Routing between two internal networks

Question

Hi there, 
 I have two internal LAN networks on two ports. (Ports 1 & 4)

I have an internal LAN-LAN rule with all filtering/scanning disabled. Logs show all traffic to the 192.168.100.0 network is allowed. 
 From PCs on the 192.168.1.0 network I can ping 192.168.100.250 but not machines in the 192.168.100.0 network. 
 Would greatly appreciate any help with with this. 
 Thanks

rfcat_vk · Answer

The rule would be something like this 
 source lan network1/24 and network4/24 destination lan network1/24 network4/24 any 
 ian

emmosophos · Answer

Hello there, 
 Thank you for contacting the Sophos Community. 
 If you do a drop-packet Capture on the console of the XG (Press 5>4 when SSH into the XG), do you see any packets being dropped? console > drop-packet-capture host '192.168.100.x' (substitute the X for the IP of the computer network you&rsquo;re trying to Ping) 
 Additionally, if you don't really need the bridge I would recommend you to get rid off it, as I only see Port1 being used, if you need it make sure routing is enabled in the bridge. 
 Also if you have any SD_WAN policy, make sure the precedence is set to: 
 static, sdwan_policyroute VPN 
 You can check by running this command in the console: 
 console> system route_precedence show 
 Also as rfcat_vk mentioned, make sure the Source Networks and Destination Networks are /24 ranges 
 Regards,

Routing between two internal networks

Top Replies