Here is the setup:
UTM220 (Tagging VLAN's 50-51,55 on eth0)
HP ProCurve V1910-48GB (Tagging VLAN's 50-51,55 on Gi1/0/48)
For testing purposes I put one port on the switch on VLAN50 and one on VLAN51. You are unable to ping from VLAN51, but you can access the web interface of anything on the VLAN50 network. The gateways for each network is the UTM firewall.
I even created a rule and placed it at the top as follows: VLAN51 > Any > VLAN50 > Reject. I logged the traffic for that packet filter, but when I open the live log I don't see anything. My feeling is that it's going through the switch and not even hitting the firewall. I don't want the switch to do an ACL's because the V1910 serious (from what I read) can be kind of a pain when doing ACL's.
On the switch there is only one VLAN interface for VLAN50 and not for 51,55.
Any ideas?
Basically, all I want is the VLAN51 network to have SMB capabilities when the new file server goes online and that's it to the VLAN50 network.
UTM220 (Tagging VLAN's 50-51,55 on eth0)
HP ProCurve V1910-48GB (Tagging VLAN's 50-51,55 on Gi1/0/48)
For testing purposes I put one port on the switch on VLAN50 and one on VLAN51. You are unable to ping from VLAN51, but you can access the web interface of anything on the VLAN50 network. The gateways for each network is the UTM firewall.
I even created a rule and placed it at the top as follows: VLAN51 > Any > VLAN50 > Reject. I logged the traffic for that packet filter, but when I open the live log I don't see anything. My feeling is that it's going through the switch and not even hitting the firewall. I don't want the switch to do an ACL's because the V1910 serious (from what I read) can be kind of a pain when doing ACL's.
On the switch there is only one VLAN interface for VLAN50 and not for 51,55.
Any ideas?
Basically, all I want is the VLAN51 network to have SMB capabilities when the new file server goes online and that's it to the VLAN50 network.