an WIN SRV 2012R2 

Network on Sophos

from PC command Line Ping to Sophos works on both IP´s

But not to a client in the network on the vlan

i don´t understand your post.

i´ll give you an overview about my network config

WAN --> Sophos XG153 ---> Unify Switch 2xUS-48-500W/2xUS-24-250W/1xUS-16-150W with 1 LAN 192.168.115.x and vlan 3000 192.168.112.xxx 

DHCP Scope an WIN SRV 2012R2 

Network on Sophos

from PC command Line Ping to Sophos works on both IP´s

But not to a client in the network on the vlan

Hello Martin,

What Luca means, is that you shouldn't use the #Port for the Source Networks and devices, and Destination Networks, you should use either the definition "ANY" or the Subnets.

Regards,

I think i´m to stupid

... now i´ve got it!! Thanks a lot!!!!