Who rated this post

By default, Zone to Zone communication is blocked by the interzone-default Security Policy. So if you want to allow LAN to talk with nueva_LAN you need to create a security rule to allow the interzone traffic. I.e.

Name = Allow LAN to nueva_LAN

Src.Zone = LAN

Src.Address = 10.0.0.0/8

Dst.Zone = nueva_LAN

Dst.Address = 192.168.200.254/24

Action = Allow

Name = Allow nueva_LAN to LAN

Src.Zone = nueva_LAN

Src.Address = 192.168.200.254/24

Dst.Zone = LAN

Dst.Address = 10.0.0.0/8

Action = Allow

Update the above Security Policies to allow what you want based on your internal security requirements. You will also want to modify your Security and NAT Policies for Internet access from the new VLAN:

Name = Allow traffic to Internet

Src.Zone = LAN, nueva_LAN

Src.Address = 10.0.0.0/8, 192.168.200.254/24

Dst.Zone = INTERNET

Dst.Address = any

Action = Allow

You do not need to add anything to the routing table unless you have created multiple routing tables and put the nueva_LAN interface in a different table.