vLan talk to lan

Hi.

do you have a firewall rule in place to allow internal traffic?

ian

jupp

Hi,

what does the logviewer show for traffic between lans?
ian

This firewall is not correct. XG uses the #Port Interfaces as the "IP Objects of the Interface". So #Port1 = 192.168.1.1 for example. 

You can select "ANY" in Destination network, if you specify "LAN". This will catch every IP in all Interfaces. 

i don´t understand your post.

i´ll give you an overview about my network config

WAN --> Sophos XG153 ---> Unify Switch 2xUS-48-500W/2xUS-24-250W/1xUS-16-150W with 1 LAN 192.168.115.x and vlan 3000 192.168.112.xxx 

DHCP Scope an WIN SRV 2012R2 

Network on Sophos

from PC command Line Ping to Sophos works on both IP´s

But not to a client in the network on the vlan

Hello Martin,

What Luca means, is that you shouldn't use the #Port for the Source Networks and devices, and Destination Networks, you should use either the definition "ANY" or the Subnets.

Regards,

Hello Martin,

What Luca means, is that you shouldn't use the #Port for the Source Networks and devices, and Destination Networks, you should use either the definition "ANY" or the Subnets.

Regards,

I think i´m to stupid

... now i´ve got it!! Thanks a lot!!!!