basic network, complex problem (please help)

ANGELO.REVELLINO — Tue, 09 Jun 2026 16:38:35 GMT

Hello Everyone!

i have encountered an issue with my network testing environment and would like to ask for your opinion.

I wanted to test for connectivity in my environment so the only policy rule is a full any/any on any service with action allow, so it overshadows everything.

my layout is such:

eth1/4 192.168.1.1/24

eth1/14.1 192.168.20.1/24

eth1/14.2 192.168.40.1/24

eth1/15.1 192.168.10.1/24

eth1/15.2 192.168.30/24

all same zone trust (with no profiles)

all same virtual router (no static routes and routing table shows all networks and routes properly)

no outbound connection to the internet.

the problem: connectivity is up for everyone except for 1.1 in only one direction though.

the only one that cannot ping is any ip on the 1.0 network that has 1.1 as it's gateway and that tries to reach any other device connected in the network.

the layout is so simple that i really don't understand where the problem could be, i tried a lot of solutions and tried changing the ips or making either everyone a subinterface or everyone an interface, same result.

thank you in advance for your time reading this! Have a good day (i sure am not having one)

topic basic network, complex problem (please help) in Next-Generation Firewall Discussions

basic network, complex problem (please help)