communication between 2 segments in 2 zones diferents

Fipaterm — Fri, 17 Mar 2023 19:43:37 GMT

I have a problem to be able to communicate internally my different segments which are declared in two different interfaces and in different zones.

I dont use vlan's

Eth 1/6= WAN 141.201.78.43/27

Eth 1/8= LAN
10.144.3.19/26
10.144.3.64/26

Eth 1/4= LAN2
192.168.200.254/24

Interfaces

Routes static

policies

I dont use vlan's

Re: communication between 2 segments in 2 zones diferents

Adrian_Jensen — Fri, 17 Mar 2023 23:52:58 GMT

By default, Zone to Zone communication is blocked by the interzone-default Security Policy. So if you want to allow LAN to talk with nueva_LAN you need to create a security rule to allow the interzone traffic. I.e.

Name = Allow LAN to nueva_LAN

Src.Zone = LAN

Src.Address = 10.0.0.0/8

Dst.Zone = nueva_LAN

Dst.Address = 192.168.200.254/24

Action = Allow

Name = Allow nueva_LAN to LAN

Src.Zone = nueva_LAN

Src.Address = 192.168.200.254/24

Dst.Zone = LAN

Dst.Address = 10.0.0.0/8

Action = Allow

Update the above Security Policies to allow what you want based on your internal security requirements. You will also want to modify your Security and NAT Policies for Internet access from the new VLAN:

Name = Allow traffic to Internet

Src.Zone = LAN, nueva_LAN

Src.Address = 10.0.0.0/8, 192.168.200.254/24

Dst.Zone = INTERNET

Dst.Address = any

Action = Allow

You do not need to add anything to the routing table unless you have created multiple routing tables and put the nueva_LAN interface in a different table.

Re: communication between 2 segments in 2 zones diferents

Fipaterm — Sat, 18 Mar 2023 00:00:08 GMT

very thanks

topic communication between 2 segments in 2 zones diferents in General Topics

communication between 2 segments in 2 zones diferents

Re: communication between 2 segments in 2 zones diferents

Re: communication between 2 segments in 2 zones diferents