Inter VLAN Communication Blocked by Gateway
-
I'm attempting to set up communications between multiple VLANs and would like to be able to communicate between 2 VLANs. I'm seeing odd behavior that is dependent on whether I have specified the Gateway in a given VLAN's firewall rules or left it to Default.
For reference:
VLAN 2 - Trusted Network
VLAN 55 - IOT
VLAN 56 - VPN (This VLAN uses a firewall rule tag to prevent traffic from dropping to the WAN gateway via a floating rule. VPN has it's own gateway and is working as expected)Goal is to bet able to talk between VLAN 2 & VLAN 55.
I have a WAN gateway that is pointing to my ISP and a VPN gateway pointing to PIA. Firewall rules for VLAN 2 and VLAN 55 are open.
VLAN 2
VLAN 55
Gateways
When I have the Gateway specified on the VLAN 2 firewall rule, I'm able to access the internet on VLAN 2 but am unable to connect (SSH for example) from VLAN 2 to VLAN 55. If I change the Gateway to default on the VLAN 2 firewall rule, I can now connect from 2->55 but am unable to access the internet from 2. Any ideas?
-
@cmcphaerson First, create a firewall rule in VLAN2, allowing VLAN2 to reach VLAN55, with gateway default, specify source VLAN2_NET and destination VLAN55_NET in this rule.
Put this rule above the rule with gateway WAN_DHCP.Same for VLAN55.
-
@mcury Perfect, got it working as expected.
Still curious about what causes the underlying issue wrt routing from the gateway but it's less of a concern since I can address the symptom.