LAN to VLAN Traffic

Hi,

that will not work, both networks are in the same subnet or you have made a typing error which by the look of your details you have.

Do you have a firewall rule allowing traffic between the LAN and VLAN?

Ian

Yes, my fault. It's the 192.168.210.9/24 like in the first screenshot.

Here the fw rule

Why should traceroute show itself? traceroute will not ping itself. Instead it will look out for the first hop. 

Traceroute should show the first hop witch should be the default gateway. 192.168.0.251

test with another physical port:

test with another test VLAN:

Yeah of course. If you are 192.168.0.251, if you start the traceroute based on this interface, you will not see yourself. If you start the traceroute from a different interface, you will see the 251 as a hop. 

Both screenshots are from the Port1 witch is the 192.168.0.251 interface. As you see, the first hot is your gateway.

The problem is solved via a NAT rule.

It works now.

If you need a Nat for internal rules there is a configuration error.

ian

That was the recommended solution by the Sophos support, Reason is that there are layer 3 switches in the network. Its intended behavior.

Okay. From physical to layer 3.

Must try and experiment with that configuration.

ian