Secondary interface IP and subnet communication

[NetSec2]

Hi long time lurker first time poster here

I have an interface that has been configured with a primary IP and a secondary IP.

This interface is added to a zone. I was under the impression that you would need an intra-zone policy in order for these two subnets to communicate with each other. But this does not seem to work.

How can I get traffic from the primary subnet to communicate with the secondary subnet and vice versa.

[AEK]

Hi @NetSec2 

Either allow intra-zone traffic (Network > Interface, edit your zone and enable allow intra-zone traffic), or add a firewall policy like this.

• src intf: zone1
• dst intf: zone1
• src: subnet1, subnet2
• dst: subnet1, subnet2
• service: allowed services