Test inter-LAN/VLAN Routing to Verify Firewall Rules

[rennit]

Have been trying packet capture, ping from within pfsense setting host, trace route, states... only confusing myself.

SG-2100

What is a the best way to verify/check firewall settings blocking or allowing traffic from one part of LAN to another, or VLAN to parts of LAN?

Specific example: Best way to verify that restrictions placed on guest or IoT are effective? Are there multiple straightforward methods to test it?

Thank you!