cannot route between 2 subnets on 2 different interfaces and same physical lan - RULE ID 0 - VIOLATION FIREWALL

Hi,

what does logviewer show if you refine the search to your firewall rule number?

rule 0 usually means there is a mismatch somewhere.

also check the GUI ips tab, you might find a high drop count?

ian

i have shown all results for this IP

No, I want the result against your firewall rule, not the ip.

for rule 1 - no record found

for rule 2 - no record found

- is it necessary to add static route?

- is my case similar to this one? one way pass through XG is blocked as asymmetric route. i am new to xg and i don't want to use command line to set

community.sophos.com/.../routing-to-another-gateway-on-the-same-lan-subnet-as-sophos-xg

I have similar rules and don’t get any failures. I will change some setting when I can get exclusive access to my network and report back.

ian

i see a minor issue with you pr filter, you have used the rule ordering numbers not the rule numbers which are on the right hand side.

Hello peterson,

#Port1 and #Port4 only include an IP address configured on the interface.

You need to put the entire network under source/destination networks of rule ID #6 and #7.

You may also merge these 2 rules and can configure just one as shown below.

192.168.120.0/22 includes 192.168.120.0 - 192.168.123.255 address range.

Hello peterson,

#Port1 and #Port4 only include an IP address configured on the interface.

You need to put the entire network under source/destination networks of rule ID #6 and #7.

You may also merge these 2 rules and can configure just one as shown below.

192.168.120.0/22 includes 192.168.120.0 - 192.168.123.255 address range.