RED 50 Set up Standard/Unified

Question

Good day, 
 
 Please assist, I have set up a RED 50 in Standard/Unified to an XG 230 
 Created a Zone for RED and applied the RED device to the Zone 
 Created Firewall Rules for RED to LAN, LAN to RED and RED to WAN 
 On a device connected behind the RED I can ping any device behind the XG Firewall and can access any service 
 On a device behind the XG Firewall I cannot ping nor access any services on a device behind the RED 
 If I run a Traceroute from a device behind the XG Firewall to a device behind the RED it attempts to go through the WAN interface instead of the LAN interface 
 If I run a ping or Traceroute from the XG Firewall to a device behind the RED I get a response 
 
 I have a feeling that this is a routing issue, we make use of Policy Routes and IPSec Tunnels so the routing order is set as VPN, Policy, Static 
 
 Any assistance would be much appreciated 
 
 Thanks 
 Timothy

Timothy Jee · Answer

Hi Luk, 
 I have gone over my setting again and found the issue 
 I had set up a Policy Route for the RED Network to go through the main link, I realised that this was unnecessary 
 Doing this gave me access fromt he RED Network to the main network, but not the main network to the RED Network 
 I figured that it still had to be with the Policy Routing and went back to my Route Precedence 
 I changed the precedence from VPN, Policy, Static to VPN, Static, Policy and it is working 
 Thank you for the assitance you had given 
 Timothy