EFW working with VLAN

[Guest]

[jpilldev]

Hello.
I just intalled the Endian with 2 nics to internet and other to LAN, the LAN Nic is plugged with a Switch with VLAN support and there is 4 vlans:

• EFW are the gateway to internet
• The Endian LAN conection have as main ip address with the first VLAN created.
• The hosts between vlans can connect, vlan1 with vlan2, with vlan3, with vlan4, so, the switch can route traffic between VLANS
• The EFW cannot see hosts of other vlans, hosts of vlans cannot connect with EFW.
• The EFW can see only hosts of the first VLAN (main ip address).

Watching the logs, the traffic from the VLANS are registered like Red Zone, so the traffic reaches EFW but not processed correctly.

How can i configure EFW to works with all the VLANS?

Thanks.

[fqureshi]

On your green zone you have to assign multiple its from each vlan .. i have worked with this scenario..and it worked for ne..just get a spare IPHONE from each vlan and assign on internal interface of Indian with correct subnet mask.

[jpilldev]

I made that, the interface in switch is in trunk mode, the result is the same, there's no traffic from others vlans, the traffic still appears like red zone.

Thanks.

[fqureshi]

What when you do trace to the destination? where it stops?

[jpilldev]

when i trace, it stops in switche

[mrkroket]

What equipment is routing between LAN's?
Did you created the VLAN interfaces on Endian? They are assigned to any zone?
The switch port is configured on trunking mode?
There are inter-zone rules allowing traffic between lans?

[jpilldev]

Hello.

The same switch is routing between lans, we probe with hosts in each VLAN and they can communicate.
The VLANs are in switch, we also created the zones in endian with same results.
The switch port is actually in trunk mode, efw, alsto tested in another interface no trunked mode, and just respond to the hosts in the same vlan, the traffic from other vlans are processed as traffic from red zone.
The interzone rules are enabled.

Thanks for answer.

[jpilldev]

Hi.

Any idea to resolv this?